Install and configure
The guide details how to install and configure Evelyn.
Prerequisites
Before installing the Name Sanctions Screening (NSS) AI Agent, make sure your environment meets the following requirements.
Hardware
The server requirements for the AI Agent are the same as for the Work.AI Platform. To run screening, you don't need the RPA server.
| Server | Recommended OS | CPU (cores) | RAM (GB) | HDD (GB) |
|---|---|---|---|---|
| Master | RHEL/CentOS 8.x | 8 | 32 | 750 |
| Agent | RHEL/CentOS 8.x | 8 | 32 | 150 |
| Superset Analytics | RHEL/CentOS 8.x | 2 | 4 | 50 |
| MS SQL | Microsoft Windows Server 2022, 2019 | 4 | 16 | 500 |
For the architecture deployment diagram, refer to Install AI Agents | View architecture deployment.
Software
- You have installed Work.AI v10.2.8.54+ and have Control Tower (CT) and Analytics components enabled. See the installation guide.
- You have obtained the bundles with the NSS Business Processes and machine learning (ML) models from your Account Managers.
- You have received the credentials for the required watchlists or licenses for the external screening software to be integrated with the AI Agent.
- You have enabled the Advanced Package Import and Import/Export permissions in CT. For detailed instructions, read Manage Control Tower roles and permissions.
Performance
Performance is measured per hit across the total run to calculate throughput at the specific scaling level. Test datasets include 20,000 hits.
| Number of BEP Agents | Input | Throughput |
|---|---|---|
| 3 | 20,000k hits | 18,182 hits per hour |
| 6 | 20,000 hits | 22,641 hits per hour |
| 20 | 20,000 hits | 34,286 hits per hour |
Install
For instructions, see the Install AI Agents guide.
Evelyn provides two versions of an AI Agent package:
- Standard Asset Bundle:
names-screening-package-3.x.zip - Asset Bundle without Thomson Reuters ongoing monitoring:
names-screening-package-3.x-no-tr.zip
Configure
Once Evelyn is installed, configure the AI Agent before running it for the first time:
- Set up Secrets Vault entries to be used in external data providers and Manual Tasks.
- Select an input source.
- Configure the selected input source.
- Configure the model.
- Configure enrichment with location data.
- Configure manual review.
- Set up output options.
You can configure multiple variations or sets of parameters for NSS, for example, a different media provider or a set of keywords per variation. For more information, see the Manage AI Agent Variations.
A secret entry is not a part of the AI Agent package. You must configure it manually after you install Evelyn.
Set up API credentials in Secrets Vault
To use external data providers, set up credentials in Secrets Vault. For instructions, see the guide.
The following external data providers are supported:
- Dow Jones Factiva REST API v1.0
- World-Check One v2.2.0
- Firco Trust Case Manager API v5.4.22
- Thomson Reuters CLEAR
Before setting the above data providers, make sure you have obtained required licenses with credentials.
Set up Workspace URL in Secrets Vault
To use Manual Tasks in the Work.AI v10.2.8 environment, set up a secret entry for the Workspace URL in Secrets Vault. Add a new secret entry and specify the following settings:
Alias:
workspace_urlKey: URL to Workspace, for example,
https://my-company-ws.cloud.workfusion.com/workspaceValue: any value
If you fail to create a secret entry, your environment is assumed to be Work.AI v10.2.9, which may cause issues. The request status service will display the Error status accompanied by a message prompting you to create a secret entry.
Select input source
To select a screening provider, do as follows:
In the Control Tower menu, go to Digital Workers, find your newly installed AI Agent and click the Prepare button.
In the configuration window, on the Input step, select from where to source input data for the configured AI Agent:

