Compliance
Audit-ready, by design.
Sanctions screening runs continuously, not annually. KYC packets build themselves as the documents arrive. Every decision is logged, queryable, and defensible the moment a regulator asks.
Stats
SOC 2 Type II
Audited and ISO 27001 in progress
Continuous
Sanctions screening, every trade
Queryable
Audit trail, every action
How it works
001
Compliance that's evidence-ready, every day of the year
Sanctions screening fires continuously. KYC packets reconcile themselves. Every decision is logged with field-level provenance, ready for the auditor, the regulator, or the board.
Sanctions screening on every trade.
CommodityAI runs every counterparty, vessel, and port through your screening provider, automatically, on every new trade and every list update. The verdict is your provider's; CommodityAI makes sure the check never gets skipped and every result is logged. The counterparty that cleared last March gets re-screened the day the OFAC list changes.
KYC packets that build themselves.
CommodityAI captures counterparty documents as they arrive, incorporation papers, beneficial ownership, IDs, addresses, and structures them into one current KYC packet. Where you use a KYC vendor, it validates and enriches the packet against them via API. The renewal calendar flags what’s expiring before it lapses.
Chain-of-custody evidence, from any document.
The evidence behind a regulated trade lives in documents: origin certificates, smelter declarations, inspection reports, often scanned or handwritten. CommodityAI captures all of it, whatever the format, and links it to the shipment and counterparty. When a regulator or downstream customer asks you to prove provenance, the chain of custody is already assembled, not scattered across inboxes.
An audit trail your regulator can query.
Every CommodityAI action and every human override is logged with field-level provenance: source document, user, timestamp, the original and corrected values, the rationale. Audit prep drops from six weeks of digging to one week of review.
Compliance answers in seconds.
“Which counterparties have KYC reviews due in Q3?” “Which trades in the last 12 months involved vessels flagged on last week’s OFAC update?” “Where did we record the basis for trading with X?” Answered in seconds, against live data.
"Your audit trail builds itself."
Future of work
A regulator request, before and after
When a regulator asks for evidence, the reconstruction project disappears. Before CommodityAI, an inquiry meant compliance, legal, and ops syncing to plan a response, then two to four weeks digging through email, Teams, SharePoint, and CTRM extracts, the submission stitched together from PDFs and screenshots. Six weeks from request to response.
P
TC_2026_0142.pdf
12 fields · Signed · 2 pages
Trade confirmation, Sugarcore USA
2s ago · 6 fields
Voice note, Jan Bakker
0:18
Extracting...
Commodity
Quantity
Trade
Exchange
Contract
Refined Sugar
25,000 MT
TR-0142
ICE No.5
March 2026
Milling wheat
18,500 MT
TR-0143
ICE No.5
June 2025
Arabica coffee
25,000 MT
TR-0144
ICE No.5
May 2023
Yellow soybean
32,000 MT
TR-0145
ICE No.5
March 2026
Cocoa bean
3,800 MT
TR-0146
ICE No.5
March 2026
With CommodityAI, the compliance officer opens a filtered audit-trail query and the evidence and exports are already there. The response is drafted from structured records with citations. One week after the request, not six.
Platform
How CommodityAI fits into your team
Layer
What it does
Orchestration
Sanctions screening, KYC reconciliation, due diligence capture, all running continuously as documents arrive.
Intelligence
Ask Atlas. Compliance questions answered in seconds, against your live records.
Visibility
Human in the loop, by design. Every decision logged with full provenance. Your team handles the escalations.
Connectors
CommodityAI integrates with the screening and KYC tools, the CTRM, and the document stores you already run: World-Check, ComplyAdvantage, LexisNexis Bridger, Dow Jones, SharePoint, and more. Each integration is connected via API and set up during onboarding.
Security
Enterprise-grade
security and controls
CommodityAI keeps your data safe with world-class security and data privacy measures.
SOC 2 compliance
CommodityAI has undergone a Service Organization Controls audit (SOC 2 Type II).
Single sign-on (SSO) / SAML
Authenticate into CommodityAI using SSO or login via email with email codes.
Audit logs
All system actions are logged to ensure traceability, accountability, and review.
Data encryption
CommodityAI enforces HTTPS on all connections, using TLS 1.2 for data in transit and AES-256 encryption for data at rest.
Global Data Residency
Choose to store your data in the European Union or the United States, allowing you to align data residency with your organization’s operational requirements.
customers
Trusted by the compliance teams behind the trades you've heard of
Questions & answers
FAQ
Does CommodityAI screen counterparties against sanctions lists?
CommodityAI runs the screening for you by connecting via API to your screening provider. It fires the check at counterparty onboarding, on every new trade, vessel nomination, and port call, and whenever a sanctions list updates. The verdict comes from your provider, against OFAC, EU, UN, UK, or any other regime you screen. Every result is written into the record and the audit trail.
How does CommodityAI handle KYC packets and renewals?
Counterparty documents are captured the moment they arrive across email or vendor portals, structured into a canonical KYC packet, and kept current. Renewal calendars surface what’s expiring. Missing documents are flagged the day they’re missing.
Is CommodityAI SOC 2 compliant?
Yes. SOC 2 Type II audited annually. ISO 27001 in progress. GDPR compliant. EU or US data residency. Single-tenant deployments available for enterprise. Field-level confidence scoring on every extraction.
Does CommodityAI train on our data?
No. Your documents, prompts, and outputs are never used to train foundation models, never shared with other tenants, and never seen by anyone outside your tenant.
Can the audit trail support a regulator’s evidence request?
Yes. Every CommodityAI action and every human override is logged with field-level provenance: source document, page, line, user, timestamp, original and corrected values. The trail is queryable for filtering, exporting, and submission.
How does CommodityAI handle conflict minerals and OECD due diligence?
CommodityAI captures the underlying documents, origin certificates, smelter declarations, and inspection reports, in whatever form they arrive, including scanned and handwritten. It structures them and links them to the shipment and counterparty, so the chain of custody is assembled and ready when a regulator or downstream customer asks. CommodityAI handles the documents and the evidence trail; your team runs the due-diligence assessment.
Can we configure approval workflows for compliance reviews?
Yes. Per-workflow rules for what auto-posts, what requires one approver, what requires two. Roles scoped by function (operators, approvers, compliance officers).
Ready to be audit-ready every day of the year?
Bring a real KYC packet, a recent sanctions check, or an audit evidence request. We'll show you what CommodityAI does with it.