Sanctions Screening Providers in Europe

ComplyAdvantage

Charles Delingpole had already built two companies before this one — The Student Room, the UK's largest student community, started when he was sixteen, and MarketInvoice, the invoice finance platform he co-founded after Cambridge. It was at MarketInvoice that he met the problem that became ComplyAdvantage: every regulated financial business is legally required to screen its customers against sanctions lists, politically exposed persons registers, and adverse media — and the databases everyone relied on for this were built by armies of analysts manually copying names into lists. The data was stale, the false-positive rates were punishing, and compliance teams spent their days clearing alerts on people who shared a name with someone on a watchlist. In 2014 he founded ComplyAdvantage in London on a simple inversion: instead of selling software that queries someone else's manually curated lists, build the risk database itself — with machine learning, from primary sources, updating in real time. That database is the product. ComplyAdvantage continuously processes millions of structured and unstructured data points a day — sanctions updates, regulatory notices, court records, news in dozens of languages — into risk profiles on more than 150 million entities, surfacing tens of thousands of new risk events daily. On top of the data layer sit the tools regulated firms actually deploy: customer screening at onboarding, ongoing monitoring as risk profiles change, payment and transaction screening, and — since 2023 — a fraud detection product that extends the platform from "who is this customer" to "what is this customer doing." The strategic position is precise: this is the data layer of financial crime compliance, sold as an API, competing directly with Dow Jones Risk & Compliance, LSEG's World-Check, and LexisNexis — incumbents whose core asset is exactly the manual process ComplyAdvantage was built to obsolete. The customer base is over 500 enterprises across 75 countries, weighted toward the businesses that grew up alongside it: fintechs, payment companies, crypto platforms, and digital banks that needed compliance infrastructure as programmable as the rest of their stack. Named clients have included Gemini and TransferMate, with partnerships spanning blockchain analytics (Elliptic) and Banking-as-a-Service (Raisin Bank). The company was selected as a World Economic Forum Technology Pioneer, employs around 480 people, and has raised over $150 million from Balderton Capital, Index Ventures, Ontario Teachers' Pension Plan, and Goldman Sachs. In December 2023 it acquired Golden, the a16z-backed knowledge-graph startup, folding structured entity data and its engineering team into the core database. Leadership formalised the company's second act in early 2023: Delingpole moved to executive chairman and Vatsa Narasimha — previously CEO of the trading platform OANDA, and ComplyAdvantage's COO through its scaling years — took over as chief executive. The regulatory backdrop since has run entirely in the company's favour. AMLD6 and the EU's new AML Authority raise screening and monitoring obligations across the continent from 2027, and every expansion of the compliance perimeter — crypto under MiCA, instant payments with sanctions screening at ten-second settlement speeds — enlarges the addressable market for exactly what ComplyAdvantage sells. The honest read is about the market's direction. Financial crime and identity infrastructure is consolidating fast — Featurespace went to Visa, Fourthline is merging with Veridas, World-Check sits inside LSEG — which leaves ComplyAdvantage as one of the few independent, at-scale data players left standing. That independence is a genuine selling point for customers wary of buying compliance data from a card network or an exchange group, and it simultaneously makes the company one of the most obvious acquisition targets in European regtech. The other open question is the arms race it chose: the same generative AI that makes screening sharper is making the launderers' synthetic identities and shell structures cheaper to produce. ComplyAdvantage's bet since 2014 has been that the detection side compounds faster. So far, the market has agreed.

Founded 2014

Pliant

Pliant is a compliance automation platform built for financial services firms that are tired of drowning in spreadsheets and manual processes. Rather than layering another point solution onto an already fragmented tech stack, Pliant unifies risk, compliance, and audit workflows into a single operating system. The platform handles the tedious work—continuous monitoring, policy enforcement, evidence collection, regulatory reporting—that currently consumes entire compliance teams and slows down growth.

