The cross-archetype vendor decision matrix (2026)

Why this dispatch exists

This is the fifth and capstone dispatch in the Phase 3 synthesis series. The four prior dispatches each took a single operator archetype as the lens and walked through all 14 Phase 2 chapters from that lens. CySEC CFD broker. DMCC plus VARA UAE broker. Hybrid prop firm plus broker. CASP under MiCAR. Each dispatch produced an archetype stack with archetype-specific vendor recommendations.

This dispatch flips the orientation. Each Phase 2 vendor is evaluated across all four operator archetypes simultaneously. Where a vendor is procurement-relevant for all four (a universal), it anchors a multi-archetype tech stack and reduces the operator’s vendor management overhead. Where a vendor is procurement-relevant for only one or two archetypes (an archetype specialist), it serves a narrower buyer profile and forces multi-archetype operators to maintain parallel vendor relationships.

The matrix below covers the ~70 Phase 2 vendors that appeared in at least one archetype stack across the four prior dispatches. Vendors that did not appear in any archetype stack are not in the matrix; they remain in the Phase 2 corpus as reviewed vendors but did not surface as procurement-relevant for any of the four operating models. The Phase 2 pillar landings carry the full vendor index for any operator whose stack does not match one of the four covered archetypes.

The fit classification for each cell uses the verdict tag scheme from the Phase 2 reviews: STRONG PICK (vendor anchors the procurement decision for this archetype), SOLID (vendor is procurement-relevant and well-fitted), PARTIAL FIT (vendor is conditionally relevant with specific procurement caveats), LIMITED (vendor surfaces in the chapter but is not procurement-eligible for this archetype), or not surfaced (vendor was not procurement-relevant in this archetype’s stack). The fit scores summarise the prior dispatches; readers building stacks should still consult the source dispatch and the source Phase 2 review for the procurement reasoning.

The four archetypes recap

Before the matrix, a one-paragraph recap of each archetype establishes the lens each column represents:

CySEC CFD broker (Archetype A). EU regulation under MiFID II plus EU AMLR transition plus the August 2025 CySEC sanctions regime. EU data residency required. MiFIR Article 26 transaction reporting mandatory. Wide product mix on lean operator headcount drives turnkey procurement preference at lean scale. Three sub-tier stacks at $180k-300k, $1.2M-2.8M, and $6M-20M+/year. Source: CySEC dispatch.

DMCC plus VARA UAE broker (Archetype B). UAE Data Protection Law replaces GDPR with materially more permissive cross-border rules. No MiFID II or MiFIR for non-EU clients. VARA crypto-asset regime creates distinct trading venue requirement separate from CFD platform. UAE FATF post-grey-list operating reality. Three sub-tier stacks at $150k-280k, $900k-2.2M, and $4M-15M+/year. Source: DMCC and VARA dispatch.

Hybrid prop firm plus broker (Archetype C). Two legally distinct entities under one operating brand. Shared trading platform with broker-ID separation. Single marketing funnel with prop-to-broker conversion as the value driver requiring four-stage IB attribution. Deliberate compliance separation (broker-side full KYC, prop firm-side lightweight identity verification). Three sub-tier stacks at $280k-480k, $1.4M-3M, and $6M-25M+/year. Source: hybrid dispatch.

CASP under MiCAR (Archetype D). Eight regulated service categories per MiCAR Article 60 with tiered capital requirements. Custody is a separate regulated decision with qualified vendor implications. Travel Rule infrastructure mandatory under the EU Transfer of Funds Regulation. Market abuse surveillance under MiCAR Title VI replaces MiFIR transaction reporting. EU passporting via Article 67. Three sub-tier stacks at $400k-750k, $1.8M-4.2M, and $8M-40M+/year. Source: CASP dispatch.

