Osprey Cases

Public Preview

Compliance Workflow · Apache 2.0 Open Source

Streamlined analyst investigation and regulatory filing workbench.

When Osprey flags an alert, Osprey Cases provides an auditable, cryptographic workbench for compliance officers to investigate timelines, review counterparty graphs, and decision suspicious activity.

View on GitHub Documentation & Specs Browse All Projects

Next.jsGoGraph TelemetrySAR FilingAudit Log

Workflow SLA

< 24h Triage

Automated queue prioritization

Graph Analysis

3+ Degrees

Counterparty ring detection

Filing Formats

FinCEN / FIU

Automated XML & PDF exports

Audit Integrity

SHA-256

Tamper-evident activity logs

Overview & Engineering Philosophy

Transaction monitoring engines only solve half the problem. When suspicious activity is detected, compliance teams must investigate the alert, gather counterparty evidence, document analyst reasoning, and file regulatory reports.

Osprey Cases eliminates fragmented spreadsheets and expensive enterprise case tools. It aggregates all telemetry associated with an Osprey alert into an intuitive, timeline-driven investigator UI.

With built-in Osprey Narrator integration, investigators can generate comprehensive SAR filings with a single click, review and edit the draft, and export standard regulatory XML packages.

Architecture Specifications

Counterparty Network Visualizer

Interactive graph rendering displaying fund flows, intermediary accounts, and rapid circular transfers.

Immutable Audit Log

Every analyst action, note, and decision is cryptographically signed and hashed for regulatory examination.

One-Click SAR Export

Transforms completed cases into validated regulatory formats (FinCEN BSA E-Filing XML, goAML, and FIU standards).

Automated Evidence Bundling

Attaches full ISO 20022 wire payloads, IP geolocation data, and device signatures directly to the case dossier.

Case Ingestion Webhook Schema

// Osprey Cases receives alert webhooks from Osprey Engine
POST /api/v1/cases/webhook
Header: X-OSF-Signature: sha256=...

{
  "alert_id": "alt_99014",
  "rule_id": "fatf_structuring_01",
  "severity": "HIGH",
  "subject_account": "acc_819283",
  "transaction": {
    "id": "tx_4412",
    "amount": 9850.00,
    "currency": "EUR"
  },
  "narrator_draft": "Draft SAR narrative generated by Osprey Narrator..."
}