Credit Decisioning & Underwriting
E

Enigma Technologies

Enigma supplies identity and financial health data on United States small businesses to banks, lenders, payment processors, issuers and insurers, built on a panel covering more than 40 percent of American card transactions. That makes it the only provider deriving small business revenue from observed card activity rather than modelling it from employee counts or industry codes, and it publishes monthly and annual revenues, growth rates, average transaction size, payment technologies in use and sub industry classification across tens of millions of businesses.

Lenders use it for know your business verification, underwriting, fraud intelligence and early detection of deteriorating merchants. The company states its data has helped lenders identify hundreds of thousands of healthy small businesses that would otherwise have been overlooked or denied credit.

Last VerifiedAugust 15, 2026
Compare Enigma Technologies with other vendors
Founded
Headquarters
New York, New York, United States
Website
www.enigma.com
Categories
credit-decisioning, aml-kyc-financial-crime, fraud-and-transaction-risk
Assessment

Capability Axes

Capability grades

15 of 15 axes rated · 9 graded A or B

AI Capability
AI Centrality
BB on AI CentralityThe models are the engine of a core capability, layered on a product that would still function without them as a rules or workflow system.
Third Party Estimated

Proprietary algorithms combine thousands of sources to resolve business identity and derive financial health signals, and a know your business compliance agent shipped in 2026, so models do meaningful work in entity resolution and classification.

What holds this at B is that the decisive asset is a data supply position rather than a modelling one: a panel covering more than 40 percent of United States card transactions is an access advantage no algorithm confers, and independent analysis describes the company as shifting from descriptive to predictive analytics, which indicates the current product is largely the former.

Autonomy and Oversight Model
CC on Autonomy and Oversight ModelAutonomy is claimed and oversight is asserted without a mechanism, or full automation is presented as the entire disclosure. Human in the loop appears as a phrase rather than a described control.
Vendor Published

The historical product supplies data for a lender's own models and analysts to use, which places all judgement with the institution, and the newer know your business compliance agent moves in the other direction by performing verification work itself. Nothing describes what that agent may conclude on its own, what confidence accompanies an identity match, whether a failed verification routes to a person, or how an institution configures the threshold. For a component feeding origination decisions on small businesses, the absence of any stated boundary is the gap.

Model Risk Management and Transparency
CC on Model Risk Management and TransparencyTransparency is claimed in general terms with no mechanism a model validator could interrogate.
Third Party Estimated

No accuracy figure, match rate or validation result was located, and the claim to be the most accurate and comprehensive source is asserted rather than demonstrated. The panel share is a coverage statistic rather than a correctness one, and the two diverge precisely where it matters, since a business partially captured by the panel yields a revenue figure that is verifiably derived and still incomplete. Reported outcomes describe effort saved and losses avoided rather than measured precision.

Operational and Outcome Evidence
AA on Operational and Outcome EvidenceNamed customers with hard performance figures and enough method to test them.
Third Party Estimated

A prominent corporate card and spend management company is named as having built its fraud intelligence pipeline on this data, which is a specific technical dependency rather than a logo. Distribution partnerships are named and dated, including placement on a major data platform's marketplace using zero copy sharing, with that platform's technology partnerships director quoted, and an integration with a leading enrichment orchestration tool.

Total funding exceeds 200 million dollars from investors including a large venture firm and a major insurer. Coverage is quantified at more than 49 million United States businesses with financial health intelligence on over 33 million, resting on a panel exceeding 40 percent of national card transactions.

AI Safety and Data Stewardship
BB on AI Safety and Data StewardshipA categorical stewardship commitment is published without the retention schedule or the engineering detail behind it.
Third Party Estimated

Privacy preserving computation addresses the central concern structurally, since the point of the technique is that parties contributing or consuming data do not see each other's underlying records, and the transaction panel is aggregated and anonymised before it reaches any customer. That is a stronger answer than most data businesses offer.

Held at B because the boundary question is only half addressed: nothing states whether customer queries, outcomes or feedback are retained and used to improve the models and scores served to other institutions, which for a shared intelligence layer is the remaining exposure.

