Veriff

Who They Are

Veriff was founded in 2015 and is headquartered in Tallinn, Estonia - positioning it as the most geographically proximate of the vendor set to the CySEC regulatory ecosystem, given Estonia’s EU membership and the shared EU 6AMLD and eIDAS regulatory baseline with Cyprus. It is a pure-play identity verification platform. The differentiation thesis against Sumsub - the anchor vendor in this pillar - is primarily about onboarding UX and conversion performance. Veriff maintains an explicit /industry/brokerage-trading vertical page, which signals a deliberate commercial focus on FX/CFD operators rather than a general financial-services positioning.

The company carries ISO/IEC 27001, SOC 2 Type II, and GDPR compliance certifications. G2 rates the platform at 4.5, making it one of the higher-rated vendors in this review set. Veriff does not have a Limassol office and does not publicly name CySEC-regulated broker customers - its Cyprus relevance is regulatory alignment rather than market embeddedness.

What You Actually Get

Veriff covers AI-powered ID document verification across 12,000-plus document types in 230-plus countries - a narrower document set than Sumsub’s 14,000-plus but meaningfully broader than Jumio’s 5,000-plus. Biometric face match is available in both active and passive liveness modes. AML screening covers PEP databases, sanctions lists, and adverse media. Database verification and proof-of-address checks are included in the standard stack.

Two capabilities drive the broker-specific value proposition. First, the decision engine with configurable workflows allows compliance teams to set risk thresholds, route high-risk cases to manual review, and adjust the onboarding journey without full engineering engagement - functionally similar to Onfido’s Studio builder. Second, multi-language onboarding across 48 languages is a measurable advantage for CySEC brokers with multilingual EU retail acquisition - Arabic, Russian, and German language support, for example, reduces drop-off in high-value demographic segments.

Re-verification and ongoing monitoring are documented for the periodic re-KYC requirements under CySEC’s risk-based approach. Fraud network signal and device intelligence round out the standard package. KYB depth - for IB, corporate, and institutional onboarding - is documented as available but is acknowledged as a relative weakness versus Sumsub or Trulioo.

Pricing Reality

Veriff publishes a tiered pricing structure: Essential from approximately $0.80 per verification, Plus at approximately $1.39, and Enterprise at custom pricing. Monthly minimum commitments are not publicly disclosed, though volume-banded contracts apply. G2 reviewers note that pricing is higher than some alternatives at low volume - a consistent characterisation in independent review data.

Against the pillar anchors: Veriff’s entry tier at ~$0.80 undercuts Sumsub’s $1.85 Compliance tier and is within range of ShuftiPro’s $0.20 pay-as-you-go anchor, though the two are not directly comparable on feature parity. Volume discounts apply mid-tier - operators with sub-1,000 verifications per month will see higher effective per-check costs than the listed Essential rate implies. The pillar TCO calculator can model Veriff inputs using the published tier rates, which is an advantage over fully opaque vendors in this set.

CySEC + AML Fit

Veriff is categorised as CySEC-acceptable. FCA, EU 6AMLD, eIDAS-aligned, MAS, and FINTRAC regulatory alignment are documented. The eIDAS alignment is consistent with Estonian origin and EU regulatory infrastructure. The platform does not carry a specific eIDAS qualified trust service provider certification at the level of IDnow or Onfido’s ETSI certification.

For the CySEC August 2025 sanctions regime, the AML screening layer covers PEP and sanctions lists. The depth and update frequency of Veriff’s underlying AML dataset is not publicly benchmarked against ComplyAdvantage. The ongoing monitoring capability is relevant for CySEC’s requirement to re-screen existing clients against updated sanctions lists following designation events.

No Cyprus office and no named CySEC broker customer are present in current vendor materials. The explicit brokerage vertical page and EU regulatory alignment make Veriff the most credible second-source vendor for a CySEC CIF whose primary criterion is onboarding conversion, but the absence of a named Cyprus peer reference means due diligence must rely on the general brokerage-sector track record documented on the vendor’s vertical page.

Partner Program Reality

No public partner or referral program is documented. Veriff’s partner relationships are handled through direct sales and BD engagement. This is a material friction point for the Cyprus broker ecosystem: compliance consultants and IB networks that would otherwise route referrals through a structured channel program have no clear path to commission or co-sell economics without direct commercial negotiation. This places Veriff in the same no-public-program bracket as IDnow, AU10TIX, and Jumio.

Where This Vendor Breaks Down

KYB depth is the structural gap for brokers with active IB networks. Veriff’s B2B partner onboarding capability is acknowledged as weaker than Sumsub or Trulioo. For a CySEC CIF onboarding 50-plus introducing brokers per year, supplementing Veriff with a dedicated KYB layer adds integration cost and operational complexity that should appear in the total cost model.

AML coverage is adequate for the baseline regulatory requirement but is not differentiated. Veriff’s sanctions and PEP screening sits below the specialist depth of ComplyAdvantage or WorldCheck, and below the full-stack AML integration that Sumsub achieved with the ComplyAdvantage Mesh integration in March 2026. For CySEC brokers where the primary compliance risk is sanctions and PEP exposure - rather than document fraud - Veriff is not the natural lead vendor.

G2 reviewers cite occasional verification failures on edge-case documents - likely non-EU geographies where Veriff’s training data is thinner. For brokers with high proportions of MENA or APAC traffic, this is a conversion risk that should be stress-tested in a pilot before full deployment.

Per-check pricing at low volume is higher than the Essential tier rate implies once monthly minimums and volume band mechanics are factored in. Startup CySEC brokers in the first year of operation - typically running 200-500 verifications per month - should model the actual contracted rate rather than the headline Essential per-check figure.

See the KYC/AML pillar overview and the CySEC AML 2026 timeline for the full competitive frame.