Skip to main content
Version: 4.6

Install and configure

The page provides instructions on installing and configuring Evan (formerly Evelyn AMM). For data on the WorkFusion platform compatibility, refer to the release notes.

Meet requirements​

Hardware​

Evan runs on the standard Work.AI hardware configuration as documented in the Hardware and OS guide. Minimum requirements are as listed below:

ServerRecommended OSCPU (cores)RAM (GB)HDD (GB)
MasterRHEL 8.5832750
BEP AgentRHEL 8.5416150
AnalyticsWindows Server 20161632150
MS SQLWindows Server 2016416500
  • RPA bots are not required for Adverse Media Monitoring.
  • High-availability environments require a Proxy server.

For the architecture deployment, refer to Install AI Agents | View architecture deployment.

Software​

AMM versionEnvironment topologyPlatform versionAutoML Worker configurationControl Tower Worker configurationJava Native Worker configuration
4.6.xstandard-6 topology (6/1 BEP Agents)10.3+1 CPU / 8 GB memory0.4 CPU / 2 GB memory0.4 CPU / 2 GB memory

Before installing AMM, make sure that your environment meets the following requirements:

  • You have installed Work.AI v10.3+ and have the Control Tower and Analytics components enabled. ODF 2 is installed automatically along with the system.
  • You have a bundle with the AMM Business Processes and ML models.
  • You have received the credentials for the required watchlists or licenses for the external screening software to be integrated with AMM.
  • You have the Advanced Package Import and Import/Export permissions in Control Tower.

To check that ODF 2 is installed, do as follows:

  1. Log in to Control Tower and, in the menu, click Advanced > Data Stores.

  2. In the list, find the Data Stores with the_odf_transactions and _odf_transactions_status names. If the Data Stores are on the list, ODF is installed on your instance.

If the Data Stores are missing, download ODF and save odf-install-package-yourversion.zip to your local workstation. To find a proper ODF installation package for your Work.AI version, refer to the Compatibility matrix guide.

Review performance data​

Adverse Media Monitoring leverages BEP servers that can be horizontally scaled for higher volumes.

The following table shows sample volumes that can be expected when using the corresponding versions and configurations. These tests were performed with AMM 4.0 using Google API as the search provider. Note that throughputs may vary slightly, depending on the provider.

Test input: 280 entities file, with 1 entity = 20 articles

Number of BEP AgentsThroughputExecution time
12,036 articles/hour165 min
26,340 articles/hour53 min
38,000 articles/hour42 min
410,500 articles/hour32 min
510,800 articles/hour31 min
612,923 articles/hour26 min

Performance is measured per article across the total run to calculate throughput at the specific scaling level. Tests are run using the CSV upload method, and the system is monitored to identify long-running processes or performance bottlenecks.

Install Evan​

You can install Evan from the Solution Catalog or as a bundle. For details, see the Install AI Agents guide.

Configure Evan​

Once Evan is installed, you need to configure it before running for the first time:

  1. Set the API credentials for data providers.

  2. Configure the SMTP credentials.

  3. Set the proxy.

  4. Configure the options on the AMM configuration screen. To open the configuration screen, log in to Control Tower, navigate to Digital Workers, find your newly installed AMM variation, and click the Prepare button. The configuration screen includes the following steps:

tip

You can configure multiple variations, or sets of parameters, for Evan. For example, you can set up a different data provider or a set of keywords per variation. For details, refer to Manage AI Agent variations.

API credentials for providers​

The following search providers are supported:

  • Google Custom Search API (with Serper.dev and SearchApi.io as alternate Google search backends)
  • Dow Jones Factiva Headlines
  • LexisNexis L&P Media
  • World-Check One
  • Brave Search
warning

You must acquire licenses and credentials for all providers, except for Google API. WorkFusion’s AMM solution includes access to Google API at no additional cost.

To use providers other than Google API, the first step is to add the credentials to Secrets Vault. For step-by-step instructions, refer to the Manage secret entries in Secrets Vault guide.

If you use Google API, your first step is to provide credentials. To do that, in a GCP-hosted environment, complete the instructions under the expand below.

Provide credentials for Google API

The Google API used for the AMM AI Agent is the Custom Search JSON API. You must provide credentials from the WorkFusion’s Developer account owned by the Cloud Ops team.

GCP requires unique credentials for each customer environment (for example, pre-production and production).

note

If you are not using Google Cloud, notify the WorkFusion Engineering and Product teams so that they can perform an audit to ensure there are no gaps for enablement.

To generate credentials, do the following:

  1. Log in to https://cloud.console.google.com.

  2. Ensure that the Custom Search JSON API is enabled.

  3. Navigate to the environment where you will use the API, for example, companyname-preprod.

  4. Click Create Credentials.

  5. In the Name field, specify a name for the API Key.

  6. In the Application restrictions group, select HTTP referrers and click Save.

  7. Navigate to OAuth consent screen. In the User Type group, select Internal and click Create.

  8. Navigate to Enabled APIs & services to view the key and copy the credentials.

  9. Add the key value in the Key field when setting a Secrets Vault entry as described in Manage secret entries in Secrets Vault. The Value field is static.

If you use Serper.dev as an alternate Google search backend, provide the credentials as described under the expand below.

Provide credentials for Serper.dev

The Serper.dev used for AMM is the Custom Search JSON API. Credentials should be provisioned from WorkFusion’s Developer account owned by the Cloud Ops team.

Serper.dev requires each environment to be provisioned separately. This means that unique credentials must be used in each customer environment (such as pre-production and production).

note

If you are not using Google Cloud, notify the WorkFusion Engineering and Product teams so that they can perform an audit to ensure there are no gaps for enablement.

To generate new credentials, follow the steps below:

  1. Log in to https://serper.dev/.

  2. Navigate to the API Keys page on the left tab.

  3. Click the copy icon to copy the API Key.

  4. Create a secret entry to store the credentials: specify the value from Step 3 in the Value field. The Key field is static. For detailed instructions, see Manage secret entries in Secrets Vault guide.

If you use SearchApi.io as an alternate Google search backend, provide the credentials as described under the expand below.

Provide credentials for SearchApi.io

The SearchApi.io used for AMM is the Custom Search JSON API. Credentials should be provisioned from WorkFusion’s Developer account owned by the Cloud Ops team.

SearchApi.io requires each environment to be provisioned separately. This means that unique credentials must be used in each customer environment (pre-production and production).

note

If you are not using Google Cloud, notify the WorkFusion Engineering and Product teams so that they can perform an audit to ensure there are no gaps for enablement.

To generate new credentials, follow the steps below:

  1. Log in to https://www.searchapi.io/.

  2. Navigate to the Dashboard page on the left tab.

  3. Click the Copy button to copy the API Key.

  4. Create a secret entry to store the credentials: specify the value from Step 3 in the Value field. The Key field is static. For detailed instructions, see Manage secret entries in Secrets Vault guide.

SMTP credentials​

Evan emails analysts when results are ready and the final report is available. To enable email notifications, configure SMTP credentials. Provide your own SMTP to ensure the respective security protocols are followed.

The sub-sections below describe how to configure the credentials and enable the email notification.