Regulatory and Compliance
GLBA and Data Privacy Posture
AA on GLBA and Data Privacy PostureThe privacy architecture is published in the specifics: data handling, retention, and a subprocessor list, which is rare in this index and valuable.
Third Party Estimated

The privacy architecture matches the sensitivity of what is held, which for a panel spanning more than 40 percent of national card transactions is a very high bar. Transaction data is described as anonymised before it becomes product, the company holds a Type II service organisation control attestation, and it has implemented privacy preserving computation, the same class of technique recorded at Omnisient, so analysis can occur without exposing underlying records.

Independent analysis notes this was done proactively and that it reduced procurement friction with regulated institutions, which indicates the controls were built to be examined rather than described. That combination of anonymisation, cryptographic technique and independent attestation is the most complete privacy position of any data business in this index.

Security Certifications and Trust Center
AA on Security Certifications and Trust CenterCertifications named with their type and presented as retrievable artefacts, usually through a trust portal a buyer can open without asking.
Third Party Estimated

The company holds a Type II service organisation control attestation, the version that tests whether controls operated effectively over a period rather than whether they were adequately designed at a point in time, and independent analysis records that obtaining it was a deliberate move to meet heightened data privacy expectations which then reduced procurement friction with regulated financial institutions.

For a business whose entire asset is a panel of anonymised card transactions covering a large share of a national economy, an independently attested control set is the minimum a bank should require and the overwhelming majority of vendors in this index still do not publish one.

Regulatory Status and Licensure
CC on Regulatory Status and LicensureThe regulatory position is unstated. Most vendors in this index are technology suppliers and being unlicensed is the correct posture, so this grade records silence about the posture, not a missing licence.
Third Party Estimated

No supervisor, statute or instrument is named, and independent analysis identifies regulatory limits on data use as one of the principal risks to the business, which is an acknowledgement rather than a disclosure. The question this product raises is specific: supplying financial information about businesses to lenders for credit decisions sits near the consumer reporting framework wherever small business assessment reaches the owner, and nothing published addresses where that line is drawn or how permitted use is controlled.

AI Governance and Bias Disclosure
BB on AI Governance and Bias DisclosureAn independent demographic evaluation the vendor has submitted to, such as the NIST face evaluation class, or a governance framework with named process behind it.
Vendor Published

The inclusion claim is quantified and the mechanism behind it is genuinely fairness improving. Because revenue is derived from observed card transactions rather than modelled from employee counts or industry codes, a business is assessed on what it actually earns instead of on a proxy for its size, and proxies of that kind encode structural bias in a way direct observation does not.

The company states this has helped lenders identify hundreds of thousands of healthy small businesses that would otherwise have been overlooked or denied credit, which is an outcome rather than an aspiration. The counterpart is a coverage inversion: a business taking little card payment, because it is cash heavy, rural, invoice based or serving communities that transact differently, is invisible to the panel, so the businesses hardest to see remain hardest to fund. No coverage analysis by business type is published.

AI Liability and Recourse
CC on AI Liability and RecourseMechanisms that enable challenge, such as audit trails and source traceability, with nothing standing behind the output and no route for the person affected.
Vendor Published

No guarantee, indemnity or falsifiable accuracy commitment was located. The institutional customer can test the data against its own portfolio outcomes over time, which is genuine recourse for a data product. The small business has none and is unusually exposed: its revenue, growth and transaction patterns are observed through the card panel and sold to lenders and issuers, it is never told, cannot see the figures attributed to it, and has no route to correct a revenue estimate that understates its business and costs it credit.

Integration and Deployment
Model Supply Chain Disclosure
BB on Model Supply Chain DisclosureSubstantial partial disclosure, or a chain that is structurally short: an explicit in house build, on premise deployment, per customer instances, or zero retention at the model layer.
Vendor Published

The primary source is disclosed with unusual specificity for a data business, stated as a panel of more than 40 percent of United States card transactions, supplemented by thousands of other sources, and the company draws a clear distinction between figures derived from observed transactions and estimates modelled from employee counts or industry codes. That tells a buyer exactly what kind of evidence sits behind a revenue figure.

What is not disclosed is the panel's own provenance, meaning which processors, issuers or intermediaries contribute the transaction flow, and that determines both the coverage profile and the permitted uses of everything built on it.

