Crystal Intelligence

Value sits in an attribution set of more than 118,000 entities across more than 330 blockchains, assembled through investigations, exchange relationships and law enforcement work. Machine learning runs clustering and risk scoring, and Crystal Foresight and Ask Crystal are explicitly AI, yet with the models removed the verified set and its screening remain.

Ask Crystal returns plain language risk summaries with nothing published on what it may conclude alone, what a person must approve or how an analyst overrides it. Clustering is automated while attribution is human verified, a real control on the label behind each outcome, and for agentic payments Crystal pitches policy guardrails for autonomous payment flows with a verifiable trail for every automated decision.

Accuracy figures, clustering precision and validation reports are unpublished. What is stated is a quality management system aligned with ISO 9001:2015 for the forensic software and court ready evidence exports with audit trails.

More than half of Ukraine's open crypto fraud cases closed with help from Crystal's work there, a figure it reports without a method. Named counterparties include The Provident Bank since 2019, the exchange WhiteBIT and the Belgian Federal Police.

Whether a customer's searches feed the shared attribution set, or can be held out of it, is not stated, and the addendum's improvement purpose is open ended. Customer personal data may serve three purposes under the addendum, providing the services, improving them generally and acting on customer direction, with need to know access and customer audit rights.

A data processing addendum revised May 19, 2026 incorporates the European standard contractual clauses, commits to breach notice within 24 hours where feasible and requires deletion or return of data on termination. The attribution set itself carries no retention schedule.

ISO 27001:2022 certification followed a September 2024 audit by the British Standards Institution, and the homepage claims a SOC 2 Type II attestation. Certificate scope, number and report access are unpublished, though the addendum lists encryption, logged least privilege access and intrusion detection as contractual controls.

The DIFC Courts approved Crystal as an official blockchain intelligence provider for digital asset litigation, a judicial body formally accepting its output. A 2024 partnership with the European Central Bank and a Ukrainian government contract sit beside memberships in CryptoUK and Global Digital Finance.

An entity is defined as a cluster of addresses judged to belong to one controlling party, which concedes that every label is an inference. Error rates, attribution confidence and coverage by chain or region are unpublished, and how hop distance weighs on someone several transfers from a flagged source is not explained.

How a corrected attribution reaches customers who acted on the original is not described, and requests are handled by the customer with Crystal assisting. Someone wrongly labeled can still invoke rectification, erasure and objection rights against Crystal, which accepts controller status for the attribution set naming people marked under sanctions or enforcement, and can complain to the Autoriteit Persoonsgegevens.

Each address attribution records its source, including the original web reference, so a customer can inspect the basis for a label. Refinitiv, DocuSign and HubSpot appear among subprocessors listed with purpose and location, while the provider behind Ask Crystal and Crystal Foresight goes without mention.

FICO integrated Crystal risk data into its anti financial crime solutions in 2020, and Avaloq and Clear Junction carry it into wealth management and payments infrastructure. Delivery runs through a web application and an API, with no core banking or case management connector and no public integration documentation.

Region choice and an on premises option are not described, and the security annex says no redundant infrastructure spans multiple locations while describing failover around it. Hosting sits with Hetzner in Gunzenhausen, Germany, on dedicated servers in a separate rack, and Crystal states EU data residency for its platform.

Rates, tiers and units of sale are unpublished, and the license comparison page now redirects to a demo request. Free access through Open Block Explorer, university licenses and Scam Alert is real, but it does not size what Crystal Expert or Compliance would cost.

Crypto exchanges, banks entering digital assets and law enforcement are each addressed, with named engagements in the Netherlands, the United Kingdom and Vietnam. Bank material runs thinner than exchange and investigator material.