Compliance, Surveillance & RegTech
A

ACA Group

ACA Group is a governance, risk and compliance provider to financial services firms, founded in 2002 by five former regulators. It pairs an advisory and managed services business of more than 1,400 professionals with ComplianceAlpha, its regulatory technology platform, which carries modules for marketing review, electronic communications capture, archiving and surveillance, employee compliance and personal trading, market abuse surveillance, anti money laundering and sanctions checks, compliance management, and training. The firm reports more than 6,350 clients and more than 1,600 firms on the platform, and shows clients including Bridgewater, Sun Life and Marex.

Encore AI, launched in September 2025, is the intelligence layer across the technology suite, described as combining ACA's regulatory expertise with large language model engineering under human guided automation; Encore AI for Marketing Review, released in February 2026, flags potentially non compliant language, missing disclosures and inconsistencies and produces audit ready reports with traceable review history, and the marketing module reports nearly 1,300 clients, over 143,000 submissions and about 8.9 million pages reviewed. The platform is sold alone or alongside ACA managed services, and the group also operates a regulatory hosting umbrella through ACA Mirabella.

Last VerifiedOctober 2, 2026
Compare ACA Group with other vendors
Founded
2002
Headquarters
New York, New York, United States
Categories
compliance-and-surveillance, aml-kyc-financial-crime
Assessment

Capability Axes

Capability grades

15 of 15 axes rated · 6 graded A or B

AI Capability
AI Centrality
CC on AI CentralityArtificial intelligence is present but peripheral: a feature layer on a product whose value stands without it.
Vendor Published

Encore AI arrived in September 2025 as an intelligence layer over a workflow, archive, surveillance and case management suite that had shipped for years, beside an advisory business of more than 1,400 people. The models still sit inside regulated steps, deciding which employee messages a supervisor sees and what a marketing reviewer looks at first.

Autonomy and Oversight Model
BB on Autonomy and Oversight ModelA written commitment that the models work alongside human judgment, with real review surfaces, short of the full control structure: commonly the threshold at which the system stops or what happens after it is wrong.
Vendor Published

Human guided automation is the framing, with reviewers keeping the approving decision and human validation on personal trading extraction. Noise reduction in communications surveillance filters content out of the review queue before anyone sees it, with no threshold or sampling published.

Model Risk Management and Transparency
CC on Model Risk Management and TransparencyTransparency is claimed in general terms with no mechanism a model validator could interrogate.
Vendor Published

Accuracy, precision and recall figures for Encore AI are unpublished, and explaining a single result says nothing about accuracy across a corpus. A missing disclosure the model never flagged leaves no record to trace and reaches investors inside approved material.

Operational and Outcome Evidence
BB on Operational and Outcome EvidenceVendor aggregate claims with real figures, or audited scale disclosures from a publicly listed company.
Vendor Published

Bridgewater, Sun Life and Marex appear among client logos, with more than 6,350 clients, 1,600 firms on the platform and about 8.9 million marketing pages reviewed. No named firm is joined to an outcome, and the volumes count pages processed rather than errors caught.

AI Safety and Data Stewardship
CC on AI Safety and Data StewardshipGeneral assurances that do not answer the question this axis asks, which is whether one customer’s data trains models serving its competitors. Unbounded cross client learning stated with no boundary grades here too.
Vendor Published

Marketing material, archived communications and personal trading records from thousands of competing firms form a large cross client corpus, and nothing says whether it trains Encore AI. Managed services staff work inside client systems by design, which raises what ACA's own people can see.

Regulatory and Compliance
GLBA and Data Privacy Posture
CC on GLBA and Data Privacy PostureA standard privacy policy that covers the website rather than the service, or silence on a product that touches limited consumer data.
Vendor Published

One assurance line pairs the GDPR with encryption and role based access, and a privacy policy is linked from the footer. Brokerage statements, holdings and messages of employees whose employer bought the system sit on the platform, and whether the policy reaches them is not said.

Security Certifications and Trust Center
BB on Security Certifications and Trust CenterA recognized certification named in the vendor’s own material without the artifact, or with a scope or renewal question the buyer has to raise.
Vendor Published

SOC 2 compliance, encryption, audit logging and role based access are named, and a Vanta trust center describes an information security management program. Complying with SOC 2 is not holding a report, and the type, period and auditor are not stated.

Regulatory Status and Licensure
BB on Regulatory Status and LicensureThe regulatory position is clearly stated and appropriate to the product, with part of the verification left to the buyer.
Vendor Published

A regulatory hosting umbrella in the UK and EU runs through ACA Mirabella, while the group performs GIPS verification and builds to the SEC marketing rule and FINRA communications standards. That authorization belongs to a separate hosting business, and nothing published puts the model layer under a regulator's examination.

