Directory of AI compliance programme management vendors for regulated firms

ACA Group is a governance, risk and compliance provider to financial services firms, founded in 2002 by five former regulators and headquartered in New York. It pairs an advisory and managed services business of more than 1,400 professionals with ComplianceAlpha, its regulatory technology platform, which carries modules for marketing and financial promotions review, electronic communications surveillance and archiving, employee compliance and personal trading, market abuse surveillance, anti money laundering and customer identification checks, compliance management, and training. The firm reports more than 6,350 clients and more than 1,600 firms on the platform. Encore AI, launched in September 2025, is the proprietary model layer running across those modules. Encore AI for Marketing Review, released in February 2026, scans documents to flag potentially non compliant language, missing disclosures and inconsistencies using machine learning tagging, and produces audit ready reports with traceable review history; the underlying module reports nearly 1,300 clients, over 143,000 submissions and roughly 8.9 million pages of content reviewed. A separate release brings model based extraction of employee brokerage statements into personal trading surveillance. The platform is sold on its own or alongside ACA managed services, and the group also operates a Financial Conduct Authority regulated hosting umbrella through ACA Mirabella.

Acin digitises non-financial and operational risk management for major banks and asset managers, converting a discipline it describes as manual, qualitative and subjective into one that is automated and quantitative. Rather than selling a software suite it sells subscription data libraries of standardised risk and control definitions, matched across institutions by a neural network that replaced the industry experts who originally did the work by hand. Its peer-to-peer network connects heterogeneous control data from participating institutions under common data protocols, enabling anonymised benchmarking against an industry index so a firm can see where it aligns with peers, diverges, or has gaps, with a score quantifying control completeness. An agentic rewrite tool built on a major cloud provider's hosted language models lets banks restandardise thousands of controls in days. It also maps controls to regulatory obligations for traceability, and is now part of a regulatory intelligence group.

Aveni builds artificial intelligence for United Kingdom regulated financial services on FinLLM, its own suite of financial services language models trained on domestic industry data rather than adapted from general purpose systems. Aveni Detect monitors client interactions continuously for conduct risk and customer vulnerability, replacing sampled quality assurance with full coverage, while Aveni Assist drafts suitability reports, fact finds and client communications and updates adviser systems after a meeting. A newer assurance layer extends the same oversight to consumer facing AI agents.

FluxForce sells named AI agents to banks, fintechs and insurers for regulatory compliance, anti money laundering monitoring, customer onboarding and fraud detection, with around twenty prebuilt agents built on zero trust principles. Its compliance agent maps transactions and decisions to more than sixteen regulatory frameworks including anti money laundering rules, European operational resilience and AI legislation, data protection and card security standards, and it reports cutting compliance costs by 75 percent and reducing audit preparation from weeks to minutes. Agentic onboarding handles know your customer and anti money laundering workflows end to end, cutting manual effort by up to 90 percent. Fraud detection is published at 89 percent accuracy with 0.1 percent false positives. Controls are mapped to specific legal articles, including decision audit trails for logging obligations and configurable kill switches built around the human oversight requirement.

Hadrius consolidates the compliance programme of a registered investment adviser or broker dealer into one platform, using AI to review the material a firm produces and flag potential violations for a compliance officer to act on. It captures and archives communications across more than thirty channels, reviews marketing and advertising material against regulatory rules, monitors personal trading against restricted lists and blackout windows, automates code of ethics attestations, and produces the audit ready evidence a regulatory examination asks for.

MyComplianceOffice, which trades as MCO, sells compliance management software to regulated financial services firms. Thirty or more products run on a single platform and a single data set, organised into four suites. Know Your Employee covers personal trading and crypto trading compliance, gifts, entertainment and hospitality, political contributions, outside business activities, connected persons and relationships, licensing and registrations, attestations, and communications archive and review. Know Your Transactions covers trade surveillance, deal review and the management of insider and material non public information. Know Your Third Party covers vendor lifecycle management, screening and risk assessment. Know Your Obligations covers regulatory change, policy governance, compliance risk and compliance assurance. The company dates to 2005, began as a technology development division inside Fidelity Investments and became a standalone business in 2008 under founder and chief executive Brian Fahey. It acquired Schwab Compliance Technologies from Charles Schwab in 2022, roughly doubling its client base, and reports more than 1,500 client companies across 125 or more countries with over one million users, served from offices in North America, Europe, Asia Pacific and the Gulf. Models sit inside two workflows rather than underneath the platform: noise detection that prioritises which employee communications reach a supervisor, and summarisation of executed trade alerts to shorten investigation. Both shipped as enhancements to a rules driven engine of configurable lexicons, syntax and preclearance thresholds. Chartis named the company a category leader in its communications monitoring quadrant.