Update configuration in Data Store​

To update the configuration in the Data Store, do the following:

  1. Log in to Control Tower.
  2. On the main menu, navigate to Advanced and select Data Stores.
  3. Select amm_configuration and specify the following:
NameValueExampleNotes
smtp.protocolSMTP_OVER_TLS/SMTP_OVER_SSL/SMTPSMTP_OVER_TLSTo be confirmed with WorkFusion.
smtp.hostsmtp.office365.comSet your host.
smtp.port123
smtp.replyToreplyTo@domain.comSet the email address to be shown as the sender.
smtp.authEnabledtrue/falsetrueSet to true if the SMTP server requires authentication. Otherwise, set to false.
smtp.credentialsAliasamm_smtp_credentialsConfigure only if smtp.authEnabled is set to true. Specify the alias for the Secrets Vault entry that contains the access credentials to the SMTP server.
smtp.fromreport@workfusion.comEnter the email address to be shown as the sender.

Set entry for SMTP credentials in Secrets Vault​

info

The step is needed only if smtp.authEnabled is set to true.

The key is the email address, and the value is the password. For detailed instructions, see Manage secret entries in Secrets Vault.

tip

Use a descriptive name, such as amm_smtp_credentials.

Proxy settings​

To configure a proxy, do the following:

  1. Log in to Control Tower.

  2. On the main menu, navigate to Advanced and select Data Stores.

  3. Select amm_configuration and specify the following:

    NameExampleNotes
    proxy.hostproxy.customerdomain.comUse your proxy host.
    proxy.port9473Use your proxy port.
    proxy.credentialsAliasamm_proxy_credentialsSpecify the alias for the Secrets Vault entry containing the proxy credentials. Configure only if the proxy requires authentication.

  4. If the proxy requires authentication, add the proxy credentials to Secrets Vault.

    The key is the username address, and the value is the password. For detailed instructions, see the Manage secret entries in Secrets Vault guide.

Input​

To set up the input for the installed AI Agent, do the following:

  1. Indicate whether you want Evan to generate Entity ID automatically if the latter is not provided in the input data.

    • When you select Yes, Evan looks for an Entity ID in the input data and, if it finds none, generates it automatically based on such details as search request, date of birth, or location. Read also about Automatic Entity ID generation and decision reapplication.

    • When you select No, you will need to specify the Entity ID manually if it is not contained in the input data.

  2. Select whether you want Evan to remove legal endings from entity names to broaden the search results:

    • Select Yes if you want Evan to remove legal endings from entity names before searching for articles.

    • When you select No, Evan will not remove legal endings from entity names. Simultaneously, the Do you want to search both with and without legal endings? option becomes available in the Google API provider settings. You can use it to tailor the search results for the provider.

  3. Select a news provider for searching news about the entity or individual. You can configure the AI Agent to return search results from up to four providers at a time.

    The following providers are supported out of the box:

    The settings for each selected provider appear as a separate collapsible section below the Search provider field.

    Review each section carefully to ensure all required parameters are configured correctly. Available parameters vary by provider. For detailed instructions, read the sections below.

Google API​

  • Google Search API: select one or more search API providers to use for Google-based searches. Available options are as follows:

    • Google Custom Search (default) uses Google's Custom Search JSON API.
    • Serper.dev uses the Serper.dev search API as an alternative or fallback.
    • SearchApi.io uses the SearchApi.io search API as an alternative or fallback.

    If multiple providers are selected, the first selected provider is used as the primary search source. The remaining providers are used as fallbacks in the order they are selected.

    Choose an existing alias or click Create Secrets Vault entry to set up one.

    • Google Custom Search API Key alias. The field is shown when Google Custom Search is selected. Specify the corresponding Secrets Vault alias for the Google Custom Search API credentials.

    • Serper.dev API Key alias. The field is shown when Serper.dev is selected. Specify the corresponding Secrets Vault alias for the Serper.dev API key.

    • SearchApi.io API Key alias. The field is shown when SearchApi.io is selected. Specify the corresponding Secrets Vault alias for the SearchApi.io API key.

    • Google API Key alias. Specify the corresponding Secrets Vault alias for the Google API system.

  • Fallback options for article download. Select one or more fallback strategies for downloading articles that could not be retrieved. Options are executed in the order you select them. The Wayback Machine option is selected by default.

    • Scrape.do (standard) uses Scrape.do with proxy rotation and antibot bypass.

    • Scrape.do (browser rendering) uses Scrape.do with headless browser rendering for JavaScript-heavy pages.

    • Wayback Machine retrieves the article from the web.archive.org internet archive.

    • Browser Use utilizes the Browser Use AI agent for article download.

    • Scrape.do Secrets Vault alias. The field is shown when any Scrape.do option is selected. Choose a Secrets Vault alias storing the Scrape.do credentials. To create such an entry, click Create Secrets Vault entry.

    • Browser Use API Key Alias. The field is shown when Browser Use is selected. Choose a Secrets Vault alias storing the Scrape.do credentials. To create such an entry, click Create Secrets Vault entry.

  • Article language: select the language in which Evan is to search for articles. The Any language setting is applied by default.

    For the default Any option, you can specify the following additional settings:

    • Translation Option: configure the translation settings as described in the section.

    • Screening keywords options:

      • Shared: the same set of keywords is to be used in articles across all languages.
      • Defined by keyword language: depending on the Keyword language setting, each language will have a specific set of keywords.

  • Keyword language: select the language of the keywords for the search.

  • Screening keywords: specify the keywords for the search or upload a CSV file with keywords. You can add a maximum of 28 words.

    The following keywords are added by default based on the article languages you select:

    • English:

      ACCUSE, ARREST, BRIBE, CONVICT, CORRUPT, COUNTERFEIT, CRIME, EMBEZZLEMENT, FRAUD, GUILT, ILLEGAL, INDICTMENT, INVESTIGATION, KICKBACK, MONEY LAUNDERING, NARCOTIC, PENALTY, SANCTION, SENTENCED, EVASION, TERRORIST, THEFT, TRAFFICKING, VIOLATION

    • Spanish:

      ACUSAR, ARRESTAR, SOBORNO, CORRUPTO, FALSIFICACIÓN, CRIMEN, MALVERSACIÓN, FRAUDE, CULPA, ILEGAL, ACUSACIÓN, INVESTIGACIÓN, CONTRAGOLPE, LAVADO DE DINERO, NARCÓTICO, MULTA, SANCIÓN, SENTENCIADO, EVASIÓN, TERRORISTA, ROBO, TRÁFICO, VIOLACIÓN

  • Enable keyword thesaurus?: activate to look not only for exact keywords but also for their synonyms. By default, the feature is on. Disable it if your organization requires only exact matches on all keywords.

  • Search period: select a time frame to specifically search for information published within it.

  • File types to exclude from results: select the file types that you want to exclude from Google results.

    • HTML is included by default.
    • Non-HTML file types do not have the same metadata and tagging. Excluding them reduces the number of articles to review and false hits by 50% without increasing the risk of missing a true hit.

  • Enable partial name search?: select to dynamically substitute names if no results were found for their full variants.

  • Use dynamic location search?: select to dynamically broaden the search location for an entity if no results are found for the initial location setting.

  • Ignore articles with errors?: exclude those articles that failed to be downloaded.

  • Exclude articles where the searched entity was not found?: if enabled, articles where Evan failed to detect the entity’s name in the text are excluded.

  • Automatically escalate articles that are too small?: if the setting is enabled, Evan automatically escalates small articles for manual review by default. A small article is one with fewer than 50 words.

  • Do you want to search both with and without legal endings?: if enabled, the option expands the search to include the results both with and without legal endings (for instance, Apex Ltd. and Apex). This only applies to companies that have a legal ending.

