AILabPage · Courses, labs & enablement

Teams that can run what they buy.

Practical courses on the work your teams actually do, from AML screening and customer due diligence to running technology services, independent of any product. The instructor-led courses end with an assessment and lead to a Saolix certificate of completion (not an accredited qualification). Training is offered by AILabPage ↗, the consulting and training vertical of Saolix Group.

Diagram: Teams that can run what they buy. TRAINING · TEAMS THAT CAN RUN WHAT THEY BUY START FREE · SELF-PACED Free courses AML · eKYC · fraud · cyber · tech ops · AI Knowledge check per course Certificate of completion INSTRUCTOR-LED COURSES Compliance desk Technical teams Administration & support BUILT AROUND YOUR TEAM Instructor-led On your environment With a deployment

Welcome, learner.Start learning. Seventy-five courses, all free to begin.

How training is delivered

Built around your team.

Courses

Instructor-led

Delivered by practitioners who build and run compliance and technology systems, on site or online, scheduled around your team.

Labs

On your environment

Where agreed, hands-on work on your own deployment and representative data, so what is learned carries straight into the job.

Enablement

With a deployment

Role-based onboarding alongside a new system or a consulting engagement, so your team can run it from day one.

Ask for dates and pricing → How pricing works → Consulting from AILabPage →
Free courses · self-paced · certificate

Start learning for free.

Short self-paced courses. Sections open one after another, your time is tracked for each, and a ten-question knowledge check leads to a Saolix certificate of completion (not an accredited qualification). No sign-up, and nothing you enter leaves your browser.

See all free courses →
Find a course

Search the courses.

Type a word to search, or choose free or paid and a subject, to see every course that matches. Free courses are self-paced online. Paid courses are priced on request and taught by a Saolix trainer; some can also be taken online with your organisation's access code.