NuArca Labs sells NuComply, a large language model compliance assistant built for banks and other financial institutions. The company sources federal, state and Canadian banking regulation directly from the issuing authorities, updates it daily through automated ingestion, and transforms it into a repository designed to be read by a model rather than browsed by a person. On top of that sit the functions customers buy: instant answers to regulatory and internal policy questions, each annotated with direct links back to the governing regulation for auditability; drafting, revision and alignment of policies, procedures, risk controls and other documents against the institution's own profile; review of consumer facing communications including emails, social media and offers, with the compliance officer involved only in a final pass over annotated output; personalised impact assessments when a regulation changes; testing of loan documents and other products; and a what if function that runs compliance analysis across jurisdictions for a proposed new product, market or partnership. The platform is configured to an institution's charter, its regulators, its business lines and its jurisdictions, and compares requirements across United States states and Canadian provinces. NuArca Labs was founded in 2016 by compliance technology professionals and is based in Woburn, Massachusetts, alongside a sister advisory practice working in financial services, capital markets and energy. Its executive chairman previously ran the finance, risk and compliance solutions group at Wolters Kluwer and co founded a fair lending and Community Reinvestment Act compliance business before that. NuComply is listed in the American Bankers Association partner directory and on Microsoft's commercial marketplace, and the company has co presented on generative artificial intelligence in compliance with the association.

Ruleguard is a governance, risk and compliance platform built only for regulated financial services, and it now presents itself as an agentic one. Intelligent agents, described as digital team members trained on regulatory knowledge and the firm's own policies, read documents, apply rules, check for gaps, flag risks and produce audit ready evidence continuously rather than at quarterly snapshots. Roughly twenty modules sit on a shared evidence and task layer, spanning client asset compliance, compliance monitoring, audit management, incident and breach management, operational resilience, operational risk, policy and document management, regulatory change and service organisation assurance, alongside accountability regimes, conflicts of interest, employee attestations, gifts and hospitality and personal account dealing, and a conduct set covering appointed representatives, client file reviews, complaints, Consumer Duty, financial promotions, product governance and supplier oversight. The company publishes four claims about how it governs its own artificial intelligence: ISO 27001 certification independently verified and ISO 42001 compliance audited by the British Standards Institution, permanent recording of every agent decision, data source and output, configurable oversight checkpoints where the customer sets the level of autonomy, and a choice between frontier cloud models and an on premises deployment. Data hosting is offered across the United States, United Kingdom, European Union and Asia Pacific. Ruleguard was founded in 2013 in the United Kingdom by John O'Dwyer as a software development consultancy, built its first platform in 2015 for the incoming client assets rules, and raised 3.5 million pounds from Foresight Group in 2022. It states that its customers include tier one banks, global insurers and leading wealth managers.

Sedric turns a regulated firm's policies and the rules it operates under into enforceable system logic, then applies preventive, detective and corrective controls across every customer touchpoint. It pre screens marketing assets across copy, design and video against a claims library before publication, monitors calls, chats, emails, social and instant messages with real time guidance to agents mid call, and extends the same scrutiny to affiliates, influencers and embedded finance partners. Every flag links to the underlying regulation and every override is logged with its reasoning.

Sei builds AI agents for customer experience and compliance teams at banks, mortgage lenders and servicers, credit unions and fintechs, handling interactions across voice, chat and email and monitoring them for regulatory issues. Browser agents complete entire workflows inside existing systems, collecting payments, changing due dates and updating case records, while workflow triggers alert on customer vulnerability and disputes. A marketing compliance agent, distributed through a governance platform for banks and fintechs, reviews content before publication and detects issues across text, images, audio and video in several languages, with contextual understanding intended to surface only material findings. It publishes more than twenty named integrations across mortgage servicing, loan origination, CRM, payments, collections, insurance administration and compliance data systems, on the stated view that compliance monitoring without those connections is an island.

Shiboleth automates consumer lending compliance for banks, fintechs and non-bank lenders, and serves as a monitoring layer for banks overseeing their fintech partnerships. It audits customer conversations to catch violations, and automates complaint management, call monitoring, issue tracking and marketing material review, drafting first versions of regulatory reports so compliance teams finish rather than start them. The company reports automating 90 percent of back-office compliance tasks. It maintains a database of public reviews, consumer regulator complaints and enforcement actions as a signal source. Its design principle is that the platform provides access to true source materials and enables human oversight at every step so final decisions stay with the compliance team, and its founders describe the aim as making compliance transparent, explainable and audit-ready from day one.