ComplyCube

Document authentication across more than 10,000 document types, face matching and passive liveness are model output with no non model substitute at the claimed speed and volume. Strip the models and only sanctions screening and multi bureau lookups survive, a screening service rather than the identity assurance its certifications rest on.

The institution sets the threshold by choosing a Level of Confidence for each use case, with a no code workflow builder, configurable risk scoring and a policy assurance module around it. What the platform may decide alone, what happens at low confidence, and whether a person signs off before an applicant is refused go undescribed.

Face matching and liveness passed independent testing under ISO/IEC 30107 part 3 at presentation attack detection level 2, a named test of an identified system. A pass is not a measurement, though: false accept and false reject rates are unpublished, as is a validation pack for a model risk function.

Citi, AXA and Al Baraka Banking Group appear under a trusted by heading on the pricing page, beside a 98 percent onboarding rate and a 6.2 times average return on investment. No case study or quotation joins a figure to any of those names, and Accenture, also listed, may be an implementation partner rather than a buyer.

Whether submitted documents, facial images or outcomes are reused or train models, and whether one client's data informs models serving another, ComplyCube does not state. This is biometric data belonging to people who never chose the vendor.

An ACCS 2:2021 privacy certification, approved by the UK Information Commissioner's Office, anchors the position, backed by UK GDPR, EU GDPR and CCPA compliance with annual evaluation and a named data protection officer. The security page carries neither a retention schedule for identity documents and facial images nor a subprocessor list.

ISO/IEC 27001:2022, ISO 9001:2015 and UK Cyber Essentials are named with versions on the security page, which also sets out AES 256 encryption at rest, TLS in transit and least privilege access with periodic review. Vanta hosts the trust center at trust.complycube.com, though its documents do not render outside a browser.

Certification as an Identity Service Provider under the UK Digital Identity and Attributes Trust Framework, a government framework with a public register, lets ComplyCube run checks that discharge statutory duties such as Right to Work and Right to Rent. Its eIDAS and NIST positions are alignment claims rather than certifications, and no financial regulator supervises the AI product itself.

Identity assurance is marketed as unbiased on its own page with no demographic performance data, fairness method or governance framework behind the claim. Facial age estimation gates age restricted services and its error is known to vary by skin tone, age group and sex, while the ACCS 4:2020 age check certification measures conformity rather than fairness.

Case management holds outcomes that do not clear automatically for review, so an institution can release or reverse a decision. For the person refused, ComplyCube publishes no notice, appeal route or correction mechanism, and the cost of a wrong result can be a lost bank account, job or tenancy.

Proprietary is the only description given for the technology, and no model provider, family or version is named. It never says whether document authentication, face matching or age estimation is built in house or licensed.

A versioned API reference with a changelog, web and mobile software development kits and a public status page let a buyer start integrating without contacting sales. Depth runs toward the front end: no core banking or case management platform is named as a target, and none of the 3,000 upstream data sources is identified.

AWS hosts the platform across multiple availability zones with daily encrypted backups, but no region or jurisdictional hosting option is given for the identity documents and facial images it stores. GDPR treats that biometric data as special category, which makes the missing residency commitment more than a formality.

Starter runs $99 a month and Core 299, and individual services carry tiered unit prices, from 50 and 35 cents for standard screening to $1.05 and 75 cents for document verification and 3 cents a month for ongoing monitoring. Only the Growth and Enterprise tiers need a quote.

Reach covers more than 220 countries and territories with a site in seven languages. Financial services, payments and crypto are addressed as separate propositions with their own material, as are telecoms and mobility.