StewAIrd Documentation

Enterprise client centered compliance automation — user guides, architecture, and API reference

Status Operational
Beta Launch Aug 22, 2026

Quick Start Guide

Your 5-minute guide to getting started with StewAIrd

Step 1: Log In

Navigate to your organization's StewAIrd portal and sign in with your institutional credentials. First-time users will receive a welcome walkthrough.

Step 2: Understand the Dashboard

After login, you'll see four key metric cards:

Stewardship Index

Overall portfolio health score (0–100). Target: >85

Exceptions

Issues needing attention, color-coded by severity

Health Score

Percentage of accounts fully compliant. Target: >90%

Compliance Rate

Month-over-month trend in compliance performance

Below the metrics, quick action buttons let you:

  • Review Exceptions — See all pending compliance issues
  • Run Assessment — Manually evaluate specific accounts
  • View Rules — Browse active compliance rules
  • Governance — Configure approvals (admin only)

Step 3: Review Your First Exception

Click "Review Exceptions" to see the queue, sorted by severity:

  • Red (High) — Immediate action required
  • Yellow (Medium) — Action within 1 week
  • Green (Low) — Action within 30 days

Click any exception to view details: the triggering rule, account information, deadline, and remediation options. You can mark it as In Review, Remediated, or Waived (waivers may require committee approval).

Step 4: Run a Manual Assessment

After a data update, you can check specific accounts immediately:

  1. Click "Run Assessment" from the dashboard
  2. Search or paste one or more account IDs
  3. Click "Assess" — results appear in 1–3 seconds
  4. New exceptions automatically appear in the queue
Pro Tip

Use batch assessment on Monday mornings after weekend data loads. Paste comma-separated account IDs to assess up to 50 accounts at once.

Your First 24 Hours

✅ Log in and explore the dashboard5 min
✅ Review your exception queue10 min
✅ Mark a few exceptions as "In Review"5 min
✅ Run one manual assessment3 min
✅ Send feedback to your admin2 min

User Guide

Complete workflows for compliance officers, portfolio managers, and administrators

Role-Based Access

Your role determines what you can see and do in StewAIrd:

Role Capabilities Typical User
Admin Full access — user management, rule deployment, configuration, governance System administrators, platform engineers
Compliance Officer Exception management, assessments, approvals, full reporting Compliance team, risk management
Employee View assigned exceptions, respond to issues, limited reporting Trust officers, account managers
Viewer Read-only dashboards and summary reports Executives, board members, auditors

Exception Lifecycle

Every compliance exception follows a standard lifecycle:

Detected
↓
In Review
↓
Remediated
Waived
Status Meaning Guidance
Detected Rule evaluation found a violation Review and acknowledge within SLA window
In Review Team is working on remediation Should not remain >7 days — escalate if stuck
Remediated Corrective action completed Re-assessment confirms the account passes
Waived Approved as acceptable risk Requires governance committee approval

Important: Exceptions are immutable once created. You can change status but cannot delete them — this ensures full audit trail integrity for regulatory compliance.

Workflow: Daily Exception Triage

Recommended daily morning routine for compliance officers:

  1. Check the dashboard — Note the Stewardship Index trend and exception count
  2. Review high-severity exceptions — Red items first; immediate action required
  3. Triage medium-severity — Yellow items; assign to team members or self
  4. Bulk assign if needed — Use "Bulk Actions" to route exceptions to specific staff
  5. Monitor Stewardship Index — Score <70 warrants committee escalation

Workflow: Approve Remediations

When a team member resolves an exception or requests a waiver:

  1. Check "Approval Requests" on the dashboard (visible to approvers)
  2. Review the request — Exception details, proposed remediation, requestor
  3. Vote or decide — Sole approvers click Approve/Reject. Committee members cast votes.
  4. Status updates automatically — Once vote threshold is met, the exception status changes
Committee Voting

Committees support three voting modes: Majority (default), Unanimous, and Weighted. Chairs can be configured for solo approval authority on time-sensitive matters.

Rules Management

Browse active compliance rules from the dashboard. Each rule shows:

  • Rule ID — Unique identifier (e.g., RULE-001)
  • Description — What the rule checks
  • Threshold — Trigger conditions
  • Flagged Accounts — Current count of violations
  • Last Evaluation — When accounts were last checked

Admins can edit rule parameters (e.g., change an asset threshold). Rule changes trigger re-evaluation across all accounts — use with care.

Governance Setup (Admin)

Configure committees, roles, and approval workflows from Governance Settings:

Committees

Investment, Risk, Audit — with voting rules and chair designation

Approval Rules

Configure which actions require committee sign-off

Configuration

Scoring weights, SLA deadlines, escalation paths

Assessment Frequency

How often does StewAIrd check accounts?

