GBG vs Ondato (2026)
The decision is whether you are joining a network or running a console. GBG is the network: a listed identity group founded in 1989 whose consortium spans several hundred organizations across more than twenty sectors and eighty countries, returning an identity trust score in seconds, with bureau access, due diligence, transaction monitoring and application fraud on one platform. A modern integration surface is bolted to its oldest business: an agent portfolio that grounds every identity, compliance or fraud decision as a real GBG Go journey with a retrievable run identifier, deterministic and resumable, rather than a model guess. Ondato is the console: an operating system for know your customer work, with verification, screening, monitoring, risk scoring and case management in one modular platform. It is priced on a public page, tested by iBeta for presentation attack detection at both levels, and carries a live video branch for the markets that require a supervised interview. Both operate a shared fraud memory and disclose it at opposite depths. GBG names its consortium, quantifies it, and claims the score returns without protected data being divulged, an assertion no mechanism accompanies. Ondato matches biometrics against a database of individuals previously flagged for fraud across its customer base, a shared negative list described in a product sentence, with nothing on who contributes, what places a person there, how long an entry lasts or whether it can be challenged. The oversight postures then invert the generations: the incumbent removes the model from agent decisions architecturally, while the challenger's human channel is a separate product and its default path completes without manual intervention.
- Scale of signal decides it. A consortium of several hundred organizations across more than twenty sectors and eighty countries feeds the trust score, with bureau access, due diligence, screening, transaction monitoring and application fraud on one platform serving the full customer lifecycle.
- Agents are in your roadmap. Identity, compliance and fraud decisions execute as deterministic, grounded platform journeys with retrievable run identifiers rather than model guesses, reachable through a command line binary, an MCP server and a Claude Agent Skill.
- You want model performance quantified at all. Published deltas for fraud detected and false positives reduced exist where the category usually publishes adjectives, though every figure is an up to construction stating a ceiling rather than a typical result.
- You want a console you can price and run. Identity verification, business onboarding, screening, monitoring, risk scoring and case management ship as one modular platform with per verification rates on a public page, sized for the European mid tier.
- Some of your markets require a face. The live video branch product conducts supervised interviews with document checks and facial matching where regulation demands a face to face check, a separate high assurance channel most API only vendors cannot offer.
- External testing is your floor. iBeta presentation attack detection testing at both levels against ISO/IEC 30107 part 3, and eIDAS conformity certificates, sit well above the category norm for a vendor this size.
This comparison is published by AI FinTech Index, an independent research platform that publishes independent ratings of AI vendors for financial services. GBG and Ondato are each graded against the same capability taxonomy, from each vendor's own public materials and the regulatory record, under the AI FinTech Index verification standard. No vendor pays for placement, and no vendor has reviewed this page. How this evidence is graded
Plain facts
| GBG | Ondato | |
|---|---|---|
| Primary category | AML, KYC & Financial Crime | AML, KYC & Financial Crime |
| Founded | 1989 | 2016 |
| Headquarters | Chester, United Kingdom | London, United Kingdom |
| Website | www.gbg.com | ondato.com |
Side by Side
Select any grade to read the note behind it.
| Axis | G GBG |
O Ondato |
|---|---|---|
| AI Centrality | ||
| Autonomy and Oversight Model | ||
| Model Risk Management and Transparency | ||
| Operational and Outcome Evidence | ||
| AI Safety and Data Stewardship | ||
| GLBA and Data Privacy Posture | ||
| Security Certifications and Trust Center | ||
| Regulatory Status and Licensure | ||
| AI Governance and Bias Disclosure | ||
| AI Liability and Recourse | ||
| Model Supply Chain Disclosure | ||
| Core Systems and Integration Depth | ||
| Deployment Model and Data Residency | ||
| Commercial Transparency | ||
| Institution and Segment Coverage |
Product updates
The latest logged changes from each vendor, newest first, each linked to its source.
GBG
-
Product / capability
GBG released the Biometric Onboarding module for GBG Go to production, combining face matching and liveness detection to confirm identity at onboarding.
Source
Ondato
-
Product / capability
Ondato made European Digital Identity Wallet verification available in the web version of its identity verification flow on 1 October 2026, according to AMLR guidance it published the same day.
Source -
Model / architecture
Ondato released Mobile SDK v3.6.0 for Android and iOS, which its release notes say brings enhanced document capture, clearer user guidance and configurable consent options.
Source
The short version of each
GBG
GBG, a listed identity group founded in 1989, runs a consortium spanning several hundred organizations across more than twenty sectors and eighty countries, returning an identity trust score in seconds. Bureau access, due diligence, transaction monitoring and application fraud sit on one platform, and an agent portfolio grounds every decision as a deterministic platform journey with a retrievable run identifier. According to the AI FinTech Index, its consortium privacy claim, a score returned without protected data divulged, names no mechanism, and its numbered certification lacks edition, scope and audit period. No demographic performance is published anywhere, and a person carried in the consortium signal has no route to learn, contest or expire the entry.
