Bureau
Bureau is a unified risk decisioning platform founded in 2020 by Ranjan Reddy, headquartered in San Francisco with offices in India, Singapore and Dubai and processing performed by its Indian and Singapore entities. It sells across the whole customer lifecycle rather than at a single checkpoint, combining device, behavioral, identity, network and transaction signals into one decision layer spanning onboarding, authentication, payments, credit and compliance. Its product lines are Device ID, Behavioral Biometrics, Identity Verification, a Graph Identity Network and Alternative Data.
The Graph Identity Network links users, devices, addresses and behavioral patterns across platforms to surface fraud rings and synthetic identities, and Alternative Data supplies credit underwriting signals for thin file borrowers. A runtime application self protection line is outside the scope of this profile. Named use cases include account takeover, bot detection, credit underwriting, location spoofing, promotion abuse, business verification and a Money Mule Score that flags probable mule accounts during onboarding.
Identity verification runs against government databases and business registries across a stated 195 countries and more than 2,000 document types, with deepfake, spoof and forgery detection the company puts at 99.9 percent accuracy. Compliance coverage spans know your customer, know your business, anti money laundering, politically exposed person screening and Foreign Account Tax Compliance Act (FATCA) screening.
The company states more than 200 signals, more than a billion verified identities, more than 200 customer brands and a 70 percent reduction in manual reviews, and names customers including Aditya Birla Capital, CreditAccess, Spice Money, Uni Cards, Rapido, Vahak and Khyaal. It entered Saudi Arabia in 2023 to support the fraud framework mandated by the Saudi Central Bank, expanded into the Philippines and Indonesia in 2024, and partnered with M2P Fintech the same year. Its data processing addendum states ISO/IEC 27001:2022 certification, with SOC 2 Type II reporting in progress.
Capability Axes
Capability grades
15 of 15 axes rated · 9 graded A or B
More than 200 device, identity and behavioral signals are resolved in milliseconds by what Bureau calls a self learning system, with behavioral biometrics and deepfake detection that are inference by nature. Strip the models and only document reading against government registries remains, a fraction of what is sold.
Customers configure the logic through a no code workflow builder with rule tuning from day one and branching on verified data, while Bureau supplies signals and orchestration. The credit underwriting page offers instant approval or rejection decisions, yet no default threshold, review requirement or explanation format is published.
Deepfake, spoof and forgery detection is put at 99.9 percent accuracy with no method, population or period given. Precision, recall and false positive measures are absent for the graph, the mule score and the underwriting signals.
Vineet Amin of Aditya Birla Capital credits Bureau with identifying 20 percent more fake applications, and CreditAccess and Spice Money executives describe faster authentication and fewer takeovers without figures. Platform claims of more than a billion verified identities and 70 percent fewer manual reviews are unattributed and unexplained.
The Graph Identity Network links identities, shared devices and behavioral patterns across platforms by design, so a person seen at one customer can be connected to activity at another, and the addendum reserves processing to improve the services. Whether a customer can decline to contribute, or how long a linkage persists, is never set out.
Bureau's data processing addendum, updated September 15, 2026, sets its processor role, covers facial vector templates among the data handled, applies standard contractual clauses for European and UK transfers and commits to breach notice within 48 hours. Data is deleted or returned at termination, automatically within 30 days if the customer makes no choice.
A public list of authorized subprocessors names each one with the nature of its processing and its territory, from Amazon Web Services for application hosting to verification and data partners such as Veriff, LexisNexis and Telesign.
The audit firm and certificate scope are unpublished, and security material sits in a separate trust vault. Bureau's data processing addendum, effective 15 September 2026, states ISO/IEC 27001:2022 certification and commits to supply the current certificate, with the most recent SOC 2 report on request and SOC 2 Type II reporting in progress.
Bureau states no license of its own. A named supervisor's requirement shaped the Saudi product: Bureau entered the market in 2023 to support the fraud framework the Saudi Central Bank mandated. Its compliance products cover know your customer, anti money laundering and FATCA screening, and the identity verification product is built to meet regulatory requirements across jurisdictions, Bureau says.
Credit applicants are scored on alternative data that includes email, phone number and social, app or browsing data, and the underwriting page publishes nothing on fairness, disparate impact or adverse action. Facial liveness and behavioral biometrics carry documented demographic variation as well.
Audit rights and visibility into decisions give customers a way to contest outcomes, but Bureau publishes no commitment behind the output. Someone the Money Mule Score judges likely to launder funds before any transaction, or wrongly linked across customers by the identity graph, has no described notice, appeal or correction route.
