Speed
Fintech
CTMS — Compliance & Transaction Monitoring System
Real-time crypto withdrawal monitoring, KYC review, and compliance workflow platform.
Status
Live — in daily production use by the compliance team
Timeline
Started Aug 2025 fi Launched Oct 2025 (~8 weeks)
Category
Internal compliance operations tool (RegTech dashboard)
User
Compliance analysts, risk & fraud officers, and operations admins at Speed
THE CHALLENGE
What existed before
Before CTMS, Speed’s compliance team monitored crypto withdrawals across scattered admin panels, raw database queries, and spreadsheets. High-risk transactions such as large SATS payouts, blocked destinations, or PEP-linked customers were caught reactively — often hours after settlement. KYC review for Indian users required jumping between SurePass, internal tools, and manual risk scoring.
Who was affected
Compliance analysts (daily queue triage), Risk officers (escalations), Ops leadership (audit readiness), and ultimately end customers who faced inconsistent hold times.
Previous process
Manual SQL pulls, shared Google Sheets for “under review” withdrawals, ad-hoc Slack threads for approvals, and no single audit trail for rejections or restrictions.
Cost of the problem
~25–30 analyst hours/week lost to data wrangling, delayed decisions on high-risk payouts, no consistent workflow for 500+ SATS reviews, and audit gaps on manual actions (missing reasons, actor IDs, and timestamps)
The solution
A real-time compliance cockpit for every withdrawal
CTMS is a purpose-built compliance cockpit that ingests every withdrawal event via webhook, evaluates it through a visual rules engine, and routes risky transactions into an Approvals queue for human review. Analysts get a single dark-themed dashboard with the Watchtower live feed, KYC insights, sanctions and AML screening, blocked-address enforcement, and full audit trails on every manual action. Indian customers flow through a dedicated KYC risk-scoring model (PEP + Occupation + Income) with SurePass data enrichment. MFA-protected admin access and role-based settings keep the tool audit-ready.
Key features
Watchtower live feed
real-time withdrawal monitoring with risk badges and country flags.
Visual Rules Engine
tree-based workflow builder with 23 parameters (amount, currency, geography, KYC state, velocity) that routes transactions to Approve, Pending, or Reject.
KYC risk scoring & SurePass integration
— automated India KYC scoring plus one-click access to sanctions, AML, and travel-rule screening.
Blocked addresses & restricted users
self-service enforcement lists with auto-reject and full history.
Analytics
edge-function-backed insights across 190k+ records with currency and date filters.
Integrations & tech stack
The platform is built on a modern React + TypeScript frontend, a Lovable Cloud backend with Postgres and RLS, and edge functions for secure, advisory-locked operations.
Frontend
React 18 + Vite + TypeScript + Tailwind, Recharts for analytics
Backend
Supabase (Postgres, Auth with TOTP MFA, Edge Functions, RLS); role-based access via a dedicated user_roles table
Integrations
SurePass for KYC data; sanctions/AML screening APIs; internal withdrawal CDC webhooks
What’s clever about it
The rules engine is a live, editable decision tree
non-engineers can add or reorder compliance rules (e.g., “High Amount SATS Review > 500 SATS fi Pending”) without deploys. Every terminal-state transaction is auto-cleaned from the queue, and the same webhook powers both live and isolated test modes so India-only SurePass flows never contaminate production data.
One webhook, two safe modes
The same webhook powers both live and isolated test modes, so India-only SurePass flows never contaminate production data — a single ingestion pipeline serves both environments safely.
The queue keeps itself clean
Every terminal-state transaction — approved, rejected, or restricted — is automatically cleaned from the Approvals queue, so analysts always see a live, actionable backlog instead of stale entries.