Alternatives to Ondato

Evervault

🇮🇪 Ireland

Evervault is a European cryptography company that lets developers encrypt sensitive data in transit and at rest without rearchitecting their systems. Rather than forcing teams to build custom encryption pipelines or rely on legacy HSM infrastructure, Evervault provides APIs and SDKs that integrate directly into applications—turning what was once a compliance headache into a developer experience problem. The company operates at the infrastructure layer, sitting between your database and your users. It handles encryption orchestration, tokenization, and secure computation without requiring you to manage keys or understand the underlying cryptography. This means your data stays encrypted in your own cloud account, your keys stay with you, and third-party vendors never see plaintext information. In a European market where data residency and privacy regulations have teeth, Evervault solves a real problem: companies need to protect customer data but can't afford to rebuild their entire tech stack. The platform works with existing databases, APIs, and infrastructure, making compliance less of an engineering ordeal. Evervault positions itself as the encryption layer for modern applications—not a database replacement, not a VPN, but the plumbing that makes data protection feel native to your code. It's particularly relevant for fintech companies handling payment cards, personal identifiers, and healthcare records across distributed systems. The company is helping reshape how European companies think about security: not as an afterthought, but as architecture.

Founded 2020

ComplyAdvantage

🇬🇧 United Kingdom

Charles Delingpole had already built two companies before this one — The Student Room, the UK's largest student community, started when he was sixteen, and MarketInvoice, the invoice finance platform he co-founded after Cambridge. It was at MarketInvoice that he met the problem that became ComplyAdvantage: every regulated financial business is legally required to screen its customers against sanctions lists, politically exposed persons registers, and adverse media — and the databases everyone relied on for this were built by armies of analysts manually copying names into lists. The data was stale, the false-positive rates were punishing, and compliance teams spent their days clearing alerts on people who shared a name with someone on a watchlist. In 2014 he founded ComplyAdvantage in London on a simple inversion: instead of selling software that queries someone else's manually curated lists, build the risk database itself — with machine learning, from primary sources, updating in real time. That database is the product. ComplyAdvantage continuously processes millions of structured and unstructured data points a day — sanctions updates, regulatory notices, court records, news in dozens of languages — into risk profiles on more than 150 million entities, surfacing tens of thousands of new risk events daily. On top of the data layer sit the tools regulated firms actually deploy: customer screening at onboarding, ongoing monitoring as risk profiles change, payment and transaction screening, and — since 2023 — a fraud detection product that extends the platform from "who is this customer" to "what is this customer doing." The strategic position is precise: this is the data layer of financial crime compliance, sold as an API, competing directly with Dow Jones Risk & Compliance, LSEG's World-Check, and LexisNexis — incumbents whose core asset is exactly the manual process ComplyAdvantage was built to obsolete. The customer base is over 500 enterprises across 75 countries, weighted toward the businesses that grew up alongside it: fintechs, payment companies, crypto platforms, and digital banks that needed compliance infrastructure as programmable as the rest of their stack. Named clients have included Gemini and TransferMate, with partnerships spanning blockchain analytics (Elliptic) and Banking-as-a-Service (Raisin Bank). The company was selected as a World Economic Forum Technology Pioneer, employs around 480 people, and has raised over $150 million from Balderton Capital, Index Ventures, Ontario Teachers' Pension Plan, and Goldman Sachs. In December 2023 it acquired Golden, the a16z-backed knowledge-graph startup, folding structured entity data and its engineering team into the core database. Leadership formalised the company's second act in early 2023: Delingpole moved to executive chairman and Vatsa Narasimha — previously CEO of the trading platform OANDA, and ComplyAdvantage's COO through its scaling years — took over as chief executive. The regulatory backdrop since has run entirely in the company's favour. AMLD6 and the EU's new AML Authority raise screening and monitoring obligations across the continent from 2027, and every expansion of the compliance perimeter — crypto under MiCA, instant payments with sanctions screening at ten-second settlement speeds — enlarges the addressable market for exactly what ComplyAdvantage sells. The honest read is about the market's direction. Financial crime and identity infrastructure is consolidating fast — Featurespace went to Visa, Fourthline is merging with Veridas, World-Check sits inside LSEG — which leaves ComplyAdvantage as one of the few independent, at-scale data players left standing. That independence is a genuine selling point for customers wary of buying compliance data from a card network or an exchange group, and it simultaneously makes the company one of the most obvious acquisition targets in European regtech. The other open question is the arms race it chose: the same generative AI that makes screening sharper is making the launderers' synthetic identities and shell structures cheaper to produce. ComplyAdvantage's bet since 2014 has been that the detection side compounds faster. So far, the market has agreed.

