| AERS | AMLO’s electronic reporting system |
| BCP level | Normal, Standby or BCP activated: set by the BCP team and pushed to every phone |
| BIA | Business impact analysis: the annual analysis of critical activities with MTPD, RTO and RPO; held in ERM Core and read by BCP Core |
| Call tree | Who calls whom in an incident, built from the organisation structure |
| CDD / EDD | Customer due diligence / enhanced due diligence |
| DA Dealer | A digital asset dealer licensed by the SEC |
| EDD Intel | The tab that gathers adverse media from public sources for the officer |
| ERM Core | Risk Core’s ERM module for the risk desk: RCSA, loss events, KRIs, BIA and dashboards |
| Escalation | Notifying the head, then the next level up, about someone who has not reported |
| Exit-Only | A restriction under which the customer can only sell or withdraw |
| Four legs | Deposit, withdraw, buy and sell: the units of restriction and release |
| FundConnext | The fund industry’s central platform, which sends customer, account and statement files |
| Index, not master | CDD Core keeps the results of CDD work; customer particulars stay in the source system |
| KRI | Key risk indicator, with green / amber / red threshold bands |
| Loss Event | An operational loss, recorded against a Basel event type |
| Maker / Checker / Approver | The person who proposes, the person who signs, and senior approval where required |
| Materiality tier | A loss event’s tier, assigned by the system from the group’s thresholds and used to route it |
| Name pair | A customer name and a list name whose similarity reaches the threshold |
| PEP | Politically exposed person |
| Public window | BCP Core’s service for the general public; collects no personal data |
| Platform operator | QX as the operator of the installation: accounts, list loads and platform-wide values |
| RCSA | Risk & Control Self-Assessment: each company assesses its risks and controls each cycle |
| Re-KYC | Periodic customer review |
| Report-up | The only link between companies in a group: each subsidiary sends upward what it has validated or approved; the parent reads it and cannot change it |
| Retain-until | The date a record’s retention period ends |
| Risk Core | QX’s risk platform with two modules, ERM Core and BCP Core, on one shared core; every company has its own isolated database |
| RLS | Row-level security: the database rule that limits which rows each user can read |
| STR | Suspicious transaction report (AMLO form 1-03) |
| Subsidiary-Independence | A parent may read a subsidiary’s records but never create, edit, approve or close them |
| Trading Core | A DA Dealer’s trading system, which exchanges data with CDD Core |
| TMS | Transaction monitoring |