Lending & Banking Operations
B

Bottomline

Bottomline is payments infrastructure with fraud analytics layered on top. The company moves more than $16 trillion a year across four connected businesses. The first is Paymode, a business payments network with more than a million businesses on it exchanging over $500 billion annually. The others are a commercial digital banking platform sold to banks, financial messaging where the company is a top three service provider on the interbank messaging network, and cash management for corporate treasury.

AI sits in two places. Payments Fraud Defense, released in January 2026, consolidates behavioral analytics, interdiction, analytics tuning and session replay into one platform. The vendor positions it explicitly as complementing a bank's existing fraud systems rather than replacing them. Its detection draws on the company's own analytics plus insights from third party risk solutions and consortium data. It is aligned to named rail level obligations, including the 2026 ACH fraud monitoring rules. A pilot Fraud Intelligence Exchange launched in June 2026 to move fraud intelligence sharing between banks off manual processes. Separately, an embedded agent was added to treasury and cash management in late 2025.

The network and the fraud work reinforce each other. A 2026 capability inside the digital banking product analyzes a bank's own payment history to identify customers still paying heavily by check and routes them toward electronic rails. The company frames this as fraud reduction through channel migration rather than through detection.

Founded 1989 in Portsmouth, New Hampshire, Bottomline listed on Nasdaq in 1999 and traded publicly for 23 years before Thoma Bravo took it private in May 2022 for roughly $2.6 billion. It divested its legal spend business in 2025 to concentrate on payments, and American Express connected its buyer initiated payments into Paymode in 2026. Chief executive Craig Saks previously ran parts of ACI Worldwide.

Last VerifiedAugust 25, 2026
Compare Bottomline with other vendors
Founded
1989
Headquarters
Portsmouth, New Hampshire, United States
Categories
lending-and-banking-operations, fraud-and-transaction-risk, payments-intelligence
Assessment

Capability Axes

Capability grades

15 of 15 axes rated · 4 graded A or B

AI Capability
AI Centrality
CC on AI CentralityArtificial intelligence is present but peripheral: a feature layer on a product whose value stands without it.
Vendor Published

Take the models out and a payments business moving more than $16 trillion a year still stands, with its business network, commercial digital banking and cash management intact. Behavioral analytics in the fraud platform are current rather than decorative, yet they are an addition to that estate, not its foundation.

Autonomy and Oversight Model
BB on Autonomy and Oversight ModelA written commitment that the models work alongside human judgment, with real review surfaces, short of the full control structure: commonly the threshold at which the system stops or what happens after it is wrong.
Vendor Published

Interdiction can hold a payment in flight, which is autonomous action on money movement under a risk policy the bank owns. Everything around it is built for an investigator, with session replay and tuning aimed at alert fatigue, and no automatic alert closure or filing is described.

Model Risk Management and Transparency
CC on Model Risk Management and TransparencyTransparency is claimed in general terms with no mechanism a model validator could interrogate.
Vendor Published

Accuracy, fewer false positives and faster detection are all claimed comparatively, with no baseline, figure or observation period behind any of them. The statistics it does publish describe the threat environment, such as deepfake losses and account takeover, rather than how this system performs.

Operational and Outcome Evidence
BB on Operational and Outcome EvidenceVendor aggregate claims with real figures, or audited scale disclosures from a publicly listed company.
Vendor Published

Scale is stated precisely and much of it can be checked externally: more than 800 financial institutions, roughly 90 percent of the Fortune 100 and 23 years of audited public company disclosure before the 2022 take private. For the fraud platform itself, no named bank customer, detection rate or loss avoided figure is published.

AI Safety and Data Stewardship
CC on AI Safety and Data StewardshipGeneral assurances that do not answer the question this axis asks, which is whether one customer’s data trains models serving its competitors. Unbounded cross client learning stated with no boundary grades here too.
Vendor Published

A pilot exchange to share fraud intelligence between banks is announced without saying what crosses the institutional boundary, whether it is identifiable, or how a wrongly implicated business is cleared. Whether one customer's payment data trains models used for another is equally unaddressed.

Regulatory and Compliance
GLBA and Data Privacy Posture
CC on GLBA and Data Privacy PostureA standard privacy policy that covers the website rather than the service, or silence on a product that touches limited consumer data.
Vendor Published

Payment instructions, account and routing details and commercial banking credentials are the data held, yet the company publishes no privacy program detail, retention schedule or subprocessor list beyond website policies. The Gramm Leach Bliley Act (GLBA) appears nowhere, though the company is based in the United States and serves US banks.

