## Before you start

Make sure you have the following:

- Integrated with the [Digital Intelligence SDK](https://help.socure.com/riskos/docs/digital-intelligence-sdks).
- Access to the RiskOS™ Dashboard with the **Digital Intelligence** enrichment enabled.
  
  - Your account owner or administrator can enable this for you. If you're unsure who to contact, [reach out to support](mailto:support@socure.com) for assistance.

- A basic understanding of RiskOS™ workflows and components.
  
  - If this is your first time working with workflows, review the [Workflow overview](https://help.socure.com/riskos/docs/workflow-overview) to understand inputs, enrichments, routing logic, and decisions.

## How it works

Socure Digital Intelligence evaluates device attributes, behavioral signals, network characteristics, and historical profiling data collected across Socure’s client consortium.

Digital Intelligence helps you:

- Identify high-risk devices and networks
- Detect anomalous behavior patterns
- Leverage historical Entity Profiler insights tied to phone numbers, email addresses, or national IDs
- Apply consistent risk scoring across digital interactions

These signals are typically evaluated using **Rule Score Cards** to produce an overall Digital Intelligence risk score.

### How Digital Intelligence fits into a workflow

In RiskOS™, workflows are built by connecting reusable components. Digital Intelligence is added as an **Enrichment** step and is commonly evaluated using **Rule Score Cards**.

Once the enrichment runs, its outputs are available to downstream workflow components, including:

- Rule score cards
- Conditions
- Decision rules
- Manual review steps
- Final decisions

For more detail on these components, see [Workflow Steps](https://help.socure.com/riskos/docs/workflow-steps).

### Execution flow in RiskOS™

Digital Intelligence runs synchronously as part of a RiskOS™ workflow. There is no user handoff or pause in execution.

```
Input
Digital Intelligence
Score card evaluation
Decision
```

At a high level, the execution flow looks like this:

1. **Input**
   
   You call the Evaluation API with identity, device, and digital interaction attributes.

2. **Digital Intelligence enrichment**
   
   RiskOS™ evaluates device, behavioral, network, and Entity Profiler signals.

3. **Score card evaluation**
   
   Rule Score Cards evaluate Digital Intelligence signals to generate an overall risk score.

4. **Decision**
   
   The workflow returns a final outcome (for example, **Accept**, **Review**, or **Reject**).

### Workflow components used by Digital Intelligence

Digital Intelligence uses a subset of standard RiskOS™ workflow components.

| Component | Purpose | Typical input | Output / What to use next |
| --- | --- | --- | --- |
| **Input** | Start an evaluation | Identity, device, and interaction data | Workflow execution begins |
| **Enrichment** | Collect digital risk signals | — | Device, network, behavioral signals |
| **Rule Score Card** | Aggregate digital risk | Digital Intelligence signals | Overall risk score |
| **Condition** | Branch based on score thresholds | Digital Intelligence score | Route to appropriate path |
| **Decision** | Emit final outcome | Routed value | Accept / Review / Reject |

## Configure Digital Intelligence

### Add Digital Intelligence to a workflow

1. In the RiskOS™ Dashboard, go to **Workflows** and create a new workflow or open an existing one.
2. On the workflow canvas, select the **plus (+)** icon.
3. Add an **Enrichment** step and select **Socure Digital Intelligence**.

After the enrichment is added, its outputs can be referenced by score cards and downstream workflow logic.

### Configure Digital Intelligence score cards

Digital Intelligence is typically evaluated using **Rule Score Cards**.

Your Socure Solution Consulting team will assist with initial score card configuration. Digital Intelligence commonly uses multiple score cards covering:

- Device attributes
- Network and behavioral signals
- Entity Profiler insights for phone number, email address, or national ID

These score cards work together to produce an overall Digital Intelligence risk score.

Common decision patterns include:

- **High risk** → Reject immediately
- **Medium risk** → Step up verification or manual review
- **Low risk** → Accept or continue workflow evaluation

For more details, see [RiskOS™ Score Card: Digital Intelligence Example](https://help.socure.com/riskos/docs/rule-score-cards).

### Save and publish

Once your workflow is configured, publish it to go live.

## Workflow testing checklist

Use this checklist to confirm accuracy, resilience, and completeness before going live with your Digital Intelligence implementation.

**Integration & Input Validation**:

- Digital Intelligence SDK is correctly integrated and capturing device/behavioral signals.
- Identity, device, and interaction attributes are mapped consistently to RiskOS™ inputs.

**Enrichment & Scoring**:

- The Digital Intelligence enrichment step is active and firing synchronously in the workflow.
- Rule Score Cards are correctly aggregating signals across device, network, and behavioral attributes.
- Entity Profiler insights (phone, email, or national ID) are being successfully returned and evaluated.

**Routing and Decisioning**:

- Workflow routing accurately reflects your intended handling of high, medium, and low-risk scores.
- High-risk signals (e.g., anomalous behavior or known bad devices) trigger immediate "Reject" or "Step-up" paths.
- Manual review steps are populated with relevant Digital Intelligence reason codes for investigators.

**Operational Readiness**:

- Relevant teams have access to the RiskOS™ Dashboard with Digital Intelligence enrichment enabled.
- The workflow has been saved and published to the correct environment (Sandbox vs. Production).