  • Free · AML · self-paced · about 30 minAML screening foundationsMoney laundering, sanctions lists, politically exposed persons, name matching and reviewing alerts.
    • Why AML exists
    • Sanctions and watchlists
    • Politically exposed persons
    • Why name matching is hard
    • Reviewing alerts well
    • Ten-question knowledge check and a Saolix certificate of completion
    Start the course →
  • Free · AI · self-paced · about 30 minFree and open AI modelsWhat open weights mean, how model licences differ, choosing a model, running it yourself and using it responsibly.
    • What "free" and "open" mean
    • Licences decide what you may do
    • Choosing a model
    • Running a model yourself
    • Using open models responsibly
    • Ten-question knowledge check and a Saolix certificate of completion
    Start the course →
  • Free · AI · self-paced · about 35 minLLMs, SLMs, generative AI and RAGHow language models work, when a small model is the better choice, how RAG grounds answers in your documents, and safe use.
    • What generative AI is
    • How large language models work
    • Small language models
    • Retrieval-augmented generation (RAG)
    • Limits and safe use
    • Ten-question knowledge check and a Saolix certificate of completion
    Start the course →
  • Free · AI · self-paced · about 35 minAgentic AI and AI agentsHow AI agents work and use tools, what can go wrong, the guardrails that keep them safe, and how organisations govern them.
    • From chatbots to agents
    • How an agent works
    • What can go wrong
    • Guardrails that work
    • Governing AI in an organisation
    • Ten-question knowledge check and a Saolix certificate of completion
    Start the course →
  • Free · eKYC · Fraud · self-paced · about 35 mineKYC and digital identity verificationWhat KYC requires, how a digital identity check works, face matching and liveness, the fraud to stop, and protecting people's data.
    • What KYC requires
    • How a digital identity check works
    • Face matching and liveness
    • The fraud eKYC must stop
    • Protecting people's data
    • Ten-question knowledge check and a Saolix certificate of completion
    Start the course →
  • Free · Cyber Security · self-paced · about 35 minCyber security foundationsThe core ideas, the attacks that happen most, the controls that stop them, frameworks and Kenyan law, and incident response.
    • The core ideas
    • The attacks that happen most
    • Controls that stop most attacks
    • Frameworks and Kenyan law
    • Responding to an incident
    • Ten-question knowledge check and a Saolix certificate of completion
    Start the course →
  • Free · AI · self-paced · about 30 minAI agents: the basicsWhat an AI agent is, what it does well and badly, how to work alongside one, and how to use agents safely at work.
    • What an AI agent is
    • What agents do well, and what they do badly
    • Working alongside an agent
    • Staying safe with agents
    • What your organisation should have in place
    • Ten-question knowledge check and a Saolix certificate of completion
    Start the course →
  • Free · AI · self-paced · about 35 minBuilding your first AI agentScoping the job, designing tools, the agent loop and its limits, memory and context, and testing before release.
    • Start with the job, not the agent
    • Designing the tools
    • The loop, the instructions and the limits
    • Memory and context
    • Testing before anyone relies on it
    • Ten-question knowledge check and a Saolix certificate of completion
    Start the course →
  • Free · AI · self-paced · about 35 minAgentic workflows and multi-agent systemsWorkflows versus agents, common design patterns, multi-agent systems, human checkpoints and designing for failure.
    • Workflows and agents
    • Common design patterns
    • Multi-agent systems
    • Where people fit in
    • Designing for failure
    • Ten-question knowledge check and a Saolix certificate of completion
    Start the course →
  • Free · AI · self-paced · about 35 minTesting, evaluating and monitoring AI agentsWhy agents are hard to test, building an evaluation set, measuring what matters, adversarial testing and monitoring in production.
    • Why agents are hard to test
    • Building an evaluation set
    • Measuring what matters
    • Trying to break it on purpose
    • Monitoring in production
    • Ten-question knowledge check and a Saolix certificate of completion
    Start the course →
  • Free · AI · self-paced · about 35 minAI governance foundationsWhy AI governance matters, the principles, the NIST and ISO frameworks, the EU AI Act and Kenyan law, and who does what.
    • What AI governance is, and why it matters
    • The principles behind it
    • Frameworks and standards
    • The laws that apply
    • Who does what
    • Ten-question knowledge check and a Saolix certificate of completion
    Start the course →
  • Free · AI · self-paced · about 35 minAI risk management in practiceBuilding an AI inventory, sorting systems by risk, assessing a system, controls and documentation, and monitoring and review.
    • Know what AI you run
    • Sort systems by risk
    • Assess a system before it goes live
    • Controls and documentation
    • Monitor, respond and review
    • Ten-question knowledge check and a Saolix certificate of completion
    Start the course →
  • Free · AML · self-paced · about 35 minCustomer due diligence, risk-based approachWhat CDD requires, beneficial owners, rating customer risk, simplified and enhanced due diligence, and keeping it current.
    • What customer due diligence is for
    • Finding the real owner
    • Rating customer risk
    • When to do less, and when to do more
    • Keeping it current
    • Ten-question knowledge check and a Saolix certificate of completion
    Start the course →
  • Free · AML · self-paced · about 35 minTransaction monitoring and reportingWhat monitoring does, red flags and typologies, how monitoring rules work, investigating an alert, and reporting suspicion.
    • What transaction monitoring is for
    • Red flags and typologies
    • How monitoring systems work
    • Investigating an alert
    • Reporting a suspicion
    • Ten-question knowledge check and a Saolix certificate of completion
    Start the course →
  • Free · AML · self-paced · about 35 minAML law in Kenya: POCAMLA, the FRC and FATFThe laws, the institutions, who must comply, the core duties and penalties, and Kenya's standing with the FATF.
    • The laws
    • The institutions
    • Who must comply
    • The core duties and the penalties
    • Kenya and the FATF
    • Ten-question knowledge check and a Saolix certificate of completion
    Start the course →
  • Free · Tech Ops · self-paced · about 35 minIT service management foundationsServices and frameworks, the service desk and incidents, problems and root causes, changing systems safely, and service levels.
    • Services, not servers
    • The service desk and incidents
    • Problems and root causes
    • Changing systems safely
    • Service levels and improvement
    • Ten-question knowledge check and a Saolix certificate of completion
    Start the course →
  • Free · Tech Ops · self-paced · about 35 minMonitoring and observabilityMetrics, logs and traces, what to measure, service level objectives and error budgets, and alerts people trust.
    • Monitoring and observability
    • Metrics, logs and traces
    • What to measure
    • Objectives users care about
    • Alerts people trust
    • Ten-question knowledge check and a Saolix certificate of completion
    Start the course →