  • Article Filtering Policy: in the section, you can fine-tune how Evan should filter out articles from the AMM output when it is configured to source data from Google API.

    To set an article filtering policy, select one or more options:

    • Filter articles from the default ignore list: Evan automatically excludes the articles from the websites that are on the default ignore list.
    • Filter unsafe articles: Evan excludes the articles from the websites that are known to be unsafe.
    • Filter articles that were not found (404 error): Evan excludes the articles that return a 404 error.
    • Filter redirect articles: Evan excludes the articles that redirect to another page.
    • Filter articles with download failures: Evan excludes the articles that could not be downloaded.
    • Filter articles behind paywall: Evan excludes the articles that are behind a paywall and cannot be accessed.
    • Filter articles with parsing failures: Evan excludes the articles that could not be parsed correctly.
    • Filter empty articles: Evan excludes the articles that have no content.
    • Filter too small articles (less than 50 words): Evan excludes the articles that have fewer than 50 words.
    • Filter too big articles: Evan excludes the articles that are too large to process.
    • Filter articles in unsupported language: Evan excludes the articles that are in a language that is not supported. The setting is not visible if English, Spanish, or English and Spanish languages are selected in the Article language field.
Factiva​

  • Factiva Headlines API URL: select one of the options below as the Factiva API address.

  • Factiva Headlines API Key alias: specify the alias for the Secrets Vault entry containing the Factiva credentials. Choose an existing alias or click Create Secrets Vault entry to set up one.

  • Article language: select the language in which Evan is to search for articles. The English language is the default option.

  • Screening keywords: specify the keywords for the search or upload them as a CSV file. You can add a maximum of 28 words.

    The following keywords are added by default based on the article languages you select:

    • English:

      ACCUSE, ARREST, BRIBE, CONVICT, CORRUPT, COUNTERFEIT, CRIME, EMBEZZLEMENT, FRAUD, GUILT, ILLEGAL, INDICTMENT, INVESTIGATION, KICKBACK, MONEY LAUNDERING, NARCOTIC, PENALTY, SANCTION, SENTENCED, EVASION, TERRORIST, THEFT, TRAFFICKING, VIOLATION

    • Spanish:

      ACUSAR, ARRESTAR, SOBORNO, CORRUPTO, FALSIFICACIÓN, CRIMEN, MALVERSACIÓN, FRAUDE, CULPA, ILEGAL, ACUSACIÓN, INVESTIGACIÓN, CONTRAGOLPE, LAVADO DE DINERO, NARCÓTICO, MULTA, SANCIÓN, SENTENCIADO, EVASIÓN, TERRORISTA, ROBO, TRÁFICO, VIOLACIÓN

  • Maximum extracted articles per entity screening: specify the maximum number of articles to fetch in the range from 1 to 30. By default, up to 20 articles are retrieved.

  • Search period: select a time frame to specifically search for information published within it.

  • Article Filtering Policy: in the section, you can fine-tune how Evan should filter out articles from the AMM output when it is configured to source data from the Factiva provider.

    For the Factiva provider, you can select only the Filter too big articles filtering option.

LexisNexis​

  • LexisNexis L&P Media API URL: select the address of the LexisNexis API. By default, it is https://services-api.lexisnexis.com.

  • LexisNexis L&P Media authorization URL: specify the Authentication URL for the LexisNexis News. By default, it is https://auth-api.lexisnexis.com.

  • LexisNexis L&P Media API Key alias: specify the alias for the Secrets Vault entry containing the credentials for the LexisNexis News system. Choose an existing alias or click Create Secrets Vault entry to set up one.

  • Article language: select the language in which Evan is to search for articles. The English language is used by default.

  • Screening keywords: specify the keywords for the search or upload them as a CSV file. You can add a maximum of 28 words.

    The following keywords are added by default based on the article languages you select:

    • English:

      ACCUSE, ARREST, BRIBE, CONVICT, CORRUPT, COUNTERFEIT, CRIME, EMBEZZLEMENT, FRAUD, GUILT, ILLEGAL, INDICTMENT, INVESTIGATION, KICKBACK, MONEY LAUNDERING, NARCOTIC, PENALTY, SANCTION, SENTENCED, EVASION, TERRORIST, THEFT, TRAFFICKING, VIOLATION

    • Spanish:

      ACUSAR, ARRESTAR, SOBORNO, CORRUPTO, FALSIFICACIÓN, CRIMEN, MALVERSACIÓN, FRAUDE, CULPA, ILEGAL, ACUSACIÓN, INVESTIGACIÓN, CONTRAGOLPE, LAVADO DE DINERO, NARCÓTICO, MULTA, SANCIÓN, SENTENCIADO, EVASIÓN, TERRORISTA, ROBO, TRÁFICO, VIOLACIÓN

  • Maximum extracted articles per entity screening: specify the maximum number of articles to fetch in the range from 1 to 30. By default, up to 20 articles are retrieved.

  • Search period: select a time frame to specifically search for information published within it.

  • Article Filtering Policy: in the section, you can tune how Evan should filter articles when it is configured to source data from the LexisNexis provider.

    For the LexisNexis provider, you can select only the Filter too big articles filtering option.

World-Check One​

  • World-Check One API URL: select the address of the World-Check One API. The default one is https://api-worldcheck.refinitiv.com.

  • World-Check One groupID: specify the Group Id for the World-Check One system.

  • World-Check One API Key alias: specify the alias for the Secrets Vault entry containing the credentials for the World-Check One system. Choose an existing alias or click Create Secrets Vault entry to set up one.

  • Article language: select the language in which Evan is to search for articles. The English language is used by default.

  • Screening keywords: specify the keywords for the search or upload them as a CSV file. You can add a maximum of 28 words.

    The following keywords are added by default based on the article languages you select:

    • English:

      ACCUSE, ARREST, BRIBE, CONVICT, CORRUPT, COUNTERFEIT, CRIME, EMBEZZLEMENT, FRAUD, GUILT, ILLEGAL, INDICTMENT, INVESTIGATION, KICKBACK, MONEY LAUNDERING, NARCOTIC, PENALTY, SANCTION, SENTENCED, EVASION, TERRORIST, THEFT, TRAFFICKING, VIOLATION

    • Spanish:

      ACUSAR, ARRESTAR, SOBORNO, CORRUPTO, FALSIFICACIÓN, CRIMEN, MALVERSACIÓN, FRAUDE, CULPA, ILEGAL, ACUSACIÓN, INVESTIGACIÓN, CONTRAGOLPE, LAVADO DE DINERO, NARCÓTICO, MULTA, SANCIÓN, SENTENCIADO, EVASIÓN, TERRORISTA, ROBO, TRÁFICO, VIOLACIÓN

  • Maximum extracted articles per entity screening: specify the maximum number of articles to fetch in the range from 1 to 30. By default, up to 20 articles are retrieved.

  • Search period: select a time frame to specifically search for information published within it.

info

For the World-Check One provider, keywords highlight important sections within each article returned by the search, but not for the API call. Configure the keywords for your search on the World-Check One's website.

External Source​

AMM supports three External Source options:

  • External Source

  • External Source (2)

    External Source (3)

Each selected External Source option displays its own settings panel, identical in structure.

To enable sourcing data from an external source, do as follows:

  1. Choose the article source for the External Source provider by selecting one of the Where should articles be retrieved from? options:

    • Input data: AMM uses article links provided in the input data CSV file. Only one External Source can use input data at a time.

