Risk policy evaluation

The Risk policy evaluation step evaluates a risk policy and passes or fails the customer based on its result. It lets your identity verification flows incorporate fraud intelligence, such as phone risk or third party fraud signals, alongside document and biometric verification, without code.

No customer interaction occurs during this step.

Configuration

1. Navigate to Policies and Identity verification in the Admin Console.
2. Open your policy, select the + icon, and choose Risk policy evaluation.
3. Select the pencil icon in the step's row to configure it.

The following options can be configured:

1. Risk policy: Select the risk policy to evaluate. Only policies whose needs can be satisfied at this point in the verification flow are offered.
2. Result mapping: Map every result of the selected policy to pass or fail. Pass and fail then follow the step's success and failure actions.
3. On evaluation error: Select pass or fail for when the evaluation can't produce a result, for example when a required signal fails. This setting is mandatory. If a failed evaluation should route to manual review rather than a hard stop, map the error to the outcome whose action leads there.
4. Success action and Failure action: Choose where the flow continues on each outcome, following the same conventions as other verification steps.

📘

Signal outputs written to local variables during the evaluation stay available for the rest of the session, so later steps and lifecycle event hooks can use them.

Verify the configuration

Check the Workflow preview on the policy screen: the step appears in the flow with its success and failure connections, and the preview warns you about misconfigurations. Then run a test verification and review the account event, which records the policy's result, score, and contributing signals.