How we work with clientsStart your applicationClient login
Home › Insights › Identity Verification and Transaction Monitoring Index
Index · 2026 edition

The Buckingham Capital Consulting Identity Verification and Transaction Monitoring Index.

An independent annual ranking of the providers that payment, e-money, crypto and lending firms buy to check customers, screen them against sanctions lists and monitor their transactions. 13 providers, six criteria, nothing paid for.

13Providers assessed
6Criteria, published
3Firm types
22 October 2026Facts read
2026First edition

The ranking.

Scores out of 100. Each segment weights the criteria differently; the method is below. Facts read on 22 October 2026 from the providers' own pages.

Overall

The mean of the 3 segment scores.

Rank and providerScore /100StatusStrongest for
1. Sumsub94Identity verification and AML platformPayment, e-money and crypto firms wanting one platform with published prices
2. Shufti86Identity verification and AML platformFirms needing the widest published country and watchlist coverage
3. iDenfy86Identity verification and AML platformSmaller payment and crypto firms wanting published prices and EU data storage
4. Veriff84Identity verification platformFirms needing wide document coverage with published self-serve prices
5. Socure70Identity verification and fraud platformUS firms wanting published startup pricing and bank-grade credentials
6. Ondato69Identity verification and AML platformEU firms wanting published volume price ranges
7. ComplyAdvantage61AML screening and monitoring platformFirms needing screening and monitoring with a published price table
8. Trulioo57Identity and business verification platformPayment firms verifying people and businesses across many countries
9. Persona57Identity verification platformFirms wanting US or EU data residency and strong security credentials
10. Alloy54Identity and fraud decisioning platformUS banks, credit unions and lenders orchestrating many data vendors
11. Jumio54Identity verification platformLarge firms needing document checks at scale
12. Sardine46Fraud and AML platformPayment and crypto firms combining fraud and AML in one system
13. Entrust (formerly Onfido)42Identity verification platformFirms wanting a no-code onboarding builder with watchlist reports

For payment and e-money firms

Weighted to coverage and reach: one provider for onboarding, screening and monitoring across many countries.

Rank and providerScore /100StatusStrongest for
1. Sumsub94Identity verification and AML platformPayment, e-money and crypto firms wanting one platform with published prices
2. Shufti86Identity verification and AML platformFirms needing the widest published country and watchlist coverage
3. Veriff85Identity verification platformFirms needing wide document coverage with published self-serve prices
4. iDenfy85Identity verification and AML platformSmaller payment and crypto firms wanting published prices and EU data storage
5. Socure71Identity verification and fraud platformUS firms wanting published startup pricing and bank-grade credentials
6. Ondato70Identity verification and AML platformEU firms wanting published volume price ranges
7. ComplyAdvantage61AML screening and monitoring platformFirms needing screening and monitoring with a published price table
8. Trulioo58Identity and business verification platformPayment firms verifying people and businesses across many countries
9. Persona55Identity verification platformFirms wanting US or EU data residency and strong security credentials
10. Jumio55Identity verification platformLarge firms needing document checks at scale
11. Alloy54Identity and fraud decisioning platformUS banks, credit unions and lenders orchestrating many data vendors
12. Sardine47Fraud and AML platformPayment and crypto firms combining fraud and AML in one system
13. Entrust (formerly Onfido)42Identity verification platformFirms wanting a no-code onboarding builder with watchlist reports

For crypto firms

Weighted to coverage and global reach: customers arrive from almost every country.

Rank and providerScore /100StatusStrongest for
1. Sumsub95Identity verification and AML platformPayment, e-money and crypto firms wanting one platform with published prices
2. Shufti90Identity verification and AML platformFirms needing the widest published country and watchlist coverage
3. Veriff86Identity verification platformFirms needing wide document coverage with published self-serve prices
4. iDenfy85Identity verification and AML platformSmaller payment and crypto firms wanting published prices and EU data storage
5. Ondato71Identity verification and AML platformEU firms wanting published volume price ranges
6. Socure70Identity verification and fraud platformUS firms wanting published startup pricing and bank-grade credentials
7. Trulioo61Identity and business verification platformPayment firms verifying people and businesses across many countries
8. Jumio59Identity verification platformLarge firms needing document checks at scale
9. ComplyAdvantage59AML screening and monitoring platformFirms needing screening and monitoring with a published price table
10. Alloy55Identity and fraud decisioning platformUS banks, credit unions and lenders orchestrating many data vendors
11. Persona54Identity verification platformFirms wanting US or EU data residency and strong security credentials
12. Sardine48Fraud and AML platformPayment and crypto firms combining fraud and AML in one system
13. Entrust (formerly Onfido)42Identity verification platformFirms wanting a no-code onboarding builder with watchlist reports

For lenders and marketplaces

Weighted to published pricing, integration and data protection: high volumes, fast set-up and careful handling of personal data.