      When choosing the option, make sure your CSV file has the correct format. To do that, open the CSV file monitoring settings section and click the Template link to download a CSV file template. Files that do not comply with the format requirements are not ingested.

    • Plugged connector: AMM retrieves articles from the configured connector, that is, a third-party data source that is not part of the standard built-in provider set. Examples include the following:

      • Moody's: the connector provides structured financial risk and compliance-related news and data.
      • Thomson Reuters Clear: the connector delivers news, risk intelligence, and entity-level article data for compliance screening. For details, read the guide.

      Note: to use a plugged connector, you need to set up Signal ID for the connector Business Process on the Execute external connector sub-process step in the AMM Core Business Process.

  2. Set one of the following parameters, depending on which External Source provider you choose in step 1:

    • If you selected Input data as the External Source provider in step 1, choose one of the Which article investigation statuses should be applied from the input data? options:

      • Only False Positives (default): only articles with a False Positive status in the input data are pre-dispositioned.
      • All statuses: all investigation statuses from the input data are applied.

    • If you selected Plugged connector as the External Source provider in step 1, specify Connector signal ID. If not provided, the signal ID will be taken directly from the Execute external connector sub-process step in the AMM Core Business Process.

  3. In the Content source priority section, define how Evan should prioritize the content fields when both input data and downloaded content (from a link) are available.

  4. In the Fallback options for article download field, select one or more fallback strategies for downloading articles that could not be retrieved. Options are executed in the order you select them.

    • Wayback Machine (default) retrieves the article from the web.archive.org internet archive.
    • Scrape.do (standard) uses Scrape.do with proxy rotation and antibot bypass.
    • Scrape.do (browser rendering) uses Scrape.do with headless browser rendering for JavaScript-heavy pages.
    • Browser Use uses Browser Use AI agent for article download.

    For the Scrape.do and Browser Use options, you will also need to set up Secrets Vault aliases:

    • The Scrape.do Secrets Vault alias field is shown when any Scrape.do option is selected. Specify the Secrets Vault alias for Scrape.do credentials or create one by clicking Create Secrets Vault entry.
    • The Browser Use API Key Alias field is shown when Browser Use is selected. Specify the Secrets Vault alias for the Browser Use API key or create one by clicking Create Secrets Vault entry.

  5. Specify the following general screening settings:

    • In the Article language field, select the language of articles to search in. The Any setting is used by default.

    • Configure the translation settings as described in the section.

    • Search period: select an option to set Evan to search for information published during a specific timeframe.

    • File types to exclude from results: select which file types you want to exclude from the AMM results.

      • HTML is included by default.

      • Non-HTML file types do not have the same meta data and tagging. Excluding them typically reduces the number of articles to review and false hits by 50% without increasing the risk of missing a true hit.

    • Do you want to limit the number of articles? If enabled, the option limits the number of articles to be retrieved from the external source.

      • Maximum extracted articles per entity screening: specify the maximum number of articles to fetch in the range from 1 to 30. By default, up to 20 articles are retrieved.

    • Automatically escalate articles that are too small?: Evan automatically escalates small articles for human review. A small article is one that has fewer than 50 words. The setting is only visible if the Filter too small articles (less than 50 words) filtering policy is disabled.

  6. In the Article Filtering Policy section, fine-tune how Evan should filter out articles from the AMM output when it is configured to source data from the External Source provider.

    To set an article filtering policy, select one or more options:

    • Filter articles from the default ignore list: Evan automatically excludes the articles from the websites that are on the default ignore list.
    • Filter unsafe articles: Evan excludes the articles from the websites that are known to be unsafe.
    • Filter articles that were not found (404 error): Evan excludes the articles that return a 404 error.
    • Filter redirect articles: Evan excludes the articles that redirect to another page.
    • Filter articles with download failures: Evan excludes the articles that could not be downloaded.
    • Filter articles behind paywall: Evan excludes the articles that are behind a paywall and cannot be accessed.
    • Filter articles with parsing failures: Evan excludes the articles that could not be parsed correctly.
    • Filter empty articles: Evan excludes the articles that have no content.
    • Filter too small articles (less than 50 words): Evan excludes the articles that have fewer than 50 words.
    • Filter too big articles: Evan excludes the articles that are too large to process.
    • Filter articles in unsupported language: Evan excludes the articles that are in a language that is not supported. The setting is not visible if English, Spanish, or English and Spanish languages are selected in the Article language field.

  7. If you plan to use a CSV file as the input source, configure the following settings in the CSV file monitoring settings section:

    • Input file bucket: specify the S3 bucket name where you need to upload the CSV file.
    • Input file location: specify the path to the directory where you need to upload the CSV file.
    • Monitoring frequency and Time Unit: configure the interval of monitoring for CSV files.
Brave​

  • Brave API Key alias: specify the alias for the Secrets Vault entry containing the Brave Search API credentials. Choose an existing alias or click Create Secrets Vault entry to set up one.

  • In the Fallback options for article download field, select one or more fallback strategies for downloading articles that could not be retrieved. Options are executed in the order you select them.

    • Wayback Machine (default) retrieves the article from the web.archive.org internet archive.
    • Scrape.do (standard) uses Scrape.do with proxy rotation and antibot bypass.
    • Scrape.do (browser rendering) uses Scrape.do with headless browser rendering for JavaScript-heavy pages.
    • Browser Use uses Browser Use AI agent for article download.

    For the Scrape.do and Browser Use options, you will also need to set up Secrets Vault aliases:

    • The Scrape.do Secrets Vault alias field is shown when any Scrape.do option is selected. Specify the Secrets Vault alias for Scrape.do credentials or create one by clicking Create Secrets Vault entry.
    • The Browser Use API Key Alias field is shown when Browser Use is selected. Specify the Secrets Vault alias for the Browser Use API key or create one by clicking Create Secrets Vault entry.

  • Article language: select the language in which Evan is to search for articles.

  • Filter articles in languages other than the search language: if the checkbox is selected, only articles in your search language are shown. If deselected, you can apply your translation settings to translate the content from other languages.

  • Translation Option: configure the translation settings as described in the section.

  • Screening keywords: specify the keywords for the search or upload a CSV file with keywords. You can add a maximum of 28 words.

    The following keywords are added by default based on the article languages you select:

    • English:

      ACCUSE, ARREST, BRIBE, CONVICT, CORRUPT, COUNTERFEIT, CRIME, EMBEZZLEMENT, FRAUD, GUILT, ILLEGAL, INDICTMENT, INVESTIGATION, KICKBACK, MONEY LAUNDERING, NARCOTIC, PENALTY, SANCTION, SENTENCED, EVASION, TERRORIST, THEFT, TRAFFICKING, VIOLATION

    • Spanish:

      ACUSAR, ARRESTAR, SOBORNO, CORRUPTO, FALSIFICACIÓN, CRIMEN, MALVERSACIÓN, FRAUDE, CULPA, ILEGAL, ACUSACIÓN, INVESTIGACIÓN, CONTRAGOLPE, LAVADO DE DINERO, NARCÓTICO, MULTA, SANCIÓN, SENTENCIADO, EVASIÓN, TERRORISTA, ROBO, TRÁFICO, VIOLACIÓN

  • Maximum extracted articles per entity screening: specify the maximum number of articles to fetch in the range from 1 to 30. By default, up to 20 articles are retrieved.

  • Search period: select a time frame to specifically search for information published within it.

