Enigma Technologies vs Perfios (2026)
The decision is whether the evidence about a business should be observed or supplied, and these two answer it in opposite ways in different markets. Enigma watches: revenue is derived from a card transaction panel rather than modelled from employee counts or industry codes, so a lender learns what a business actually earns without the business taking part. Perfios reads what the borrower hands over, bank statements, tax filings and financial statements under consent, and turns it into the underwriting assessment. That difference produces the widest fairness gap on any page in this lane. Enigma holds B on bias disclosure because observation replaces proxies that encode structural bias, with an inclusion outcome stated rather than promised. Perfios grades D for credit assessment at national scale with no fair lending testing, outcome analysis or adverse action handling published at all. The convergence is where it matters most. Neither reaches the business being assessed. Enigma's version is the starker: a company's revenue and transaction patterns are observed, sold to lenders, and it is never told, cannot see the figures, and cannot correct an estimate that understates it.
- The businesses you want to lend to are the ones nobody can see. Enigma derives small business revenue from observed card activity rather than modelling it from employee counts or industry codes, so a business is assessed on what it actually earns instead of a proxy for its size, and proxies of that kind encode structural bias in a way direct observation does not. It states this has helped lenders identify hundreds of thousands of healthy businesses that would otherwise have been overlooked or denied credit.
- You want to know what kind of evidence sits behind a number. Enigma states its panel covers more than 40 percent of United States card transactions and draws an explicit line between figures derived from observed transactions and estimates modelled from employee counts or industry codes, which is the disclosure this axis exists to elicit.
- Your supplier review needs assurance. Enigma holds A on security certifications and trust centre and A on GLBA and data privacy posture, where Perfios grades C on security certifications.
- You are lending in India and the borrower is in front of you. Perfios reads bank statements, tax filings, profit and loss statements and balance sheets submitted under consent, and is wired into the central bank's account aggregator framework, the national identity authority, the tax network and the small business development bank, holding A on regulatory status and licensure.
- You want the underwriting produced rather than a data feed enriched. CAM AI is a credit underwriting platform built on the company's own models, stated to cut turnaround by up to 85 percent, with know your customer checks, document tampering detection and collections in the same platform.
- Reach across institution types matters. Perfios holds A on institution and segment coverage and A on operational and outcome evidence, serving banks, non bank finance companies, fintechs and insurers, where Enigma grades B on coverage.
This comparison is published by AI FinTech Index, an independent research platform that publishes independent ratings of AI vendors for financial services. Enigma Technologies and Perfios are each graded against the same capability taxonomy, from each vendor's own public materials and the regulatory record, under the AI FinTech Index verification standard. No vendor pays for placement, and no vendor has reviewed this page. How this evidence is graded
Plain facts
| Enigma Technologies | Perfios | |
|---|---|---|
| Primary category | Credit Decisioning & Underwriting | Credit Decisioning & Underwriting |
| Founded | Not published | 2008 |
| Headquarters | New York, New York, United States | Bengaluru, Karnataka, India |
| Website | www.enigma.com | perfios.ai |
Side by Side
| Axis | E Enigma Technologies |
P Perfios |
|---|---|---|
| AI Centrality | ||
| Autonomy and Oversight Model | ||
| Model Risk Management and Transparency | ||
| Operational and Outcome Evidence | ||
| AI Safety and Data Stewardship | ||
| GLBA and Data Privacy Posture | ||
| Security Certifications and Trust Center | ||
| Regulatory Status and Licensure | ||
| AI Governance and Bias Disclosure | ||
| AI Liability and Recourse | ||
| Model Supply Chain Disclosure | ||
| Core Systems and Integration Depth | ||
| Deployment Model and Data Residency | ||
| Commercial Transparency | ||
| Institution and Segment Coverage |
The short version of each
Enigma Technologies
Enigma supplies identity and financial health data on United States small businesses to banks, lenders, payment processors, issuers and insurers, built on a panel covering more than 40 percent of American card transactions. That makes it the only provider deriving small business revenue from observed card activity rather than modelling it from employee counts or industry codes, publishing monthly and annual revenues, growth rates, average transaction size and sub industry classification across tens of millions of businesses. The AI FinTech Index grades it A on operational and outcome evidence, GLBA and data privacy posture, core systems and integration depth and security certifications and trust centre, with B on AI centrality, institution coverage, AI safety, AI governance and bias disclosure and model supply chain disclosure, documenting four of the nine regulatory axes the index tracks against an index average of 2.93 across 489 vendors. Its bias grade rests on a mechanism rather than a claim, since observed revenue replaces proxies that encode structural bias. Commercial transparency, autonomy, regulatory status, model risk management, deployment residency and liability and recourse are graded C.