Configure the selected input source.
Configure input
To configure the selected input source, specify relevant parameters. For detailed setup instructions, see the sections below.
Screening system
If you select Screening system as the input source, Evelyn will search for records about an entity or individual in the system you choose in the appropriate drop-down list.
To configure the screening system to work with Evelyn, follow the steps below:
Choose how you want entities or individuals to be screened:
The following options are available:
Retrospectively using a risk-based approach if you want the screening to be executed upon request.
Proactively using event-based monitoring if you want screening to be automatically executed based on monitored events.
Choose a screening system. Depending on the screening method you choose in Step 1, Evelyn supports the systems listed in the table below. Dow Jones Risk & Compliance is the default choice for the retrospective screening and Thomson Reuters CLEAR for the proactive screening.
Screening method Supported screening systems Retrospectively using a risk-based approach - Dow Jones Risk & Compliance
- World-Check One
- Firco Trust Case Manager API
- Thomson Reuters CLEAR
Proactively using event-based monitoring - Thomson Reuters CLEAR
To configure a screening system integration, follow the instructions below.
- Dow Jones Risk & Compliance
- World-Check One
- Firco Trust
- Thomson Reuters CLEAR
API URL. Select the address of the Dow Jones Risk & Compliance API. Available options are as follows:
https://api.beta.dowjones.comhttps://djrc.api.dowjones.com
Credentials location. Specify the Secrets Vault alias storing the credentials for the Dow Jones Risk & Compliance system.
Number of hits in one request. Specify the number of hits to be processed per request for a particular entity from Dow Jones Risk & Compliance API. This parameter impacts how many requests are sent to Dow Jones Risk & Compliance API. The default value is 500.
Desired search type. Set the desired tolerance for the search in the Dow Jones Risk & Compliance system. By default, it is Precise. Available options are as follows:
Precise: the mode requires an exact match between the search input and the data in the database. It is highly specific, meaning that the names, dates, or other identifying information must be identical or very close to the input.
The mode is best suited for situations where you have complete and accurate information about the search entity. It minimizes false positives but might miss matches if there are minor discrepancies in the data (for instance, slight variations in spelling).
Near: the mode allows for minor variations in the search input. It is less strict than the precise search, accommodating small differences, such as typos, abbreviations, and slight spelling variations.
It is most useful when the information might not be entirely accurate or complete. It balances the need to catch more potential matches while still reducing the number of false positives, as compared to the Broad search.
Broad: the mode is the least restrictive, allowing for significant variations and partial matches between the search input and the database entries. It casts a wide net to catch as many potential matches as possible.
The mode is perfect when the information is highly uncertain or incomplete. It maximizes the likelihood of identifying potential matches but generates more false positives, requiring more manual review to filter out irrelevant results.
Use developer's mode after configuration. Select Yes to enable the Developer mode for a Business Process. The Developer mode caches requests and responses from the Dow Jones Risk & Compliance API to avoid a ban from Dow Jones due to a massive number of queries.
For the production configuration, set the value to No.

A little more about cache
The cache is meant to reduce the number of requests to screening systems. It is implemented as a separate Data Store.
After you install Evelyn, the cache Data Store is empty by default. The hit data is received in responses when a bot sends a name request to an external screening system. The received data is then saved to the cache.
Most screening systems send one response that contains all necessary hit data. But in some cases, there can be two requests:
- The first one obtains brief information on all hits. The data is saved to the search cache.
- The second one with the hit ID obtains detailed information on the specific hit. The received data is saved to the hit cache.
Evelyn supports caching both for searches and for hits.
Search cache
Activate the search cache (with the Developer mode) in development environments only. If enabled in the production environment, Evelyn operates with obsolete data.
The search cache implies that hits for particular names are used from the cache instead of the real-time API. In such a situation, the stored data will soon become outdated. This is why the search cache is intended for the Developer mode only.
The operation flow with the enabled search cache is the following:
- The AI Agent sends a search request to the API.
- All data received from the API is stored in the search_cache Data Store.
- Next time, when input contains the same name for the search, Evelyn will obtain all hits for this particular name from the cache instead of DJ API.
Hit cache
The hit cache is always enabled to reduce requests to the Dow Jones API and improve BP performance.
The operation flow of the hit cache is the following:
- Evelyn sends a search request to the API and receives a list of hits with short data for this name.
- Evelyn performs the second request with a specific
hit_idto get the hit's detailed info. - The hit details are saved to the hits_cache Data Store. It also stores the date when the hit was updated last time in the database.
- Next time, when the AI Agent requests hit details, the system checks whether the hit cache contains up-to-date hit details.
- If the hit details in the hit cache are outdated, Evelyn sends a new request for the hit details and updates the cache for this particular hit.
API URL. Select the address of the World-Check One API. By default,
https://api-worldcheck.refinitiv.comis used.World-Check One group. Specify the group ID for the World-Check One system.
Credentials location. Specify the Secrets Vault alias storing the credentials for the World-Check One system.

