SAR investigation and filing · Exchanges, ramps, stablecoin payment firms and MSBs

Your compliance stack detects.It doesn’t investigate.

Novaheim builds AI that turns an escalated alert into a complete case file and a draft SAR, with fiat and on-chain activity in one record and every fact cited to its source. Your investigator reviews it. Your BSA Officer decides and files.

  • Runs in your cloud
  • SAR data never leaves it
  • Your officer signs every filing
Built for
BSA / AMLFinCEN SAROFAC sanctionsTravel RuleGENIUS ActState MTL
The problem

The alert is the cheap part.

Detection gets the budget. The real cost is the investigation that follows.

21 hrsper SAR to gather, trace and writeSurvey of 15 banks
30 daysto file, counted from initial detectionFinCEN
01Context is scattered across your monitoring, KYC, core and blockchain tools.
02The trail breaks at the chain boundary.
03Narrative quality depends on who wrote it and how busy they were.
What you get

Open the case. It’s already built.

Sample case file · synthetic dataCASE-2026-0412
Subject · Harlow Trading LLC
3 alertsKYB · 20242 accounts0 prior SARs
Fund trace
03-02FIATWire in · ref 88120$48,500
03-02CHAINUSDC out · 0x7a3f…c91e$48,200
03-04CHAIN2 hops → high-risk exchange$47,900
Draft narrativeHover a citation to see its source

On March 2, Harlow Trading received a wire of $48,500[A1] and within four hours sent $48,200 in USDC to an external wallet[T4]. Funds reached a high-risk exchange in two hops[C2], inconsistent with the stated business purpose[K1].

SAR fields
Item 29 · $48,500
Activity type · 31z
Schema · valid
Due
Day 6 of 30
Status · Awaiting BSA Officer decision
How a case moves

AI drafts. Code checks. Your officer decides.

Your environmentyour cloud · your keys · your logsOutputCited case file + draft SAR
01Escalated alertFrom your monitoringYour stack
AssembleOne case fileAI
03TraceFiat + on-chainAI
04DraftCited narrativeAI
05CheckFigures vs. sourcesCode
06DecideFiles or documents why notYour officer
An alert your monitoring has already escalated. Novaheim starts where detection stops.01 / 06
The manual way21 hrsper SAR · survey of 15 banks
01Escalated alertFrom your monitoring
02Pull recordsAcross separate toolscopied out
03Trace fundsFiat and chain apartbreaks at chain
04Write narrativeFrom a blank page
05ReviewBack and forth
06FileAgainst the clock
More handoffs. Case data copied into spreadsheets, documents and email.
Bradley Behan
About

Meet the founder

I build the systems that handle what happens after the alert fires.

My background is statistics and applied analytics: seven years measuring model performance, false positive rates and where automated systems fail. That discipline is what AML programs need and rarely have. Monitoring stacks get tuned on intuition, and few teams can show an examiner why a threshold sits where it does.

Read more

I work across BSA/AML, OFAC, the FATF Travel Rule and the GENIUS Act stablecoin rules, and I read chains directly rather than relying on a vendor’s attribution. Most compliance stacks see the fiat leg and go blind at the chain boundary. That gap is why Novaheim exists.

Bradley BehanFounderLinkedIn
FAQ

Questions a BSA Officer asks first.

No. It drafts and assembles. Your investigator recommends, and your BSA Officer decides and files, exactly as today.

Everything runs in your cloud, including logs and test results. Nothing is copied to us or used to train models, access is limited to named roles, and we agree the controls in writing before we see a case.

Your BSA Officer, through your own BSA E-Filing account. We never hold your filing credentials.

Each vendor sees its own data. We join the fiat and on-chain sides into one cited case, on top of the tools you already pay for.

We expect a few hours of your team’s time across the build, mostly in the diagnostic and backtest grading.

The diagnostic shows which wins are realistic for your program, measured on your own cases.

Backtest results, citation checks and known limits are documented in a validation pack your model risk review can use and hand to an examiner.

You do. The system runs in your environment and stays there.

Alert triage, which often comes first because it feeds the case. Also KYB periodic review, and a policy agent grounded in your own program documents.

Ready to start?

The backlog isn’t an efficiency problem. It’s a finding.

When alert volume outruns team capacity, the 30-day clock doesn’t move. Let’s find the workflow costing you the most and build the system that clears it — with an audit trail on every determination.

Get in touch