  • Free · Tech Ops · self-paced · about 35 minBackup, disaster recovery and continuityRecovery objectives, backups that survive ransomware, recovery strategies, continuity plans and regular testing.
    • Three layers of protection
    • How much loss can you accept?
    • Backups that survive
    • Recovering technology
    • Keeping the business running
    • Ten-question knowledge check and a Saolix certificate of completion
    Start the course →
  • Free · eKYC · Fraud · self-paced · about 35 minIdentity documents and document verificationWhat a document proves, security features, the machine-readable zone and chip, document fraud, and designing a sound check.
    • What a document can and cannot prove
    • Security features
    • The machine-readable zone and the chip
    • How documents are faked
    • Designing a document check
    • Ten-question knowledge check and a Saolix certificate of completion
    Start the course →
  • Free · eKYC · self-paced · about 35 minBiometrics: face matching and livenessHow face matching works, measuring accuracy, fairness across groups, liveness and attacks, and handling biometric data.
    • How face matching works
    • Measuring accuracy
    • Fairness across groups
    • Liveness and attacks
    • Handling biometric data
    • Ten-question knowledge check and a Saolix certificate of completion
    Start the course →
  • Free · eKYC · self-paced · about 35 minDigital identity in KenyaThe national identity building blocks, from Huduma Namba to Maisha Namba, identity data in KYC, inclusion, and data protection.
    • The building blocks
    • From Huduma Namba to Maisha Namba
    • Using identity data in customer checks
    • Nobody shut out
    • Protecting identity data
    • Ten-question knowledge check and a Saolix certificate of completion
    Start the course →
  • Free · eKYC · AML · self-paced · about 35 minKnow your business (KYB) and ownershipConfirming a business exists, who can act for it, tracing owners through companies, trusts and nominees, and keeping it current.
    • Why businesses need their own checks
    • Confirming the business exists
    • Who can act for it
    • Tracing the real owners
    • What it does, and keeping it current
    • Ten-question knowledge check and a Saolix certificate of completion
    Start the course →
  • Free · Tech Ops · self-paced · about 35 minZero-touch operationsWhat zero-touch operations means, closed-loop automation, the guardrails that keep it safe, where to start, and how to measure it.
    • What zero-touch operations means
    • The building blocks
    • Guardrails that keep it safe
    • Where to start
    • Measuring and the people side
    • Ten-question knowledge check and a Saolix certificate of completion
    Start the course →
  • Free · Tech Ops · self-paced · about 35 minDocumentation in technology operationsThe documents teams need, docs as code, generating documentation from systems, AI-assisted writing, and keeping it trustworthy.
    • The documents operations teams need
    • Documentation as code
    • Generating documentation from the systems
    • AI-assisted documentation, used safely
    • Keeping documents trustworthy
    • Ten-question knowledge check and a Saolix certificate of completion
    Start the course →
  • Free · Tech Ops · self-paced · about 35 minAutomating IT operations with AI (AIOps)What AIOps is, the data it needs, noise reduction and anomaly detection, AI assistants for operators, and governing AI that acts.
    • What AIOps means
    • The data it depends on
    • Cutting noise and spotting anomalies
    • Language models as operations assistants
    • Controls before AI takes action
    • Ten-question knowledge check and a Saolix certificate of completion
    Start the course →
  • Free · Tech Ops · self-paced · about 35 minIncident response and post-incident reviewSeverity and declaring incidents, incident roles, communication, restoring service safely, and blameless post-incident reviews.
    • Declaring an incident and setting severity
    • Roles that keep a response organised
    • Communicating under pressure
    • Restoring service safely
    • Learning without blame
    • Ten-question knowledge check and a Saolix certificate of completion
    Start the course →
  • Free · Tech Ops · self-paced · about 35 minChange and release managementAssessing and approving changes, automated pipelines, safer release strategies, measuring delivery, and rolling back.
    • Why change needs managing
    • Assessing and approving changes
    • Automated pipelines
    • Releasing with less risk
    • Measuring delivery, and when it goes wrong
    • Ten-question knowledge check and a Saolix certificate of completion
    Start the course →
  • Free · Fraud · self-paced · about 35 minMobile money and payment fraudSocial engineering scams, SIM swap and account takeover, agent and insider fraud, money mules, and the controls that stop them.
    • Why payments attract fraud
    • Scams that trick people into paying
    • SIM swap and account takeover
    • Agents, insiders and money mules
    • Protecting customers and responding
    • Ten-question knowledge check and a Saolix certificate of completion
    Start the course →
  • Free · Fraud · self-paced · about 35 minFraud detection: rules, scoring and alertsRules, risk scoring and machine learning, device and behaviour signals, handling alerts and customer contact, and measuring results.
    • What fraud detection is for
    • Rules and risk scores
    • The signals that matter
    • Handling alerts without losing good customers
    • Measuring whether it works
    • Ten-question knowledge check and a Saolix certificate of completion
    Start the course →
  • Free · Fraud · AI · self-paced · about 35 minThe role of AI in fraudHow criminals use deepfakes and generated content, how defenders use AI, the limits of both, and controls against AI-enabled scams.
    • How criminals use AI
    • How defenders use AI
    • Detecting deepfakes and synthetic content
    • The limits and risks of AI in fraud decisions
    • Practical controls against AI-enabled scams
    • Ten-question knowledge check and a Saolix certificate of completion
    Start the course →
  • Free · Cyber Security · self-paced · about 35 minAI in cyber securityHow attackers and defenders use AI, securing AI systems themselves, the limits of AI in security, and governing its use.
    • How attackers use AI
    • How defenders use AI
    • Attacks on AI systems
    • Where AI helps, and where it misleads
    • Governing AI in a security team
    • Ten-question knowledge check and a Saolix certificate of completion
    Start the course →
  • Free · Cyber Security · self-paced · about 35 minPenetration testing and the role of AIWhat penetration testing is, authorisation and the law, how a test is run, reporting and fixing, and how AI is changing testing.
    • What penetration testing is
    • Authorisation comes first
    • How a test is run
    • Reporting and fixing
    • What AI changes
    • Ten-question knowledge check and a Saolix certificate of completion
    Start the course →
  • Free · Cyber Security · self-paced · about 35 minEthical hacking: how attacks workWhat makes hacking ethical and legal, how attacks unfold stage by stage, the common ways in, and how defenders use attacker thinking.
    • What makes hacking ethical
    • How an attack unfolds
    • The common ways in
    • Thinking like an attacker to defend
    • Building the skills safely
    • Ten-question knowledge check and a Saolix certificate of completion
    Start the course →
  • Free · Cyber Security · self-paced · about 35 minPhishing and social engineeringHow manipulation works, phishing by email, text and phone, AI-enabled impersonation, technical controls and a reporting culture.