Founded 2014

Sumsub

🇬🇧 United Kingdom

Three brothers — Andrey Sever and his twins Jacob and Peter — founded Sumsub in 2015 to solve a problem that regulated digital businesses had been solving badly: verifying who a customer is, fast enough that they don't abandon signup, and rigorously enough that a regulator accepts it. What began as a document verification vendor has become an onboarding orchestration platform covering the full compliance lifecycle: identity verification, business verification (KYB) including ownership-structure analysis, AML screening, transaction monitoring, fraud prevention, and case management, delivered through API and SDKs. The scale claims are aggressive and specific: over 6,500 document types across 220 countries and regions, verification in under a minute on average, and conversion rates published per market — the kind of numbers a company only publishes when conversion is its main selling point against competitors. The methodology follows FATF recommendations and is built against FINMA, FCA, CySEC, MAS and BaFin requirements, which tells you the customer profile: crypto exchanges, trading platforms, fintechs, marketplaces and gaming operators, in that rough order of historical concentration. Two things distinguish Sumsub in this directory's context. First is what happened in March 2022: following the invasion of Ukraine, the company ceased its Russian operations, chartering flights to relocate team members out of Russia, Ukraine and Belarus — an unusually consequential decision for a company that had built engineering capacity there, and one that reset its corporate footprint toward London and Limassol. Second is where it is going: reusable identity, so a verified user can onboard elsewhere in a few clicks, and — launched January 2026 — AI agent verification, binding automated agents to verified human identities. That second product is a direct answer to the agentic commerce thesis Checkout.com and Adyen have both been building toward. If AI agents start transacting on people's behalf, someone has to establish which human is accountable, and Sumsub is betting that becomes an identity product.

Founded 2015

Hawk

🇩🇪 Germany

Hawk brings machine learning firepower to financial crime detection, sitting at the intersection of compliance and computational intelligence. Rather than relying on static rule sets that miss novel fraud patterns, Hawk deploys adaptive algorithms that learn from transaction behavior in real time, catching what traditional systems let slip through the cracks. The platform ingests transaction data across multiple channels—payments, transfers, accounts—and surfaces suspicious activity before it becomes a problem. For banks and fintechs drowning in false positives from legacy systems, Hawk promises a different approach: smarter, faster, less noise. Its technology sits on the boundary between compliance necessity and operational efficiency, helping institutions detect actual threats rather than gaming alert thresholds. In an environment where financial crime is increasingly sophisticated and regulatory pressure unrelenting, Hawk positions itself as the thinking alternative to checkbox compliance, offering institutions a genuine competitive edge in the race to stay ahead of bad actors.

Founded 2019

Fenergo

🇮🇪 Ireland

Compliance has long been the unglamorous backroom operation of financial services—heavy, expensive, and often painfully slow. Fenergo flips that script by turning regulatory friction into operational advantage. The Dublin-based software company automates the gruelling work of onboarding clients, managing their data, and staying compliant with an ever-shifting maze of regulations. What banks and investment firms once treated as a cost center, Fenergo repositions as competitive edge. At its core, Fenergo is a digital client lifecycle management platform. It consolidates onboarding, KYC, AML screening, sanctions checks, and ongoing regulatory monitoring into a single, integrated workflow. Rather than legacy institutions juggling multiple point solutions and manual spreadsheet cultures, Fenergo orchestrates the entire client journey—from first interaction through renewal—in a single intelligent system. The software ingests regulatory data, flags anomalies, and automates approvals where rules allow, freeing compliance teams to focus on judgment calls that actually require human expertise. What sets Fenergo apart in a crowded RegTech space is its disciplined focus on the regulated financial institution as customer, not the consumer. While plenty of fintechs chase sexy consumer-facing applications, Fenergo has built deep, sticky relationships with banks, asset managers, and brokers who need sophisticated, audit-proof compliance infrastructure. It operates at institutional scale—handling millions of client records, complex entity hierarchies, and regulatory jurisdictions spanning continents. In an era when regulatory fines have become nine-figure line items and reputational damage from compliance failures can tank a bank's stock price, Fenergo sits at the nerve center of institutional risk management. It's not the flashy side of fintech, but it's arguably the most essential.

Founded 2008

IDnow

🇩🇪 Germany

Knowing who your customer is has always been a regulatory requirement in financial services. Proving it, digitally, in real time, across dozens of jurisdictions with different document standards and compliance frameworks, is a genuinely hard engineering and operational problem. IDnow was founded in Munich in 2014 to solve it. Its identity verification platform offers a range of methods — video identification, automated AI-driven document checks, and eID integration — giving regulated businesses the flexibility to choose the right verification approach for their risk profile and customer base. The company has built particular depth in the German market, where video identification has a specific legal status under financial regulation, but has expanded across Europe serving banks, insurance companies, crypto platforms, and any business that needs to onboard customers with confidence. IDnow was acquired by Corsair Capital in 2021 and has continued expanding through partnerships and product development. In a regulatory environment where digital onboarding requirements are tightening and fraud is becoming more sophisticated, the identity verification layer is one of the most critical — and most contested — parts of the fintech stack.