Rank and providerScore /100StatusStrongest for
1. Sumsub92Identity verification and AML platformPayment, e-money and crypto firms wanting one platform with published prices
2. iDenfy87Identity verification and AML platformSmaller payment and crypto firms wanting published prices and EU data storage
3. Veriff82Identity verification platformFirms needing wide document coverage with published self-serve prices
4. Shufti81Identity verification and AML platformFirms needing the widest published country and watchlist coverage
5. Socure69Identity verification and fraud platformUS firms wanting published startup pricing and bank-grade credentials
6. Ondato67Identity verification and AML platformEU firms wanting published volume price ranges
7. ComplyAdvantage63AML screening and monitoring platformFirms needing screening and monitoring with a published price table
8. Persona62Identity verification platformFirms wanting US or EU data residency and strong security credentials
9. Alloy52Identity and fraud decisioning platformUS banks, credit unions and lenders orchestrating many data vendors
10. Trulioo52Identity and business verification platformPayment firms verifying people and businesses across many countries
11. Jumio47Identity verification platformLarge firms needing document checks at scale
12. Sardine43Fraud and AML platformPayment and crypto firms combining fraud and AML in one system
13. Entrust (formerly Onfido)43Identity verification platformFirms wanting a no-code onboarding builder with watchlist reports

Scores by criterion.

Each criterion is scored 0 to 5 against the best published offer in this edition. 0 means not offered or not published.

ProviderCoveragePublished pricingGlobal reachIntegrationRegulatory standingData protection
Sumsub545455
Shufti515554
iDenfy444545
Veriff445453
Socure443450
Ondato434432
ComplyAdvantage342441
Trulioo403351
Persona310455
Alloy501342
Jumio304350
Sardine501330
Entrust (formerly Onfido)300450

How the index is scored.

6 criteria, scored only from what each provider publishes.

Coverage

Whether one provider publishes all five parts: identity checks on people (KYC), checks on businesses and their owners (KYB), sanctions and PEP screening, ongoing monitoring after onboarding, and transaction monitoring.

Published pricing

Per-check or monthly prices and minimums on a pricing page. "From", "starting at" and promotional prices do not count.

Global reach

The published number of countries and identity document types supported, and the sources behind screening.

Integration

An API and mobile SDK, a no-code builder or dashboard, self-serve sign-up and a stated time to go live.

Regulatory standing

Security certifications such as ISO 27001 and SOC 2 Type II, and regulated banks, payment and e-money firms named as clients.

Data protection

Where customer data is stored, whether the client can choose the region, and whether the client controls how long data is kept.

Weights by segment

CriterionPayment and e-money firmsCrypto firmsLenders and marketplaces
Coverage252520
Published pricing151020
Global reach202510
Integration151520
Regulatory standing151515
Data protection101015

What each score means

Criterion530
CoverageKYC, KYB, screening, ongoing monitoring and transaction monitoring all publishedThree of the five publishedNot published
Published pricingPer-check prices and minimums for identity checks and screening on a pricing pageSome prices or volume ranges published for part of the productNot published, or "from" prices only
Global reach200 or more countries and 10,000 or more document types publishedOne count published, or about 150 to 200 countriesNot published
IntegrationAPI, SDK, no-code builder, self-serve sign-up and a stated time to go liveAPI with one other optionNot published
Regulatory standingISO 27001 and SOC 2 Type II with named regulated clientsOne certification publishedNot published
Data protectionNamed storage location, client choice of region and client-set retentionOne of the three publishedNot published

Score out of 100 is the sum of each criterion score divided by five and multiplied by its weight. The overall ranking is the mean of the segment scores. Ties are broken by coverage, then regulatory standing. A provider that does not publish a price is scored as though the price were high, because a business cannot plan on an unpublished price. Prices are scored on the standard published rate, never an introductory, promotional or "from" rate, and a figure counts only when it appears on a pricing, fee or terms page rather than in a marketing line. A provider that serves one country only is scored on access for that country, and the limitation is printed in its profile.