The vendor matrix by pillar

Chapter XIV - Brokerage hosting

Equinix is the only universal hosting vendor across all four archetypes. Beeks Group covers three of four cleanly because its managed compute layer fits both broker and hybrid operators; CASP operators with in-house custody requirements often need separately architected hosting that the Beeks managed product does not directly address. FXVM is the clearest example of jurisdiction-dependent classification: PARTIAL FIT for CySEC operators because the Hong Kong operating entity creates a GDPR Article 46 SCC requirement; SOLID for DMCC operators because the UAE Data Protection Law does not impose equivalent transfer restrictions; PARTIAL FIT for hybrid operators because the broker side inherits the CySEC constraint when the broker entity is CySEC-regulated.

Chapter II - Alternative white-label platforms

Trading platform procurement is the cleanest archetype-A-and-B-and-C overlap in the corpus. CASP operators do not use the alt-WL chapter because crypto exchange venues are procured under Chapter X, which is structurally distinct from CFD platform white-label.

Chapter X - Crypto exchange white-label

The CASP-and-DMCC overlap is the dominant pattern in this pillar because crypto exchange WL is fundamentally a regulated-venue procurement that applies to both VARA-supervised and MiCAR-supervised operators. The two LIMITED classifications carried over from Phase 2 (Match-Trade Crypto disclaiming crypto services and ETNA Software showing zero crypto documentation) remain procurement-disqualifiers for both regulated archetypes. CySEC pure CFD brokers and hybrid prop firm plus broker operators do not surface in this pillar because the crypto exchange venue is operationally distinct from CFD trading; only operators with explicit crypto-asset service authorisation procure here.

Chapter VIII - Liquidity providers

Liquidity procurement is the pillar with the cleanest archetype separation. FX liquidity does not extend to crypto-asset trading venues; crypto liquidity does not serve CFD broker FX execution. Hybrid operators face the widest LP procurement scope because the broker side runs FX execution while a VARA add-on creates parallel crypto liquidity procurement. CASP-only operators procure crypto liquidity exclusively and do not surface in the FX columns.

Chapter IX - Risk management

Risk management vendors are differentiated by the depth of broker-ID-level segmentation (relevant for hybrid operators), crypto-asset risk dimension coverage (relevant for VARA and CASP operators), and integration depth with the specific trading platform an operator runs. The Phase 2 chapter does not surface a single STRONG PICK across all four archetypes because the risk dimensions vary materially. Operators should select within-pillar vendors using the source dispatch’s archetype-specific guidance rather than treating risk management as an archetype-agnostic procurement.

Chapter III - KYC and AML for brokers

Most Phase 1 KYC chapter vendors handle CySEC and DMCC CFD broker KYC at the operational layer; the differentiating procurement filters are the UAE Cabinet Resolution sanctions list coverage (relevant only for Archetype B), the wallet attribution layer (relevant for Archetypes B and D where crypto-asset services are in scope), and the prop firm lightweight identity verification configuration (relevant for Archetype C). Sumsub, ShuftiPro, and Veriff all carry universal procurement relevance across the four archetypes; Onfido, Jumio, and Trulioo are more strongly tilted toward CFD broker procurement and require add-on modules for crypto-asset and prop firm flows.

Travel Rule infrastructure (CASP-specific procurement category)

Travel Rule infrastructure does not sit inside any Phase 2 pillar but is mentioned here because it surfaced as a separate procurement category in both the CASP and DMCC plus VARA dispatches.

Chapter XIII - RegTech and compliance reporting

RegTech is the pillar with the most archetype-specific differentiation. Transaction reporting vendors (Cappitech, Kaizen, MarketAxess Trax) drop out for pure CASPs because MiCAR replaced MiFIR transaction reporting with Title VI surveillance and Travel Rule recordkeeping. Chain analytics vendors (Chainalysis, Elliptic, TRM Labs) are CASP and VARA exclusives because the blockchain-native attack surface does not exist in pure CFD trading. Comms surveillance (Behavox, Smarsh) and regulatory horizon scanning (CUBE, Corlytics) are universals.

Chapter IV - Broker CRMs

B2Core is the strongest universal CRM in the corpus because B2Broker built its product positioning around crypto-asset operations alongside CFD operations from the start. Other CRMs require configuration or third-party integration to handle CASP requirements (wallet address management, transaction history with blockchain hash references, supported asset configuration per jurisdiction).