API URL. Select the address of the Firco Trust Case Manager API.
API port. Select the port of the Firco Trust Case Manager API Receive Message Service. You can find the value in the Trust Case Manager API configuration file.
Credentials location. Specify the Secrets Vault alias storing the credentials for the Firco Trust system.
Firco Trust business unit. Specify the business unit that will get messages from the Firco Trust system.
Firco Trust unit. Specify the underlying unit(s) or feed associated with the Firco Trust business unit on which screening should occur.
Update alert in Firco Trust system. Select if Evelyn's Business Process must update the alert in the Firco Trust UI with model decisions.
Firco Trust 'Need More Information' update status. Specify the alert status to be set if the model's decision is Need More Information.
Firco Trust 'False Positive' update status. Specify the alert status to be set if the model's decision is False Positive.
Enable obsolete hit filter? Select to filter out obsolete hits.
Select period for obsolete filtering. Specify how old a hit should be to be valid for filtering. Works in combination with the Enable obsolete hit filter? option.

For details on parsing data with Firco Trust, refer to Understand NSS data flow.
API URL. Select the address of the Thomson Reuters CLEAR API.
Credentials location. Specify the Secrets Vault alias storing the credentials for the Thomson Reuters CLEAR system.
Permissible Use:
Gramm-Leach-Bliley Act. To maintain compliance with the privacy provisions of the federal Gramm-Leach-Bliley Act and the subsequent regulations adopted by the Federal Trade Commission (GLB), select only a single purpose from the presented list.
Misrepresenting your access purpose violates your subscriber agreement and certain federal and state laws. Any use of information maintained by West, a Thomson Reuters business, other than for the selected permissible purpose, is grounds for account termination and might be referred to the appropriate governmental agency.
Driver's Privacy Protection Act. The Driver's Privacy Protection Act (DPPA) was enacted to prevent any Department of Motor Vehicles (DMV) officer, employee, or contractor from knowingly disclosing or making available to any person or entity the personal information associated with or contained within a motor vehicle record. The act does not include or affect accident reports, violations (MVRs), and driver status.
Voter Permissible Purpose. Due to data privacy restrictions imposed by state laws, users accessing voter registration records are required to acknowledge compliance with the law and to indicate the intended permissible use of the data.
Information obtained from each search, including the indicated permissible use, date of search, and search details, is stored for at least five years to comply with state statutory requirements. Not all permissible uses are applicable to each state.
Minimum relevance score. Specify the minimum relevance score to ensure that only the results that meet or exceed the threshold are returned for each data source.
Category Tags. The option is only available if you set Thomson Reuters CLEAR API as the input screening system for proactive monitoring. To set, choose or type in tags to categorize the input to the connector that monitors the data provider. Available options are as follows: Sanctions, State owned entities, or Politically exposed persons.

WorkFusion API
Select WorkFusion API for full alert screening via REST API.

For more details on data transfer via API, refer to Run screening | Call NSS REST API.
Upload CSV file
Select Upload CSV file for historical data evaluation. The uploaded CSV file should contain historical data and Watchlist Entity data.
Click Download format file to get a CSV file template and ensure the uploaded file corresponds to the provided format. Keep in mind that only the CSV format is supported.
To complete the configuration, provide the following data:
- Input format file location. Specify the path to the format file location in S3 MinIO.
- Input data location. Specify the path to the S3 MinIO folder or file where the historical data is located. Ensure the input file contains
input_id(a unique identifier) to minimize unintended volume usage.
For more information on the historical data evaluation flow, see the guide.

Configure model
In the configuration window, on the Model tab, you can change the following model-related settings:
Leave the Use latest model version selected by default to apply the default prepackaged model.

To change the model version, deselect the option and select the required version in the Trained Model drop-down list.

Leave the Include all criteria in the decision narrative option deselected if you want the model's decision narrative to include only the most significant factors for the strong match and weak mismatch (if available).
Select the Include all criteria in the decision narrative option if you want the model's decision narrative to include all factors for the strong match and weak mismatch (if available).