Provider profiles.

What each provider publishes, criterion by criterion, with the date read and the source.

Sumsub

A single platform covering identity checks, business checks, sanctions screening, ongoing monitoring and transaction monitoring. It publishes per-check prices for its two standard plans, states that clients choose where data is stored, and names regulated clients. Business checks and transaction monitoring sit in a custom plan with no published price.

CoverageFinancial institutions page lists KYC, KYB, AML screening with ongoing monitoring, transaction monitoring with "regulator-ready STR packages", Travel Rule and fraud prevention, with "one case console for fraud and AML".
PricingBasic: $1.35 per verification, "$149 min. monthly commitment". Compliance: $1.85 per verification, "$299 min. monthly commitment", including AML screening and ongoing AML monitoring. Business verification and transaction monitoring: custom plan, "Let's talk!". 14-day free trial with 50 checks.
Global reach"Supports over 14,000 document types across 220+ countries and territories." Business registry coverage page: "200+" countries and territories.
IntegrationNo-code dashboard: "No coding needed" to customise verification flows; API reference and documentation published; self-serve trial.
Regulatory standingSOC 2 Type II report from BARR Advisory (announced 10 November 2022). ID verification FAQ cites "SOC 2, ISO 27001, and PCI DSS". Named clients include iFAST Global Bank and Wirex.
Data protectionService privacy notice: "all personal data is stored and processed on specially designated servers in Germany"; clients "may choose the location of Personal data processing (including storage)"; "Our Clients define how long Personal data should be stored and when to delete it."
Date readRead 22 October 2026
  • Coverage: 5/5. KYC, KYB, sanctions screening, ongoing monitoring and transaction monitoring all published on one platform.
  • Published pricing: 4/5. Per-check prices and monthly minimums published for KYC and AML screening plans; business checks and transaction monitoring are not priced.
  • Global reach: 5/5. 14,000+ document types across 220+ countries and territories published.
  • Integration: 4/5. No-code flow builder, published API documentation and a self-serve trial; no onboarding time published.
  • Regulatory standing: 5/5. SOC 2 Type II and ISO 27001 cited, with a named bank and a named e-money client.
  • Data protection: 5/5. Named storage location, client choice of storage location and client-set retention published.

Facts read on 22 October 2026 from: sumsub.com, sumsub.com, sumsub.com, sumsub.com, sumsub.com, sumsub.com.

Shufti

An identity and AML platform covering identity checks, business checks, screening, ongoing monitoring and transaction monitoring. It publishes the widest country and watchlist coverage in this edition, an integration timeline, and regional or on-premise hosting. Its paid price is published only as a "starting from" figure.

CoverageKYC with perpetual KYC, KYB with UBO mapping, sanctions, PEP and adverse media screening, ongoing AML screening and transaction monitoring (Enterprise plan).
PricingFree Forever: $0 for "Up to 10 verifications every month". Essentials: "Starting from" $1.5 per verification. Enterprise: "Request Pricing".
Global reach240+ countries and territories, 10,000+ document types, "4,000+" watchlists screened and 215+ sanctions regimes (fintech page).
IntegrationREST API, SDKs for web and mobile, no-code workflow builder (Journey Builder), sandbox and a free plan; "Most development teams complete the integration within a few days."
Regulatory standing"Shufti holds SOC 2 Type II, ISO 27001, PCI DSS, GDPR, and iBeta ISO 30107 certifications." Client logos include IronFX and Bitget; Macropay case study.
Data protection"Shufti stores client data in secure, certified data centres", location set by contract and data residency needs, with regional hosting and on-premise options; biometric data can be deleted after a check or kept for a defined period.
Date readRead 22 October 2026
  • Coverage: 5/5. KYC, KYB, screening, ongoing monitoring and transaction monitoring all published.
  • Published pricing: 1/5. Only a "starting from" paid price is published, which the method does not count.
  • Global reach: 5/5. 240+ countries, 10,000+ documents and 4,000+ watchlists published.
  • Integration: 5/5. API, SDKs, no-code workflow builder, free plan and a stated integration time of a few days.
  • Regulatory standing: 5/5. SOC 2 Type II and ISO 27001 stated, with named regulated clients and a case study.
  • Data protection: 4/5. Regional and on-premise hosting and configurable deletion; no named default location.

