AscentAI

The removal test leaves a library of regulatory documents any firm can already download. What the company sells is the conversion of that text into discrete, machine readable obligations mapped to one firm's specific business profile, described in its own terms as turning a regulator's rules and documents into units of intelligence.

Natural language processing and machine learning do that extraction, the change detection that compares a new rule against its predecessor, and the mapping from obligation to internal policy. Without them a customer has the rulebook and the same manual problem it started with.

The product is built so a person can see the machine's working, which is the right design for compliance. Rule comparison presents the new and former versions of a regulation side by side with changes redlined, so a compliance officer verifies what actually changed rather than trusting a summary of it, and an audit trail records every activity for reporting and examination.

Obligations are surfaced for a team to accept, map and act on rather than being executed automatically, so the machine never discharges a duty on the firm's behalf. What is not published is an explicit statement of that boundary, nor any confidence indication showing where an extraction was uncertain and deserves closer human reading.

Traceability is built into the product rather than promised alongside it. Every obligation derives from published regulatory text that the customer can read independently, and the rule comparison feature shows the underlying change with redlining, so any extraction can be checked against an authoritative source the vendor neither controls nor can restate. The audit trail supports examination after the fact.

What is missing is the number that matters most for this product, and it is not accuracy but recall: the risk is not a wrong obligation, which a compliance officer will notice, but a missed one, which nobody will, and no extraction recall figure, benchmark or validation result is published.

Two global banks are identifiable as customers through independent review, one European and one Australian, and the buyer set is described as global banks and first and second tier financial firms. The company employs more than 50 people in Chicago, has raised around 26.7 million dollars across three rounds, was ranked third in a trade publication's regtech listing, and has been acquired by a private equity firm, which means a financial buyer conducted diligence on the business.

It has also made an acquisition of its own, taking a United Kingdom regulatory technology company in 2024. What is absent is scale and outcome: no customer count, no obligations processed figure, no jurisdictions covered number and no measured effect on compliance cost or cycle time.

The pooling question that dominates this axis is largely closed by subject matter. The models learn to read regulation, and regulation is published by regulators, so the training material belongs to nobody and there is no customer data whose reuse would advantage a competitor. That is the Daloopa position.

What remains open is the customer layer: a firm's business profile, its mapped policies and the specific obligations it has accepted or disputed are confidential and would be valuable to a peer, and nothing states whether that material is contained, whether it informs how obligations are mapped for other institutions, or how it is treated when a customer leaves.

No data protection agreement, retention schedule or subprocessor list was located. The personal data chain is short by subject matter, since the primary corpus is published regulatory text and the customer side material is a firm's own business profile, policies and control documentation rather than records about individuals.

What that material is instead is competitively and legally sensitive, because a firm's obligation inventory and its policy mapping reveal where it believes its own gaps are, and nothing published describes how that is held or separated between customers.

No attestation, certification, trust centre or enumerated framework was located. Private equity ownership and a decade of selling to global banks both imply that security diligence has been passed repeatedly in private, since a first tier institution does not onboard a compliance vendor otherwise, and none of that assurance is published. A new buyer therefore begins from nothing.

Regulation is the product's raw material, so engagement with it is structural rather than claimed, and the platform is built around the actual text issued by supervisory bodies, tracks their changes as they are published, and is stated to involve partnerships with regulators internationally. That is a materially different posture from a vendor asserting compliance in the abstract.

What holds it below the top grade is enumeration: no individual regulator, rulebook or jurisdiction is named in accessible material, so a buyer cannot confirm that its own supervisors and the regimes it actually operates under are covered, which is the single most important question about this product.

No consumer decision applies, so the axis adapts, and for a regulatory extraction product the fairness question becomes completeness. An obligation the model fails to extract is an obligation the firm does not know it has, and the omission is invisible by definition, because nothing in an inventory signals what is missing from it.

Coverage therefore determines exposure: which regulators, jurisdictions and languages are processed decides what a firm sees, and an institution operating in a less covered market receives a thinner inventory without being told it is thinner. Nothing published describes coverage, extraction recall, or how the platform handles regulation issued in languages or formats outside its core set.

One arrangement here is unlike anything else recorded in this index. The company announced a partnership with a major reinsurance group to protect its customers against fines and regulatory risk, which is a vendor putting a third party balance sheet behind the consequences of its own output rather than disclaiming them, and if a firm is penalised for an obligation the platform failed to surface the cover exists to respond.

That is a falsifiable commitment of the kind this axis exists to reward and almost nobody offers. Two qualifications keep it at B rather than higher and both matter: the partnership was announced in 2020 and nothing confirms it remains in force, and no terms, limits or exclusions are published. A buyer should ask whether the cover is current and what it actually covers, because if it is, this is the strongest liability position in the index.

The input side is inherently transparent, since the corpus is regulatory text published by supervisory bodies and any customer can verify it independently, which removes the licensed data question that complicates most vendors here. Everything else is undisclosed.

No model provider is named for the extraction and comparison components, no hosting arrangement or subprocessor list appears, and the acquisition of a United Kingdom regulatory technology business brought capability in house without any statement of what it contributes to the current stack.

Named integrations reach the places compliance work actually happens. A major enterprise technology company integrated the platform to support financial institution compliance, a governance risk and compliance platform maintains a strategic alliance with it, and policy and controls mapping is explicitly designed to connect obligations into governance tooling rather than to replace it.

A separate collaboration embeds the regulatory content into a retail banking knowledge product for banks and credit unions. That is a vendor positioning itself as the obligations layer beneath other systems rather than as another destination, which for a compliance team already living in a governance platform is the difference between adoption and shelfware.

No hosting provider, region selection, residency commitment or private deployment option was located. The platform is described as cloud based and serves institutions across multiple regions, and the material held includes a firm's own assessment of its regulatory obligations and control gaps, which is exactly the documentation a supervisor might one day request, so where it resides is a question a bank's own risk function will ask.

Pricing is described by independent review as custom and based on the size and specific needs of the buying firm, with no rate, tier or unit published. For a product whose scope varies enormously by how many regulators, jurisdictions and business lines a firm needs covered, some indication of what drives cost would be genuinely useful, and none appears.

Buyers span global banks, first and second tier financial firms, investment firms, mortgage lenders and fintechs, and within each the users are the legal, risk and compliance functions rather than a single team. Coverage follows the whole regulatory lifecycle rather than one step, from horizon scanning on rules not yet in force, through obligation extraction and inventory, change management, policy mapping and audit.

Scenario planning extends it further, working out what obligations a contemplated acquisition or market entry would bring. The limits are that this is the compliance function specifically, and that the jurisdictions and regulators actually covered are nowhere enumerated.