One platform for fraud and AML, hosted in Saudi Arabia

Fraud prevention and AML software hosted in Saudi Arabia

Real-time decisions on logins and payments, sanctions and watchlist screening, and transaction monitoring, with rules, device intelligence, case management, and SAR reporting in one platform.

Request a Demo View Docs

Trusted by

Fraud detection API

Real-time risk decisions for logins, payments, registrations, and withdrawals.

AML screening API

Sanctions, PEP, watchlist, entity, and counterparty screening workflows.

Trust and data residency

How Naiza handles KSA hosting, encryption, data residency, and access control.

API documentation

Guides and API reference for fraud events and AML screening, including request examples.

Hosted in the Kingdom of Saudi Arabia

Naiza stores and processes fraud events, customer records, and AML screening data in Saudi Arabia. Keep risk decisions and investigation data in the Kingdom.

Saudi data residency

Event, customer, and screening data used by the product is stored and processed in Saudi Arabia.

Regional decisioning

Saudi-hosted infrastructure keeps fraud and AML API calls inside the Kingdom instead of routing them to a distant region.

Saudi hosting and access controls

Saudi-hosted storage and processing, role-based access, and authenticated APIs give your team control over product data.

Trust and data residency

Real-Time Decisions

ALLOW / REVIEW / BLOCK responses for the events you send. Synchronous and asynchronous processing modes for product and operations workflows.

events.ts

const response = await fetch(
  "https://api.naiza.ai/api/v1/events",
  {
    method: "POST",
    headers: {
      "x-api-key": "YOUR_API_KEY",
      "Content-Type": "application/json",
    },
    body: JSON.stringify({
      eventName: "payment.completed",
      eventCategory: "TRANSACTION",
      customer: { externalId: "cus_8Xk2mP" },
      metadata: { amount: 2499.00, currency: "SAR" },
    }),
  }
);

const { decision, score } = await response.json();
// decision: "ALLOW" | "REVIEW" | "BLOCK"
// score: 0–100

Flexible Rule Engine

Custom rules with expression-based logic. Priority ordering, cumulative scoring, and enable/disable without deployment.

rules.json

// Example rule configuration
{
  "name": "high_velocity_login",
  "expression": "event.count('login', '5m') > 10",
  "action": "BLOCK",
  "priority": 1,
  "enabled": true,
  "score": 40
}

// Another rule — cumulative scoring
{
  "name": "new_device_new_country",
  "expression": "device.is_new && geo.country != customer.country",
  "action": "SCORE",
  "priority": 5,
  "score": 30
}

Device Intelligence

Fingerprinting, multi-account detection, and fraud ring identification. Track devices across sessions with per-device risk scoring.

device.json

// Device identifiers on POST /api/v1/events
{
  "eventName": "user.login",
  "eventCategory": "AUTHENTICATION",
  "customer": { "externalId": "user_123456" },
  "device": {
    "externalId": "device_abc123",
    "fingerprint": "fp_a1b2c3d4"
  },
  "ip": "203.0.113.42"
}

How It Works

Four simple steps to protect your application from fraud

Register

Create your Naiza account to get started with fraud detection for your application.

Create Your Tenant

Set up your organization workspace. Configure your API keys, rules, and team members.

Activate Your Plan

Discuss your event volume, customer base, and integration needs with our team to choose the right plan.

Integrate

Send events to Naiza's API and get instant ALLOW / BLOCK / REVIEW decisions for your application.

Plan your integration with our team. Contact us to discuss your use case.

Built for Developers

RESTful API, comprehensive documentation, and simple authentication

curl -X POST https://api.naiza.ai/api/v1/events \
  -H "x-api-key: YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "eventName": "user.login",
    "eventCategory": "AUTHENTICATION",
    "customer": {
      "externalId": "user_123456",
      "email": "user@example.com"
    },
    "ip": "203.0.113.42",
    "device": {
      "fingerprint": "fp_a1b2c3d4"
    }
  }'

RESTful JSON API

Clean, predictable endpoints with consistent request/response patterns

Simple Authentication

API key authentication via x-api-key header—no complex OAuth flows

Comprehensive Docs

Full API reference with examples in curl, Node.js, and Python

What is Naiza?

Short answers for teams comparing fraud detection APIs and AML screening APIs.

What is Naiza?

Naiza is an API-first fraud prevention and AML screening platform. It evaluates product events, returns ALLOW, REVIEW, or BLOCK decisions, and screens customers and counterparties against watchlists.

What does the Naiza fraud detection API do?

Your server sends an event such as a login, payment, or registration. Naiza applies rules and risk signals and returns a decision your product can enforce or send to review.

Does Naiza include an AML screening API?

Yes. Naiza can screen individuals and entities against sanctions, PEP, and other watchlists, then return structured match context for a documented review workflow.

Is Naiza hosted in Saudi Arabia?

Yes. Naiza stores and processes product data in the Kingdom of Saudi Arabia. See the trust page for residency, encryption, and technical architecture.

Who builds Naiza?

Naiza is built and maintained by Limaz in Riyadh, Saudi Arabia.

Start Protecting Your Application Today

See fraud decisions, AML screening, and investigation workflows in a demo tailored to your product.

Request a Demo