Facts read on 22 October 2026 from: shuftipro.com, shuftipro.com, shuftipro.com, shuftipro.com.

iDenfy

An identity verification provider with business verification and AML screening and monitoring. It publishes a per-check price with a monthly minimum and priced extras, EU data storage with configurable retention, and both main security certifications. Transaction monitoring is not published, and business verification and AML monitoring sit in the enterprise tier.

CoverageIdentity verification, KYB with "180+ company registries", sanctions and PEP checks, and "AML monitoring (daily re-screening for a year)" in the enterprise tier. Transaction monitoring not published.
PricingPay-as-you-go: $1.35 per verification, "$135 min. monthly". Sanctions and PEPs check +$0.45 per verification; proof of address +$0.90 per verification. Enterprise: tailored. 14-day trial with 10 free checks.
Global reach"over 3,000 document types" from "more than 200 countries and territories"; KYB across "180+ company registries in 300+ countries and jurisdictions".
Integration"API + SDK + no-code options"; no-code KYB workflow builder; verification "in under 60 seconds"; self-serve trial.
Regulatory standingISO/IEC 27001:2022 (certificate 1512120135, TÜV Thüringen); SOC 2 Type II (House of CPA); eIDAS conformity declaration; PCI-DSS v4.0.1 for card processing. Logos include Lietuvos bankas.
Data protection"All data is processed and stored on Amazon AWS in Europe (Dublin, Ireland)"; other residency on request; retention "configurable, with automatic deletion".
Date readRead 22 October 2026
  • Coverage: 4/5. KYC, KYB, sanctions screening and ongoing monitoring published; transaction monitoring not published.
  • Published pricing: 4/5. Per-check price, monthly minimum and screening add-on price published; enterprise tier not priced.
  • Global reach: 4/5. 200+ countries and 3,000+ document types published.
  • Integration: 5/5. API, SDK, no-code builder and self-serve trial published.
  • Regulatory standing: 4/5. ISO 27001:2022 and SOC 2 Type II with certificate details; regulated clients shown as logos only.
  • Data protection: 5/5. Named EU storage location, residency options and configurable retention.

Facts read on 22 October 2026 from: idenfy.com, idenfy.com, documentation.idenfy.com, documentation.idenfy.com.

Veriff

An identity verification provider with business verification and sanctions screening. It publishes self-serve plan prices with screening and ongoing monitoring as priced add-ons, wide country and document coverage, and both main security certifications. It does not publish transaction monitoring, and the pages read do not state where data is stored.

CoverageHomepage lists identity verification, Know Your Business (business registers plus directors, shareholders and beneficial owners) and AML screening against sanctions, PEPs and adverse media. Transaction monitoring not published.
PricingEssential: $0.80 per verification, "$49/ month min." Plus: $1.39, "$99/ month min." Premium: $1.89, "$209/ month min." PEP and sanctions screening add-on +$0.64 per verification; ongoing monitoring add-on +$0.09. Enterprise: "Let's talk".
Global reach"Veriff supports identity verification in 230+ countries and territories", "more than 12,500 ID documents"; homepage states 300+ jurisdictions for business verification.
IntegrationWeb and mobile SDKs, APIs and webhooks, a customer portal and workflows chaining several checks; self-serve plans with a 15-day free trial.
Regulatory standingSOC 2 Type II, ISO/IEC 27001:2022 and UK Cyber Essentials listed. Named clients include Monzo, Western Union, Blockchain.com and LHV.
Data protectionEnterprise default retention: "90 days in the Service and then for 3 years in archive"; "Customers can change the default identity verification retention period." Self-serve plans: 3 or 6 months retention by plan, with a 2-year extension add-on. Security page: backups "stored and encrypted in AWS servers"; no storage region stated.
Date readRead 22 October 2026
  • Coverage: 4/5. KYC, KYB, sanctions screening and ongoing monitoring published; transaction monitoring not published.
  • Published pricing: 4/5. Per-check prices, minimums and screening add-on prices published; business verification and enterprise prices not published.
  • Global reach: 5/5. 230+ countries and territories and 12,500+ ID documents published.
  • Integration: 4/5. SDKs, APIs, portal and self-serve sign-up; no onboarding time published.
  • Regulatory standing: 5/5. SOC 2 Type II and ISO 27001:2022 with named regulated clients.
  • Data protection: 3/5. Published retention periods with client control; no storage region published.

