DISPATCH ·

Vendor evidence library: KYC + AML vendor entries (Phase 4)

Fifty-first dispatch. Vendor evidence library KYC + AML segment with eight vendor entries aggregating evidence against Phase 4 framework dimensions for operator pre-RFP shortlisting.

tags · phase-4 · vendor-evidence-library · kyc · aml · operational-artefact

Why this dispatch exists

Fifty-first dispatch. Vendor evidence library KYC + AML segment extending the vendor evidence library opener with KYC + AML vendor entries. Each entry follows the standardised structure (universal dimensions + per-pillar dimensions + per-archetype fit + M&A signal + operator guidance) per the KYC pre-consolidation dispatch coverage.

KYC + AML vendor entries

Sumsub

  • Phase 2 verdict: STRONG PICK universal.
  • Universal: Pricing per-verification with volume tier discounts; certifications include SOC 2 Type II + ISO 27001; institutional support; private with significant fundraising history; quarterly roadmap visibility.
  • Per-pillar: Universal CFD broker + CASP KYC including crypto-specific features (wallet attribution, Travel Rule Programme module, supported asset configuration); native multilingual document support including Asian-script + Arabic-script + LATAM documents; biometric liveness check with deepfake defence; KYB module for institutional onboarding.
  • Per-archetype: STRONG PICK across all 8 archetypes including institutional Archetype H with KYB module.
  • M&A signal: Continued growth funding through 2025; unlikely consolidation target through 2026 H2.
  • Operator guidance: Default universal CFD broker + CASP primary KYC procurement; institutional Archetype H requires explicit KYB module evaluation.

Veriff

  • Phase 2 verdict: SOLID across all archetypes.
  • Universal: Pricing per-verification; certifications include SOC 2 Type II + ISO 27001; growth-stage support; private with sustained growth.
  • Per-pillar: Strong identity verification depth + biometric liveness check robustness; wallet attribution layer for crypto-touching operations; expanded Asian-script document coverage through 2024-2026.
  • Per-archetype: SOLID across all 8 archetypes.
  • M&A signal: Continued growth through 2024-2026.
  • Operator guidance: Alternative primary KYC procurement for operators wanting identity verification depth focus.

ShuftiPro

  • Phase 2 verdict: SOLID across CFD-touching archetypes.
  • Universal: Pricing per-verification with tiered structure; certifications include SOC 2 Type II; growth-stage support; private.
  • Per-pillar: Strong Arabic-script ID document support; MENA market expansion through 2024-2026; multi-language coverage extending across regional languages.
  • Per-archetype: STRONG PICK for DMCC Archetype B (Arabic-script depth); SOLID across other CFD-touching archetypes.
  • M&A signal: Stable through 2024-2026.
  • Operator guidance: DMCC operators specifically and operators with material Arabic-language client onboarding.

Onfido (now Entrust)

  • Phase 2 verdict: SOLID with post-acquisition framework noted.
  • Universal: Pricing migrated to Entrust enterprise contract framework; certifications include SOC 2 Type II + ISO 27001; Entrust enterprise support; Entrust parent disclosure.
  • Per-pillar: Identity verification depth maintained post-acquisition; document verification expanded through 2024-2026.
  • Per-archetype: SOLID across all 8 archetypes operationally.
  • M&A signal: Entrust acquisition closed 2024; integration operationally maturing through 2025-2026; existing customers should verify Entrust enterprise contract framework migration status.
  • Operator guidance: New procurement should evaluate post-acquisition product positioning; existing Onfido customers should verify contract migration.

Jumio

  • Phase 2 verdict: SOLID.
  • Universal: Pricing per-verification; certifications include SOC 2 Type II + ISO 27001; enterprise support; private.
  • Per-pillar: Strong identity verification + biometric liveness; broader global document support.
  • Per-archetype: SOLID across all 8 archetypes.
  • M&A signal: Stable through 2024-2026.
  • Operator guidance: Alternative primary KYC procurement for operators wanting enterprise-grade positioning.

Trulioo

  • Phase 2 verdict: SOLID.
  • Universal: Pricing per-verification; certifications include SOC 2 Type II + ISO 27001; institutional support; private.
  • Per-pillar: Broad global identity verification coverage with electronic identity verification capability across 100+ jurisdictions.
  • Per-archetype: SOLID across all 8 archetypes.
  • M&A signal: Stable through 2024-2026.
  • Operator guidance: Operators with broad global client geography wanting electronic identity verification depth.

ComplyAdvantage

  • Phase 2 verdict: SOLID for ongoing screening specialist.
  • Universal: Pricing tier-based with volume discounts; certifications include SOC 2 Type II + ISO 27001; institutional support; private with growth funding through 2024-2025.
  • Per-pillar: Specialist ongoing PEP + sanctions + adverse media screening; broad data set coverage including jurisdiction-specific lists (UAE Cabinet Resolution, OFAC, UN, EU, UK, plus regional); adverse media integration.
  • Per-archetype: SOLID across all 8 archetypes as secondary vendor in two-vendor procurement pattern.
  • M&A signal: Continued growth funding through 2025.
  • Operator guidance: Default secondary ongoing screening vendor in two-vendor procurement pattern across all archetypes.

IDnow

  • Phase 2 verdict: SOLID with EU regulatory positioning.
  • Universal: Pricing per-verification; certifications include SOC 2 Type II + ISO 27001 + jurisdiction-specific EU certifications; institutional support; private.
  • Per-pillar: Strong EU regulatory positioning + bank-grade integration capability; AnyDesk and Microsoft Teams remote verification options.
  • Per-archetype: SOLID for CySEC Archetype A + EU dual-licensed Archetype E + hybrid Archetype C with EU broker entity; SOLID for other archetypes.
  • M&A signal: Stable through 2024-2026.
  • Operator guidance: EU operators wanting bank-grade integration capability.

Cross-vendor procurement considerations

The two-vendor procurement pattern (primary KYC + separate ongoing screening) is the operational baseline. Most operators procure Sumsub or Veriff primary plus ComplyAdvantage secondary; ShuftiPro is the primary alternative for Arabic-document-heavy DMCC operations; Onfido (Entrust) remains operationally viable but new procurement should evaluate post-acquisition positioning explicitly.

CASP-touching operators should evaluate vendor crypto-specific features explicitly (wallet attribution, Travel Rule integration). Institutional Archetype H operators should evaluate KYB module depth specifically (Sumsub institutional module or specialist institutional KYB vendor).

Smaller vendor consolidation expected through 2026 H2 means operators procuring from smaller specialist KYC vendors should evaluate consolidation risk explicitly during procurement.