Risk Scoring: Data Schema

Last updated: February 27, 2026

Face Match

Field	Possible Values
Face match status	`PENDING` `COMPLETED` `Failed`
Face match result	`UNKNOWN` `APPROVED` `REVIEW` `DECLINE`
Face match warnings	`FACE_NOT_FOUND` `FACE_MISMATCH` `LOW_FACE_SIMILARITY` `FACE_IDENTICAL` `FACE_COVERED` `FACE_BLUR` `FACE_TOO_CLOSE` `FACE_CROPPED` `FACE_TOO_SMALL` `FACE_ANGLE_TOO_LARGE` `FACE_DEEPFAKE` `FACE_EDITED` `FACE_PHOTO_OF_PHOTO` `VIDEO_INJECTION_DETECTED` `VIRTUAL_CAMERA_DETECTED` `SELFIE_VIDEO_FRAUD` `SELFIE_VIDEO_MISSING`
Face match score	0.0 – 100.0

	FieldPossible Values
Face liveness status	`COMPLETED` `FAILED` `PENDING`
Face liveness result	`APPROVED` `DECLINED` `REVIEW` `UNKNOWN`
Face liveness warnings	`FACE_NOT_LIVE` `FACE_LIVENESS_REVIEW_REQUIRED` `FACE_LIVENESS_TOO_FAR_FROM_CAMERA` `FACE_PHOTO_OF_PHOTO` `VIRTUAL_CAMERA_DETECTED` `VIDEO_INJECTION_DETECTED` `SELFIE_VIDEO_FRAUD` `SELFIE_VIDEO_MISSING` — resolution_status: `RESOLVED` `UNRESOLVED` `WHITELISTED`
Face liveness source	`ON_DEVICE`

	FieldPossible Values
AML info status	`COMPLETED` `FAILED` `PENDING`
AML info result	`APPROVED` `REVIEW` `UNKNOWN`
AML info entity hits	entity_type: `PERSON` `COMPANY` `ORGANISATION` `UNKNOWN` — name_match_score: 0–100 — resolution_status: `RESOLVED` `UNRESOLVED` `WHITELISTED` — each hit contains: hit_type, source_details, fields, media
AML info warnings	`AML_MATCH` (auto-added when entity hits exist) + custom warning codes configured in workflow template — resolution_status: `RESOLVED` `UNRESOLVED` `WHITELISTED`
AML hits count	0 or any positive integer
AML hit summary	Keys are grouped AML list types with integer counts. PEP subtypes (`PEP_CLASS_1`–`PEP_CLASS_4`) merged under `PEP`; adverse media subtypes merged under `ADVERSE_MEDIA`

	FieldPossible Values
Fraud insights status	`COMPLETED` `FAILED` `PENDING`
Fraud insights result	`APPROVED` `DECLINED` `REVIEW` `UNKNOWN`
Fraud insights warnings	`TOR_DETECTED` `VPN_DETECTED` `BOT_DETECTED` `PRIVACY_SETTINGS_BLOCKED` + applicable email/phone/session warnings — resolution_status: `RESOLVED` `UNRESOLVED` `WHITELISTED`
Email insights	status/result use same enums as above — domain_info flags: `disposable` `free_provider` `dmarc_compliance` `spf_strict` `custom`
Phone insights	phone_type: `premium rate` `toll free` `shared cost` `voip` `landline` `mobile` — sim_type: `prepaid` `postpaid`
Related sessions	relation: `BROWSER_MATCH_WITH_PREV_SESSION` `IP_MATCH_WITH_PREV_SESSION` `FACE_MATCH_WITH_PREV_SESSION` `ID_NUMBER_MATCH_WITH_PREV_SESSION`

	FieldPossible Values
IP insights status	`COMPLETED` `FAILED` `PENDING`
IP insights result	`APPROVED` `DECLINED` `REVIEW` `UNKNOWN`
IP insights warnings	`TOR_DETECTED` `VPN_DETECTED` — resolution_status: `RESOLVED` `UNRESOLVED` `WHITELISTED`
IP insights country	Full country name, e.g. "United States", "Germany"
IP insights country code	ISO 3166-1 alpha-2, e.g. `US` `GB` `DE`
IP insights region	State/province name, e.g. "California", "Ontario"
IP insights city	City name, e.g. "San Francisco"
IP insights latitude	-90.0 – 90.0
IP insights longitude	-180.0 – 180.0
IP insights postal code	Postal/ZIP code, e.g. "94105", "SW1A 1AA"
IP insights timezone	IANA timezone, e.g. "America/Los_Angeles", "Europe/London"
IP insights internet service provider	ISP name, e.g. "Comcast", "AWS"
IP insights connection type	`residential` `business` `mobile` `datacenter`
IP insights autonomous system number	Positive integer, e.g. 15169 (Google), 16509 (AWS)
IP insights organization	Organization name, e.g. "Google LLC", "Amazon.com, Inc."
IP insights is crawler	`true` `false`
IP insights host	Reverse DNS hostname, e.g. "crawl-66-249-66-1.googlebot.com"
IP insights proxy	`true` `false`
IP insights tor	`true` `false`
IP insights vpn	`true` `false`
IP insights active tor	`true` `false`
IP insights recent abuse	`true` `false`
IP insights bot status	`true` `false`
IP insights abuse velocity	`none` `low` `medium` `high`
IP insights unique hash	Alphanumeric hash string

	FieldPossible Values
Device insights status	`COMPLETED` `FAILED` `PENDING`
Device insights result	`APPROVED` `DECLINED` `REVIEW` `UNKNOWN`
Device insights warnings	`BOT_DETECTED` `PRIVACY_SETTINGS_BLOCKED` — resolution_status: `RESOLVED` `UNRESOLVED` `WHITELISTED`
Device insights browser name	e.g. "Chrome", "Firefox", "Safari", "Edge"
Device insights browser major version	e.g. "120", "18", "115"
Device insights browser full version	e.g. "120.0.6099.129", "18.1.1"
Device insights OS	e.g. "Windows", "macOS", "iOS", "Android", "Linux"
Device insights OS version	e.g. "10", "14.6.1", "13"
Device insights device	e.g. "iPhone", "Samsung Galaxy S21", "Desktop"
Device insights user agent	Full user agent string, e.g. "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36..."
Device insights incognito	`true` `false`
Device insights bot status	`true` `false`
Device insights bot type	e.g. "Selenium", "Electron", "Puppeteer", "HeadlessChrome"