Founded 2014

Feedzai

🇵🇹 Portugal

Feedzai is a fraud detection and financial crime prevention platform that works behind the scenes for banks, payment processors, and fintech companies across Europe and beyond. The company uses machine learning to spot suspicious transactions in real time, flagging fraud before it costs institutions millions while keeping legitimate customers from being blocked unnecessarily. Unlike legacy fraud systems that rely on rigid rules and lag behind new attack patterns, Feedzai's approach adapts continuously, learning from emerging threats across its network of financial institutions. The platform handles everything from card fraud and money laundering to synthetic identity schemes and account takeover attempts. It's become a critical layer of defense for institutions managing enormous transaction volumes, where manual review is impossible and false positives destroy customer experience. In the European market, Feedzai competes alongside more traditional risk vendors but stands out through its speed and sophistication. Banks increasingly rely on AI-driven systems rather than rule-based gatekeepers, and Feedzai has positioned itself as the intelligent alternative that doesn't just block transactions—it understands behavior. The company serves everyone from global systemically important banks to smaller regional players, offering both real-time decisioning and historical analytics. Feedzai represents a broader shift in how financial institutions approach security: from reactive policing to predictive intelligence.

Founded 2010

SEON

🇭🇺 Hungary

SEON exists because its founders ran a cryptocurrency exchange that was being defrauded. Tamás Kádár and Bence Jendruszák built an internal system in 2016–2017 that scored users on their digital footprint — feed it an email, phone number or IP, and it returns what social accounts that email is registered on, how old the number is, what the device looks like, and dozens of other signals correlated against fraud outcomes. They then realised the anti-fraud system was worth more than the exchange, wound the exchange down, and launched SEON as software in 2017 in Budapest. The digital footprint approach is the differentiator. Where Featurespace and Sardine emphasise behavioural biometrics and Feedzai sells enterprise transaction decisioning, SEON's core signal is enrichment: whether a person leaves the digital residue a real person leaves, returned in around 200 milliseconds. It layers AML screening and transaction monitoring on top, positioning as a single command centre for fraud and compliance. More than 5,000 businesses use it, including Wise and Revolut, and the company claims 15 million transactions secured daily. The funding history is the clearest marker of Hungarian fintech's arrival. SEON's 2021 Series A of €10 million was the largest in Hungary's history — with angels including founders of N26, SumUp, Tide, Onfido and ComplyAdvantage — followed by a $94 million Series B led by IVP in 2022 at a $500 million valuation, and an $80 million Series C led by Sixth Street Growth in September 2025. Total funding stands at $187 million. The honest caveat for a European directory: SEON's headquarters is now Austin, Texas, with Budapest as its engineering base and London also in the mix. It is a Hungarian-founded company that has followed its growth market to the US, which is worth stating plainly rather than glossing.

Founded 2017

Callsign

🇬🇧 United Kingdom

Fraud prevention and digital identity verification have become the unglamorous but critical backbone of modern fintech. Callsign approaches this from an angle most security vendors miss: behavioral biometrics and real-time risk assessment that happen silently in the background, rather than tripping up legitimate users with friction-heavy verification steps. The London-based company combines device intelligence, behavioral patterns, and contextual analysis to spot fraudsters and authenticate users without making them jump through hoops. Where traditional identity verification often feels like airport security—exhausting and necessary—Callsign's approach is more like a doorman who knows your face. It's built for financial services, payments processors, and regulated platforms that need to balance security with user experience. The company works across account opening, transaction authentication, and ongoing monitoring, meaning it can catch both the obvious fraud attempts and the sophisticated ones that look almost legitimate. In a landscape crowded with point solutions, Callsign stands out by offering something closer to continuous, intelligent risk assessment than binary yes-or-no identity checks. For European fintechs growing fast and handling real money, this kind of frictionless security is no longer a nice-to-have—it's becoming the baseline expectation.