Chapter VI - Payments

Payment procurement does not collapse into a clean vendor matrix because PSPs underwrite per-merchant and the relevant procurement is always operator-specific banking and rail relationships rather than vendor-product selection. The Phase 2 chapter covers the payment infrastructure vendors that the four archetypes commonly procure (B2BinPay, Praxis Cashier, Praxis Tech, NETELLER, Skrill, Neteller-Skrill consolidation), but the actual selection depends on the operator’s marketing geography and the PSP’s underwriting policy at that geography rather than on archetype-driven vendor fit.

Chapter VII - IB management

IB management is the pillar with the most pronounced hybrid-archetype specific procurement filter. The four-stage attribution requirement (challenge purchase, challenge pass, broker FTD from a prop firm graduate, broker revenue from that graduate) is an explicit hybrid-only specification that bundled CRM IB modules do not handle without significant customisation.

Chapter V - Turnkey suites

Turnkey suites are explicitly lean-tier procurement and do not surface at mid-market or tier-1 stacks for any archetype except as upgrade paths. Hybrid operators face the most challenging turnkey procurement because the suites are calibrated for either pure broker or pure prop firm operations; the cross-vertical hybrid model breaks the bundling assumption.

Chapter XI - Broker analytics and market signals

Broker analytics is a clean archetype A-B-C overlap with CASP operators procuring entirely separate vendors (CoinGecko Terminal, Glassnode, Messari Pro) because the FX and CFD signal generation that defines the Phase 2 chapter does not extend to crypto-asset analytics.

Chapter XII - Copy and social trading

The Phase 2 LIMITED classification for FXJunction carries through all three CFD-touching archetypes because the Comoros registration with no recognised financial services authorisation disqualifies the vendor for any of CySEC, DMCC, FCA, or ASIC-regulated operators. Copy trading is broker-side only across the hybrid model and does not surface for pure CASPs because the Phase 2 copy trading chapter is calibrated for FX and CFD copy execution rather than for crypto-asset copy.

Chapter I - Prop firm technology

Prop firm tech is the foundation for the prop firm side of Archetype C and the dominant pillar for pure prop firm operators outside the four archetypes covered in this series. The Phase 1 chapter is anchored to the DMCC market; operators outside DMCC face additional procurement-stage diligence on the vendor’s coverage of the operator’s jurisdiction.

Cross-archetype patterns

Three patterns emerge from the matrix:

The universal vendor set is narrower than operators commonly assume. Across the 14 Phase 2 chapters, only a small subset of vendors appears as STRONG PICK or SOLID across all four archetypes. The clearest universals: Equinix (hosting), B2Core (CRM, because of the crypto-native positioning), Behavox and Smarsh (comms surveillance), CUBE and Corlytics (regulatory horizon scanning), and the Sumsub-class KYC vendors with both broker-CFD and crypto-asset wallet attribution coverage. Operators running multi-archetype operations should anchor these decisions first because they reduce vendor management overhead across the entire stack.

Archetype specialists outnumber universals. Most Phase 2 vendors are procurement-relevant for one or two archetypes specifically. Transaction reporting vendors (Cappitech, Kaizen Reporting, MarketAxess Trax) are EU-CFD-broker specialists. Crypto exchange WL platforms (B2BX, Soft-FX crypto, ChainUp, AlphaPoint) are regulated-crypto-venue specialists serving Archetypes B and D. FX copy trading vendors (entire Chapter XII) are CFD-broker specialists not surfacing for CASPs. The implication is that a multi-archetype operator carries a wider total vendor surface than a pure-archetype operator at the same operational scale.

