CipherOwl

Blockchain ledgers are free to download, so the product is entirely the interpretation: models monitor transactions, assess risk and produce investigation output. Without them, customers would hold only public data they could already obtain.

Sign off belongs to the customer's team rather than to alert queues, and the orchestration layer is described as regulator ready. Review gates, escalation thresholds and any path for a finding to reach a suspicious activity report without a person are undocumented.

Findings are grounded in ledger data, and because the chain is a public record outside the vendor's control, any claim about a transaction can be checked independently. The inferential layer is unmeasured, with no accuracy or false positive rate for risk scoring or attribution and no validation package.

Logos such as HashKey, Coinbase and OKX appear on the homepage with no stated relationship or result. Coverage of 99 percent of market total value locked, the one figure, measures reach rather than adoption or outcome.

AI conversation data is deidentified before any training use, raw interaction data is held up to 30 days first, and customers can opt out of training. Segregation between institutions investigating the same address is not addressed, though that interest is itself confidential.

The privacy policy, updated March 4, 2026, covers the Services as well as the website, sets retention for API logs and threat analysis data and accepts deletion requests. How attributions linking addresses to people are formed, kept and corrected is not described, and beyond Google Analytics and Microsoft Clarity no provider is named.

A completed SOC 2 Type II examination covering security, availability and confidentiality is available through a Vanta portal, with AES 256 at rest and TLS 1.3 in transit. ISO 27001 is listed as in progress, even though the homepage badge row shows it.

Travel Rule compliance, sanctions screening and suspicious activity report generation are mapped onto the product, with a reporting endpoint in the API. Report content is generated, but no filing mechanism is named and no supervisory register entry is shown.

Attribution error taints an address and everyone who has transacted with it, and on a public ledger that link stays visible to every analytics provider. Proximity scoring can pass risk to someone several hops from a flagged source, hitting users who rely on digital assets for banking access, and CipherOwl publishes no attribution error rate or fairness review.

Risk reasons, breakdowns and flow graphs come with every assessment, and findings are reproducible, so an institution can defend a frozen account to an examiner. An address holder flagged through proximity has no described way to learn which system decided or to contest the attribution, and CipherOwl publishes no accuracy commitment.

Public blockchains are the main input and anyone can verify them. Attribution datasets linking addresses to exchanges and sanctioned parties are what scoring depends on, and CipherOwl names no attribution source or model provider.

Developer documentation covers screening, risk scoring, reporting and case management endpoints, with OAuth client credentials and client code in Python, Go and Java, plus a public status page. Customer side case management, core banking and exchange systems are not named as integration targets.

Cloud providers holding SOC 2, SOC 3 and ISO 27001 certifications run the service across multiple regions with a 99.9 percent uptime commitment, yet neither providers nor regions are named. Investigators at institutions and agencies will want to know where case material rests, and no residency commitment is published.

Screening, investigation through the Strix agent and reporting are sold as components, yet no pricing, packaging or basis of charge is published. Whether charges fall per address screened, per transaction monitored or as a platform fee is open.

Six segments are named, from exchanges and custody to public sector agencies, but bank and government use is claimed without a named institution or dedicated material. Its function stays within digital asset compliance rather than the wider financial crime estate.