WorkFusion

Judgment on alerts that other systems produce is what WorkFusion sells, with agents reading the payment message or news article, enriching it from licensed sources and deciding whether to close or escalate. Robotic process automation, where the company began, is what the models' absence would leave.

Articles Evan cannot disposition within predetermined confidence thresholds go to an analyst, and in Tara a rules engine the bank configures makes the call after models read the payment message. Threshold values live in configuration rather than in published defaults, and the agents do close alerts without a person.

A validator can test Evan component by component: a sentiment model, a name matcher and a focal model that decides whether the searched person is the subject, trained on articles labeled by compliance experts and tracked on accuracy dashboards. Accuracy, precision and recall figures, test method and supervisory mapping are all absent.

Scotiabank is credited with a 95 percent cut in false positives and Carter Bank and Trust with $3 million saved a year, with Standard Bank automating one million transactions a month. Each figure measures work removed, and none comes with a true positive retention or missed hit rate.

Institution data never passes into WorkFusion's possession and none is kept after a process completes, and hosted deployments run as a virtual private cloud for a single customer, per its chief technology officer. Nothing in writing says one bank's adjudications never reach the pretrained models other banks receive.

Records are purged on the institution's own retention schedule, according to UiPath's documentation for Evan. The same documentation says the model learns from analysts' decisions, which carries information forward after purged records are gone, and the Gramm Leach Bliley Act is not named.

UiPath's Automation Cloud carries ISO 27001, HITRUST and SOC 2 for its dedicated cloud, and WorkFusion's chief technology officer has described keys held in hardware security modules. Those certifications cover agents run on Automation Cloud and not WorkFusion's own hosted deployments, for which none is named.

Regulator accepted is the marketing phrase, carried through a blog series, yet no regulator, examination or supervisory statement is named behind it. Sanctions agents are framed around federal sanctions and Bank Secrecy Act obligations, and examiner review of automated alert closure is not discussed.

Entity type, age and location are extracted from each article and matched against the institution's input, and each institution supplies a high risk country list the model detects, which brings geography into who warrants investigation. Text outside English and Spanish goes to manual review, while fairness testing and accuracy by naming tradition are unpublished.

An audit report logs each article, confidence score and analyst decision, giving a bank the trail an examiner will ask for. Only an acceptable use policy is published, with no warranty, indemnity or service level for an alert wrongly closed, and whether WorkFusion or UiPath now stands behind existing contracts is not said.

Evan runs on WorkFusion's own model ensemble, with Google's search interface in the base product, Google Translate for some providers and licensed connectors to Factiva, World Check One and LexisNexis. Language models can be installed locally, yet the model drafting case narratives is never identified, with Llama and Mistral offered only as examples, and a subprocessor list is unpublished.

NICE Actimize, Verafin and Oracle are named as platforms the agents work on, with a narrative of each disposition written back into the source system. A joint offering with Thomson Reuters embeds Evelyn beside the CLEAR data set, and agents reach data through documents and email where no interface exists.

Two hosted models are documented: UiPath's Automation Cloud under its standard residency policy, or WorkFusion hosting on AWS or Google Cloud in a region agreed at onboarding. Several customers also run the agents inside their own firewall, though which agents use which hosted model is not listed.

Savings at named banks and a build versus buy white paper frame the economics, while price, billing unit and contract term are absent. Premium data connectors need the institution's own license, and since the February 2026 acquisition the agents may be sold inside a UiPath platform subscription.

Deutsche Bank sits at the top of a named base that runs through Valley Bank in the regional tier and Raymond James in broker dealer and wealth business, with agents spanning name screening, sanctions screening and KYC refresh. Insurers, payment companies and fintechs are not visible among those names.