  • File types to exclude from results: select the file types that you want to exclude from Google results:

    • HTML is included by default.
    • Non-HTML file types do not have the same metadata and tagging. Excluding them reduces the number of articles to review and false hits by 50% without increasing the risk of missing a true hit.

  • Automatically escalate articles that are too small?: Evan automatically escalates small articles for human review. A small article is one that has fewer than 50 words. Note that the setting is only visible if the Filter too small articles (less than 50 words) filtering policy is disabled.

  • In the Article Filtering Policy section, fine-tune how Evan should filter out articles from the AMM output when it is configured to source data from the Brave provider.

    To set an article filtering policy, select one or more options:

    • Filter articles from the default ignore list: Evan automatically excludes the articles from the websites that are on the default ignore list.
    • Filter unsafe articles: Evan excludes the articles from the websites that are known to be unsafe.
    • Filter articles that were not found (404 error): Evan excludes the articles that return a 404 error.
    • Filter redirect articles: Evan excludes the articles that redirect to another page.
    • Filter articles with download failures: Evan excludes the articles that could not be downloaded.
    • Filter articles behind paywall: Evan excludes the articles that are behind a paywall and cannot be accessed.
    • Filter articles with parsing failures: Evan excludes the articles that could not be parsed correctly.
    • Filter empty articles: Evan excludes the articles that have no content.
    • Filter too small articles (less than 50 words): Evan excludes the articles that have fewer than 50 words.
    • Filter too big articles: Evan excludes the articles that are too large to process.
    • Filter articles in unsupported language: Evan excludes the articles that are in a language that is not supported. The setting is not visible if English, Spanish, or English and Spanish languages are selected in the Article language field.

Validation settings​

In the section, you can select the options to validate the following input data entities:

  • Validate country of residence or operating country

  • Validate country of citizenship or incorporation

  • Validate subdivision

  • Validate city

  • Validate request uniqueness

    When the validation is selected, you will see the following options below:

    • Restrict by external id validates that the external ID has not been used before.

    • Restrict by batch id and entity id validates that the batch ID and entity ID have not been used before in combination.

All validations, except for Validate request uniqueness, are enabled by default. For details on validation rules, requirements, and errors, see Learn about input and output data | Input data validation.

Translation settings​

The feature enables the translation of article content, title, and summary as described below:

  1. AMM detects the language for each article using the title, summary, and parsed content.

  2. AMM applies the configured translation option based on the detected language.

  3. The translated text is used in downstream processing for classification and Workspace review. The same language is also used in the final report.

The translation feature is available only for the following providers:

info

Mind the following translation feature limitations:

  • Translation is done after Evan downloads and parses the article content. Large or media-heavy pages may take longer to process.
  • The rate limits or quota constraints on the Google Translation API side can impact throughput. Monitor your usage and adjust quotas as needed.
  • For optimal results, ensure the Target translation language setting matches your analysts’ working language and the final report and manual review task language configured in the output settings.
Translation configuration​

The general configuration sequence for the translation feature is as outlined below. See also Provider-specific details.

  1. In the Translation Option section, select a rule:

    • The Do not translate articles rule skips the translation. The Target translation language and Google Translate API Key alias fields are hidden if this option is selected.

    • The Translate only articles that are not in English or Spanish rule translates articles if their original language is neither English nor Spanish.

    • The Translate all articles that are not in the target language rule translates articles where the original language is different from the configured target language.

  2. If you select Do not translate articles above, skip this step. Otherwise, proceed to configure the following settings:

    • Target translation language: select the supported language into which articles should be translated.

    • Google Translate API Key alias: specify the alias for the Secrets Vault entry containing the Google Translate API credentials.

      To create a Secrets Vault entry, if you don't have one, click Create Secrets Vault entry and follow the instructions in the Manage secret entries in Secrets Vault guide.

Provider-specific details​

  • Google

    • Translation supports the article fields retrieved from Google: title, snippet or summary, and the content downloaded by Evan.
    • To allow searching across all languages, set the provider’s Article language parameter to Any. If a specific language is selected, translation is typically unnecessary.
    • The translation engine uses the key provided in the Google Translate API Key alias field.
    • If the translation for a particular article fails due to an API error, quota exceeded, or unsupported language, Evan keeps the original text and marks the article with an internal error code. The article still appears in the search results unless excluded by other settings.

  • Brave

    • Translation supports the provider’s returned title, summary, and content downloaded by Evan for the linked articles.
    • To enable the Translation Option settings, the Filter articles in languages other than the search language option should be selected.
    • The translation feature uses the same Google Translate API Key alias as for the Google provider.
    • If translation is not possible, for instance, due to an API error, quata exceeded, or a language unsupported, Evan keeps the original text and continues processing. Articles are not dropped only due to the translation issues.

  • External Source

    • Translation applies to the content downloaded from the provided links, along with any provided titles or summaries in the input file, when available.
    • There is no provider-side Article language selector for External Source. Translation is applied purely based on the detected language and the configured Translation Option settings.
    • The translation feature uses the same Google Translate API Key alias as for the Google provider.
    • If a link is dead or the content cannot be retrieved, translation is skipped for that item and Evan's behavior is according to the External Source settings (for instance, the Ignore dead links? option).

Investigation​

After setting the Input parameters, click Next to go to the following step of the wizard and complete the setup as described in the sub-sections below

General investigation settings​

  • Do you want the AI Agent to identify and group duplicate content?

    • Set to Yes, use NLP model for AMM to identify and group articles using the NLP model to capture the meaning and context by the similarity threshold that you choose.

    • Set to Yes, using Jaccard similarity index for AMM to identify and group articles by the similarity threshold that you choose.

    • If you don't want AMM to identify and group duplicate content, choose No.

  • Similarity threshold for grouping duplicate content: select the percentage of similarity between articles at which AMM should consider them duplicates. By default, the threshold is set to 50%. However, you can configure it to your needs.

  • Do you want to use available meta data to adjudicate articles first?: applicable only for the External Source input. Set to Yes for AMM to use the metadata from the input file and process it with the NSS model before running the investigation. To start using it, you also need to configure Signal ID on the Execute NSS step in the Adverse Media Monitoring File Ingestion BP.

  • Preferred date format: select the date format to use for input and output data.

Decision reapplication settings​

  • Enable decision reapplication?: choose Yes to enable the decision reapplication feature. If you do not need the feature, select No.

  • In the Decision reapplication matching conditions section, configure the rules for applying decision reapplication. The section is visible only if decision reapplication is enabled.

    • Required matching decisions: set how many times an article has to be reviewed with the same status to reapply a decision.
    • Required distinct users: specify how many unique users have to review article with the same status before reapplying a decision.

Ad-hoc investigation settings​

  • Fields to include in the ad-hoc investigation task: configure what fields should be visible on the Ad Hoc search screen.

  • Number of investigation tasks to be created in Workspace: configure how many investigation tasks you want to create when running the Ad Hoc investigation BP. The recommended setting is one task per 2-3 analysts.

  • Always assign human-in-the-loop tasks to the person who initiates the investigation: if selected, all manual review tasks created by the user are automatically assigned to them.

Classification model settings​

  • Classification model for article processing: select the version of the model you want to use. The latest model is selected by default.
  • Use enhanced processing for more precise results: the option is enabled by default. When disabled, Evan skips computationally intensive feature calculations for focal classification, which can improve the processing speed at the cost of a slight decrease in accuracy.