Facts read on 22 October 2026 from: www.veriff.com, www.veriff.com, www.veriff.com, www.veriff.com, www.veriff.com.

Socure

A US identity verification and fraud provider with document checks, watchlist screening with monitoring and business onboarding. It publishes per-check prices on its startup plan and holds ISO 27001, SOC 2 Type 2 and FedRAMP Moderate. It does not publish transaction monitoring or data storage terms.

CoverageSocure Verify identity verification, Predictive DocV, "Global Watchlist Screening with Monitoring" (sanctions, PEP, adverse media), business onboarding use case. Transaction monitoring not published.
PricingLaunch plan: "$1,000 per month in credits", then DocV $0.80, DocV + Watchlist $0.90, KYC + Fraud + Watchlist with DocV step up $1.00, with prefill $1.30 "per evaluation". Enterprise prices not published.
Global reachDocument verification: "Accept and validate any global ID, in any format, in 49 languages from 190+ countries"; eKYC coverage in 180 countries. No document count published.
IntegrationAPI and hosted UI; "Sign up in under five minutes"; developer hub published.
Regulatory standingISO/IEC 27001:2022 certification, SOC 2 Type 2 attestation, FedRAMP Moderate authorisation. Homepage states "19 of 20" top U.S. banks and 3,000+ customers.
Data protectionHosting location and retention periods not stated on the security page.
Date readRead 22 October 2026
  • Coverage: 4/5. KYC, document checks, watchlist screening with monitoring and business onboarding published; transaction monitoring not published.
  • Published pricing: 4/5. Per-check prices published for the startup plan; enterprise prices not published.
  • Global reach: 3/5. 190+ countries for document checks and 180 for data checks; no document count.
  • Integration: 4/5. API, hosted UI and self-serve sign-up published.
  • Regulatory standing: 5/5. ISO 27001, SOC 2 Type 2 and FedRAMP Moderate with stated bank client counts.
  • Data protection: 0/5. Not published on the pages read.

Facts read on 22 October 2026 from: www.socure.com, www.socure.com, www.socure.com, www.socure.com.

Ondato

An identity verification and AML provider with business onboarding, screening and monitoring. It publishes volume price ranges for every check and extra, and an ISO 27001 certification. Transaction monitoring is provided through partners, and the pages read do not state where data is stored.

CoverageIdentity Verification (KYC), Business Onboarding (KYB), AML screening with ongoing monitoring, and transaction monitoring described as "Transaction monitoring from our partners".
PricingIdentity verification "€1,40 - €0,50" per verification by volume; AML screening €0,45 - €0,04 per check; AML monitoring €0,32 - €0,04 per user per month. KYB: "From €600" per month.
Global reach"Accepts 10,000+ documents from 192 countries"; 15,000+ AML data sources.
IntegrationWeb and mobile SDK, REST API, no-code integration and unlimited sandbox listed on the pricing page; no onboarding time published.
Regulatory standing"Certified by International security standart ISO/IEC 27001:2013" (FAQ). SOC 2 not mentioned. Case studies include Luminor.
Data protection"User data storage depends on every client's Service Agreement." "Unlimited Data Retention" included in every account. Storage location not stated.
Date readRead 22 October 2026
  • Coverage: 4/5. KYC, KYB, screening and ongoing monitoring published; transaction monitoring via partners.
  • Published pricing: 3/5. Volume price ranges published for checks and extras; KYB published only as a "from" price.
  • Global reach: 4/5. 192 countries and 10,000+ documents published.
  • Integration: 4/5. SDK, API and no-code integration published; no onboarding time.
  • Regulatory standing: 3/5. ISO 27001 published; SOC 2 not published.
  • Data protection: 2/5. Retention set by agreement; storage location not published.

Facts read on 22 October 2026 from: ondato.com, ondato.com, ondato.com, ondato.com.

ComplyAdvantage

An AML screening and monitoring provider covering customer and company screening, ongoing monitoring, transaction monitoring and payment screening. It publishes a full monthly price table for its screening starter plan. It does not publish identity document checks or business verification, and its pages do not name data hosting regions.

