Compliance, cleared before work starts.

Identity, anti-money-laundering and PEP/sanctions checks run through Thirdfort the moment a lead is ready to onboard — no manual chasing, no forgotten checks, no spreadsheet of who has been verified. A referred result is never auto-passed; it waits for a human.

The conflict engine is deterministic — exact and fuzzy matching across Clio and Ezra contacts, plus a manual block-list. When an agent is in the loop, it sees only a verdict: clear, blocked or review. The matched names stay in the audit trail, for a human to read.

Leads failing any compliance check land in a quarantine list with the reason attached. A reviewer signs off — or rejects — and the audit log captures who did what, when.

Letters of engagement go out for signature through DocuSeal and come back attached to the matter. Payment and funds-on-account status is tracked alongside, so nothing proceeds before it should.

Anything below confidence, flagged for conflict, or carrying distress markers lands in a compliance queue for a person to approve, edit or reject. Ongoing KYC monitoring re-runs sanctions and PEP checks on a schedule — not just once at onboarding.

When a subject-access request lands, Ezra runs the workflow end to end — gathers the data, supports redaction of third parties, generates the export, and runs scheduled purges. A mandatory review gate sits before the response leaves the firm, and the audit trail satisfies the ICO.