LLM settings​

To use an AI-powered Large Language Model (LLM) to assist you with the investigation, set Do you want to use GenAI to assist with the investigation? to Yes and configure the capability as described below.

  1. Select an LLM provider. Available options include OpenAI, Google, Anthropic, and xAI.

  2. Set a Secrets Vault alias to store the credentials for the selected LLM provider. The default value is amm_gpt_api_key.

    To create a Secrets Vault entry on the go, if you don't have one, click Create Secrets Vault entry and follow the instructions in the Manage secret entries in Secrets Vault guide.

  3. Choose the provider's LLM model and its version.

    When you choose the Other option in the model list, a free-text input field is shown for you to type in a custom model name.

  4. Select the Use LLM for article disposition if you want the LLM model to assist with article disposition. The checkbox is selected by default.

    When the option is deselected, the Screening approach field is hidden and the dispositioning is handled by the out-of-the-box model.

  5. Select the Use LLM for summary generation checkbox if you want the LLM model to generate article summaries. The checkbox is selected by default.

  6. Choose a screening approach. The available options are as follows:

    • Entity extraction and age disposition only: the LLM model helps to match the name and age of the screened entity. The AMM OOTB model age-matching functionality is not used.

    • Entity and crime extraction, age disposition: the LLM model helps to match the name and age of the screened entity. Additionally, it identifies the crime mentioned in articles and generates a decision comment. The AMM OOTB model age-matching and article disposition functionality is not used.

Birthdate and name matching​

  • Date of birth matching threshold: articles are marked as False Positive if the difference between the age of the screened entity and the age of the entity in the article is greater than the value configured here. The default setting is 2 years.

  • Name matching approach: choose which approach you want Evan to use when matching names.

    • Fuzzy: for Evan to consider a name as a match, the names need to be similar but not perfectly identical. If you enable the approach, you will need to set the following matching thresholds:

      • General Name matching threshold: the cutoff the matcher uses to decide whether two names are considered a match. The default value is 0.86.

      • Name matching threshold (Individual): the cutoff the matcher uses to decide whether two individuals' names are considered a match. The default value is 0.86.

      • Name matching threshold (Company): the cutoff the matcher uses to decide whether two company names are considered a match. The default value is 0.83.

    • Strict: for Evan to consider a name as a match, the names need to be perfectly identical.

False Positive Model Thresholds​

In the False Positive Model Thresholds section, configure the thresholds for the English and Spanish classification models as described below:

  • Adversity threshold (long articles, main): the probability cutoff used by the English or Spanish long-text adverse classifier to decide whether content is adverse. The default value is 0.4525 for the English language and 0.4875 for Spanish.

  • Adversity threshold (short articles): the probability cutoff used by the English or Spanish short-text adverse classifier to decide whether content is adverse. The default value is 0.62 for the English language and 0.61 for Spanish.

  • Focality threshold: the probability cutoff for the English or Spanish focal classifier to decide whether content is focal. The default value is 0.42 for the English language and 0.445 for Spanish.

  • Focality threshold (Individual): the probability cutoff for the English or Spanish focal classifier to decide whether content is focal when the subject is an individual. The default value is 0.495 for the English language and 0.455 for Spanish.

  • Focality threshold (Company): the probability cutoff for the English or Spanish focal classifier to decide whether content is focal when the subject is a company. Default value: 0.42 for the English language and 0.45 for Spanish.

True Positive disposition​

Select the Enable True Positive disposition checkbox if you want the ML model to additionally apply True Positive thresholds to classify articles.

If the True Positive disposition is enabled, the True Positive Model Thresholds section becomes availabel. In the section, you can specify the minimum confidence levels required by the ML model to classify an article as adverse or focal. Articles with scores greater than or equal to the configured True Positive threshold values are automatically marked as True Positive.

The section contains two subsections for the English and Spanish classification models where you can set the following thresholds:

  • Adversity threshold (long articles, main): the probability cutoff used by the English or Spanish long-text adverse classifier to decide whether content is True Positive. The threshold must be greater than or equal to the False Positive threshold. The default value is 0.95 for the English language and 0.8 for Spanish.

  • Adversity threshold (short articles): the probability cutoff used by the English or Spanish short-text adverse classifier to decide whether content is True Positive. The threshold must be greater than or equal to the False Positive thereshold. The default value is 0.92 for the English language and 0.7 for Spanish.

  • Focality threshold: the probability cutoff for the English or Spanish focal classifier to decide whether content is True Positive. The threshold must be greater than or equal to the False Positive threshold. The default value is 0.92 for the English language and 0.95 for Spanish.

  • Focality threshold (Individual): the probability cutoff for the English or Spanish focal classifier to decide whether content is True Positive when the subject is an individual. The threshold must be greater than or equal to the False Positive threshold. The default value is 0.92 for the English language and 0.92 for Spanish.

  • Focality threshold (Company): the probability cutoff for the English or Spanish focal classifier to decide whether content is True Positive when the subject is a company. The threshold must be greater than or equal to the False Positive threshold. The default value is 0.9 for the English language and 0.95 for Spanish.

High-risk country settings​

In the High-risk countries box, select or type in the countries you want Evan to flag as high-risk in the search results. The configured high-risk countries are highlighted in articles returned from each investigation.

Advanced article classification settings​

In the section, configure custom investigation statuses and comments for various ML decisions.

Crime categories​

warning

The Crime categories section is available in the configuration interface to set the crime detection capability, starting from Evan AMM v4.6.1.

To set up the crime detection capability, follow the steps below:

  1. In the Category Confidence Threshold field, enter the minimum confidence score from 0 to 1 for the model to consider an entity in the search result as a match to selected crime categories.

  2. In the Crimes to escalate box, select as many crime categories as you want the model to apply to filter ML-adverse verdicts.

    Only articles that match at least one configured category are filtered as adverse verdicts. Articles with no match are relabeled as non-adverse.

  3. Select the Escalate article if no crimes were detected checkbox if you want Evan to escalate for manual review those adverse articles that match none of the selected categories. In this case, the articles are assigned the Needs Investigation status.

    When the feature is disabled, the articles that match none of the selected crime categories are marked as False Positives and are not escalated.

  4. Set up the keywords for each of the crime categories you selected in step 2. Optionally, you can upload the keywords from CSV files.

Human in the Loop​

  1. Configure whether and how you want to send the search results to Workspace by selecting one of the following options:

    • Send in all cases: the AI Agent creates manual review steps for every search run.

    • Do not send when there are no new articles to review: the AI Agent skips the manual review step when all retrieved articles are evaluated as False Positive or have been previously reviewed1 with the False Positive status.

    • Do not send when all new articles are false positive: the AI Agent skips the manual review step when all retrieved articles are evaluated as False Positive or have been previously reviewed1 with any status.

    • Do not send in all cases: the AI Agent skips the manual review step in all cases, sticking to the model's decisions.

  2. Depending on the selected option, configure the settings below:

Review and disposition settings​

  • Enable Auto QC?: if enabled, the specified percentage of false positive articles are flagged for manual review for quality control purposes. Set the percentage in the Percentage of articles to sample for Auto QC field.

  • Require users to disposition all articles?: set to Yes if you want users to disposition all articles prior to closing an investigation in Workspace.

  • Require users to manually disposition False Positive articles?: configure if users must manually select an investigation status for False Positive articles and provide a comment.

