Harmoney

This one sits close to the floor and the honest reading matters. The company was described as an AI driven counterparty risk management platform in its May 2026 funding coverage, and screening and risk scoring are genuine model functions. But the product material itself describes orchestration rather than inference: automating and streamlining workflows, maintaining a reusable customer record, connecting systems, people and data providers, and keeping data clean and audit ready.

Strip the models and an orchestration platform with a shared compliance record and a connector layer remains, which is what its customers appear to buy. It clears the floor because screening and scoring are performed rather than sourced, unlike the vendors rejected on this test, and the AI framing is recent enough to warrant re examination.

The platform is explicitly an orchestration layer between people rather than a decision maker, coordinating interactions between relationship managers in the front office, compliance teams in the back office and customers themselves, with full auditability stated as a property of every relationship it manages. Compliance officers retain the judgement and the platform supplies the workflow, the data and the record.

A managed compliance service is also offered, under which the company performs the operational work itself, which is a different arrangement and one whose oversight model is not described. No confidence indication, escalation threshold or automated decision boundary is published.

No accuracy, false positive rate or validation result was located. Data quality is claimed as an outcome rather than measured, with the record described as high quality and audit ready and the platform as keeping data clean, which speaks to completeness and currency rather than to correctness of any screening or scoring judgement. For a system onboarding and monitoring millions of counterparties daily, the rate at which it wrongly flags or wrongly clears is the operative figure and it is absent.

More than 70 clients across seven countries, onboarding and monitoring millions of counterparties daily, with the platform described by its new investor as mission critical for a blue chip customer base and functioning as the daily system of record giving compliance teams a real time view of their position. Two customers are named.

An insurer's life product manager is quoted calling the company a strategic partner in its onboarding process, and its remediation case is unusually concrete: letters went to 240,000 customers requesting additional know your customer information, and responses came back at a high rate through a secure white labelled platform within three months. A vehicle and asset leasing group is named as accelerating checks without expanding its compliance team. A ten million euro strategic minority investment closed in May 2026.

No data boundary statement was located, and the reusable passport raises a question the published material never answers: reusable by whom. If a customer's compliance record is reusable only within the institution that built it, the claim is an efficiency one about not asking the same customer for documents twice.

If it is reusable across institutions on the platform, this is a shared know your customer utility with far larger implications for what one bank learns about another's customers and for how a negative finding travels. With more than 70 clients across seven countries the distinction is material and nothing states which applies.

No data protection agreement, retention schedule, subprocessor list or deletion commitment was located. The central artifact makes the question sharper than usual: a complete, high quality, reusable financial passport is a persistent identity and compliance record for a named individual or company, assembled from documents, third party data and screening results, and designed to be kept current rather than refreshed periodically. European operation imposes a statutory floor and nothing published states how long a passport persists, what happens when a relationship ends, or what the subject may see.

No attestation, certification, trust centre or enumerated framework was located, with the platform described as secure without further specification. More than 70 regulated institutions across seven countries have completed vendor assessment, and the operational resilience regime the company cites in its own coverage list is precisely the one that will require those institutions to evidence supplier controls, so publishing that control set would follow directly from the regulatory case it already makes.

The most instrument dense disclosure recorded in this index. Eight regimes are named directly, covering customer and business due diligence, anti money laundering, investment services suitability, politically exposed persons, ultimate beneficial ownership, digital operational resilience, sustainability disclosure and third party risk management, across the full counterparty lifecycle and every jurisdiction served.

The forward looking citation is more precise still: the European Union's new anti money laundering regulation is named with its effective date of 10 July 2027 and described as creating the first unified rulebook across member states, with a product page built around readiness for it. The company also names the two Belgian supervisors its customers answer to, and convenes a compliance community around exactly these questions.

No credit decision is made and two adapted exposures apply. Screening for politically exposed persons and sanctions carries the documented false positive problem on common names and non Western naming conventions, and a wrongly flagged individual in this context faces refusal of a bank account, an insurance policy or a business relationship.

The reusable passport compounds it, because an error recorded once persists in a record designed to be carried forward and reused rather than rebuilt, so a mistake corrected nowhere is repeated everywhere the passport is consulted. No error rate, screening accuracy or correction process is published.

No commercial guarantee was located, and auditability is stated as a property of the record rather than a feature bolted on, with every relationship manageable with full auditability and the platform serving as the daily system of record giving compliance teams a real time view of their position. That is what an institution needs when a supervisor asks why a counterparty was accepted or refused, and the reusable record means the history is retrievable rather than reconstructed. The customer being screened has no described route to see or contest what their financial passport contains.

Third party data providers are identified as a distinct connected layer, which tells a buyer that screening and verification content comes from outside the platform rather than from proprietary sources, and that is a meaningful architectural disclosure.

No individual provider is named, which matters because the coverage and accuracy of politically exposed person, sanctions and beneficial ownership data vary substantially between suppliers and determine what the orchestration is actually orchestrating. No model provider or subprocessor list appears.

Integration is the product rather than a feature of it. The platform is described as connecting customers, counterparties, compliance teams, third party data providers and core systems, acting as the central hub between them, which is precisely the position the company argues the market is moving toward.

It deploys white labelled, as demonstrated in a 240,000 customer remediation run under the insurer's own brand, and modularly, so an institution can start with onboarding, remediation, screening or scoring and extend. A named systems integration partner tailors it to insurance operations. Serving more than 70 clients across seven countries with differing core estates is itself evidence the connector layer works.

No hosting provider, region selection, residency commitment or private deployment option was located. That is a notable omission for a company whose entire positioning rests on European regulatory alignment, since the operational resilience regime it names among its coverage areas imposes specific requirements on financial entities to know and document where critical third party processing occurs.

The charging structure is disclosed through independent profiling: revenue comes from subscription models, with clients engaging through various plans that may include fees for individual modules or comprehensive service packages. That names two distinct commercial shapes and matches the modular product design, where an institution can begin with onboarding, remediation, screening or risk scoring and add the rest. No rate is published and the disclosure reaches the reader through a data provider rather than the company.

Coverage spans the whole population of entities carrying anti money laundering obligations rather than banks alone: corporate banking, insurance, wealth management, investment funds, car and asset leasing, law and audit firms, real estate and professional service providers, across seven countries. That is not horizontal drift, because every one of those sectors is an obliged entity under European anti money laundering law with the same underlying duties. Counterparty coverage is equally broad, reaching policyholders, brokers, suppliers and employees, so the same platform handles customer due diligence and third party risk on one record.