These types of criteria were user verification monitors, anti-money laundering procedures, and you can separate audits