ScopeFlow

Platform

Three modules. One evidence report.

Verify inspects each document. Link connects the cases. Sentinel agents run both on everything that arrives and route what needs a human.

Try the live checkRequest a pilot

Document & image forensics

ScopeFlow Verify

Every document is checked by a set of independent forensic signals. Each signal explains itself: what it found, where on the page, and how strongly.

  • Error-level, noise and double-compression analysis
  • Copy-move and splice detection for pasted stamps and photos
  • Font, kerning and layout consistency against issuer templates
  • PDF structure: incremental saves, producer software, hidden layers
  • MRZ checksum validation and visual-zone cross-check
  • AI-generation fingerprints and C2PA provenance verification

AI security agents

ScopeFlow Sentinel

Agents that sit on your intake channels (portal uploads, email inboxes, APIs, scanners), run Verify and Link on everything that arrives, write the evidence report and route the case. They also guard your own AI systems.

  • Intake agent: triages every submission and assembles the case file
  • Consistency agent: reads documents together and flags contradictions
  • Deepfake agent: checks selfies and video for synthesis and injection
  • Guardrail agent: protects your LLM apps from prompt injection and data leakage
  • Officer feedback loop: confirmed outcomes retrain the checks

Officer console

Built to be read in thirty seconds

A triage decision at the top, the signals that drove it, the region on the page, and the cases it links to. Everything an officer needs to decide what to check next.

scopeflow / cases / VA-2026-0412

on-prem

bank_statement_p2.pdf

2 of 6 docs

Triage

Check original · interview

82

risk / 100

  • Re-compressed region

    Closing balance, p.2: error level 4.1x page median

    High

  • Font mismatch

    Amount set in a different typeface from the issuer template

    High

  • Shared employer template

    Contract layout matches 3 other open cases

    Review

  • Salary vs. deposits

    Payslip net 3,850 / no matching credit in 3 months

    Review

  • MRZ checksums

    All 4 check digits valid

    Clear

  • Photo provenance

    No generator fingerprint found

    Clear

Linked cases

3 shared signals

Illustrative report on synthetic specimen data. The decision stays with the officer.

Signal library

Independent checks, combined

No single detector is reliable on its own, and forgers adapt to any one of them. ScopeFlow combines many and shows each one's contribution.

  • Error-level analysis
  • Double JPEG compression
  • Noise residual consistency
  • Copy-move detection
  • Splice boundary detection
  • Font & kerning match
  • Layout vs. issuer template
  • PDF incremental saves
  • Producer / creator software
  • Hidden text & layers
  • MRZ check digits
  • Visual zone vs. MRZ
  • C2PA content credentials
  • Generator fingerprints
  • Camera EXIF plausibility
  • Face reuse (perceptual hash)
  • Template fingerprint
  • Shared IBAN / phone / address
  • Salary vs. deposits
  • Timeline consistency
  • QR & verification codes
  • E-signature validation
  • Video injection signals
  • Prompt-injection guard

How it works

Agents on intake, people on decisions

ScopeFlow slots into the intake you already have. Applicants notice nothing; officers get a ranked queue with the evidence attached.

  1. 01

    Intake

    Documents arrive from your portal, scanner, inbox or API. Nothing changes for the applicant.

  2. 02

    Agents analyse

    Sentinel agents run forensic, AI-generation and consistency checks on every page in parallel.

  3. 03

    Link across cases

    Entities and fingerprints are matched against the whole caseload to surface shared templates and networks.

  4. 04

    Officer decides

    A ranked queue with an evidence report per file. Recommended action is 'check original / interview', never auto-refusal.

  5. 05

    Learn

    Confirmed outcomes flow back, so the checks keep pace as fraud networks adapt.

Deployment

Your infrastructure, your rules

On-premise

Runs on your servers, inside your network perimeter. GPU optional for most workloads.

Air-gapped

No internet connection required at any point. Updates delivered as signed offline packages.

Dedicated EU cloud

Single-tenant environment hosted in the EU, for companies that want a managed service.

Integration

Fits the systems you already run

REST API

Submit a case, get a structured evidence report back as JSON and PDF.

Inbox & folder watch

Agents pick up documents from a mailbox or a scanner drop folder.

Officer console

Ranked queue, evidence viewer and linked-case graph in the browser.

Live demo

Run a forensic check in your browser

Drop in an image or PDF and see error-level analysis, metadata and AI-generator checks. Everything runs on your device; nothing is uploaded.

Try the live check

Prove it on your own cases in 30 days

Pick one document type and one team. We deploy inside your network, test on files you already know are fraudulent, and hand you a written report.

Request a pilotBook a briefing