Evaluating AI vendors in financial services, on the record.

Keye and Snowstone sit on opposite sides of a private equity closing, so the real choice is which side of the deal needs help first. Keye works before a bid, turning raw deal files into diligence analysis of cohort trends, margin compression and cost drivers, with every output linked to its source and exported to Excel. Snowstone starts after closing, reading the acquired company's own email, chat, documents and systems through read only connections, and turns what it finds into an EBITDA bridge and a 100 day plan in the fund's template. On security paperwork the order flips. Keye shows a SOC 2 Type 2 badge today, while Snowstone lists its SOC 2 and ISO 27001 work as in progress but names Anthropic, OpenAI and Microsoft Azure as its processors and deletes engagement data within 30 days. Keye promises zero retention and no training on its homepage, while its privacy policy describes training its models with an opt out. Neither publishes an error rate for its own analysis, a price, or what a fund is owed when a wrong figure shapes a decision.

Both decide ecommerce orders in real time and reimburse fraud chargebacks on what they approve, so the choice rests on what each promises beyond that and how much you can verify. Riskified guarantees approval rates as well as chargebacks, charges only on approved orders, swaps a flat decline for graduated friction through Adaptive Checkout, and handles the PSD2 transaction risk analysis exemption for European orders. Because it is listed on the New York Stock Exchange, the cost of its guarantee shows up in audited filings, and its 20-F names Maxmind, Ekata and Emailage as data feeding its models. Forter builds its identity graph of more than two billion identities from what it observes across its own network rather than from broker data. It separates legitimate AI shopping agents from automated abuse and adds a 90 day performance guarantee. It also sells a decision only agreement a merchant can later switch to the guarantee, and sells directly to payment service providers. Forter carries PCI DSS Level 1, SOC 2 Type II and ISO 27001 and 27701, while Riskified shares no certificate. Both quote every deal.

The decision is who carries the loss on a bad order. Signifyd charges only on orders it approves and takes the chargeback when one of them proves fraudulent, with cover a merchant can set anywhere from fraud only to a total chargeback liability shift. Kount, now sold by Equifax as Kount 360, gives the merchant the tools and leaves the decision and its cost with the merchant. Those tools are custom risk rules, real time alerts and automated approvals, refunds and cancellations, scored against an Identity Trust Global Network of 32 billion digital interactions and 17 billion devices on a patented device fingerprinting base. Kount also draws on Equifax consumer identity data and works with Incode, Mitek and Acuant for identity verification. It screens against sanctions and PEP lists with hourly and daily rescreening, and stops chargebacks in real time through Verifi, a Visa company. Signifyd adds Account Protection, Chargeback Recovery and an expert review path for declined orders, and sells a separate platform to payment providers. Signifyd carries SOC 2 Type II, ISO 27001:2022 and PCI DSS Level 1, while Kount shows no certification under its own name.