Skip to main content

How is risk automatically calculated in Workflow?

This article explains how risk scores are calculated based on your templates

M
Written by Mark Latham
Updated today

Workflow uses a weighted scoring system to calculate risk — not a simple yes/no tally. Each question in the risk assessment carries a different point value, and your final score is the cumulative total across all your answers.

How the scoring works

Not all risk factors are equal. A question about whether the client is a paying more than 50,000 in physical cash carries a different weight than a question about whether the transaction is above average value. The system is designed to reflect real-world risk proportionality.

When you complete the risk assessment:

  1. Each Yes answer adds a number of points to the total — the number varies by question

  2. Each No answer adds zero points

  3. Once all questions are answered, Workflow calculates the total score and maps it to a risk level

What the risk levels mean

Risk level

What it means

Low

Few or no risk factors identified. No additional documentation required.

Medium

A moderate number of risk factors present. Source of funds documentation may be required.

High

Multiple significant risk factors identified. Source of funds and possibly source of wealth documentation is required.

A single "Yes" does not mean high risk

This is the most important thing to understand about the scoring system.

Answering Yes to one risk factor will not automatically produce a high-risk result. A single elevated factor adds weight to the score, but risk only escalates when multiple factors combine.

  • One Yes to a significant factor → likely a High risk overall

  • Several Yes answers across moderate factors → may produce Medium risk or High Risk

This design prevents the system from penalising clients for minor or irrelevant factors that don't reflect genuine risk.

Why two separate assessments?

Workflow runs two distinct risk assessments per case:

  • Case risk assessment (Listing/Matter) — assesses the risk associated with the transaction itself

  • Client risk assessment — assesses the risk associated with the individual or entity

Each produces its own score. The higher of the two results should guide your overall approach. Both are saved to the case record automatically.

Can I override the result?

The automated score is a starting point, not the final word. If you have information that changes the picture then you can still approve the transaction. Always document your reasoning in the Notes tab of the case. Auditors will see your notes alongside the score.

Do not simply ignore a high-risk result without documenting your reasoning. The audit trail matters.

What happens after the score is calculated

Result

Your next step

Low

Proceed with the transaction. No further documentation needed.

Medium

Request source of funds documentation and upload it to the client via the Client Documents tab

High

Request source of funds and source of wealth documentation before proceeding. Upload it to the Client Documents tab

Related articles

Did this answer your question?