Know when money moves outside the lines

No. Cordant Controls does not replace your compliance engine, case manager or GRC system. The case stays in your case manager, the policy stays in your GRC system, and your monitoring engine keeps running.

Controls reads what each of them concluded and checks it against your policy, so it can tell you whether the engine ran on everything your policy said it should, and what nothing is watching. It does not score a transaction, work a case or file a report.

No. Cordant Controls is read-only. It connects to the systems you already run, writes nothing back, moves no money and holds no funds or production keys. It checks what your systems did against what your policy says should have happened, and hands each finding to the person who owns it, with the evidence attached.

Cordant Controls checks every transaction against documents your institution wrote or has to follow: internal policies, procedures and runbooks, network mandates, regulation and supervisory guidance, exam findings and consent orders, and the standards you adopt. Agreements a third party signed with you, such as a program agreement, a processor's fee schedule or a service level agreement, are checked by Cordant Counterparties.

The document decides. Cordant Controls checks your institution's own conduct against a policy it wrote or a rule it has to follow. Cordant Counterparties checks a third party's conduct against the agreement it signed with you. A screening step taken four days late is a Controls finding, even when the customer is a third party, because the four days come from your own policy.

Every rule in Cordant Controls traces to a clause in a document with your institution's name on it. Where Cordant infers a rule from how your team actually works, it arrives as a suggestion with its evidence attached, and nothing runs until you approve it. Cordant does not benchmark you against best practice. It holds you to your own terms.

Your data stays in the systems that hold it. Cordant Controls connects read-only, by API, webhook or file drop, with no schema changes on your side. Only the evidence travels. Every expansion of access is scoped, approved by you and revocable.

Cordant Controls runs on the Cordant Command Center, which connects to your systems and reconstructs every transaction across them. Controls adds the check against your own policies and your regulators' rules, and produces an audit-grade evidence bundle for every check: the transaction's history across systems, the records and the policy clause, extractable when the examiner asks.