Settings overview

The whole-firm configuration surface. Most of what you set here applies firm-wide and affects every user.

Where to find it

Sidebar → Settings.

What's in each tab

Tab	What it's for
Firm	Trading name, registered name, addresses, regulator (HMRC / SRA / CILEx), supervisor number. Shows up on PDF reports + invoices.
Team	Invite users, change roles, deactivate. See the Team & roles guide.
Billing	Card on file, current plan, invoices. See Billing.
Services	Which client-facing services your firm offers. Drives default risk templates.
Notifications	Which compliance reminders email out to whom + cadence.
Integrations	Webhooks, partner API keys, OAuth clients, SSO.
Branding	Logo, primary colour, custom domain. Themes the firm app + verification portal + PDFs.
Risk → Templates	Customise the client-risk-assessment questions and scoring rules.
Risk → Firm-wide	Firm-wide risk assessment (MLR 2017 reg 18), review cadence, your EDD threshold, and Ongoing monitoring: how often Certivus re-checks each monitored client's result as a safety net.
AML Compliance	PCP (reg 19), staff training (reg 24), independent audit (reg 21), internal SAR reports, MLRO appointments.
Webhooks	Outbound event subscriptions.

Type of business

Settings → Firm → AML settings → Type of business records what kind of regulated business you are, from accountancy practices and law firms to estate agents, money service businesses and art market participants. It sets your sector. Choosing a type fills in your AML supervisor only when that field is empty; a supervisor you already chose is never replaced. Businesses outside accountancy and law use our general risk assessment. It does not change your checks or prices.

If the dashboard asks you to confirm your type of business, it is because we took a guess from an older answer. Confirm it or change it, and the question goes away.

Who can edit settings

• Owner / Manager: everything.
• Compliance officer: AML Compliance + Risk tabs only.
• The firm's MLRO or deputy MLRO: can also change the ongoing monitoring schedule, whatever their role.
• Staff / Auditor: read-only.

Audit logging

Every settings change writes to the firm audit log with the user, timestamp, before/after diff, and IP. See the Audit log to inspect history; this is useful when something stops working and you need to know who flipped which switch.

Related

• First-run wizard: the guided setup for new firms
• Branding (firm-wide): wallet + plan lives in Billing