A model provider is not named for any component, deepfake detection included. Bureau's public list of authorized subprocessors names the parties that touch end user data, with the nature of processing and the territory for each: Amazon Web Services for hosting, verification partners including Veriff, Datazoo, AiPrise and GetID, and data providers including LexisNexis, Telesign and SEON. Its addendum promises 30 days' notice, with a right to object, before a subprocessor is added or replaced.
Bureau names no core banking or payment gateway connector, though M2P Fintech is a named partner. Identity checks reach government databases in a stated 195 countries and more than 2,000 document types, and business checks query official company registries.
Application programming interfaces, software development kits and a no code builder that consolidates onboarding behind one call make up the public interface, and the credit product connects to most loan origination and loan management systems.
Regional hosting options and a residency commitment are not stated, and the flexible deployment options mentioned are not described. Application hosting runs on Amazon Web Services in the United States, according to its list of authorized subprocessors, while the addendum names BureauID India Private Limited as infrastructure owner, with resources outside India, and Junoon Tech in Singapore. Localization rules for identity and biometric data apply in several of its markets.
Price moves with the modules taken, regions covered and onboarding volume, according to Bureau's own comparison material, but no rate, tier or trial is published. Those levers at least tell a buyer what drives cost before the sales conversation.
Banks, fintechs and marketplaces sit among the named segments alongside gaming and online dating, with products across onboarding, credit underwriting and compliance. Reach across India, Southeast Asia and the Gulf comes with dated market entries, though segment material is uneven.
Product updates
Material product, regulatory, evidence and commercial changes at Bureau, each verified against a live source and tagged to the capability axis it bears on. Funding rounds and awards are not product changes and are not logged.
Bureau introduced Adaptive Authentication, which rescores risk continuously through a customer session using identity graph, behavioral, device, and location and network signals instead of deciding once at login. When risk rises at moments such as beneficiary addition or a high value transfer, the platform can trigger step up authentication (MFA, face or biometric checks) or block the session, and session signals feed Bureau's Graph Identity Network.
Compared With
Most editorial comparisons pair two vendors the index assesses as direct competitors for the same buyer. Some pair vendors that are adjacent rather than rival, where the useful question is where one ends and the other begins. Each carries a verdict, the buyer conditions that favor each vendor, and a graded side by side.
Alternatives to Bureau
Vendors in the same categories as Bureau whose profiles look most alike, each with a line on what the product does. Similar is not the same: check that each one does the job you need. No vendor pays for placement.
Worth AI consolidates small business onboarding and underwriting for banks, credit unions, fintechs and payment providers into one decisioning layer, combining business and beneficial owner…
IDfy runs identity verification, business verification, fraud detection and background verification for banks, non banking lenders, insurers, payments and wealth firms across India…
Merkle Science supplies blockchain transaction monitoring and intelligence to crypto asset businesses, custodians, protocols, banks, government agencies and law enforcement, positioning…
Microblink builds computer vision and biometric models for identity document capture, authentication and verification, sold to banks, lenders, fintechs and payment providers as software…
ThetaRay detects financial crime using unsupervised anomaly detection that learns what normal looks like in an institution's payment flows and flags deviations without being told in advance…
Nufi verifies people and businesses in Mexico through background check reports, identity validation APIs, a business verification product and a document extraction service.
The index publishes no overall score or ranking. See what we assess and the methodology.
Pricing
Vendor-published figures are labeled as such. Figures labeled “Estimated” are derived from third-party sources and have not been confirmed by the vendor.
| Entry Price | Pricing Basis | Data Protection Terms | Implementation | Source |
|---|---|---|---|---|
|
Not published as a figure. Custom quoted against modules taken, regions covered, onboarding volume, journeys supported and workflow requirements.
|
Custom quoted. The vendor states that pricing is set by the modules a customer takes, the regions covered, onboarding volume, the customer journeys supported and workflow requirements. Modules are sold separately across device identification, behavioral biometrics, identity verification, the graph network, alternative data and runtime application protection, and verification against government databases and registries varies by market, so cost depends on how much of the platform is adopted and where. | Not tiered on any published pricing. A data processing addendum updated 15 September 2026 is published, with the named subprocessor list available on request, and ISO/IEC 27001 certificates and SOC 2 reports are provided on request. | No implementation fee is published. The platform is offered through APIs, software development kits and a no code workflow builder, and bespoke solutions are advertised without a stated rate. | Vendor Published |
The pricing basis comes from the vendor's own comparison material as of 2 October 2026. No figure is published, including the per check price in each market.