Speed
Fintech
CTMS — Compliance & Transaction Monitoring System
Real-time crypto withdrawal monitoring, KYC review, and compliance workflow platform.
THE CHALLENGE
Title here-The Problem / Challenge
Before CTMS, Speed’s compliance team monitored crypto withdrawals across scattered admin panels, raw database queries, and spreadsheets. High-risk transactions such as large SATS payouts, blocked destinations, or PEP-linked customers were caught reactively — often hours after settlement. KYC review for Indian users required jumping between SurePass, internal tools, and manual risk scoring.
Who was affected
Compliance analysts (daily queue triage), Risk officers (escalations), Ops leadership (audit readiness), and ultimately end customers who faced inconsistent hold times.
Previous process
Manual SQL pulls, shared Google Sheets for “under review” withdrawals, ad-hoc Slack threads for approvals, and no single audit trail for rejections or restrictions.
Cost of the problem
~25–30 analyst hours/week lost to data wrangling, delayed decisions on high-risk payouts, no consistent workflow for 500+ SATS reviews, and audit gaps on manual actions (missing reasons, actor IDs, and timestamps)
The solution
Title here-The Solution
CTMS is a purpose-built compliance cockpit that ingests every withdrawal event via webhook, evaluates it through a visual rules engine, and routes risky transactions into an Approvals queue for human review. Analysts get a single dark-themed dashboard with the Watchtower live feed, KYC insights, sanctions and AML screening, blocked-address enforcement, and full audit trails on every manual action. Indian customers flow through a dedicated KYC risk-scoring model (PEP + Occupation + Income) with SurePass data enrichment. MFA-protected admin access and role-based settings keep the tool audit-ready.
Key features
Integrations & tech stack
The platform is built on a modern React + TypeScript frontend, a Lovable Cloud backend with Postgres and RLS, and edge functions for secure, advisory-locked operations.
Frontend
React 18 + Vite + TypeScript + Tailwind on the frontend; Supabase (Postgres, Auth with TOTP MFA, Edge Functions, RLS) as backend; SurePass for KYC data; sanctions/AML screening APIs; internal withdrawal CDC webhooks; Recharts for analytics; role-based access with a dedicated user_roles table.
Backend
React 18 + Vite + TypeScript + Tailwind on the frontend; Supabase (Postgres, Auth with TOTP MFA, Edge Functions, RLS) as backend; SurePass for KYC data; sanctions/AML screening APIs; internal withdrawal CDC webhooks; Recharts for analytics; role-based access with a dedicated user_roles table.
Integrations
React 18 + Vite + TypeScript + Tailwind on the frontend; Supabase (Postgres, Auth with TOTP MFA, Edge Functions, RLS) as backend; SurePass for KYC data; sanctions/AML screening APIs; internal withdrawal CDC webhooks; Recharts for analytics; role-based access with a dedicated user_roles table.
What’s clever about it
The rules engine is a live, editable decision tree
non-engineers can add or reorder compliance rules (e.g., “High Amount SATS Review > 500 SATS fi Pending”) without deploys. Every terminal-state transaction is auto-cleaned from the queue, and the same webhook powers both live and isolated test modes so India-only SurePass flows never contaminate production data.
Not Available
Manual SQL pulls, shared Google Sheets for “under review” withdrawals, ad-hoc Slack threads for approvals, and no single audit trail for rejections or restrictions.
Not Available
non-engineers can add or reorder compliance rules (e.g., “High Amount SATS Review > 500 SATS fi Pending”) without deploys. Every terminal-state transaction is auto-cleaned from the queue, and the same webhook powers both live and isolated test modes so India-only SurePass flows never contaminate production data.