  • Enable a two-stage review process?: set to Yes if you want to activate a workflow where investigations are reviewed in two steps by different user groups. You will also need to specify the two groups in the fields below:

    • First stage user group: specify the user group for initial reviews. Users in this group cannot select True Positive for articles but can reassign tasks to the second-stage group.

    • Second stage user group: select the user group for final reviews. Users in this group have permissions to select True Positive and submit the investigation with the status.

    Once the option is enabled, new Manual Tasks are assigned to the first-stage group by default.

  • Automatically route users to the next task after closing the investigation?: choose whether you want users to be routed to the next task in the queue. If the option is disabled, users are always taken back to the main queue list after closing or saving an assignment.

  • Generate report if a manual assignment expires?: if the parameter is set to Yes, when a manual review assignment in Workspace expires, it is considered submitted. The transaction is processed as usual, and a report is generated.

Ignore list settings​

Set the Allow users to add websites to ignore list? option:

  • If set to Yes, users are allowed to add websites or articles to the ignore list directly from Evan's manual assignments in Workspace. Associated URLs and metadata are saved to the content_relevance_feedback Data Store with the enabled parameter set to true. In future search requests, AMM will automatically ignore these articles and websites, and they will not be displayed in manual review assignments.

  • If set to Yes, with additional approval, added websites or articles will require approval before being ignored. Associated URLs and metadata are saved, but not enabled. The approving person should review the Adverse Media Monitoring Blocked URLs analytics dashboard and enable the required URLs for ignoring.

  • If set to No, users are not allowed to add websites to the ignore list.

info

  • Adding a website to the ignore list will only impact new Manual Tasks submitted after applying the configuration. Any existing Manual Tasks are not updated.

  • For more information on how the ignore list works, see the guide.

Assignment status customization​

The settings in the Assignment status customization section allow you to view and customize the labels shown for investigation statuses in a Manual Task. The default values are as follows:

  • New: the assignment has just been created.
  • Draft: someone had been working on the assignment, and it was updated.
  • Reopened: the investigation has been reopened.

To add or edit a custom label to indicate an assignment status, enter your preferred label text in the right column next to the corresponding description. The status description is not editable.

Shorthand list of predefined reasons​

In the Shorthand list of predefined reasons section, you can specify additional shorthand reasons that can be used by analysts during the manual review.

To add a shorthand reason, click the Add button and specify the following:

  • English Shorthand: add shorthand reason text in English.
  • Spanish Shorthand: add shorthand reason text in Spanish.
  • English Comment: add a comment in English associated with the shorthand.
  • Spanish Comment: add a comment in Spanish associated with the shorthand.
  • User groups: define which user groups can see the created shorthand. You can enter multiple groups. If no groups are specified, the shorthand is visible to all users.

Additional customization options​

  • Ask user to provide additional information for ML model training?

    • Choose Yes if you want Evan to ask users for additional information before submitting an assignment from Workspace.

    • Choose Yes, optionally, and Evan will show users additional information options without requiring to select them.

    • Choose No if you want no additional information requested from users.

  • Customize the title of the assignment?

    • Choose Yes if you want Evan to ask users to provide a title pattern for assignment submission and display in Workspace.

    • Choose No if you want the default title to be used with no additional information requested from users.

  • How would you like to arrange the article details layout?

    Choose a layout for displaying manual review assignment components in Workspace:

    • Display the article controls to the right of the navigation panel, and the article content to the right of the controls: article controls are moved to the left side, towards the article list, and the article content is moved to the right.
    • Center the article content: with the article controls shown on the right, the article content is displayed in the middle.

  • Number of articles displayed on one page: number of articles displayed per page on the Articles to Review and Dispositioned Articles lists within a manual review assignment page.

Output​

This is the last configuration step where you specify the output parameters as detailed in the sections below.

Reporting and storage preferences​

  • Final report and manual review task language: select the language of the final report and Manual Task.

  • Files storage S3 bucket: specify the S3 bucket name used to store uploaded files. The field is mandatory and must not be empty. The default value is doc-upload.

  • Store authenticated S3 links: when the checkbox is selected, Evan saves authenticated (pre-signed) S3 links instead of plain S3 object URLs. The option is deselected by default.

  • Enable report generation: when this option is deselected, Evan skips the report generation entirely.

  • Generate combined report: select to generate a combined report. The option is not available for requests through REST API.

  • Generate batch report: select to generate a batch report. The option is not available for requests through REST API.

  • Generate quality control report: select to generate a quality control report if you enabled the quality control on the Human in the Loop step. The option is not available for requests through REST API.

  • Report format: select the format of the report for screening requests. Available options are HTML or PDF.

  • Remove article details from the report?: if set to Yes, AMM generates only the short version of the report without the full article text.

  • Send quality control report to: once a batch of records is processed and a quality control report is generated, the latter is sent to the email specified in the field.

    Note that the option is available only when the Generate quality control report checkbox is selected. Also, mind that a quality report is not generated when screening starts with REST API.

  • Add articles to the output payload: if enabled, Evan includes full article details in the output payload. Otherwise, articles are omitted.

Error handling​

  • How do you want Evan to handle errors?

    • Choose Fail business process if you want Evan to stop the Core AMM Business Process at the failed step.

    • Select Generate error output if you want Evan to continue processing but generate error output.

Webhook configuration​

  • Use webhook to enable notification about investigations sent to Workspace for manual review: if the checkbox is selected, a webhook callback is sent every time when a manual review task is created.

    • URL for investigations sent to manual review: specify a URL to be triggered with the webhook callback. For the webhook payload structure, see the AMM API reference.

  • Use webhook to enable notification when an investigation is completed: if the checkbox is selected, a webhook callback is sent every time when an investigation is completed.

    • URL for completed investigations: specify the URL to be triggered with the webhook callback. For the webhook payload structure, see the AMM API reference.

  • Use webhook to enable notifications for error events: if the checkbox is selected, a webhook callback is sent every time when an error occurs.

    • URL for error events: specify the URL to be triggered with the webhook callback. For the webhook payload structure, see the AMM API reference.

  • Encrypt the webhook payload: select if you want the webhook payload to be encrypted. For details on how the encryption works and what you need to do, see the Webhook payload encryption section.

    • Encryption key alias: specify the name of the alias in Secrets Vault containing the encryption key. If you do not have one, click Create Secrets Vault entry and set one up in accordance with the guide.

Webhook payload encryption​

Webhook payload encryption ensures that sensitive investigation results sent from AMM to your external systems are protected in transit. When enabled, Evan does not send the webhook body as plain JSON. Instead, the AI Agent encrypts it using Google Tink’s AEAD encryption with the key provided by you.

  • Encryption flag: when the Encrypt the webhook payload configuration property is enabled for final results or for manual review alerts, Evan automatically encrypts the webhook payload.

  • Encryption key alias: Evan fetches the encryption key from the Secrets Vault using the alias defined in Encryption key alias field. The value stored in Secrets Vault must be a valid Tink JSON keyset.

Below is a sample keyset that can be stored in Secrets Vault:

{
  "primaryKeyId": 123456789,
  "key": [{
    "keyData": {
      "typeUrl": "type.googleapis.com/google.crypto.tink.AesGcmKey",
      "value": "EhA1mwq3dU45s3lMquF8H0m7gQ==",
      "keyMaterialType": "SYMMETRIC"
    },
    "status": "ENABLED",
    "keyId": 123456789,
    "outputPrefixType": "TINK"
  }]
}

The encryption sequence is as follows:

  1. Evan serializes the webhook payload into JSON using the provided key from the Secrets Vault to encrypt the payload.

  2. The webhook request is sent with the following Content-Type setting: application/octet-stream. The request body contains only the encrypted byte array (not JSON).

