Understanding RiskOS™

Learn how the RiskOS™ evaluation runtime works, the core platform concepts, common integration patterns, and available solutions.

How RiskOS™ works

RiskOS™ is a configurable identity orchestration and decisioning platform. You send data about a person, business, or device. RiskOS™ runs it through a workflow of verification checks, rules, and scoring logic, then returns a decision — ACCEPT, REJECT, or REVIEW — with enrichment data, risk scores, and reason codes.

Every RiskOS™ interaction follows the same runtime chain:

flowchart LR
    A[API Request] --> B[Evaluation]
    B --> C[Workflow]
    C --> D[Enrichments]
    D --> E[Rules & Scoring]
    E --> F[Decision]
  1. Your application sends a POST to the Evaluation API with user data and a workflow name.
  2. An evaluation starts and executes the selected workflow.
  3. The workflow calls enrichments, generates signals, evaluates rules, and computes scores.
  4. The workflow returns a decision: ACCEPT, REJECT, or REVIEW.

Some evaluations complete immediately (synchronous). Others pause for user action and deliver results via webhook (asynchronous). See Synchronous vs Asynchronous Evaluations for more information.


Core platform concepts

ConceptDescription
EvaluationRuntime execution of a workflow, triggered by an API request
WorkflowConfigurable step sequence that processes an evaluation from intake to decision
DecisionBusiness outcome of an evaluation: ACCEPT, REJECT, or REVIEW
EnrichmentData service that adds risk, identity, or compliance signals
Hosted FlowPreconfigured workflow with a Socure-managed end-user UI
CaseOperational review object associated with manual-review workflows

Common integration patterns

Use caseRecommended patternKey concepts
Rapid onboarding with managed UXHosted FlowsAsynchronous evaluations, webhooks
Custom identity orchestrationCustom workflows + Evaluation APISynchronous evaluations, rules, enrichments
Login fraud preventionLogin and AuthenticationSynchronous evaluations, real-time fraud scoring
Document verificationAsync evaluations + DocV SDKPaused evaluations, webhooks
Progressive identity verificationStep-up verificationConditional async steps, OTP, DocV
Compliance screeningWatchlist + workflow rulesScreening, monitoring, Deceased Check

Explore solutions

RiskOS™ supports identity verification, fraud prevention, compliance, business verification, and onboarding use cases.