    • How manipulation works
    • The channels attackers use
    • AI-enabled impersonation
    • Technical controls that help
    • A culture that reports
    • Ten-question knowledge check and a Saolix certificate of completion
    Start the course →
  • Free · AML · self-paced · about 50 minAdvanced: trade-based money launderingMis-invoicing, phantom shipments and the Black Market Peso Exchange, what a bank can see in trade finance, the FATF and Egmont indicators, and real cases.
    • What trade-based money laundering is, and what it is not
    • The techniques, from simple to complex
    • What a bank can and cannot see
    • Reading the risk indicators, and working an alert
    • Cases and lessons
    • Ten-question knowledge check and a Saolix certificate of completion
    Start the course →
  • Free · AML · self-paced · about 55 minAdvanced: proliferation financingThe UN and FATF framework, targeted financial sanctions, evasion through front companies, shipping and virtual assets, red flags, controls and real cases.
    • What proliferation financing is
    • The UN and FATF framework
    • How sanctions are evaded
    • Red flags and controls
    • Cases and lessons
    • Ten-question knowledge check and a Saolix certificate of completion
    Start the course →
  • Free · AML · self-paced · about 55 minAdvanced: virtual assets and the Travel RuleWhat counts as a virtual asset and a VASP, the Travel Rule, implementation gaps, red flags, laundering techniques, blockchain tracing and real cases.
    • What counts as a virtual asset, and who is a VASP
    • The FATF Standards and the Travel Rule
    • How far implementation has come
    • Red flags, techniques and tracing
    • Cases and lessons
    • Ten-question knowledge check and a Saolix certificate of completion
    Start the course →
  • Free · AML · self-paced · about 55 minAdvanced: sanctions evasion and ownershipBeneficial ownership, how ownership is hidden, the US, EU and UK ownership and control tests, evasion red flags and enforcement cases.
    • Beneficial ownership under the FATF Standards
    • How ownership is hidden
    • Ownership and control in sanctions
    • Evasion typologies, red flags and controls
    • Cases and lessons
    • Ten-question knowledge check and a Saolix certificate of completion
    Start the course →
  • Free · eKYC · self-paced · about 55 minAdvanced: remote identity proofingFATF on digital identity, NIST and eIDAS assurance levels, remote onboarding controls, reliance and re-use, and inclusion.
    • Digital identity and customer due diligence
    • Assurance levels in NIST SP 800-63-4
    • The EU approach and remote onboarding rules
    • Reliance, re-use and the weak points after onboarding
    • Inclusion without lowering the bar
    • Ten-question knowledge check and a Saolix certificate of completion
    Start the course →
  • Free · eKYC · Fraud · self-paced · about 55 minAdvanced: identity fraud in eKYCPresentation and injection attacks, deepfakes, synthetic identities, account takeover and SIM swap, remote mule accounts, and layered controls.
    • Two ways to fool a camera
    • Deepfakes and synthetic identities
    • After onboarding, account takeover and SIM swap
    • Mule accounts opened remotely
    • Layered controls, and what the cases show
    • Ten-question knowledge check and a Saolix certificate of completion
    Start the course →
  • Free · eKYC · self-paced · about 45 mineKYC under the hood: from camera to decisionCapture quality, the MRZ and its check digits, the chip and its signatures, face match scores and thresholds, liveness, and the decision.
    • The pipeline, and a usable picture
    • Reading the machine-readable zone
    • The chip and what it proves
    • How a face match becomes yes or no
    • Liveness, the decision and the record
    • Ten-question knowledge check and a Saolix certificate of completion
    Start the course →
  • Free · eKYC · self-paced · about 45 minRunning an eKYC service: accuracy and APIsError rates and thresholds, fairness across groups, testing and certification, protecting biometric data, and APIs with an audit trail.
    • The numbers that describe accuracy
    • Fairness across groups
    • Testing and certification
    • Protecting biometric data
    • APIs, verified claims and the audit trail
    • Ten-question knowledge check and a Saolix certificate of completion
    Start the course →
  • Free · eKYC · AI · self-paced · about 55 minAdvanced: decentralised identity, AI in eKYCVerifiable credentials and DIDs, Hyperledger Indy and AnonCreds, blockchain and personal data, the EU wallet, reusable KYC, and the EU AI Act.
    • Verifiable credentials and decentralised identifiers
    • Hyperledger Indy and AnonCreds as a worked example
    • Blockchains and personal data
    • The EU wallet and what this means for KYC
    • AI in eKYC and the EU AI Act
    • Ten-question knowledge check and a Saolix certificate of completion
    Start the course →
  • Free · Fraud · self-paced · about 40 minFraud risk management: governance to responseWhy fraud happens, a framework from commitment to evaluation, assessing risk and tolerance, the three lines, controls, and the response plan.
    • Why fraud happens, and the two main types
    • A framework, from commitment to evaluation
    • Assessing fraud risk
    • Controls and the three lines
    • Responding when fraud is found
    • Ten-question knowledge check and a Saolix certificate of completion
    Start the course →
  • Free · Fraud · self-paced · about 40 minCard and payment fraud, and first responseWhere card and transfer fraud happens, chip cards, 3-D Secure and strong authentication, refund rights, and the first hours after fraud.
    • Where card and payment fraud happens
    • Chip cards, 3-D Secure and strong customer authentication
    • Customers' rights to dispute and refunds
    • The first hours after fraud
    • Building defences that customers can live with
    • Ten-question knowledge check and a Saolix certificate of completion
    Start the course →
  • Free · Fraud · self-paced · about 50 minAdvanced: push payment scams, reimbursementHow APP scams work, the UK reimbursement regime and results, Confirmation and Verification of Payee, FATF payee checks, and other countries' approaches.
    • When the victim presses send
    • The UK mandatory reimbursement regime
    • Name checks before payment
    • Other countries, other models
    • Running an APP scam programme
    • Ten-question knowledge check and a Saolix certificate of completion
    Start the course →
  • Free · Fraud · AI · self-paced · about 50 minAdvanced: fraud models in productionModel risk guidance in the US and UK, drift and measurement, fraud data sharing under privacy law, and governing automated decisions.
    • Models, model risk and the current guidance
    • Why fraud models drift
    • Measuring a fraud model honestly
    • Sharing fraud data under privacy law
    • Governing automated fraud decisions
    • Ten-question knowledge check and a Saolix certificate of completion
    Start the course →
  • Free · Fraud · AI · self-paced · about 50 minAdvanced: blockchain and AI in fraudCrypto investment fraud, rug pulls and manipulation, DeFi exploits, wallet drainers, on-chain tracing and freezing, and AI on both sides.
    • Crypto investment fraud
    • Rug pulls, manipulation and smart contract exploits
    • Wallet drainers, tracing and freezing
    • Shared ledgers and AI as defences
    • AI-enabled fraud, and what to do
    • Ten-question knowledge check and a Saolix certificate of completion
    Start the course →
