Dotfile

Case management, a client portal and a configurable risk engine would still add up to a working compliance platform without models. On top, Dotfile Autonomy agents pre investigate business verification cases from document collection to a risk summary, alongside document verification and ownership unraveling.

Findings from the agents land in case management, the customer configures the risk engine, and audit logs with advanced permissions record who did what. For a product named Autonomy, nothing says what bounds it: no threshold, escalation rule or limit on closing a case without a person.

Accuracy rates, false positive figures and validation material are unpublished for ownership unraveling, agent summaries and risk scoring. A regulated buyer expected to validate the financial crime models it relies on has nothing to start from.

Flowdesk onboards 75 percent faster, from eight hours to an hour and a half, Keyrock verifies documents ten times faster and Defacto reports operating costs 40 percent lower, all named on the homepage. None of them comes with a stated method or period.

Agents and risk scoring run over a shared corpus of more than 400 million company records, so improvements drawn from one institution's activity could reach another. Whether case data, analyst decisions or outcomes train models served to others is not stated, nor what happens to an institution's case history when it leaves.

GDPR compliance and custom retention policies are stated on the security page, but no subprocessor list, default retention period or data processing terms are published there. Beneficial ownership data, identity documents and directors' details pass through third party suppliers across many jurisdictions, which makes the missing provider list matter.

SOC 2 Certified appears on the homepage and security page with no report type, an ambiguous credential on its own. Whatever reports exist sit in a browser only trust center at trust.dotfile.com.

France's financial intelligence unit and other supervisors oversee the customers, who hold the anti money laundering obligations, while Dotfile states no license or registration of its own. Its published guidance on the French digital asset regime and the MiCA transition is subject matter knowledge rather than a supervised status.

Sanctions and politically exposed person matching performs unevenly across scripts and naming conventions, and online reputation scoring disadvantages newer companies and those in markets with thinner online coverage. Neither a fairness disclosure nor an evaluation across jurisdictions or business types is published.

Companies wrongly scored on reputation, misresolved in their ownership structure or wrongly matched to a screening list may be refused without learning that Dotfile's analysis drove the outcome. Dotfile publishes no correction route and no split of responsibility between itself, its data suppliers and the institution.

Model supply goes undisclosed: no provider, family or version is named for the agents or for document verification, ownership analysis or reputation scoring. Part of the data supply is named, but a subprocessor list is not published.

A single API reaches more than 60 pre integrated data providers across more than 200 jurisdictions, Kyckr for registries and GBG for identity verification among them, and the Integration Studio adds more than 1,000 pre built connectors. Those are data suppliers and generic connectors; no core banking, case management or payments system on the customer's side is named.

Servers sit in the European Union, stated on the homepage and security page alongside 99.99 percent availability. No hosting provider or private deployment is named, and nothing covers where data rests once it passes to upstream providers in other jurisdictions.

The pricing page carries a demo form, testimonials and feature descriptions but no plan, price or billing basis. With dozens of separately metered upstream providers bundled in, a buyer cannot tell whether cost follows checks, verified entities or seats.

Customers span spend management, payments, digital asset trading and private markets, with Spendesk, Unzer and Flow Traders among the names. Material is organized by use case rather than institution type, and the base leans heavily on France and continental Europe.