AI Governance and Bias Disclosure
CC on AI Governance and Bias DisclosureResponsible artificial intelligence committed to in policy language with no evaluation behind it, on a product whose bias surface is modest.
Vendor Published

Transparency, auditability and human control describe Encore AI's governance, with no named framework, bias testing or certified management system. Such silence stands out at a firm that publishes guidance on governing AI use and on regulators' expectations.

AI Liability and Recourse
CC on AI Liability and RecourseMechanisms that enable challenge, such as audit trails and source traceability, with nothing standing behind the output and no route for the person affected.
Vendor Published

Audit ready reports with traceable review history let an institution examine a marketing determination. When ACA's own managed services team delivers a review on the same model layer, who stands behind a missed disclosure is not addressed, nor is a route for surveilled individuals.

Integration and Deployment
Model Supply Chain Disclosure
CC on Model Supply Chain DisclosureThe architecture is described and no provider is named.
Vendor Published

Large language model engineering combined with regulatory expertise is how Encore AI is described, and no base model, provider or hosting arrangement is named. Its comprehensive subprocessor list, linked from the trust center, is where a model provider might appear.

Core Systems and Integration Depth
AA on Core Systems and Integration DepthNamed integrations with the systems of record, core banking, policy administration, custodial or contact center platforms, verifiable in marketplace listings or public API documentation.
Vendor Published

More than 85 connectors capture email, collaboration tools and mobile devices, and the employee compliance module reaches brokerage statement feeds. Single sign on, automated user management and cross module views tie communications, conduct and market abuse data together.

Deployment Model and Data Residency
CC on Deployment Model and Data ResidencyCloud only with nothing stated, which is the category norm.
Vendor Published

A secure cloud platform is described with no region choice, hosting location or on premises path. Sales span the US, UK, EU and Middle East, reaching firms with residency obligations in each.

Commercial
Commercial Transparency
CC on Commercial TransparencyNo price is published and engagement runs through a demo form, which is the norm in this index.
Vendor Published

Pricing is customized by firm size, regulatory need and modules, with a quote on request. Module and managed services rates are both unpublished, so a working deployment's total cost cannot be derived.

Institution and Segment Coverage
AA on Institution and Segment CoverageThe financial segments served are named and each carries its own maintained material, whether the coverage is broad or deliberately narrow.
Vendor Published

Asset managers, broker dealers and private funds are among a long list of named segments, with offerings built to the Securities and Exchange Commission, FINRA and the Financial Conduct Authority among other regimes. Advisory, managed services and technology lines each carry maintained material.

Tracked Since Listing

Product updates

Material product, regulatory, evidence and commercial changes at ACA Group, each verified against a live source and tagged to the capability axis it bears on. Funding rounds and awards are not product changes and are not logged.

Sep 15, 2026Product / capability

ACA Group introduced a compliance data migration capability for firms moving Code of Ethics and personal trading data between compliance platforms. It supports full migration, export and archive, or a hybrid of the two, so historical records survive the move.

Bears on: Core Systems and Integration DepthSource
Our read on this update →Tracked since Sep 2026

Alternatives to ACA Group

Vendors in the same categories as ACA Group whose profiles look most alike, each with a line on what the product does. Similar is not the same: check that each one does the job you need. No vendor pays for placement.

MyComplianceOffice, which trades as MCO, sells compliance management software to regulated financial services firms.

Red Oak Compliance Solutions sells advertising and marketing review software to registered investment advisers, broker dealers, asset managers and insurers, and has done so since 2010.

Luthor reviews regulated marketing before it goes live and describes itself as an artificial intelligence native compliance firm rather than a pure software vendor.

PerformLine runs marketing compliance oversight across every channel a regulated brand speaks through, covering both halves of the lifecycle in one platform: automated review and scoring of…

Exiger assesses risk in the third parties, suppliers and customers an organization depends on.

Saifr sells AI models that read marketing and communications material and flag regulatory and brand risk before it is published.

The index publishes no overall score or ranking. See what we assess and the methodology.

Commercial

Pricing

Vendor-published figures are labeled as such. Figures labeled “Estimated” are derived from third-party sources and have not been confirmed by the vendor.

No pricing data has been verified for this vendor. Pricing information will be published here once confirmed through vendor disclosure or third-party estimation.

Contact us

Found a vendor we missed? Have feedback on the index? We’d love to hear from you.

AI FinTech Index

The AI FinTech Index is an independent index that tracks changes to AI vendors in financial services. It holds 610 vendors across banking, lending, insurance, wealth, capital markets and financial crime compliance, each graded on the same 15 capability axes from public sources. No vendor pays for inclusion, placement, or rating.

Index Status
Last index update
October 20, 2026
The AI FinTech Index is an editorial reference, not a regulatory body. Vendor data is verified against published sources and public regulatory filings. Figures labeled “Estimated” have not been confirmed by the vendor. See the Methodology page for evaluation standards and limitations.
© 2026 AI FinTech Index
3801 N Capital of Texas Hwy, Ste E240 · Austin, TX 78746