  • Free · Cyber Security · self-paced · about 45 minSecuring payment systems: cards to instantPCI DSS, tokenisation and encryption, the SWIFT security programme, ISO 20022, open banking API security, instant payments and Kenyan rules.
    • Protecting card data
    • Tokens, encryption and secure hardware
    • Securing connections to payment networks
    • Securing open banking APIs
    • Instant payments raise the stakes
    • Ten-question knowledge check and a Saolix certificate of completion
    Start the course →
  • Free · AML · Cyber Security · self-paced · about 45 minReal-time transaction screening in paymentsReal-time screening versus monitoring, what is screened, the EU instant payments rule, false positives and testing, blocking versus rejecting, and Kenya.
    • Screening before the money moves
    • What is screened, and why stripping is serious
    • The EU's sanctions rule for instant payments
    • Fuzzy matching, false positives and testing
    • What to do with a hit
    • Ten-question knowledge check and a Saolix certificate of completion
    Start the course →
  • Free · Cyber Security · self-paced · about 50 minAdvanced: cyber attacks on payment systemsThe 2016 central bank heist, CPMI and G7 guidance, the EU DORA, threat-led testing, ransomware and sanctions, and Kenyan rules.
    • A central bank heist, step by step
    • What standard setters expect of payment systems
    • The EU Digital Operational Resilience Act
    • Testing like an attacker
    • Building resilience in practice
    • Ten-question knowledge check and a Saolix certificate of completion
    Start the course →
  • Free · AML · Cyber Security · self-paced · about 50 minAdvanced: auditing monitoring and screeningWhat supervisors test, New York Part 504 and its enforcement, data integrity, tuning and testing, effectiveness over volume, and Kenya.
    • What the system has to prove
    • Data comes first
    • Tuning and testing
    • Effectiveness, not volume
    • What enforcement cases reveal
    • Ten-question knowledge check and a Saolix certificate of completion
    Start the course →
  • Free · Cyber Security · AI · self-paced · about 50 minAdvanced: blockchain and AI in cyber securityAttacks on fraud and screening models, NIST and ENISA defences, blockchain and tokenised payment security, central bank experiments, and EU rules.
    • Attacking the models that guard transactions
    • Defending machine learning models
    • What blockchains do and do not secure
    • Central banks testing tokenised payments
    • The rules that connect them
    • Ten-question knowledge check and a Saolix certificate of completion
    Start the course →
  • Free · AI · self-paced · about 35 minMachine learning foundationsHow machines learn from examples, the main kinds of learning, data and features, testing without fooling yourself, and measuring results honestly.
    • What machine learning is
    • The main kinds of learning
    • Data, features and labels
    • Training, testing and overfitting
    • Measuring results and using ML responsibly
    • Ten-question knowledge check and a Saolix certificate of completion
    Start the course →
  • Free · Cyber Security · AI · self-paced · about 50 minAdvanced: autonomous AI penetration testingWhat these AI tools are, why authorisation and the law matter, how they work, running an authorised engagement, and their limits.
    • What penetration testing is, in the standards
    • Authorisation is the line
    • What autonomous and agentic AI testing tools are
    • Running an authorised engagement with AI tools
    • What AI testers can and cannot do
    • Ten-question knowledge check and a Saolix certificate of completion
    Start the course →
  • Free · Cyber Security · self-paced · about 50 minAdvanced: continuous security validationBeyond annual tests, EASM, BAS and continuous red teaming, adversary emulation with ATT&CK, prioritising with CVSS, EPSS and KEV, and governance.
    • Why a once-a-year test is not enough
    • Attack surface management and adversary emulation
    • Prioritising what to fix
    • Where this is required
    • Governing continuous and autonomous testing
    • Ten-question knowledge check and a Saolix certificate of completion
    Start the course →
  • Free · AI · self-paced · about 35 minNeural networksThe artificial neuron, layers and activations, how a network learns by backpropagation and gradient descent, and what neural networks do well and badly.
    • What a neural network is
    • How a network is built
    • How a network learns
    • Training it without fooling yourself
    • What neural networks are good and bad at
    • Ten-question knowledge check and a Saolix certificate of completion
    Start the course →
  • Free · AI · self-paced · about 40 minDeep learningWhat makes learning deep, why it took off, convolutional networks for images, sequence models and transformers, and using deep learning responsibly.
    • What makes learning deep
    • Why deep learning took off
    • Convolutional networks for images
    • From RNNs to transformers
    • Using deep learning responsibly
    • Ten-question knowledge check and a Saolix certificate of completion
    Start the course →
  • Free · AI · self-paced · about 40 minTraining models in practiceData and features, fitting without overfitting, honest evaluation beyond accuracy, tuning models, and putting a model into production responsibly.
    • Data and features
    • Fitting without overfitting
    • Evaluating honestly
    • Tuning and choosing a model
    • Putting a model into production
    • Ten-question knowledge check and a Saolix certificate of completion
    Start the course →
  • Free · eKYC · Cyber Security · self-paced · about 70 mineKYC deep tech: signatures, scores, attacksCheck-digit arithmetic, the chip's signed hash tree, face embeddings and thresholds, liveness and injection attacks, assurance levels, verifiable credentials.
    • The document, byte by byte
    • The face, score by score
    • Liveness, and the attack engineer
    • What an assurance level actually asserts
    • The new identity stack, without the hype
    • Ten-question knowledge check and a Saolix certificate of completion
    Start the course →
  • Free · AML · self-paced · about 60 minAdvanced: asset recovery and confiscationWhy confiscation is the point of AML, the revised FATF standards, non-conviction based confiscation, tracing and freezing across borders, and the MLRO's part.
    • Why recovery is the point
    • What the standards now require
    • Trace, freeze, manage, return
    • What the institution has to do
    • Supervision, SupTech and the regulator's mind
    • Ten-question knowledge check and a Saolix certificate of completion
    Start the course →
  • Free · AML · self-paced · about 60 minAdvanced: tuning transaction monitoringTurning a typology into a scenario worth having, segmentation that makes behaviour mean something, setting and testing thresholds, and the metrics that mislead.
    • What the system is actually for
    • From typology to scenario
    • Segmentation, or why behaviour needs a baseline
    • Thresholds, and testing them honestly
    • Governance, metrics, and what a supervisor asks
    • Ten-question knowledge check and a Saolix certificate of completion
    Start the course →
  • Free · AML · self-paced · about 60 minAdvanced: customer risk scoringFactors that carry information, where country risk belongs, weighting and aggregation, what overrides reveal, and validating the model.
    • What a rating is for, and what it is not
    • Choosing factors, and where country risk belongs
    • From factors to a score
    • Keeping the rating true
