What separates Krino is not a technical detail but three decisions made at the outset: who owns the rules, where the data sits, and whether a decision can be explained.
Nobody understands fraud better than the analyst looking at cases all day — not the engineer. In Krino that analyst writes the rule: composes the condition on screen, sets the score, tries it on a draft, publishes it.
A new pattern spotted in the morning is live in the afternoon. No release plan, no backlog, no deployment window.
Every published version is kept. Why a rule changed, who changed it, which version was running that day — all readable after the fact.
A draft version runs alongside live traffic and every transaction it would have decided differently is listed. Then you publish.
Krino runs on your own servers. Transaction, customer and device data never travels to another company — enrichment included.
Disposable email providers, datacenter IP ranges, country and carrier data, sanctions lists — all read from lists held inside your infrastructure. No per-transaction call goes out, which settles both the privacy question and the latency one.
A scheduled job refreshes them regularly. The refresh only pulls the list down; which customer matched what never leaves.
A decision has to hold up in three places: with the customer, with internal audit, and with the regulator. With nothing but a score, you struggle in all three.
Which rules fired, what each contributed, where the total landed against the threshold — in the decision response.
The decision is stored with the field values as they were. Months later the picture is unchanged.
Who picked up the case, what they wrote, how they concluded — in the file's own record.
An anonymised sample is enough. We'll build your rules and put the results side by side.