Founded 2020

Sumsub

Three brothers — Andrey Sever and his twins Jacob and Peter — founded Sumsub in 2015 to solve a problem that regulated digital businesses had been solving badly: verifying who a customer is, fast enough that they don't abandon signup, and rigorously enough that a regulator accepts it. What began as a document verification vendor has become an onboarding orchestration platform covering the full compliance lifecycle: identity verification, business verification (KYB) including ownership-structure analysis, AML screening, transaction monitoring, fraud prevention, and case management, delivered through API and SDKs. The scale claims are aggressive and specific: over 6,500 document types across 220 countries and regions, verification in under a minute on average, and conversion rates published per market — the kind of numbers a company only publishes when conversion is its main selling point against competitors. The methodology follows FATF recommendations and is built against FINMA, FCA, CySEC, MAS and BaFin requirements, which tells you the customer profile: crypto exchanges, trading platforms, fintechs, marketplaces and gaming operators, in that rough order of historical concentration. Two things distinguish Sumsub in this directory's context. First is what happened in March 2022: following the invasion of Ukraine, the company ceased its Russian operations, chartering flights to relocate team members out of Russia, Ukraine and Belarus — an unusually consequential decision for a company that had built engineering capacity there, and one that reset its corporate footprint toward London and Limassol. Second is where it is going: reusable identity, so a verified user can onboard elsewhere in a few clicks, and — launched January 2026 — AI agent verification, binding automated agents to verified human identities. That second product is a direct answer to the agentic commerce thesis Checkout.com and Adyen have both been building toward. If AI agents start transacting on people's behalf, someone has to establish which human is accountable, and Sumsub is betting that becomes an identity product.

Founded 2015

Signicat

Signicat solved a problem that only exists in Europe. Across the continent, national electronic identity schemes — BankID in Sweden and Norway, NemID/MitID in Denmark, iDIN in the Netherlands, itsme in Belgium — mean that verifying a citizen means integrating with a different sovereign or bank-consortium system in every market. Founded in Trondheim in 2006, Signicat built the hub: a single integration point giving access to the widest available pool of eIDs, registry lookups, document scanning and electronic signature, so a bank entering five countries integrates once instead of five times. The customer list reflects how deeply embedded it is in Nordic and European financial services: DNB, Klarna, Rabobank, Santander, Société Générale, Western Union, and non-financial names including BMW and Schibsted. Nordic Capital acquired the company in 2019, when it had around 115 employees and roughly €19 million in revenue, and used it as a buy-and-build platform. Seven acquisitions followed — Idfy in 2019 to consolidate the Nordics, Connectis in 2020 to build out the European platform, and others since — taking Signicat past 500 employees and into more than 45 markets. The strategic position is about to be tested by the thing that created it. eIDAS 2 and the European Digital Identity Wallet, which member states are required to offer citizens, are an attempt to standardise exactly the fragmentation Signicat monetises. The optimistic reading is that a new scheme in every member state is more integration work, not less, and that someone still has to orchestrate acceptance, verification and signature on top — which is Signicat's business. The pessimistic reading is that a genuinely interoperable wallet erodes the value of a hub. Signicat's answer so far has been to move up the stack into orchestration and fraud, and its position across both regulated and non-regulated verticals gives it more room than a pure eID broker would have.