    • Proving the model works
    • Ten-question knowledge check and a Saolix certificate of completion
    Start the course →
  • Free · AML · self-paced · about 60 minAdvanced: sanctions matchingWhy names defeat computers, transliteration and name structure, matching algorithms, scoring and thresholds, weak aliases, and testing a filter properly.
    • What screening is actually doing
    • Why names defeat computers
    • How matching actually works
    • Lists, identifying information and weak aliases
    • Testing, metrics and what reviewers need
    • Ten-question knowledge check and a Saolix certificate of completion
    Start the course →
  • Free · AML · self-paced · about 60 minAdvanced: enhanced due diligenceWhat triggers EDD, source of wealth against source of funds, how much corroboration is enough, PEPs and correspondent banking, and clearing an inconsistency.
    • What enhanced due diligence actually is
    • Source of wealth and source of funds
    • How much corroboration is enough
    • PEPs, correspondent banking and the harder cases
    • Decisions, records and keeping it alive
    • Ten-question knowledge check and a Saolix certificate of completion
    Start the course →
  • Free · AML · self-paced · about 60 minAdvanced: terrorist financingWhy it is not laundering in reverse, the UN and FATF framework, funding from legitimate income, the four crowdfunding typologies, and over-correcting.
    • Why this is not money laundering in reverse
    • What the framework requires
    • How terrorism is actually funded
    • Crowdfunding and the modern raise
    • What you can see, and the harm of over-correcting
    • Ten-question knowledge check and a Saolix certificate of completion
    Start the course →
  • Free · AML · self-paced · about 60 minAdvanced: business-wide risk assessmentWhat it is for, inherent risk from likelihood and impact, scoring your own controls honestly, weighting and aggregation, and what must then change.
    • What it is for
    • Inherent risk
    • Controls and residual risk
    • Scoring, weighting and aggregation
    • Making it change something
    • Ten-question knowledge check and a Saolix certificate of completion
    Start the course →
  • Free · AML · self-paced · about 60 minAdvanced: money service businessesWhat value transfer services are, how hawala settles, what Recommendation 14 requires, where risk sits in an agent network, and banking without de-risking.
    • The system most of the world uses
    • How hawala actually works
    • What Recommendation 14 requires
    • Where the risk actually is
    • Banking the sector without cutting it off
    • Ten-question knowledge check and a Saolix certificate of completion
    Start the course →
  • Free · AML · self-paced · about 60 minAdvanced: AML governance and the MLROWhat the board cannot delegate, the three lines of defence and how they fail, the authority an AML officer needs, and what breaks programmes.
    • Who is accountable
    • The three lines of defence
    • The AML officer: authority, independence, and what the role is not
    • What the programme has to contain
    • What actually breaks programmes
    • Ten-question knowledge check and a Saolix certificate of completion
    Start the course →
  • Free · AML · self-paced · about 60 minAdvanced: DNFBPs for lawyers and agentsWhy lawyers, agents and dealers are in scope, which activities trigger the duties, how privilege works, and why this sector is the weakest supervised.
    • Why these businesses are in scope
    • What Recommendations 22 and 23 require
    • The sectors, and what each actually faces
    • Privilege and professional secrecy
    • Supervision, the gap, and what good looks like
    • Ten-question knowledge check and a Saolix certificate of completion
    Start the course →
  • Paid · AML · about 20 hours · online with an access code, or classroom · on requestAML screening for the compliance deskWork sanctions, PEP and adverse-media alerts and cases from the first match to the report, on the international standards with Kenya as the worked example, whichever screening system you use. For compliance analysts, investigators, team leaders and MLROs.
    • Eight modules, from where screening fits to one case worked from onboarding to audit
    • Sanctions, PEPs, name matching, beneficial owners, investigation, reporting and audit, with templates your desk keeps
    • A capstone: three unworked cases and your own screening programme
    • Online with your organisation's access code, or in a classroom for 10 or more learners
    Open the course →See the full outline →Ask for dates and pricing →
  • Paid · Tech Ops · about 21 hours · online with an access code, or classroom · on requestCompliance technology for technical teams: integration and operationsHow screening, monitoring and case-management systems are built, deployed, integrated and kept healthy, with hands-on drills. For engineers, integrators and operations staff.
    • Eight modules, from how the compliance stack fits together to a system worked end to end
    • Deployment and reliability, APIs and data feeds, security and identity, decision engines, audit trails and reproducible decisions, and incident drills
    • A capstone lab: build, run and defend a screening path, with templates your team keeps
    • Online with your organisation's access code, or in a classroom for 10 or more learners
    Open the course →See the full outline →Ask for dates and pricing →
  • Paid · Tech Ops · about 20 hours · online with an access code, or classroom · on requestAdministering and supporting compliance systemsConfiguring compliance systems safely and supporting them day to day. For system administrators and support teams.
    • Eight modules, from the administrator's place to a configuration worked end to end
    • Precedence, feature settings, thresholds, sanctions feeds, identity and roles, notifications and filing, retention and hardening
    • The support tiers, from the service desk to engineering, and a capstone that configures and supports a system
    • Online with your organisation's access code, or in a classroom for 10 or more learners
    Open the course →See the full outline →Ask for dates and pricing →
  • Paid · AI · about 15 hours · online with an access code, or classroom · on requestGoverning AI agents: the complete playbook for regulated organisationsScreening, registering, tiering, assessing, controlling, buying, monitoring and reporting on AI agents, with templates your team keeps and Kenyan law throughout. For managers, risk, compliance, audit and IT leaders.
    • Eight modules, from screening a use case to the board pack, each ending with a template your team keeps
    • Worked cases from a bank, a Sacco and a telco, and real control failures
    • A capstone: a governance pack for one of your own agents
    • Online with your organisation's access code, or in a classroom for 10 or more learners
    Open the course →See the full outline →Ask for dates and pricing →
  • Paid · AI · about 21 hours · online with an access code, or classroom · on requestBuilding a production-ready AI agent: a hands-on labDesign, build, test, attack, monitor and ship a working AI agent, with code that runs against a hosted or a local open model. For developers and technical teams.
    • Eight hands-on modules, from scoping the agent to shipping it safely
    • Testing, red-teaming and monitoring your own agent
    • A capstone: a finished agent with its test results
    • Online with your organisation's access code, or in a classroom for 10 or more learners
    Open the course →See the full outline →Ask for dates and pricing →
Course catalogue

