Why this dispatch exists
This is the fiftieth dispatch and the twenty-fifth Phase 4 operationally-actionable artefact. The RFP scoring framework opener established the three-layer framework; the fifteen per-pillar evaluation toolkits operationalised vendor evaluation; the eight per-archetype RFP templates operationalised archetype-specific procurement. This dispatch opens the vendor evidence library sub-series.
The vendor evidence library complements the per-pillar toolkits by aggregating evidence on specific vendors against the Phase 4 framework dimensions sourced from public information. Operators apply the library at pre-RFP shortlisting to inform which vendors to invite to RFP; the per-pillar toolkits then operationalise the RFP evaluation. The library is not a substitute for operator-side RFP work; it is an evidence aggregation that reduces operator-side research time.
Vendor evidence library structure
Each vendor entry includes:
- Vendor identification - name, slug, Phase 2 verdict tag.
- Universal dimensions evidence - pricing transparency, certifications, customer support, financial stability, roadmap visibility.
- Per-pillar dimensions evidence - key strengths and weaknesses against pillar-specific dimensions.
- Per-archetype fit - where vendor scores STRONG PICK / SOLID / PARTIAL FIT / LIMITED / not surfaced.
- Recent M&A and positioning shifts - signal from 2024-2026 affecting procurement.
- Operator-side evaluation guidance - which procurement contexts the vendor is most procurement-appropriate for.
RegTech vendor entries
Nasdaq SMARTS Trade Surveillance
- Slug: nasdaq-smarts. Phase 2 verdict: STRONG PICK.
- Universal: Pricing quote-based; certifications include SOC 2 Type II + ISO 27001; tier-1 enterprise support; NASDAQ-listed parent disclosure; quarterly roadmap visibility.
- Per-pillar: 25+ regulator deployments (FCA, ASIC, MAS, SFC, SEC) including the regulators’ own monitoring infrastructure; deepest historical pattern library in the chapter; chain analytics integration extending crypto-asset surveillance coverage through 2025-2026.
- Per-archetype: STRONG PICK universal across all 8 archetypes at tier-1 scale.
- M&A signal: Continued NASDAQ ownership stable; no consolidation activity 2024-2026.
- Operator guidance: Tier-1 scale procurement default for trade surveillance across CFD broker + CASP + institutional archetypes.
Eventus Validus
- Slug: eventus-validus. Phase 2 verdict: SOLID.
- Universal: Pricing quote-based; certifications include SOC 2 Type II; growth-stage support; private with sustained operating history since 2014.
- Per-pillar: Modern AI/ML-augmented surveillance with strong crypto-asset positioning; Cboe + NSX client base expanded through 2025-2026 with additional crypto exchange deployments.
- Per-archetype: STRONG PICK for hybrid Archetype C + CASP Archetype D + EU dual-licensed Archetype E (single-vendor for unified MAR + MiCAR Title VI surveillance); SOLID for other archetypes.
- M&A signal: Continued growth funding through 2025; no consolidation.
- Operator guidance: Mid-market procurement preferred for unified CFD + crypto-asset surveillance question.
NICE Actimize Xceed / SURVEIL-X
- Slug: nice-actimize-xceed. Phase 2 verdict: SOLID.
- Universal: Pricing quote-based at enterprise tier; certifications include SOC 2 Type II + ISO 27001; enterprise TAM model; NICE Ltd parent disclosure.
- Per-pillar: Tier-1 enterprise integrated trade + comms surveillance; large minimum spend rarely matches mid-market budgets.
- Per-archetype: SOLID at tier-1 scale across all 8 archetypes.
- M&A signal: Stable through 2024-2026.
- Operator guidance: Tier-1 enterprise with existing NICE relationships.
Cappitech
- Slug: cappitech. Phase 2 verdict: STRONG PICK.
- Universal: S&P Global Market Intelligence parent (post-2022 acquisition); S&P Global enterprise contract framework; comprehensive support; public-company-grade financial stability via S&P Global; quarterly roadmap visibility.
- Per-pillar: 650+ firm client base; multi-regulator MiFIR + EMIR REFIT + ASIC + MAS + SFTR coverage; integration with operator-side platform data sources.
- Per-archetype: STRONG PICK for CySEC Archetype A + hybrid Archetype C broker side + EU dual-licensed Archetype E; SOLID for DMCC Archetype B + APAC Archetype F + LATAM Archetype G with EU-passport client segments; not surfaced for pure CASP Archetype D.
- M&A signal: S&P Global integration operationally complete; pricing framework migrated to S&P enterprise template; cross-sell paths into adjacent S&P products.
- Operator guidance: Default MiFIR delegated reporting choice for CFD brokers.
Kaizen Reporting
- Slug: kaizen-reporting. Phase 2 verdict: SOLID.
- Universal: Pricing quote-based; certifications include SOC 2 Type II; specialist support; private with sustained operating history.
- Per-pillar: Forensic accuracy testing across 100% of submitted transaction reports (not sampling); defensive procurement layer over primary reporting vendor; ESMA 2023 review showing ~30% MiFIR report error rates justifies separate procurement.
- Per-archetype: SOLID at mid-market+ scale for archetypes with MiFIR reporting (A, C, E, F-G with EU passport segments).
- M&A signal: Stable through 2024-2026.