Security Certifications and Trust Center
CC on Security Certifications and Trust CenterA single footer line, or certifications asserted without being enumerated, which is weaker than naming them because it invites an assumption a buyer cannot check.
Vendor Published

Security disclosure stops at an assertion of secure infrastructure, and the company publishes no trust center, named certification or subprocessor list. A top three position on the interbank messaging network means that operator's mandatory security program applies, but its results are not visible to a buyer.

Regulatory Status and Licensure
CC on Regulatory Status and LicensureThe regulatory position is unstated. Most vendors in this index are technology suppliers and being unlicensed is the correct posture, so this grade records silence about the posture, not a missing license.
Vendor Published

The fraud platform is positioned against the 2026 ACH fraud monitoring rules, a dated mandatory obligation rather than a general compliance claim. No position appears on DORA, though the company supplies technology inside European banks' regulatory perimeter.

AI Governance and Bias Disclosure
CC on AI Governance and Bias DisclosureResponsible artificial intelligence committed to in policy language with no evaluation behind it, on a product whose bias surface is modest.
Vendor Published

The scored subject here is a business, and small or new firms with thin payment histories are the ones an anomaly model has little basis to judge. The company publishes no bias testing, fairness statement or governance page, so performance by business size, sector or payment pattern is unknown.

AI Liability and Recourse
DD on AI Liability and RecourseNothing published on who bears the loss when the system is wrong.
Vendor Published

The failure mode is a payment that does not arrive, and the business bearing it is usually not the vendor's customer, since the bank licenses the platform. Terms, warranty and liability cap are unpublished, as is what that business is told or how quickly a hold is reviewed.

Integration and Deployment
Model Supply Chain Disclosure
CC on Model Supply Chain DisclosureThe architecture is described and no provider is named.
Vendor Published

Detection is stated to draw on third party risk solutions and consortium data, a direct admission that outside data shapes the output. No provider or consortium is identified, and the embedded treasury agent ships without a named model provider.

Core Systems and Integration Depth
BB on Core Systems and Integration DepthNamed systems or a documented public API, with the depth or the production evidence left open.
Vendor Published

Connection runs at the level of payment rails, covering ACH, wires and real time schemes, and a card network's buyer initiated payments joined the business network in 2026. The fraud platform is built to sit beside an institution's existing tools, but no interface documentation, developer portal or sandbox lets an engineering team scope work alone.

Deployment Model and Data Residency
CC on Deployment Model and Data ResidencyCloud only with nothing stated, which is the category norm.
Vendor Published

Fraud detection runs on the company's own proprietary cloud rather than a third party hyperscaler, which keeps fewer parties in the data path. The word regulated is attached to that cloud without naming a regulator, and regions, residency and tenancy are unpublished across the four business lines.

Commercial
Commercial Transparency
CC on Commercial TransparencyNo price is published and engagement runs through a demo form, which is the norm in this index.
Vendor Published

Price, unit and tier are all unpublished across four businesses sold under one brand, so a buyer cannot tell what is bundled or whether volume, seats or modules set the charge. One disclosure runs in the customer's favor: eligible payers on the business payments network can earn rebates on payment spend.

Institution and Segment Coverage
BB on Institution and Segment CoverageNamed segments with dedicated material behind part of the coverage.
Vendor Published

The company serves both ends of a payment, with banks licensing its commercial digital banking and fraud tools while more than a million businesses pay through its network. That lets it embed the network inside a bank's own digital banking, though no financial institution is named and insurance, wealth and capital markets are out of scope.

Tracked Since Listing

Product updates

Material product, regulatory, evidence and commercial changes at Bottomline, each verified against a live source and tagged to the capability axis it bears on. Funding rounds and awards are not product changes and are not logged.

Sep 17, 2026Product / capability

Bottomline launched Global Pay Connect, a SaaS platform that brings global and domestic payment connectivity under one integration. It offers API enabled services, third party data integration and AI enhanced insights for real time visibility into payment activity across networks such as Swift and SEPA.

Bears on: Core Systems and Integration DepthSource
Our read on this update →Tracked since Sep 2026
Head to Head

Compared With

Most editorial comparisons pair two vendors the index assesses as direct competitors for the same buyer. Some pair vendors that are adjacent rather than rival, where the useful question is where one ends and the other begins. Each carries a verdict, the buyer conditions that favor each vendor, and a graded side by side.