Instructor-led courses.

Delivered on request, on site or online, for your team. Each course is about the subject, not a particular product, so it applies whichever systems you use.

Compliance teams · Saolix certificate

AML screening for the compliance desk

Work screening alerts and cases the way an inspector expects, from the first match to the report. Built on the international standards (FATF and UN sanctions), with Kenya as the worked example, and vendor-neutral, so it fits whichever screening system you use.

About 20 hoursOnline with an access codeOr classroom, 10+ learnersCapstone + Saolix certificate
Modules
  • The desk's place in the AML system: controls, risk-based rules, roles and the clocks
  • Sanctions, watchlists and politically exposed persons: freezing, reporting and what follows
  • Name matching and beneficial owners: transliteration, matching methods, the ownership cascade and trusts
  • Screening, reading a match and measuring the system
  • Investigation and the four-eyes review, up to the escalation to the MLRO
  • Reporting to the FIU, ongoing monitoring and customer risk rating
  • Thresholds, audit and the data lifecycle, including data protection and vendors
  • One case, from onboarding to audit, and a one-page desk playbook
Assessment & certificate
  • A capstone: three unworked cases and your own screening programme, assessed against a published rubric: by you online, or by the trainer in a classroom
  • A final test of 30 questions drawn from a bank of 45 (27 to pass), leading to a Saolix certificate that states about 20 hours of study
How to take it
  • Online, at your own pace: Saolix gives each client organisation one access code for its learners
  • In a classroom: a Saolix trainer teaches 10 or more learners from one organisation, works the cases with them and reviews each capstone
Open the course with your access code →
Technical teams · Saolix certificate

Compliance technology for technical teams: integration and operations

How screening, monitoring and case-management systems are built, deployed, integrated and kept healthy, with hands-on drills. For engineers, integrators and operations staff who run them.

