How roles and permissions work
Permissions are set per action and per module in one list. The default roles are Administrator and Employee. In Enterprise you create your own roles or duplicate an existing one. You invite new colleagues by email.
Each case file has a case handler and a reviewer, picked by hand or through your assignment rules. The case handler submits the file, the reviewer completes or refuses it. A different reviewer decides on your own file.
What the activity log records
The log records every change to case files, people, companies and documents, and every view of a case file. It also holds status changes, exports, downloads, changes of case handler or reviewer and reviews of hits from screening. Your team sees it per case file, with name and time.
Signing in
Your team signs in with email and password or with a Google or Microsoft account. Two-factor authentication is on by default, with a code by email or an authenticator app. Each user has one active session, which expires after 120 minutes.
Sign-ins and sign-outs, including failed attempts, turning two-factor authentication on or off and support looking along are kept by RiskResolve itself for the security of the platform.
The activity log and the Wwft
Article 33(1) Wwft requires you to record due diligence documents and data in a retrievable way. The activity log shows who did what and when, and the third paragraph requires keeping that data for five years. RiskResolve keeps the activity log, so you have it to hand for your internal review.
The four-eyes principle and role policy are internal controls many firms set down in their policy. RiskResolve gives them a fixed place.
Frequently asked questions
Can't find your question? Get in touch. Response within one business day.