- Operator guidance: Procure alongside Cappitech as accuracy testing defensive layer at mid-market scale.
MarketAxess Trax
- Slug: marketaxess-trax. Phase 2 verdict: SOLID.
- Universal: Pricing quote-based; FCA + EU dual-authorised ARM + APA certifications; specialist enterprise support; MarketAxess NASDAQ parent.
- Per-pillar: Regulated ARM + APA under MiFID II/MiFIR; fixed-income-heavy positioning; for in-scope firms reporting framework is regulator-mandated rather than vendor-elective.
- Per-archetype: SOLID for fixed-income-active CFD broker operations.
- M&A signal: Stable through 2024-2026.
- Operator guidance: ARM + APA procurement for operators with MiFID II in-scope fixed-income flow.
Behavox
- Slug: behavox. Phase 2 verdict: SOLID (STRONG PICK for institutional Archetype H).
- Universal: Pricing quote-based at enterprise tier; certifications include SOC 2 Type II; tier-1 bank-grade support; private with sustained growth.
- Per-pillar: Proprietary LLM-driven communications surveillance; confirmed tier-1 bank adoption; mobile + collaboration platform coverage including Microsoft Teams + WhatsApp Business; FCA off-channel comms enforcement positioning aligned.
- Per-archetype: SOLID across all 8 archetypes; STRONG PICK for institutional Archetype H (Bloomberg Chat + voice capture depth).
- M&A signal: Continued growth through 2024-2026.
- Operator guidance: Institutional operations and operators with material off-channel comms risk.
Smarsh
- Slug: smarsh. Phase 2 verdict: SOLID.
- Universal: Pricing per-seat at scale; certifications include SOC 2 Type II + ISO 27001; channel partner network; private; 2025 Gartner MQ Leader confirmed third-party validation.
- Per-pillar: Incumbent comms archiving with broadest channel coverage (post-Actiance 2017 acquisition); 18 of 20 largest global financial institutions deployed.
- Per-archetype: SOLID across all 8 archetypes.
- M&A signal: Stable through 2024-2026.
- Operator guidance: Broad-channel-coverage procurement for operators with moderate-to-high comms surveillance scope.
CUBE
- Slug: cube. Phase 2 verdict: SOLID.
- Universal: Pricing quote-based; certifications include SOC 2 Type II; enterprise support; private with sustained growth.
- Per-pillar: 750+ jurisdictions + 10,000+ issuing bodies + 80 languages regulatory taxonomy; MiCAR taxonomy expanded through 2025-2026.
- Per-archetype: SOLID across all 8 archetypes; particularly useful for multi-jurisdiction operators.
- M&A signal: Stable through 2024-2026.
- Operator guidance: Multi-jurisdiction regulatory horizon scanning for operators with CySEC + FCA + DMCC + ASIC + MAS combinations.
Corlytics
- Slug: corlytics. Phase 2 verdict: SOLID.
- Universal: Pricing quote-based; public information accessibility limited during research; private; ClauseMatch 2023 acquisition integration operationally complete.
- Per-pillar: Regulatory risk intelligence + ClauseMatch policy mapping + enforcement action analytics.
- Per-archetype: SOLID across all 8 archetypes.
- M&A signal: ClauseMatch integration operationally complete through 2024-2026.
- Operator guidance: Component-level procurement evaluation for operators using only horizon scanning OR only policy mapping.
Chainalysis (Reactor + KYT)
- Slug: Phase 2 chain analytics adjacent; not Phase 2 chapter vendor.
- Universal: Pricing quote-based; certifications include SOC 2 Type II; institutional support; private with substantial growth funding history.
- Per-pillar: Reactor for investigation tooling; KYT for transaction screening; broadest blockchain coverage in segment.
- Per-archetype: STRONG PICK for CASP Archetype D + SOLID for DMCC Archetype B (VARA side) + EU dual-licensed Archetype E + APAC Archetype F + LATAM Archetype G + ADGM Archetype H (FSRA VAF if applicable); not surfaced for pure CFD archetypes.
- M&A signal: Stable through 2024-2026.
- Operator guidance: Default chain analytics procurement for crypto-touching operations.
Elliptic Lens
- Slug: Phase 2 chain analytics adjacent.
- Universal: Pricing quote-based; certifications include SOC 2 Type II; institutional support; private.
- Per-pillar: Lens investigation tooling + Navigator for KYT; institutional crypto-asset focus.
- Per-archetype: SOLID across crypto-touching archetypes.
- M&A signal: Stable through 2024-2026.
- Operator guidance: Alternative to Chainalysis for institutional chain analytics procurement.
TRM Labs
- Slug: Phase 2 chain analytics adjacent.
- Universal: Pricing quote-based; certifications include SOC 2 Type II; institutional support; private with growth funding.
- Per-pillar: Strong DeFi protocol coverage; cross-chain bridge analytics.
- Per-archetype: SOLID across crypto-touching archetypes.
- M&A signal: Continued growth funding through 2025.
- Operator guidance: Institutional crypto-touching operations with DeFi exposure.
What comes next
Future vendor evidence library dispatches will extend coverage to KYC + AML vendors, trading platforms, crypto exchange WL vendors, hosting vendors, and other pillars. Operator ground-truth feedback on vendor entries will refine the library entries over time.