  3. The webhook is decrypted on the customer side. To consume the encrypted payloads, your system must use the same Tink keyset to decrypt the data.

    Below is an example in Java:

    import com.google.crypto.tink.Aead;
    import com.google.crypto.tink.CleartextKeysetHandle;
    import com.google.crypto.tink.JsonKeysetReader;
    import com.google.crypto.tink.KeysetHandle;

    byte[] encryptedPayload = ...; // webhook request body
    String keysetJson = ...; // same JSON keyset you uploaded to Secrets Vault

    KeysetHandle handle = CleartextKeysetHandle.read(JsonKeysetReader.withString(keysetJson));
    Aead aead = handle.getPrimitive(Aead.class);
    byte[] decrypted = aead.decrypt(encryptedPayload, new byte[0]);
    String payloadJson = new String(decrypted, StandardCharsets.UTF_8);

After the decryption, payloadJson will contain the original AMM webhook JSON.

To enable the webhook encryption, do the following:

  1. Generate an encryption keyset. Use Tink key generation tools or WorkFusion’s guidance to create a JSON keyset. Recommended: AES-256-GCM key type.

  2. Add the generated JSON keyset as a new secret entry to Secrets Vault. Use a descriptive alias, for instance, amm_webhook_encryption_key.

  3. Update the AMM configuration. On the Output step, select the Encrypt the webhook payload checkbox and specify the key alias.

  4. Update your webhook consumer to make sure the system receiving AMM webhooks has access to the same JSON keyset.

  5. Implement a decryption logic similar to the one shown above before processing the payload.

Review configuration​

Once you complete the required fields, review the configuration. You can return to any step to change previous settings before finalizing. If everything is correct, click Finish. You are now ready to use AMM to run an investigation.

Configure advanced settings​

Data Purge​

The Adverse Media Monitoring Data Purge Business Process enables periodic data cleanup based on internal retention policies, either on a set schedule or on demand.

Configure Data Purge settings​

To configure Data Purge settings, do the following:

  1. Log in to Control Tower.

  2. Click the Advanced tab and select Data Stores.

  3. Select amm_configuration and set the following parameters:

    NameValue typeExampleDescription
    dataPurge.storagePeriodInDaysInteger30Specify how many days after the completion of a transaction its data should be stored.
    dataPurge.historyStoragePeriodInDaysInteger30Specify how many after the completion of a transaction its history data should be stored (used in decision reapplication).
    dataPurge.userActivityStoragePeriodInDaysInteger30Specify how many days after the completion of a transaction user activity data should be stored.
    dataPurge.deleteReportstrue/falsefalseSet to true to delete generated reports.
    dataPurge.deleteAnalyticsDatatrue/falsefalseSet to true to delete analytics data.
    dataPurge.deleteArticleAndInvestigationHistorytrue/falsefalseSet to true to delete the historical data for previous investigations (used in decision reapplication).
    dataPurge.deleteUserActivitytrue/falsefalseSet to true to delete the user activity data.
    dataPurge.deleteArticleContenttrue/falsefalseSet to true if you need to delete the article content.

Configure Data Purge scheduling​

You can run the Data Purge BP manually or on a schedule. To configure the schedule, do the following:

  1. Log in to Control Tower.

  2. Go to the Advanced tab and select Schedules.

  3. Click Create Schedule.

  4. In the Create Schedule window, set the following parameters:

    • In the Process Definition field, select Adverse Media Monitoring Data Purge vX.X.X | AMM | X.X.X.
    • In the Input Data field, select Empty.
    • Specify Schedule Period to run the Data Purge only for some period. Otherwise, leave it empty.
    • In the Name field, set the operation's name, for example, Adverse Media Monitoring Data Purge.
    • In the Schedule Frequency field, specify days and times when the Data Purge must be started. It is recommended to set the time when the environment is least loaded, for example, nightly hours on weekends.

  5. Click Save.

After that, the purge operation runs automatically on a specified day and time.

To learn more about data purging in Work.AI, see the following guides:

REST API endpoints​

Configuring REST API endpoints for AMM investigations​

To configure REST endpoints for Adverse Media Monitoring, perform the following steps:

  1. In Control Tower, open the core BP definition Adverse Media Monitoring vX.X.X. On the Data tab, select Streaming Records from External Sources. Here, you can also specify a custom Signal ID if needed:

  2. On the Run tab, click Run This Process.

  3. After the BP starts, return to the Run tab and click Show API to find all available generated endpoints:

For Adverse Media Monitoring, only asynchronous invocation is supported, in particular, the following endpoints:

  • /start-record-raw/ to start a BP

  • /check-record-status/ to check the status of a running transaction

  • /get-record-result/ to get the result data of a finished transaction

For detailed information on invoking transactions and getting access to a token, see Running AI Agents via REST API.

Sample JSON request
{
  search_request: String (required),
  entity_type: String (COMPANY),
  year_of_birth_incorporation: Integer,
  citizenship_incorporation_country: String (2 letter ISO Country code),
  subdivision: String (ISO 3166-2 code of the subdivision),
  city: String (Full City name. Used only by Thomson Reuters provider),
  search_period: Integer (search period in days),
  entity_id: String (Used for decision reapplication),
  batch_id: String (Used to group search entities for combined reports generation)
}
Sample JSON response
{
  "transactionUUID": String,
  "runUUID": String,
  "batchId": String,
  "variationUUID": String,
  "entityId": String,
  "externalId": String,
  "timestamp": UTC-date,
  "startTime": UTC-date,
  "searchRequest": String,
  "investigationStatus": String,
  "additionalInformation": String,
  "manualTaskUrl": String,
  "status": String,
  "articles": [
    {
      "articleUUID": String,
      "duplicateArticleUUID": String,
      "title": String,
      "investigationStatus": String (FALSE_POSITIVE/TRUE_POSITIVE/NEEDS_INVESTIGATION/NO_RESULTS_FOUND),
      "adjudicationReason": String,
      "publishingDate": UTC-date,
      "author": String,
      "languages": String,
      "originalLanguages": String,
      "wordCount": Integer,
      "source": String,
      "articleLink": String,
      "originalArticleLink": String,
      "score": Decimal,
      "errorCode": String
    },
        ...
  ]
}

Managing blocked URLs using REST API​

The Blocked URL Management task can be invoked via a POST request to the appropriate AMM REST endpoint.

Sample request body

{
  "url_id": 123,
  "action": "ENABLE"
}

Sample success response body

When the operation is successful, the API returns a standard success response, and the task output contains the details.

Task output

{
  "url_id": 123,
  "action": "ENABLE",
  "success": true
}

Sample failure response body

If url_id is not found or the action cannot be completed, the API returns a failure response.

{
  "success": false,
  "error_message": "Failed to enable URL with ID: 456. The URL may not exist."
}

To configure the Ad Hoc search settings, follow the steps below:

  1. Log in to Control Tower.

  2. On the main menu, navigate to Advanced > Data Stores.

  3. In the Data Store list, select amm_configuration and enter the values for the following parameter:

NameValue typeExampleNotes
adHoc.investigationBatchMaxSizeInteger100Defines how many entity names can be in one investigation batch.
  1. Articles are marked as reviewed if the status or comment was updated manually.↩
Last updated on