Candescent
Candescent sells digital banking software to more than 1,300 US banks and credit unions, whose platforms serve over 30 million registered users. Based in Atlanta, it combines four businesses with long histories in the market: Digital Insight and D3 Banking Technology for online and mobile banking, Terafina for account opening, and Channel Services for branch and assisted banking. A lending and credit module adds digital applications and automated decisioning, with rules and data services guiding approvals, declines and conditions.
Its AI sits in the platform's security and engagement layers. Behavioral and device signals score risk in real time and call for extra verification only when the score warrants it, and an intelligence layer turns an institution's data into next best actions and offers inside digital banking. Votiv, a conversational experience built on Google's Gemini and unveiled at Candescent's client conference in 2026, summarizes a member's finances, flags problems such as a bill the balance cannot quite cover and acts on requests. It is rolling out from the second half of 2026, with PSECU, a $10 billion credit union, its first new client.
The Federal Financial Institutions Examination Council examines Candescent as a technology service provider, and a SOC 2 Type II attestation covers all of its products. Apple Bank and Fidelity Bank are recent account opening clients, and Eko's embedded investing became available on the platform in October 2026.
Capability Axes
Capability grades
15 of 15 axes rated · 9 graded A or B
Online and mobile banking, account opening and branch tools run for institutions without any model in the path. AI adds a layer on top: real time risk scoring in the security solution, next best actions and offers in the engagement layer, and Votiv's conversational experience as it rolls out. Institutions can switch each AI feature off and the banking platform carries on.
The thresholds behind the security layer's steps, and what Votiv may do on its own once live, are unpublished. What is set out is control at the institution level: each AI feature can be switched on or off, and the institution remains the decision maker. Risk is scored in real time, extra verification appears only when signals warrant it, and flagged transactions go to review or are stopped.
Validation results, accuracy figures and per decision explanations are unpublished for the risk scores and the recommendations. The process behind them is described instead: each AI component passes a security and compliance review and a risk assessment with human review before deployment, and teams keep evaluating performance, accuracy and reliability after release.
Meriwest Credit Union connected its own next best product engine to Candescent's intelligence layer and raised uptake of personalized cross sell offers during account opening by up to 10 percent, while attrition fell 15 percent year over year.
Apple Bank's results on Terafina measure the account opening platform rather than its AI: account opening fell from 45 to 60 minutes to 5 to 10 minutes, productivity tripled to about 800 applications a month with the same staff, and the share of applications needing manual review fell to about 30 percent. OneUnited Bank saw a 33 percent rise in digital feature adoption after embedding the identity and security solution in its mobile app. Scale runs to more than 1,300 institutions and 30 million registered users.
Whether Candescent's own models learn across institutions, and how long AI inputs are kept, are not set out. What is published is a categorical bar: third party providers may not train their AI models on end user personal information. Institutions can also switch AI features on or off at any time, and test systems run on anonymized or synthetic data.
Candescent acts strictly as a service provider under the Gramm Leach Bliley Act, processing nonpublic personal information on the institution's instruction and never selling it. The privacy material sets out which data categories it uses and why, ties retention to each client contract with destruction under National Institute of Standards and Technology (NIST) 800-88, and publishes a subprocessor list with change notifications, from Google and Amazon Web Services for hosting to IDScan.net for identity verification.
A SOC 2 Type II attestation covers all products, card handling products hold Payment Card Industry Data Security Standard certification, and selected products are certified to ISO 27001. Third party penetration tests and automated security testing run in the release pipeline. Audit reports and penetration test summaries are shared on request under a confidentiality agreement rather than downloaded from the trust center.
The Federal Financial Institutions Examination Council (FFIEC) examines Candescent as a technology service provider, a supervisory review that covers the company and its operations rather than any AI feature in particular. Candescent holds no banking license of its own; the institutions it serves do.
The lending and credit module decides applications automatically, with rules and data services guiding approvals, declines and conditions, and nothing is published on fair lending, disparate impact or adverse action for those decisions or for the identity verification in the security layer.
A governance process does exist for Candescent's generative AI: an AI Governance Committee of senior executives and specialists in privacy, information security, ethics, data science, engineering, product and legal, written policies on permitted and prohibited uses, mandatory staff training, and a risk assessment with human review before each new feature ships. By Candescent's own definition that process covers generative AI, not traditional machine learning or automation.
Who bears the loss when a risk score blocks a genuine customer or an AI recommendation misleads one is not published, and the trust center states that its descriptions are not a contractual commitment. Flagged transactions are reviewed or stopped, and extra verification gives a legitimate user a way through, which leaves the institution a record and a route but no backing from Candescent.
The subprocessor list names Google and Amazon Web Services for hosting, Databricks for analytics, MongoDB Atlas for databases and IDScan.net for identity verification and fraud prevention, with notice of changes by email. Votiv's Gemini model does not yet appear on that list, and partners must now disclose any AI in their products under Candescent's third party risk program.
Public application programming interface (API) documentation and software development kits sit behind the platform, Terafina account opening runs more than 120 API integrations to cores, loan origination systems and identity services, and Candescent is certified on Corelation's Keystone KeyBridge. The platform is core agnostic, and Terafina can unify several cores after a bank acquisition.
An on premises option and a residency commitment are both absent, and while Candescent operates mainly in the United States, data may move under contract to partners, suppliers and affiliates abroad, with offices in Canada, India, Scotland and Serbia beside its American sites. Hosting is named per product: Google Cloud for the Digital Insight platform and Amazon Web Services for D3, spread across multiple availability zones with tested disaster recovery.
Candescent publishes no price, tier or billing unit, and engagement starts with a demo request. Products in its marketplace are contracted directly with each fintech partner, which splits the commercial relationship for anything beyond the base platform.
Banks, credit unions and fintech partners each have their own material, and the product line covers consumer, small business and commercial banking, account opening, lending, and branch and contact center service. Terafina's account opening spans deposit, personal loan and mortgage accounts.
Compared With
Most editorial comparisons pair two vendors the index assesses as direct competitors for the same buyer. Some pair vendors that are adjacent rather than rival, where the useful question is where one ends and the other begins. Each carries a verdict, the buyer conditions that favor each vendor, and a graded side by side.
Alternatives to Candescent
Vendors in the same categories as Candescent whose profiles look most alike, each with a line on what the product does. Similar is not the same: check that each one does the job you need. No vendor pays for placement.
Q2 Holdings sells the digital engagement layer that banks, credit unions, alternative finance companies and fintechs put in front of their customers, spanning retail, small business and…
Psympl sells psychographic AI to consumer financial services firms, including banks, credit unions, wealth managers, credit bureaus, payment platforms, receivables managers and insurers.
ebankIT sells an omnichannel digital banking platform to banks and credit unions, running web, mobile and branch channels for retail, small business and commercial customers on one stack.
Narmi sells a digital banking platform to community banks and credit unions, founded by two people who had run a community financial institution as its chief executive and technology chief.
Flybits sells contextual AI that banks and card issuers use to personalize digital experiences and, more recently, to run agentic commerce inside their own apps.
Temenos sells core banking, digital banking, payments, wealth and financial crime software to more than 950 banks, which run it on premises, in their own cloud or as software as a service…
The index publishes no overall score or ranking. See what we assess and the methodology.
Pricing
Vendor-published figures are labeled as such. Figures labeled “Estimated” are derived from third-party sources and have not been confirmed by the vendor.
No pricing data has been verified for this vendor. Pricing information will be published here once confirmed through vendor disclosure or third-party estimation.