CoverageMesh platform: Customer Screening, Company Screening, Ongoing Monitoring, Transaction Monitoring and Payment Screening. Identity document verification and KYB not published.
PricingStarter Plan table: up to 100 monitor searches $99 a month billed annually or $119 billed monthly, up to 2,000 at $319 or $383; Agentic Starter Plan $149 to $479 billed annually ($179 to $575 monthly). Transaction monitoring and payment screening: Enterprise, "POA".
Global reachScreening draws on "thousands of sources" including OFAC, UN, HMT, EU and DFAT; 14 languages. No country count published.
Integration"API-first flexibility" with real-time API, batch and SFTP; Starter Plan bought online through a "Buy now" checkout, with access "granted within 24 hours".
Regulatory standingMesh article lists "ISO27001 compliance" and "SOCII compliance" (SOC 2 type not stated). Testimonials from Santander Corporate and Commercial Banking and Hampshire Trust Bank.
Data protectionStates "The ability to separate and segregate data geographically"; no regions or retention terms published.
Date readRead 22 October 2026
  • Coverage: 3/5. Screening, ongoing monitoring and transaction monitoring published; identity checks and KYB not published.
  • Published pricing: 4/5. Full monthly price table for screening; transaction monitoring not priced.
  • Global reach: 2/5. Named sanctions sources but no country or list count.
  • Integration: 4/5. API, batch and SFTP with online purchase; no onboarding time beyond account access.
  • Regulatory standing: 4/5. ISO 27001 and SOC 2 stated without type, with named regulated banks.
  • Data protection: 1/5. Geographic segregation stated without regions or retention terms.

Facts read on 22 October 2026 from: complyadvantage.com, complyadvantage.com, complyadvantage.com, complyadvantage.com, complyadvantage.com.

Trulioo

A global identity and business verification provider with sanctions and AML screening and ongoing screening. It holds ISO 27001 since 2015 and SOC 2 Type 2 and names payment clients. It does not publish prices, transaction monitoring or data hosting regions.

CoveragePerson Verification (KYC), Business Verification (KYB) with UBO Discovery, and AML Screening; "The checks and monitoring available depend on the product and configuration." Transaction monitoring not published.
PricingNot published on the pages read.
Global reachDocument verification across "181 countries" (Airwallex case study). No document count published.
Integration"MCP, APIs, and SDKs" for applications and workflows; developer portal.
Regulatory standing"Trulioo has been ISO 27001-certified since 2015"; SOC 2 Type 2 obtained February 2024. Named clients include Airwallex, Nium, EQ Bank and J.P. Morgan Payments.
Data protectionInfrastructure with "automatic failover across multiple regions"; regions and retention periods not stated.
Date readRead 22 October 2026
  • Coverage: 4/5. KYC, KYB, screening and ongoing screening published; transaction monitoring not published.
  • Published pricing: 0/5. Not published on the pages read.
  • Global reach: 3/5. 181 countries for document checks published in a case study; no document count.
  • Integration: 3/5. API, SDK and developer portal; no no-code tool or onboarding time published.
  • Regulatory standing: 5/5. ISO 27001 and SOC 2 Type 2 with named regulated payment clients.
  • Data protection: 1/5. Multi-region hosting stated without naming regions or retention terms.

Facts read on 22 October 2026 from: www.trulioo.com, www.trulioo.com.

Persona

An identity platform covering personal and business verification with watchlist and adverse media reports. It publishes the strongest data protection terms in this edition, a choice of US or EU data centres, and a wide set of certifications. Its only published price is a "starting at" figure, and it does not publish transaction monitoring or country counts.

CoverageKYC and KYB listed as use cases; "Risk & screening reports" include watchlists and adverse media; Growth plan includes "KYB services". Transaction monitoring not published.
PricingEssential: "Starting at $250/month (minimum contract term of 12 months)". Growth and Enterprise: "Contact us".
Global reachHomepage states "~1B identities verified"; no country or document counts on the pages read.
IntegrationFlow Editor and Dynamic Flow for building journeys; developer documentation and API reference; startup programme published.
Regulatory standing"Audited against SOC 2 Type II and ISO 27001 requirements"; FedRAMP authorised. Named clients include Payoneer, Travelex, Brex, Uphold and Ripple.
Data protectionHosted on Google Cloud; customers choose US or EU data centres: "Your data is processed and stored in the region you select." Automated deletion by user population or data type, field-level redaction, deletion by API or dashboard.
Date readRead 22 October 2026
  • Coverage: 3/5. KYC, KYB and watchlist screening published; ongoing monitoring and transaction monitoring not confirmed on the pages read.
  • Published pricing: 1/5. Only a "starting at" price is published, which the method does not count.
  • Global reach: 0/5. No country or document counts published on the pages read.
  • Integration: 4/5. API, documentation and visual flow builders; no onboarding time published.
  • Regulatory standing: 5/5. SOC 2 Type II, ISO 27001 and FedRAMP with named regulated clients.
  • Data protection: 5/5. Choice of US or EU storage and detailed client retention and deletion controls.