Source: AI FinTech Index, 2026
Ondato
Ondato packages know your customer work as a modular operating system: verification, screening, monitoring, risk scoring and case management. It is priced on a public page, tested by iBeta for presentation attack detection at both levels, and has a live video branch for markets requiring supervised interviews. According to the AI FinTech Index, its shared negative list, biometric matching against individuals previously flagged for fraud across its customer base, is described in a single product sentence with nothing on contribution, cause, duration or challenge. Its 99.8 percent accuracy claim across 192 countries carries no methodology and no independent audit, and its ISO 27001 certificate cites a superseded edition. Third party sites credit it with certifications absent from its own material.
Source: AI FinTech Index, 2026
Common questions
Is GBG better than Ondato for identity and KYC?
One is a network, the other a console. GBG, listed and founded in 1989, runs a consortium of several hundred organizations across eighty countries returning an identity trust score in seconds, with bureau access, due diligence and transaction monitoring on one platform. Ondato packages verification, screening, monitoring, risk scoring and case management as a modular operating system for know your customer work, priced on a public page. An institution wanting shared fraud memory joins GBG; one wanting a self contained priced stack runs Ondato. Graded by AI FinTech Index against the same capability axes from each vendor's own published materials, verified August 23, 2026. No vendor pays for placement.
Do GBG and Ondato share fraud data across customers?
Both do, at opposite disclosure depths. GBG names its consortium, quantifies it, and claims the trust score returns without protected data being divulged, an assertion no mechanism accompanies. Ondato matches biometrics against a database of individuals previously flagged for fraud across its customer base, a shared negative list described in a single product sentence, with nothing on who contributes, what places a person there, how long an entry lasts or whether it can be challenged. Graded by AI FinTech Index against the same capability axes from each vendor's own published materials, verified August 23, 2026. No vendor pays for placement.
How do the oversight architectures compare?
The generations invert. The incumbent removes the model from agent decisions architecturally: every identity, compliance or fraud decision grounds as a real platform journey with a retrievable run identifier, deterministic and resumable, rather than a model guess. The challenger's human channel is a separate product, and its default path completes without manual intervention. Graded by AI FinTech Index against the same capability axes from each vendor's own published materials, verified August 23, 2026. No vendor pays for placement.
What certification hygiene issues exist?
Ondato cites its ISO 27001 certification to the superseded 2013 edition, and third party sites credit it with certifications absent from its own material, one of which does not exist in the form claimed. GBG claims a numbered certification without edition, scope or audit period, and its consortium privacy assertion names no mechanism. Graded by AI FinTech Index against the same capability axes from each vendor's own published materials, verified August 23, 2026. No vendor pays for placement.
Who has no route at either vendor?
The person inside the shared memory. Someone carried in GBG's consortium signal or matched against Ondato's flagged biometrics database can be refused across institutions without learning why, contesting the entry or having it expire on any published schedule. Neither publishes demographic performance either, GBG with no breakdown at all, Ondato claiming 99.8 percent across 192 countries with no methodology and no independent audit. Graded by AI FinTech Index against the same capability axes from each vendor's own published materials, verified August 23, 2026. No vendor pays for placement.
Where does each publish the most, and the least?
GBG publishes most on its consortium and its agents, which run each decision as a deterministic journey with a retrievable run identifier. It says little about demographic performance or the mechanism behind its consortium privacy claim. Ondato publishes most on pricing and external testing, with rates on a public page and presentation attack detection tested at both levels. It says little about its shared negative list, and its 99.8 percent accuracy claim carries no methodology. Graded by AI FinTech Index against the same capability axes from each vendor's own published materials, verified August 23, 2026. No vendor pays for placement.
Related comparisons
Other published head to head assessments involving these vendors or their closest peers. The full set for this category is on the Fraud Detection & Transaction Risk page.
Both operate a shared fraud memory and neither gives the person inside it a route. Someone carried in GBG's consortium signal or matched against Ondato's flagged biometrics database can be refused across institutions without learning why, contesting the entry or having it expire on any published schedule. Neither publishes demographic performance, and each averages where the variation lives. GBG runs document and biometric checks globally with no breakdown at all.
Ondato claims 99.8 percent across 192 countries with no methodology, and a third party evaluator notes it is not independently audited. Two hygiene items stand out. Ondato cites its ISO 27001 certification to the superseded 2013 edition, and third party sites credit it with certifications absent from its own material, one of which does not exist in the form claimed. GBG's consortium privacy claim, a score returned without protected data divulged, names no mechanism.