Some Phase 2 vendors are systematically PARTIAL FIT or LIMITED across multiple archetypes for the same underlying procurement reason. The clearest examples: FXJunction’s Comoros registration disqualifies it across all three CFD-touching archetypes; FXVM’s Hong Kong operating entity creates GDPR Article 46 SCC requirements that bite for CySEC operators specifically and propagate to hybrid operators with CySEC broker entities; Leverate Copy and UpTrader Copy’s PARTIAL FIT verdicts in the copy trading chapter propagate across all three CFD-touching archetypes because the procurement caveats are architectural (Sirix-exclusive lock-in, opaque documentation) rather than archetype-specific. Operators should treat these systematic PARTIAL FIT signals as procurement-stage hard filters when the underlying reason matches their operating model.

Three procurement mistakes that span all four archetypes

The four archetype dispatches each surfaced three archetype-specific procurement mistakes (twelve in total). Three additional mistakes recur across all four archetypes and warrant separate surfacing:

Mistake 1: Treating universal vendors as commodity procurement. Because universals (Equinix, B2Core, Behavox, CUBE) appear in multiple archetype stacks, operators sometimes underspecify the procurement requirements assuming the vendor’s standard product fits any archetype. The actual reality is that universal vendors typically offer different configurations, contracts, or modules per archetype, and operators who do not specify their archetype at procurement time end up with the wrong configuration. Equinix tier-1 CFD broker colo at LD4 versus VARA-onshore custody-adjacent colo at DX1 are different procurement scopes; B2Core multi-tenant for hybrid operators versus B2Core single-tenant for pure CFD broker is a different procurement scope.

Mistake 2: Underspecifying jurisdictional fit at vendor selection time. Across the four archetypes, the most consistent procurement failure pattern is operators selecting a vendor based on the chapter’s overall verdict without verifying jurisdictional fit. FXJunction is LIMITED across three archetypes for the same procurement reason. FXVM shifts from PARTIAL FIT to SOLID depending on the operator’s CFD-broker jurisdiction. Cappitech is STRONG PICK for CySEC and SOLID-with-conditions for VARA and hybrid (EU-passported segment only); not relevant for CASP. The procurement-time question is therefore not “is this vendor STRONG PICK” but “is this vendor STRONG PICK for my specific jurisdiction and operating model.”

Mistake 3: Treating Phase 2 chapter boundaries as procurement boundaries. The Phase 2 chapters separate vendors by primary product category; the operator’s procurement reality crosses chapter boundaries. Custody is not its own Phase 2 chapter but is a separate regulated CASP procurement decision adjacent to the crypto exchange WL chapter. Travel Rule infrastructure is not its own Phase 2 chapter but is a separate procurement category for CASP and DMCC-plus-VARA operators. The four archetype dispatches surfaced this; operators building stacks should treat the Phase 2 chapter index as a structural reference rather than a complete procurement boundary set.

What this dispatch series covers next

The per-archetype synthesis arc is complete with the four archetype dispatches plus this capstone matrix. Five Phase 3 synthesis dispatches shipped. The remaining Phase 3 roadmap shifts from new synthesis to corpus maintenance and signal-driven updates:

• Vendor refresh cycle. The Phase 2 chapters most exposed to M&A activity since the original research need targeted refresh dispatches. Specifically: Cappitech under S&P Global Market Intelligence (positioning post-acquisition); TNS Financial Markets transitioning to Waypoint Trading Solutions (novation status for existing contracts); the broker analytics consolidation that has accelerated through 2025-2026; KYC vendor mergers driving consolidation across the identity verification market.
• Per-pillar dispatches. Selected Phase 2 chapters where editorial signal has built up since the original research receive dispatch-format updates rather than full chapter re-audits. Candidate chapters include RegTech (vendor mix shifting post-MiCAR), payments (EU banking regime tightening), and crypto exchange WL (institutional crypto-native vendor segment consolidating).
• New operator archetypes. As additional operating models emerge (a CASP plus CFD broker hybrid under EU regulation, an ADGM FSRA institutional broker archetype, a non-EU non-UAE CFD broker archetype serving LATAM or APAC markets), they receive their own archetype dispatches mirroring the CySEC-DMCC-hybrid-CASP template.

If you operate across the four archetypes covered and the matrix above does not match your procurement reality, that is the editorial signal we are looking for. The corpus improves through ground-truth from operators.