Source: AI FinTech Index, 2026
Perfios
Perfios supplies the decisioning layer beneath much of Indian lending, serving banks, non bank finance companies, fintechs and insurers across origination, onboarding, underwriting and monitoring. Models read bank statements, tax filings, profit and loss statements and balance sheets to produce income, cash flow and creditworthiness assessments, alongside know your customer checks, document tampering and fraud detection, and collections. The AI FinTech Index grades it A on operational and outcome evidence, institution and segment coverage, regulatory status and licensure and core systems and integration depth, with B on AI centrality, GLBA posture, autonomy and model supply chain disclosure, documenting four of the nine regulatory axes the index tracks against an index average of 2.93 across 489 vendors. Its regulatory grade rests on direct integration into the central bank's consent based account aggregator framework, the national identity authority, the tax network and the small business development bank. Commercial transparency, AI safety, model risk management, deployment residency, security certifications and liability and recourse are graded C, and AI governance and bias disclosure is graded D.
Source: AI FinTech Index, 2026
Common questions
Is Enigma Technologies better than Perfios?
They observe different things in different markets. Enigma supplies identity and financial health data on United States small businesses built on observed card transactions, so a lender learns about a business without the business participating. Perfios reads documents and consented bank data submitted by Indian borrowers and produces the underwriting assessment itself. Both document four of the nine regulatory axes the AI FinTech Index tracks. If you underwrite American small businesses and want revenue you can see rather than infer, Enigma. If you lend in India and want the decision layer, Perfios.
Which one is better on fair lending?
Enigma, clearly, and it is a three band gap. Enigma holds B on AI governance and bias disclosure because deriving revenue from observed card activity replaces proxies like employee counts and industry codes that encode structural bias, and it states the inclusion outcome rather than merely claiming the intent. Perfios grades D: it produces income verification, cash flow assessment and creditworthiness scoring feeding underwriting at more than a thousand institutions, and publishes no fair lending testing, no outcome analysis across borrower groups and no adverse action handling. Enigma's own unexamined edge is coverage: businesses that are cash heavy, rural or invoice based barely appear in a card panel, so the hardest to see stay hardest to fund. Graded by AI FinTech Index against the same capability axes from each vendor's own published materials, verified August 23, 2026. No vendor pays for placement.
If I am the business being assessed, can I see or correct any of this?
Perfios gives you some and Enigma gives you none, and the difference is consent. Under the account aggregator framework a Perfios borrower authorises the data flow and can withdraw it, which is genuine control over whether the information moves. It stops there: an applicant whose income was misread, or flagged by tampering detection, is not told a machine reached that conclusion. Enigma's position is starker. Your revenue, growth and transaction patterns are observed through a card panel, sold to lenders and issuers, and you are never told, cannot see the figures attributed to you, and have no route to correct an estimate that understates your business. Both grade C on liability and recourse. Graded by AI FinTech Index against the same capability axes from each vendor's own published materials, verified August 23, 2026. No vendor pays for placement.
How does the AI FinTech Index grade Enigma Technologies and Perfios?
Both are graded on the same fifteen capability axes, with every grade traceable to the public artifact it was read from and the date it was verified, and the index publishes no composite score. Each documents four of the nine regulatory axes at A or B, against an index average of 2.93 across 489 vendors. Enigma holds A on operational evidence, GLBA posture, core systems integration and security certifications, with B on AI centrality, institution coverage, AI safety, governance and bias and supply chain, and C on commercial transparency, autonomy, regulatory status, model risk, deployment residency and liability. Perfios holds A on operational evidence, institution coverage, regulatory status and core systems integration, with B on AI centrality, GLBA posture, autonomy and supply chain, C on commercial transparency, AI safety, model risk, deployment residency, security certifications and liability, and D on governance and bias disclosure.
Related comparisons
Other published head to head assessments involving these vendors or their closest peers. The full set for this category is on the AML, KYC & Financial Crime page.
The fairness grades here separate by three bands and the reason is worth understanding before either is trusted. Enigma earns B because its mechanism is genuinely fairness improving rather than aspirational: observing what a business actually earns removes proxies that encode structural bias, and the inclusion outcome is stated rather than promised. Its counterpart is a coverage inversion nothing addresses.
A business taking little card payment, because it is cash heavy, rural, invoice based or serving communities that transact differently, is invisible to the panel, so the businesses hardest to see remain hardest to fund, and no coverage analysis by business type is published. Perfios grades D because credit assessment runs at national scale with no fairness disclosure of any kind, and its tampering detection compounds it, since a tampering flag is an accusation against a named applicant.
Where the two converge is that the party being assessed cannot reach either of them. Enigma's exposure is the starker and among the clearest instances of its kind in this index: a small business's revenue, growth and transaction patterns are observed through the card panel and sold to lenders and issuers, it is never told, cannot see the figures attributed to it, and has no route to correct an estimate that understates it and costs it credit.
The subject of the assessment is the only party with no relationship to the vendor. Perfios sits differently only in part: consent under the aggregator framework is granted and can be withdrawn, which is real control over whether data flows, and it gives no control over what is concluded from it. Both grade C on commercial transparency and deployment residency, and neither publishes accuracy by business type.