Open the Rules section and specify the factors based on which the model should treat a hit as false positive. You can define rules by selecting the Name, Location, Date, Type, Gender, or Additional Information checkboxes.
Empty values in rules are allowed. If only one factor is required to make a false positive decision, there is no need to select others. To add a new field, start by removing all existing rules. For more details on setting rules, see Configure classification model.

Open the Thresholds section and set the similarity factors for comparing names and dates. You can define thresholds based on Name, Date, and Location. For more details on setting thresholds, see Configure classification model.

The Stopwords section contains several groups where you can specify keywords. These are specific words to be removed from compared input and hit data. NSS contains default stopwords out of the box.
Enter stopwords in the relevant input fields, separating them by commas, or upload a CSV file. For more details on setting stopwords, see Configure classification model.

Configure location enrichment
In the configuration window, on the Location enrichment tab, leave the Location lookup empty to skip address enrichment.

When you choose to use the address enrichment feature, select a provider. The AI Agent retrieves detailed information about the location from the provider system and enriches ScreenedData and WleData. Available options are as follows:
Google Geocoder. One call for each address is created, returning appropriate information.
Google Places Api. Firstly, NSS calls
https://maps.googleapis.com/maps/api/place/autocomplete/jsonto retrieve a list of predicted addresses. Then, the list of predicted addresses is sent tohttps://maps.googleapis.com/maps/api/place/details/json, and detailed address information is returned.

Configure the following parameters:
API key: specify the key to be used for retrieving geolocation data from the selected provider.
Connection type: specify the connection type for connecting to the selected geolocation provider. The Direct option is selected by default, enabling you to call the provider directly.
Lookup settings: specify when to perform an address lookup. In case both input entity and watchlist entity are required for enrichment, select both the checkboxes.
Lookup on input entity applies the address enrichment feature only to input data.
Lookup on watch list entity applies the address enrichment feature to hit data.

For more details, see Perform data enrichment | Location enrichment.
Configure name enrichment
On the Name enrichment tab, you can turn on or off name enrichment. By default, the feature is enabled.

You can also enable email notifications for the Ticker Lookup Business Process runs. By default, the feature is disabled. To enable email notifications, complete the following steps:
Select Yes for Do you want email notification with tickers symbols update?.
In the Email addresses to notify field, enter the email addresses where notifications should be sent.

In the ds_uc_B_AML_PEP_configuration_v3_0 Data Store, configure SMTP parameters. For details, see Ticker enrichment configuration table.
Add a Secrets Vault entry with authentication credentials. Use the alias stored in
smtp.credentialsAliasin the configuration Data Store.
For more details, see Perform data enrichment | Name enrichment.
Configure manual review
The Human in the Loop step allows you to verify or modify the decisions of the NSS classification model by providing all available information that might be too complex for the model to process. Alerts chosen for manual review remain available in Workspace till manually submitted.

To set the Human in the Loop step, follow the steps below:
Select whether and how you want to check the AI Agent's output manually in Workspace:
Enable in all cases: Evelyn sends all alerts with hits to manual review.

Enable for Need More Information alerts only: Evelyn creates manual review assignments for alerts where the model decision was Need more information.
Enable for False Positive alerts only: Evelyn creates manual review assignments for alerts evaluated as False Positive.
Disable in all cases: Evelyn skips the manual review step in all cases, sticking to the model decisions.
Additionally, for the Enable for Need More Information alerts only and Enable for False Positive alerts only options, type in the exact alert categories that should be forced (Enable for the following alert categories) or skipped (Disable for the following alert categories).
infoThe above configuration can be overridden by using the
mt_forceparameter. For details, read Run screening | REST API configuration map.Select Auto quality check to enable the AI Agent to randomly submit the defined percentage of false-positive alerts for additional manual review in the selected screening system.
Percentage of false positive alerts. Specify the percentage of false positive alerts to be submitted for additional manual review. The associated screening system is updated to indicate that the AI Agent marked this alert for the auto quality check.

If in step 1 you choose Enable for Need More Information alerts only or Enable for False Positive alerts only, choose if you want the alerts flagged for the automatic quality check to be sent for manual review.

Configure output
On the Output step, choose the format for screening request reports that become available after the Business Process execution:

- .csv: Quality Check report
- .html: HTML report
Do you want to generate a single page combined HTML report?: select Yes to get a single-page HTML report.