Founded 2012

Fourthline

🇳🇱 Netherlands

Fourthline didn't start as a KYC company. It started as a payment institution. Krik Gunning and Chris van Straeten founded Safened in Amsterdam, licensed by the Dutch Central Bank as a regulated payment provider. As Safened onboarded its own customers, it built identity verification technology capable enough that other banks and fintechs started asking to use it directly. The demand was real and growing — digital financial services were expanding rapidly but compliance infrastructure hadn't kept pace. In 2019 Gunning and van Straeten spun the KYC operation out as a standalone company and renamed it Fourthline. The name refers to compliance being the fourth line of defence in financial crime prevention — after business operations, risk management, and internal audit. It's a deliberately serious framing for a company that treats KYC not as a box to tick but as a technical problem worth solving properly. While many identity verification providers offer generic document checks, Fourthline built its platform around the regulatory requirements of Europe's strictest financial supervisors — the kind of compliance depth that a neobank launching in Germany or a broker entering the Netherlands actually needs to satisfy its regulator, not just its legal team. The platform covers the full KYC and AML stack through a single API: document verification, biometric checks with liveness detection, AML and sanctions screening, risk scoring, proof of address, and ongoing customer monitoring throughout the customer lifecycle. The modular architecture means regulated institutions can pick the components they need rather than buying a fixed bundle — a practical advantage for fintechs that need identity verification at onboarding but different monitoring requirements at scale. The client list is a reasonable proxy for the quality of the product. Fourthline verifies identities for N26, Qonto, Trade Republic, flatexDEGIRO, Scalapay, Shine, and Bitpanda — regulated financial businesses across Europe that operate under strict supervisory scrutiny and cannot afford onboarding failures. The company employs around 225 people and has raised approximately $70 million in funding, primarily from Finch Capital. Leadership and structure have both shifted in 2026. In March, Fourthline appointed Paul Stoddart as CEO, with co-founder Krik Gunning moving into an advisory role after leading the company since its founding. Then in July came the bigger move: Fourthline and Veridas, the Spanish biometrics specialist, agreed to merge their identity platforms. The combination pairs Fourthline's KYC and AML compliance orchestration — built for Europe's strictest supervisors — with Veridas's facial and voice biometric technology, and extends the group's reach beyond Europe into Latin America, where Veridas has an established presence. The strategic logic tracks the regulatory calendar. The EU's new Anti-Money Laundering Regulation comes into force in July 2027, substantially raising compliance requirements for financial institutions across Europe and expanding the addressable market for exactly this kind of infrastructure. Identity verification is consolidating ahead of that wave — and scale matters when every regulated institution on the continent is about to need more of what you sell.

Founded 2017

ION Group

🇬🇧 United Kingdom

Andrea Pignataro founded ION in London in 1999, after leaving a trading role at Salomon Brothers with a conviction that the software running global markets was held together with too much manual process. Over the following two and a half decades he built ION into one of the largest, most acquisitive players in capital-markets technology — absorbing dozens of specialist vendors, including Fidessa and Broadway Technology, and folding them into a single group. The core business is still the unglamorous plumbing of institutional finance: trading platforms across equities, fixed income, foreign exchange, and cleared derivatives; risk management; post-trade processing; clearing and settlement; and market data. Investment banks, hedge funds, and corporate treasuries run parts of their daily operations on ION's systems, often without their own customers ever knowing it. Less visible is ION's regulatory technology line. Products including ION LookOut and Fidessa Surveillance handle trade surveillance, market-abuse detection, and regulatory reporting across multiple jurisdictions, and ION's compliance tools have placed in FinTech Global's RegTech 100 list for three consecutive years. It's a smaller part of the business than the trading and post-trade platforms, but a genuine one — which is why ION appears under both Capital Markets and RegTech in this directory, rather than just one. The company is headquartered in London, employs more than 13,000 people across over 50 offices worldwide, and remains privately held under Pignataro's control — a scale most consumer-facing fintechs never approach, built almost entirely on customers who are themselves in finance.

Founded 1999

Ravelin

🇬🇧 United Kingdom

Ravelin is a fraud prevention and risk intelligence platform built for the modern payment landscape. Rather than relying on outdated blacklists and rule engines, the company uses behavioral analytics and machine learning to distinguish legitimate transactions from fraudulent ones in real time. The platform sits between merchants and payment processors, analyzing transaction patterns, user behavior, and contextual signals to catch fraud before it hits the books. Ravelin's approach acknowledges a fundamental tension in fintech: overly aggressive fraud screening kills conversions, while loose controls breed chargebacks. The company's API-first architecture means it integrates directly into checkout flows without requiring merchants to rebuild their payments infrastructure. What sets Ravelin apart is its focus on the nuance between fraud risk and business risk. Many competitors offer binary accept-or-decline decisions; Ravelin surfaces risk scores and behavioral indicators, letting merchants make informed decisions about which transactions to challenge, approve, or send to manual review. This flexibility matters especially for high-value or unusual transactions where false positives hurt revenue. Ravelin operates primarily in the B2B space, serving mid-market and enterprise merchants across e-commerce, travel, and fintech. The company competes in a crowded fraud detection market dominated by established players, but gains ground through superior machine learning models and a merchant-centric product philosophy. As payment volumes continue to surge across Europe and digital fraud becomes increasingly sophisticated, Ravelin's technology sits at a critical chokepoint in the transaction flow.

Founded 2014