Founded 2006

SIX Group

SIX is what happens when a country's banks decide to own their own plumbing. Formed in 2008 from the merger of the SWX Swiss Exchange, SIS and Telekurs, SIX Group Ltd is owned by around 120 Swiss and international financial institutions — the same banks that use it — and operates the infrastructure on which the Swiss financial centre runs: the stock exchange, securities settlement and custody, interbank payment processing, and the financial data that prices everything else. The name stands for Swiss Infrastructure and Exchange, and the ownership structure explains the strategy. A consortium-owned utility optimises for reliability and long-term position rather than for quarterly earnings, which is why SIX has been able to make acquisitions that took years to pay off. The largest of those reshaped the company. SIX acquired Bolsas y Mercados Españoles — the operator of the Spanish stock exchange — in 2020, giving a Swiss, non-EU company a substantial regulated presence inside the European Union, and it followed in 2025 with the acquisition of the UK's Aquis Exchange. The strategic direction is explicitly pan-European: SIX has said it intends to combine SIX x-clear with BME to create a unified multi-asset central counterparty across Europe, and the stated ambition is to be a genuinely European infrastructure provider rather than a Swiss one with foreign subsidiaries. The group runs four business units — Exchanges, Securities Services, Financial Information, and Banking Services — with roughly 4,000 employees. Operationally, 2025 was the strongest year in the company's history and the accounts still showed a loss. Net operating income rose 4.7% to CHF 1,496.5 million, EBITDA excluding transformation costs jumped 22.2% to CHF 542.3 million, and adjusted group net profit reached CHF 247.2 million, up 20.9%. The reported group result was a loss of CHF 313.7 million — entirely because of CHF 560.9 million in value adjustments on the Worldline stake. That holding is the residue of the 2018 sale of SIX's card business to Worldline, paid for in shares, and it has been written down repeatedly as Worldline's price collapsed: roughly CHF 862 million in 2023, CHF 168 million in 2024, and CHF 561 million in 2025. In November 2025 SIX reclassified the participation from an associate to a financial investment and declined to take part in Worldline's capital increase, accepting dilution from 10.5% to roughly 1.3%. The stake can no longer materially damage the accounts, which is the point. Bjørn Sibbern, the Danish former Nasdaq and OMX executive who became CEO on 1 January 2025 succeeding Jos Dijsselhof, is running a group-wide programme called Scale Up 2027 targeting an EBITDA margin above 40% by the end of 2027. The part of SIX most relevant to fintech buyers is Financial Information, a business with over a thousand staff and around CHF 418 million in revenue whose roots run back to Ticker AG in 1930. It supplies reference data, pricing, indices, and — increasingly — regulatory and tax services, competing with Bloomberg, LSEG and SIX's own owners' internal capabilities. Within that unit sits a product worth noting because it addresses a compliance gap that the mainstream AML vendors mostly don't: the Sanctioned Securities Monitoring Service, which screens securities, issuers and investment restrictions rather than individuals and entities. Most sanctions screening in this directory — ComplyAdvantage, World-Check and their peers — answers the question of whether a person is sanctioned. Whether a specific ISIN is caught by an investment prohibition, or whether an issuer's ownership structure triggers a restriction, is a different data problem, and one that got considerably harder after 2022 as sanctions regimes moved from named individuals to sectoral and securities-level prohibitions. It is the kind of unglamorous, high-consequence dataset that a 95-year-old financial data business is well placed to maintain.

Founded 2008

Neterium

Neterium sits at the intersection of enterprise infrastructure and embedded finance, building payment rails for companies that want to monetize financial services without becoming fintech themselves. The platform handles the technical grunt work—card issuing, wallet management, transaction settling—letting software businesses focus on their core product while capturing new revenue streams through white-label finance. What sets Neterium apart is its developer-first approach. Rather than forcing companies into rigid integrations, it offers modular APIs that slot into existing ecosystems. You're not ripping out infrastructure; you're plugging in a financial operating system that feels native to your product. Most fintech infrastructure companies treat their partners as clients needing onboarding. Neterium treats them as extensions of its own platform—the distinction matters. It competes less with traditional payment processors and more with companies trying to build financial capabilities in-house, which is why its positioning resonates with the new wave of vertical SaaS and embedded finance platforms. In the broader landscape, Neterium represents a quiet but significant trend: the financialization of non-financial software. As consumer and business applications become increasingly financial in nature, companies like this provide the scaffolding that makes that transition possible without requiring teams to become banking experts.

Founded 2021

GSS Rose

GSS Rose sits at the intersection of compliance and commerce, solving a problem that's plagued financial institutions for years: how to screen transactions and customers against sanctions lists without breaking the user experience. The company has built a sanctions screening platform that processes transactions in real time, flagging high-risk activity while keeping the friction minimal. It's the kind of unglamorous but essential work that keeps regulated entities awake at night. What sets GSS Rose apart is its focus on speed and accuracy. Rather than treating sanctions screening as a box-ticking exercise, the platform uses advanced matching algorithms and data enrichment to catch actual threats while minimizing false positives that block legitimate transactions. This matters more than it sounds—banks waste enormous resources on alert fatigue, and GSS Rose's approach cuts through the noise. The company serves financial institutions, payment processors, and fintechs operating across Europe and beyond. In a regulatory environment that only tightens, GSS Rose has positioned itself as infrastructure for the compliance-first fintech era, handling the messy technical work that regulators demand but customers never see.

SmartKYC

Know-your-customer compliance has always been a bottleneck—slow, expensive, and prone to human error. SmartKYC automates the entire identity verification and AML screening process for financial institutions, fintechs, and payment providers across Europe. The platform combines document verification, biometric checks, and real-time sanctions screening into a single, seamless API that integrates directly into onboarding flows. What sets SmartKYC apart is its focus on speed without sacrificing accuracy. While most KYC solutions force customers through lengthy verification journeys, SmartKYC's technology delivers results in seconds, with decision-making powered by machine learning models trained on millions of real-world verifications. The platform handles everything from passport and ID document validation to liveness checks and continuous AML monitoring. The company positions itself as a middle ground between expensive legacy compliance vendors and low-cost but unreliable automated solutions. It's built for the modern fintech landscape—API-first, developer-friendly, and designed to scale across different regulatory jurisdictions without manual intervention. SmartKYC serves both consumer-facing companies that need frictionless onboarding and B2B platforms managing compliance at scale. In a market increasingly focused on regulatory precision and user experience, SmartKYC represents the practical answer: regulatory rigor that doesn't feel like friction.