Core Systems and Integration Depth
AA on Core Systems and Integration DepthNamed integrations with the systems of record, core banking, policy administration, custodial or contact center platforms, verifiable in marketplace listings or public API documentation.
Vendor Published

Distribution is designed around meeting decisions where they already happen. Data is published on a major cloud data platform's marketplace using zero copy sharing, so an institution can join it to its own tables inside its existing warehouse without moving anything, which removes the largest practical obstacle to adopting an external data source.

A separate integration with a leading enrichment orchestration tool reaches commercial teams, interface access serves real time verification, and warehouse integrations handle bulk. Three named routes covering analytical, operational and orchestrated consumption is unusually complete for a data provider.

Deployment Model and Data Residency
CC on Deployment Model and Data ResidencyCloud only with nothing stated, which is the category norm.
Vendor Published

No hosting provider, region selection or residency commitment was located from the company. Marketplace distribution through zero copy sharing means much of the analytical consumption occurs inside the customer's own environment, which reduces the question's weight without answering it, and nothing describes where the underlying panel is processed and held.

Commercial
Commercial Transparency
CC on Commercial TransparencyNo price is published and engagement runs through a demo form, which is the norm in this index.
Vendor Published

No pricing, packaging or basis of charge was located. Availability through a major data platform marketplace provides a procurement route that lets customers consume the data under existing commercial arrangements, which lowers friction without disclosing terms. Nothing indicates whether charge falls per business record, per query, by data volume or as a licence.

Institution and Segment Coverage
BB on Institution and Segment CoverageNamed segments with dedicated material behind part of the coverage.
Third Party Estimated

Buyers span banks, lenders, payment processors, fintechs, card issuers and insurers, with the same underlying data serving risk teams and commercial teams through different workflows. Attribute coverage is unusually rich for business data, extending past identity and firmographics into monthly and annual card revenue, growth rate, average transaction size, payment technologies deployed and sub industry classification. The limit is geographic and currently absolute: this is United States coverage, with European and Latin American expansion stated as a 2026 objective rather than a present capability.

Head to Head

Compared With

Most editorial comparisons pair two vendors the index assesses as direct competitors for the same buyer. Some pair vendors that are adjacent rather than rival, where the useful question is where one ends and the other begins. Each carries a verdict, the buyer conditions that favor each vendor, and a graded side by side.

Alternatives to Enigma Technologies

The closest documented capability profiles to Enigma Technologies in the same categories, ordered by similarity across the same fifteen axes the index grades every vendor on. Closest documented profile, not a claim that either product does the same job. No vendor pays for placement.

Documents AI Liability and Recourse where Enigma Technologies does not

Documents Model Risk Management and Transparency and Deployment Model and Data Residency where Enigma Technologies does not

Documents Autonomy and Oversight Model and Model Risk Management and Transparency where Enigma Technologies does not

Documents Commercial Transparency and Autonomy and Oversight Model, among others where Enigma Technologies does not

Documents Autonomy and Oversight Model and Regulatory Status and Licensure, among others where Enigma Technologies does not

Documents Autonomy and Oversight Model and Model Risk Management and Transparency where Enigma Technologies does not

Similarity is computed axis by axis from published grades, not from a composite score. The index does not aggregate grades into a total. See the fifteen axes and the methodology.

Commercial

Pricing

Vendor-published figures are labeled as such. Figures labeled “Estimated” are derived from third-party sources and have not been confirmed by the vendor.

No pricing data has been verified for this vendor. Pricing information will be published here once confirmed through vendor disclosure or third-party estimation.

Contact us

Found a vendor we missed? Have feedback on the index? We’d love to hear from you.

AI FinTech Index

The AI FinTech Index is an independent index that tracks changes to AI vendors in financial services. It holds 489 vendors across banking, lending, insurance, wealth, capital markets and financial crime compliance, each graded on the same 15 capability axes from public sources. No vendor pays for inclusion, placement, or rating.

Index Status
Last index update
September 5, 2026
The AI FinTech Index is an editorial reference, not a regulatory body. Vendor data is verified against published sources and public regulatory filings. Figures labeled “Estimated” have not been confirmed by the vendor. See the Methodology page for evaluation standards and limitations.
© 2026 AI FinTech Index
3801 N Capital of Texas Hwy, Ste E240 · Austin, TX 78746