Alternatives to Bottomline

Vendors in the same categories as Bottomline whose profiles look most alike, each with a line on what the product does. Similar is not the same: check that each one does the job you need. No vendor pays for placement.

Loxon Solutions is a Hungarian credit management software company serving banks, leasing companies and banking groups across Central and Eastern Europe, the Middle East, Africa and Asia…

Pennant Technologies is an Indian lending technology company selling pennApps Lending Factory, a composable end to end loan lifecycle platform covering origination, loan management…

Azentio Software is a Singapore headquartered technology provider for banking, financial services and insurance, assembled from 2020 by Apax Partners through the combination of several…

Equabli sells EQ Suite, a cloud native platform covering the delinquency and recovery lifecycle from early servicing through charge off, to banks, fintech lenders, debt buyers and collection agencies.

Finastra is a London headquartered financial services software group selling across lending and corporate banking, payments and universal banking.

Fiserv sells the software many United States banks run on, and it has built an AI line on top of that position.

The index publishes no overall score or ranking. See what we assess and the methodology.

Commercial

Pricing

Vendor-published figures are labeled as such. Figures labeled “Estimated” are derived from third-party sources and have not been confirmed by the vendor.

Entry Price Pricing Basis Data Protection Terms Implementation Source
Not published. No price, unit of billing, tier or contract term appears on any vendor surface across the four business lines
Not published on any vendor surface. Four distinct businesses are sold under one brand, covering a business payments network, a commercial digital banking platform, financial messaging and a fraud platform, and nothing published indicates whether they are licensed separately or as a portfolio, nor whether charging follows payment volume, transaction count, institutions, seats or modules. One commercial mechanic is disclosed and runs toward the customer rather than away: eligible payers on the payments network can earn rebates on payment spend, which the vendor publishes as a benefit of moving payments onto electronic rails. Scale context published by the vendor, offered here as background rather than as pricing, includes more than $16 trillion in payments moved annually and more than $500 billion exchanged across the payments network each year. No tiered data protection terms are published. There is no public data processing agreement, subprocessor list, retention schedule or hosting region disclosure. The one architectural statement bearing on data handling is that the fraud platform runs on the company's own secure regulated proprietary cloud infrastructure rather than a third party hyperscaler. That reduces the number of parties in the data path, though no regulator is named against the word regulated. Nothing published addresses what customer payment data or fraud outcomes contribute to models used for other customers, which matters because detection is stated to draw on consortium data. No implementation, onboarding, integration or professional services fee is published for any product line. The vendor markets deployment speed rather than pricing it. It states that the fraud platform deploys rapidly and delivers measurable value within weeks, and that it integrates with existing fraud tools and the wider portfolio without a costly rip and replace project. That is a claim about avoided cost, not a disclosure of charged cost. The work involved is not trivial, and the material implies as much. The digital banking product embeds the payments network inside a bank's own commercial banking environment, and the financial messaging business operates at service provider level on the interbank network. Both are substantial programs inside a bank's own change cycle. There is no public interface documentation, developer portal or sandbox, so a buying institution cannot scope integration effort independently before entering a commercial conversation. Vendor Published

The vendor's site, its product and solution pages, its newsroom and the software aggregator listings carry no price, unit or tier for any of the four business lines. The published entry route is a contact form. Two disclosures do help. The rebate mechanism on the payments network is a published commercial term running in the customer's favor.

The deployment claims, value within weeks and no rip and replace, are specific enough to be tested in a proof of concept, even though no figure supports them. What a buyer still cannot do is compare. With a payments network, a digital banking platform, financial messaging and a fraud platform sold under one brand, nothing published indicates which are licensed together, whether the fraud platform can be bought without the payments estate, or what basis applies to each. Those are the first three questions in any evaluation against a single line competitor.

Contact us

Found a vendor we missed? Have feedback on the index? We’d love to hear from you.

AI FinTech Index

The AI FinTech Index is an independent index that tracks changes to AI vendors in financial services. It holds 610 vendors across banking, lending, insurance, wealth, capital markets and financial crime compliance, each graded on the same 15 capability axes from public sources. No vendor pays for inclusion, placement, or rating.

Index Status
Last index update
October 20, 2026
The AI FinTech Index is an editorial reference, not a regulatory body. Vendor data is verified against published sources and public regulatory filings. Figures labeled “Estimated” have not been confirmed by the vendor. See the Methodology page for evaluation standards and limitations.
© 2026 AI FinTech Index
3801 N Capital of Texas Hwy, Ste E240 · Austin, TX 78746