Facts read on 22 October 2026 from: withpersona.com, withpersona.com, withpersona.com.

Alloy

An identity and fraud decisioning platform that runs KYC, KYB, sanctions screening, perpetual monitoring and transaction monitoring through one workflow over 300+ data vendors. It holds SOC 2 Type 2 and states 900+ financial clients. It does not publish prices or country coverage.

CoverageKYC (CIP, CDD, EDD), KYB with beneficial owners, sanctions and PEP screening, perpetual KYC and KYB, and transaction monitoring covering "P2P, ACH, RTP/FedNow, stablecoin, wire, and card".
PricingNot published on the pages read.
Global reach"300+ data solutions"; no country or document counts.
IntegrationSDK, developer hub with APIs; "One API call can trigger AML, KYB, and KYC checks"; partners MANTL, nCino and Narmi.
Regulatory standing"SOC 2 Type 2 certified." "Trusted by 900+ financial organizations"; named clients include Brex and Jovia Financial.
Data protectionHosted on AWS with the data centre "in the United States"; encrypted backups kept 30 days; no client retention controls published.
Date readRead 22 October 2026
  • Coverage: 5/5. KYC, KYB, screening, ongoing monitoring and transaction monitoring all published.
  • Published pricing: 0/5. Not published on the pages read.
  • Global reach: 1/5. Data vendor count published; no country or document counts.
  • Integration: 3/5. API and SDK; no no-code tool or onboarding time published.
  • Regulatory standing: 4/5. SOC 2 Type 2 with named regulated clients; ISO 27001 not stated for Alloy itself.
  • Data protection: 2/5. US storage location stated; no client retention controls.

Facts read on 22 October 2026 from: www.alloy.com, www.alloy.com.

Jumio

An identity verification provider with AML screening and transaction monitoring. It publishes 5,000+ ID types across 200 countries and territories and SOC 2 Type 2, ISO 27001 and PCI DSS. It does not publish prices, business verification or data storage terms.

CoverageKYX platform lists Identity Verification and AML Screening ("Automatically screen your customers against watchlists"); Jumio Transaction Monitoring named in a Jumio press release. KYB and ongoing monitoring not published.
PricingNot published on the pages read.
Global reach"Supports more than 5,000 ID types across 200 countries and territories."
IntegrationAPIs and SDKs including native iOS and Android, and an embeddable web client.
Regulatory standingPrivacy centre: "ISO/IEC 27001:2022, PCI DSS, and SOC2 Type 2". Press release (13 September 2022): SOC2 Type 2 for the KYX platform. Client logos include HSBC and Webull.
Data protectionNot addressed on the pages read.
Date readRead 22 October 2026
  • Coverage: 3/5. Identity checks, AML screening and transaction monitoring published; KYB and ongoing monitoring not published.
  • Published pricing: 0/5. Not published on the pages read.
  • Global reach: 4/5. 200 countries and territories and 5,000+ ID types published.
  • Integration: 3/5. API, SDK and web client; no no-code tool or onboarding time.
  • Regulatory standing: 5/5. SOC 2 Type 2, ISO 27001:2022 and PCI DSS, with named regulated clients shown as logos.
  • Data protection: 0/5. Not published on the pages read.

Facts read on 22 October 2026 from: www.jumio.com, www.jumio.com, www.jumio.com, jumio.com.

Sardine

A fraud and financial crime platform covering identity checks, business checks, sanctions screening, ongoing monitoring and transaction monitoring with 500+ prebuilt rules. It does not publish prices, country counts, certifications by name or data storage terms.