Continuously as data updates arrive. A full portfolio scan runs nightly at 2:00 AM ET. You can also trigger manual assessments at any time from the dashboard.

Data Retention

Exceptions are retained for 7 years per regulatory requirements. After 90 days, resolved exceptions become read-only but remain fully searchable for audit purposes.

Architecture

6 core components powering compliance automation

StewAIrd is built on a modular, scalable architecture designed for enterprise compliance environments. Each component is independently deployable and horizontally scalable.

Authentication Layer

AWS Cognito

Single source of truth for all user identities and access control.

  • Direct authentication (USER_PASSWORD_AUTH)
  • JWT token validation
  • 4 security groups with RBAC
  • Multi-factor authentication ready

Rules Engine

Express + DMN

Real-time decision engine powered by Flowable DMN with exception and approval management.

  • 7 governance scope levels
  • Exception lifecycle management
  • Committee approval workflows
  • Dynamic rule loading

Assessment Engine

Node.js

Evaluates accounts against active rules and triggers exception creation.

  • Account assessment evaluation
  • Batch and single-account modes
  • Sub-second response times
  • Risk scoring integration

Scoring Service

Analytics

Calculates and maintains the Stewardship Index across all accounts.

  • Real-time scoring
  • Nightly batch processing
  • Trend analysis & forecasting
  • Compliance metrics dashboard

Workflow Orchestration

Flowable CMMN/BPMN

Manages exception lifecycle and governance approval workflows.

  • Exception lifecycle BPMN
  • Committee approval workflows
  • SLA tracking & alerts
  • Audit trail maintenance

Data Layer

PostgreSQL 15

Immutable, auditable storage with complete compliance trail.

  • 30+ normalized tables
  • Complete audit logging
  • ACID transaction guarantees
  • High availability ready

Request Flow

How a request flows through the StewAIrd platform:

Client Portal
↓
Cognito JWT Validation
↓
Authorization & Entitlements
↓
Rules Engine
Assessment Engine
Scoring Service
↓
PostgreSQL Database
↓
Immutable Audit Trail

Authentication

JWT tokens, security groups, and access control

How Authentication Works

StewAIrd uses AWS Cognito with direct authentication. Users log in with a username and password, and receive JWT tokens for API access. All API requests require a valid Authorization header:

Authorization: Bearer eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9...

Security Groups

Four security groups provide fine-grained, role-based access control:

Group Permissions Use Case
Admin Full system access, user/configuration management, rule deployment System administrators, platform engineers
compliance_officer Create assessments, approve exceptions, view all reports and dashboards Compliance team, risk management
employee View assigned assessments, respond to exceptions, limited reporting Trust officers, account managers
viewer Read-only access to dashboards and summary reports Executives, board members, auditors

Test Credentials (Beta)

Use these credentials during the beta period:

Username Password Security Group
admin-test TestPassword123! Admin
compliance-test TestPassword123! compliance_officer
employee-test TestPassword123! employee
viewer-test TestPassword123! viewer

Cognito Configuration

User Pool ID us-east-1_e4vPDpyTJ
Region us-east-1
Auth Flow USER_PASSWORD_AUTH
Token Expiration

Access tokens expire after 1 hour. The portal automatically refreshes tokens using the refresh token. If you're building integrations, implement automatic token refresh in your client.

API Reference

REST API endpoints for compliance automation

All API endpoints require a valid JWT Authorization: Bearer header. Responses use standard JSON format with success, data, and error fields.

Health & Status

GET /health

Service health check. No authentication required.

Response:

{
  "status": "healthy",
  "uptime": 86400,
  "timestamp": "2026-08-22T10:30:00Z"
}

Exceptions

GET /exceptions/api/exceptions

List all compliance exceptions. Supports filtering by status, severity, and assigned user.

Query Parameters:

?status=Detected&severityMin=3&assignedToId=user-001&limit=50&offset=0
GET /exceptions/api/exceptions/:id

Retrieve details for a specific exception including remediation history.

PATCH /exceptions/api/exceptions/:id

Update exception status (e.g., Detected → In Review → Remediated).

Request Body:

{
  "status": "In Review"
}
POST /exceptions/api/exceptions/:id/remediation-actions

Add a remediation action to an exception with optional status change.

Request Body:

{
  "action": "Updated investment policy statement",
  "userId": "user-001",
  "userName": "Jane Smith",
  "status": "Remediated"
}
GET /exceptions/api/exceptions/by-client/:clientId

Retrieve all exceptions grouped by client relationship.