About 21 hoursOnline with an access codeOr classroom, 10+ learnersCapstone + Saolix certificate

Open the course →

Eight modules
  • The compliance stack, and the technical team's place in it
  • Environments, deployment and release
  • Operations and reliability
  • Integration I: APIs and services
  • Integration II: data feeds and core systems
  • Security and identity for engineers
  • Decision engines, audit trails and reproducible decisions
  • Incident response and a system worked end to end
Capstone & certificate
  • A capstone lab: build, run and defend a screening path, with templates your team keeps
  • A final test (30 questions drawn from a bank of 45, 27 to pass), leading to a Saolix certificate
  • Online with your organisation's access code, or in a classroom for 10 or more learners
Administrators · operations

Administering and supporting compliance systems

Configuring compliance systems safely and supporting them day to day, from the service desk to engineering escalation. For system administrators and support teams.

About 20 hoursOnline with an access codeOr classroom, 10+ learnersCapstone + Saolix certificate

Open the course →

Eight modules
  • The administrator's place beside the compliance team
  • Configuration principles and precedence
  • Feature settings and what each one changes
  • Screening and matching thresholds
  • Sanctions feeds and sources
  • Identity, roles, multi-factor authentication and single sign-on
  • Notifications, filing, retention and data protection
  • Hardening, quality gates, and supporting through the tiers
Capstone & certificate
  • A capstone: configure a system safely and support it through a working week
  • A final test (30 questions drawn from a bank of 45, 27 to pass), leading to a Saolix certificate
  • Online with your organisation's access code, or in a classroom for 10 or more learners
Risk, compliance, audit and IT leaders · Saolix certificate

Governing AI agents: the complete playbook for regulated organisations

How to decide which AI agents to allow, and how to keep them safe, lawful and under control, in banks, Saccos, insurers, telcos and government. Each module ends with a template your team keeps, with Kenyan law and supervisory expectations throughout.

About 15 hoursOnline with an access codeOr classroom, 10+ learnersOn requestCapstone + Saolix certificate
Modules
  • Where agents create value, and where they create risk: screening a use case
  • The agent register: what to record, agent identities, and finding agents nobody approved
  • Risk tiering: rating impact and exposure, and what each tier requires
  • Impact assessment: a data protection impact assessment for agents, with an AI annex
  • Controls: limits, approvals, change control, stops and reconciliation, with real control failures
  • Buying agents: vendor due diligence and contract terms
  • Monitoring and incidents: measures, alerts, reporting clocks and a tabletop exercise
  • Reporting upward: the board pack, supervisors and internal audit
Assessment & certificate
  • A capstone: a governance pack for one of your own agents, assessed against a published rubric: by you online, or by the trainer in a classroom
  • A final test of 30 questions drawn from a bank of 45 (27 to pass), leading to a Saolix certificate that states about 15 hours of study
How to take it
  • Online, at your own pace: Saolix gives each client organisation one access code for its learners
  • In a classroom: a Saolix trainer teaches 10 or more learners from one organisation
Open the course with your access code →
Developers and technical teams · Saolix certificate

Building a production-ready AI agent: a hands-on lab

Build a working AI agent for a real task, then test it, attack it, monitor it and ship it safely. The starter code runs against a hosted model or a local open model, so it fits your organisation's choice.

About 21 hoursOnline with an access codeOr classroom, 10+ learnersCapstone + Saolix certificate
Modules
  • Scope it: the goal, the finish line, forbidden actions and the owner
  • Tools: narrow tools with input checks and permissions in code
  • The loop: step, time and cost limits, and approval points
  • Memory and data: retrieval over your own documents, and personal data under the Data Protection Act
  • Test it: a test set, repeated runs, and success, cost and safety measures
  • Attack it: prompt injection, data leakage and excessive permissions
  • Watch it: tracing, dashboards, alerts and a stop switch
  • Ship it: staged rollout, a runbook and a cost model
Assessment & certificate
  • A capstone: your finished agent with its evidence, assessed against a published rubric: by you online, or by the trainer in a classroom
  • A final test of 30 questions drawn from a bank of 45 (27 to pass), leading to a Saolix certificate that states about 21 hours of study
How to take it
  • Online, at your own pace, with plain-Python starter code: Saolix gives each client organisation one access code for its learners
  • In a classroom: a Saolix trainer runs the lab for 10 or more learners from one organisation
Open the course with your access code →
FAQ

Frequently Asked Questions

Are the Saolix courses really free?

Yes. Every online course is free and self-paced, with a certificate of completion. Three advanced courses can also be taken online with an organisation's access code, or in a classroom.

Do I need an account or to sign up?

No. There is no sign-up, and nothing you enter leaves your browser. A course only asks for a name at the end, to print on the certificate.

Do I get a certificate?

Yes, a Saolix certificate of completion after the knowledge check. It confirms completion of a self-paced course and is not an accredited qualification.

What topics do the courses cover?

AML, eKYC, fraud, cyber and transaction security, technology operations, and AI — hundreds of lessons across the free courses, each with its sources listed.

Contact · Saolix GroupPeople. Products. Possibilities.

Your next chapter.
Let’s build it together.

Explore a product, discuss a project, or find the right expertise. Tell us where you want to go. We’ll help you take the next step.

Compliance & agentic AIManaged servicesConsulting & training