CoverageGlobal KYC, Global KYB with screening of "business owners, UBOs, and controllers", sanctions screening ("sanctions, PEPs, and adverse media"), ongoing monitoring (CDD refreshes and periodic reassessments) and transaction monitoring.
PricingNot published on the pages read.
Global reachVerifies customers "globally" using "150+ data sources"; no country or document counts.
IntegrationAPIs and a documentation site referenced; "500+" pre-built rules for AML scenarios; teams can "backtest against historical data". No SDK, no-code builder or onboarding time published on the pages read.
Regulatory standingSecurity page: Trust Center holds "SOC2, pentest reports, and other security documentation" (type not stated; documents on request). Homepage logos include Nubank, LHV and First Federal Bank of Kansas City.
Data protectionNot published on the pages read.
Date readRead 22 October 2026
  • Coverage: 5/5. KYC, KYB, sanctions screening, ongoing monitoring and transaction monitoring all published.
  • Published pricing: 0/5. Not published on the pages read.
  • Global reach: 1/5. Global coverage stated without country or document counts.
  • Integration: 3/5. API and a prebuilt AML rule library with backtesting; no SDK, no-code tool or onboarding time published.
  • Regulatory standing: 3/5. SOC 2 report referenced without type; regulated clients shown as logos only.
  • Data protection: 0/5. Not published on the pages read.

Facts read on 22 October 2026 from: www.sardine.ai, www.sardine.ai, www.sardine.ai, www.sardine.ai.

Entrust (formerly Onfido)

Onfido is now part of Entrust and trades as Entrust Identity Verification. It publishes document, biometric and data verification, watchlist reports with ongoing monitoring, and a no-code workflow builder. The pages read do not publish prices, certifications, country counts or data storage terms, and the supported documents page could not be opened.

CoverageDocument, biometric and data verification; watchlist reports covering sanctions, PEPs and adverse media with an Ongoing Monitoring add-on. KYB and transaction monitoring not published.
PricingNot published on the pages read.
Global reachNot stated on the pages read.
Integration"Workflow Studio" to design onboarding journeys with "no coding required"; Smart Capture SDKs; API reference in developer documentation.
Regulatory standingDeveloper documentation: "Onfido (now part of Entrust) is SOC 2 Type II compliant" and "certified by BSI to ISO 27001 under certificate number IS 660122." Named clients include Revolut and Principal Financial Group.
Data protectionNot published on the pages read.
Date readRead 22 October 2026
  • Coverage: 3/5. Identity checks, screening and ongoing monitoring published; KYB and transaction monitoring not published.
  • Published pricing: 0/5. Not published on the pages read.
  • Global reach: 0/5. No country or document counts on the pages read.
  • Integration: 4/5. No-code builder, SDKs and API documentation; no onboarding time.
  • Regulatory standing: 5/5. SOC 2 Type II and ISO 27001 with named regulated clients.
  • Data protection: 0/5. Not published on the pages read.

Facts read on 22 October 2026 from: www.entrust.com, documentation.identity.entrust.com, documentation.identity.entrust.com.

The badge.

Ranked providers may show the index badge on their own site.

The badge is free. The one condition is that it links to this page, so that a reader can check the score and the method behind it. It is withdrawn if the link is removed or the provider leaves the index.

Download the badge (SVG)

Embed: <a href="https://www.buckinghamcapitalconsulting.com/kyc-aml-index"><img src="https://www.buckinghamcapitalconsulting.com/assets/bcc-kyc-aml-index-2026.svg" alt="Ranked in the Buckingham Capital Consulting Identity Verification and Transaction Monitoring Index 2026" width="300"></a>

Ranked in the Buckingham Capital Consulting Identity Verification and Transaction Monitoring Index 2026

Questions.

Who pays for the Buckingham Capital Consulting Identity Verification and Transaction Monitoring Index?

Nobody. No provider pays to be assessed, listed or ranked.

Why does coverage carry the most weight?

Because a regulated firm must check customers at onboarding, screen them against sanctions lists, keep monitoring them and watch their transactions. Each extra provider adds a contract, an integration and a gap between systems that a regulator or auditor will ask about.

Why do "from" prices not count?

A "from" or "starting at" price is the lowest price for the smallest or largest plan and does not tell a firm what it will pay. Only a published per-check or monthly price with its minimum counts.

Does using a provider meet my AML obligations?

No. The firm stays responsible for its own customer checks and monitoring under its regulator's rules. A provider supplies the checks; the firm's policies, risk assessment and people decide what to do with the results.

How often is the index updated?

Every provider is re-read monthly and a new edition is published every October.

Is this advice?

No. The index compares published facts and is not a recommendation to use a particular provider.

Speak to an expert.

Tell us what you need and where you operate.