Rules

GET /rules/api/rules

List all active DMN compliance rules and their configurations.

GET /rules/api/rules/:id

Retrieve a specific rule including parameters and evaluation history.

PATCH /rules/api/rules/:id

Update rule parameters. Requires Admin role. May trigger re-evaluation.

POST /rules/api/rules/:id/submit-for-review

Submit a rule change for governance committee review before deployment.

Approvals

GET /approvals/api/approvals

List approval requests. Filter by status (pending, approved, rejected).

GET /approvals/api/approvals/stats

Approval statistics: pending count, average time-to-decision, approval rate.

POST /approvals/api/approvals/:id/vote

Submit a committee member vote on an approval request.

POST /approvals/api/approvals/:id/chair-approve

Chair solo approval (when enabled for the committee).

Waivers

POST /waivers/api/waivers

Create a waiver request for an exception. Automatically routes to the appropriate governance committee.

Entitlements (Admin)

GET /admin/entitlements/api/entitlements

List fine-grained entitlements. Requires Admin role.

Troubleshooting

Common issues and solutions

I can't log in / "Invalid username or password"

Verify you're using the correct credentials for your assigned security group. Passwords are case-sensitive. If your account was recently created, your administrator may need to confirm it.

Beta users: Use the test credentials listed in the Authentication section.

API returns 401 Unauthorized

Your JWT token is invalid or expired. Access tokens expire after 1 hour.

Solution: Obtain a fresh token by logging in again. If building integrations, implement automatic token refresh using the refresh token.

Exceptions aren't showing up after a data load

New exceptions are generated during assessment evaluation. If you've loaded new data, you may need to trigger a manual assessment.

Solution: Click "Run Assessment" on the dashboard and evaluate the affected accounts. New exceptions will appear in the queue immediately.

Dashboard shows stale data

The dashboard polls for updates every 30 seconds. If you've just made changes, wait a moment or refresh the page.

Solution: Hard refresh (Ctrl+Shift+R / Cmd+Shift+R) to clear cached data.

How do I add a new compliance rule?

New rules are defined as DMN (Decision Model and Notation) decision tables in Flowable. This requires Admin access.

Steps:

  1. Navigate to the Rule Library from the dashboard
  2. Create a new rule with your decision logic and thresholds
  3. Submit for governance committee review
  4. Once approved, the rule is deployed and begins evaluating accounts

What is the Stewardship Index?

The Stewardship Index is a composite compliance score (0–100) calculated across 7 regulatory scopes:

  1. Client suitability
  2. Investment appropriateness
  3. Client centered compliance
  4. Regulatory adherence
  5. Operational risk
  6. Client communication
  7. Performance attribution

Higher is better. Target: >85 for individual accounts, >90 for portfolio-wide.

Can I integrate StewAIrd with my data sources?

Yes. StewAIrd includes a semantic data layer with adapter support for common custody platforms including Fiserv, SEI Wealth Platform, and Fi-Tek. Custom adapters can be implemented to connect additional data sources.

Contact your administrator or support@stewaird.cloud for integration assistance.

What's the difference between Health Score and Stewardship Index?

Health Score = simple percentage of fully compliant accounts. Easy to understand at a glance.

Stewardship Index = weighted scoring across multiple compliance factors. More nuanced and useful for detailed analysis.

Both are displayed on the dashboard. Use Health Score for quick status checks, and the Stewardship Index for deep-dive compliance analysis.

Support

Release Notes

Version history and roadmap

v0.2.0
Beta August 22, 2026

What's New

  • Unified Authentication — AWS Cognito with direct login (no redirect flow)
  • Role-Based Access Control — 4 security groups with fine-grained entitlements
  • Employee Portal — Full React SPA with real-time exception management
  • Live API Integration — Portal connected to real backend services (no mock data)
  • Real-Time Stewardship Index — Instant compliance scoring with trend analysis
  • Committee Governance — Configurable approval workflows with majority/unanimous voting

Performance

  • 5.46ms average API response — Sub-10ms target exceeded
  • 100% load test success rate — 50 concurrent requests, zero failures
  • 1,000+ accounts — Assessment data populated and active
  • Continuous evaluation — Real-time exception detection as data changes

Coming in Phase 2 (September 2026)

  • 📊 PDF exception reports and compliance matrices
  • 📧 Email alerts and Slack integration
  • 📈 Historical trending (30/60/90 day analysis)
  • 🔗 Third-party data source integrations
  • 📋 CSV export for exception data
  • 🔔 Push notifications for new exceptions

Beta Feedback

We're actively collecting feedback during the beta period. For issues, feature requests, or general feedback, please contact feedback@stewaird.cloud.