Founded 2018

Confirmo

Confirmo is a compliance and identity verification platform built for the European fintech and regulated business ecosystem. At its core, it solves the friction between regulatory obligation and user experience—automating KYC, AML screening, and sanctions checks in a way that doesn't feel bureaucratic. The platform abstracts away the complexity of fragmented regulatory regimes across Europe, enabling fintechs and payment companies to launch faster while staying compliant. What sets Confirmo apart is its focus on speed and developer experience. Rather than another legacy compliance API layered in compliance-speak, the platform treats identity and fraud prevention as a product problem. It integrates with banking infrastructure, document verification, and behavioral signals to build a complete picture—then surfaces it through clean APIs and workflows designed for modern product teams. Confirmo operates in the crowded identity verification space, but its positioning around European regulatory expertise and real-time decisioning gives it a distinct angle. It's not trying to be a compliance consultant wrapped in API form; it's infrastructure for the next generation of European fintechs that need to move fast without burning through compliance resources. In the broader fintech stack, Confirmo sits at the critical intersection of onboarding and risk—the moment where regulatory pressure meets user friction. It's the kind of company that becomes invisible when it works well, which is exactly how regulatory infrastructure should feel.

Founded 2015

Koinly

Koinly started as a weekend project by someone annoyed at his own spreadsheet. Robin Singh, a developer and crypto investor, could not find a tool that handled crypto tax reporting better than the manual workbook he was maintaining himself, so he built one — reportedly reaching a working product within four months of starting in 2018. The framing on the company's own about page has not changed since: crypto taxes shouldn't require a finance degree. That origin explains a great deal about the product, which is unusually focused on the specific mechanical problem of getting scattered transaction data into a shape a tax authority will accept, and unusually indifferent to everything else. The mechanism is straightforward and the coverage is the moat. Users connect exchanges via API, add wallet addresses and blockchains, and Koinly reconstructs the full transaction history, classifies each event, calculates capital gains and income, and generates a country-specific report. The integration count is the headline number — the company claims support for several hundred exchanges, wallets and blockchains, with the figure quoted between 800 and 900 depending on the source — and the event coverage extends well past spot trading into DeFi transactions, staking rewards, liquidity pools, NFTs, mining and airdrops, which is where most competing tools break down. Reports are produced for more than 20 tax jurisdictions with local rules encoded per country, including US forms such as 8949 and the newer 1099-DA, and outputs export into TurboTax, TaxAct and Xero. Accountants are a significant customer segment alongside individual investors, and larger crypto businesses use it too. The company is unusual in this directory for how little of its structure is public. Koinly is generally described as London-headquartered, operating through a Singapore entity, with a distributed team; published employee counts vary wildly across data providers, which is a fairly reliable sign that none of them know. Funding is similarly opaque — a single round is recorded, with KuCoin Labs named among investors, and no disclosed amount or valuation. There was a round of staff cuts reported in December 2022, at the bottom of the crypto winter and immediately before tax season, which is the one visible data point about the business running lean through the cycle. The user base is described as several hundred thousand. What matters more than the corporate opacity is the regulatory ratchet the company now sits on. Since 1 January 2026, DAC8 and the OECD's CARF framework require crypto-asset service providers across the EU to report customer transaction data directly to tax authorities. The era of crypto taxes as voluntary compliance is over: tax offices now receive the data automatically, and the reconciliation burden falls on the individual. That is a structural tailwind for every serious tool in this category, and it sharpens the competitive question. Koinly's position is breadth — the most integrations, the widest jurisdictional coverage, a global rather than regional footprint — against Blockpit, which competes on depth of local tax law in the German-speaking markets and has consolidated two European rivals to get there. Koinly is the generalist; Blockpit is the specialist. Which wins probably depends on whether a user's problem is "I traded on eleven venues across four chains" or "I need this to survive scrutiny from the Austrian tax office."

Founded 2018