Directory of AI third party and vendor risk management vendors for financial institutions
The AI FinTech Index holds 4 of them, each graded on the same 15 capability axes from public sources, with the artifact every grade was read from attached to the record.
No vendor pays for inclusion, placement or rating. Counts generated 2026-10-20 across 610 indexed vendors. What moved is in the change log.
This is diligence performed on parties that did not choose the vendor and will not see the output, which is why the omission failure matters more than the error failure. Ask what sources are searched, what is not, and how an adverse finding is corroborated before it reaches a decision.
What is in this directory. Screened to assessment of suppliers, partners and counterparties. Customer onboarding diligence sits in the KYB directory.
Part of the wider Compliance, Surveillance & RegTech category.
What the public record shows in this directory
The share of the 4 indexed vendors here whose public record answers each of the nine regulatory questions a financial institution diligence process works through, and where this directory ranks against the other 50 directories in the index on the same question, highest share first. A thin share means the public record is thin, not that a control is absent.
The AI FinTech Index lists 4 AI third party and vendor risk management vendors for financial institutions, graded on 15 capability axes from public sources with no paid placement and no aggregate score. Across this directory the best documented part of the public record is regulatory status and licensure at 75 percent, and the thinnest is liability and customer recourse at 0 percent, which is 42 highest of 50 directories in the index on that question. Across the whole index of 610 vendors, none documents all nine regulatory axes in public and the average documents 3.61.
Source: AI FinTech Index, August 2026
| Vendor | Category | AI Centrality | Website |
|---|---|---|---|
|
E
Exiger
Exiger assesses risk in the third parties, suppliers and customers an organization depends on. Its 1EXIGER.AI platform, presented as an AI native operating system for supply chain execution, combines due diligence and screening engines long deployed in bank financial crime work with supplier network mapping, sanctions and denied party screening with ownership thresholds and alias resolution, and agentic automation that routes alerts to owners, launches remediation and records closure against an audit trail. Financial institutions use it for know your customer, enhanced due diligence, third party risk management and operational resilience obligations alongside corporate and government buyers.
|
Compliance, Surveillance & RegTech | B | exiger.com |
|
I
Intelligo Group
Intelligo sells AI due diligence and background checks to asset allocators, private equity, real estate, lending and banking clients. Its Clarity platform screens people and companies and keeps monitoring them. Models search legal, regulatory, media, social, financial and career sources, score each finding for relevance to cut false positives, and flag signs of fraud or financial distress. Clients choose automated reports, Advantage reports that add a human analyst, or continuous monitoring. Intelligo also runs pre employment checks and handles candidate consent and FCRA compliance for them. Carrick Capital Partners has invested in Intelligo. The company has launched an Intelligo Compliance MCP Server and a partnership with RANE.
|
Compliance, Surveillance & RegTech | A | intelligo.ai |
|
K
Kobalt Labs
Kobalt Labs automates third party and partner due diligence for banks and fintechs, a compliance function distinct from customer monitoring. Its reasoning engine ingests an institution's own policies, procedures, legal commitments and prior assessments, syncs against external regulation and security standards, then reads a counterparty's contracts and documentation to surface missing clauses, risky language, security gaps and regulatory shortfalls, pulling in beneficial ownership, financing history, adverse news, litigation and enforcement records alongside. It is aimed at community, regional and sponsor banks scaling partner volume, and at fintechs diligencing their own partners.
|
Compliance, Surveillance & RegTech | A | kobaltlabs.com |
|
X
Xapien
Xapien automates the research step of due diligence and returns a document rather than a score. The product takes the name of a person or a company and produces a fully sourced background report, typically in minutes, drawing on corporate registries, sanctions and watchlist data, politically exposed person data, court records and the indexed open internet; Xapien puts the average at 7.5 minutes across a sample of a thousand reports. It publishes an argument that generative AI on its own cannot be used for due diligence, naming hallucination, inconsistency between similar prompts and the absence of structured compliance data, and positions itself as the answer, triangulating structured screening data against web material and citing every finding to a source. Its identity resolution engine decides which of several similarly named subjects a report concerns, and Google Cloud's case study names Gemini 2.5 Flash for high volume parsing and Gemini 2.5 Pro for risk summaries, running on Google Kubernetes Engine. Financial services is one of six industry lines, with know your customer and customer due diligence for banks, client onboarding for wealth managers and private banks, investor and target diligence for private equity, and underwriting and claims research for insurers. Named financial customers include Griffin, a United Kingdom bank, and Dow Jones Risk and Compliance, which sells Integrity Check built on Xapien, and a Xapien app is listed on the ServiceNow Store. The workflow runs identify, run report, review and edit, share, then decide and approve, with review manual or automated by configurable rules. It is sold as an annual subscription in three tiers set by report volume, with unlimited users. Xapien publishes a downloadable ISO 27001 certificate and commits that customer data is never used to train its models. The legal entity is Digital Insight Technologies Ltd, founded in London in 2018 by two former BAE Systems engineers.
|
Compliance, Surveillance & RegTech | A | xapien.com |
Common questions
Is there a directory of AI third party and vendor risk management vendors for financial institutions?
Yes. The AI FinTech Index lists 4 AI third party and vendor risk management vendors for financial institutions, each graded on the same 15 capability axes from public sources, with the artifact every grade was read from attached to the record. No vendor pays for inclusion, placement or rating, no vendor is contacted before it is listed, and nothing sits behind a form. Counts generated 2026-10-20.
What counts as third party and vendor risk in this directory?
Screened to assessment of suppliers, partners and counterparties. Customer onboarding diligence sits in the KYB directory. The index holds 4 vendors meeting that screen, drawn from a wider Compliance, Surveillance & RegTech category and from adjacent categories where the vendor belongs on the same shortlist. A vendor filed under a different category can still appear here, because a buyer building this shortlist does not sort by our filing.
What should a buyer check before shortlisting third party and vendor risk vendors?
Start with what this segment does not publish. Across the 4 indexed vendors, the thinnest parts of the public record are liability and customer recourse at 0 percent, AI governance and bias testing at 0 percent, and deployment model and data residency at 25 percent. A thin public record predicts the length of a diligence process rather than the absence of a control, so these are the questions to put in writing early. This is diligence performed on parties that did not choose the vendor and will not see the output, which is why the omission failure matters more than the error failure. Ask what sources are searched, what is not, and how an adverse finding is corroborated before it reaches a decision.
Comparisons inside this directory
Other directories in Compliance, Surveillance & RegTech
One category is several buying decisions sharing a label. Each of these narrows the same market to a different one.