MyComplianceOffice
MyComplianceOffice, which trades as MCO, sells compliance management software to regulated financial services firms. Thirty or more products run on a single platform and a single data set, organized into four suites. Know Your Employee covers personal trading and crypto trading compliance, gifts and entertainment, political contributions, outside business activities, licensing, connected persons, and communications archive and review. Know Your Transactions covers trade surveillance, deal review, insider and material non public information management, and payment screening.
Know Your Third Party covers third party risk assessment, lifecycle management and screening, and an AML and KYC compliance solution sits alongside. Know Your Obligations covers obligations, risk, assurance and policy governance. The company began as a technology development division inside Fidelity Investments, became a standalone business under founder and chief executive Brian Fahey, and acquired Schwab Compliance Technologies from Charles Schwab in 2022.
Models sit inside two workflows rather than underneath the platform: noise detection that prioritizes which employee communications reach a supervisor, and summarization of trade alerts, both added to a rules driven engine of configurable lexicons and preclearance thresholds. Its published credentials are a SOC 2 Type II report and ISO 27001 certification.
Capability Axes
Capability grades
15 of 15 axes rated · 6 graded A or B
Thirty products, from rule based trade surveillance and lexicon driven communications review to personal trading registers, work with the models removed, and the platform sold for years before they shipped. Its two model features are noise detection, which decides which messages reach a supervisor, and summarization of trade alerts.
Review by exception is the operating model, with preclearance before employee trades and recorded dispositions, and both model features keep the human decision. Noise detection still removes items from a supervisor's queue, and no threshold, sampling audit or override path for that suppression is published.
Advertising less noise is advertising a threshold move, which trades against detection, yet no accuracy, recall or false negative rate is published. Generated trade alert summaries become what reviewers act on, and how they are validated against the underlying alert is not described.
More than 1,500 client companies, over a million users and 95 percent client retention are stated as aggregates. Ten customer stories describe firms only by type and place, and the one quantified result is a three week communications deployment.
Benchmarking surveillance against other firms is offered, which means data crosses tenants in some aggregated form. What is pooled, whether participation is optional and whether one client's reviewed outcomes train models serving a competitor are unstated.
The privacy statement linked in the footer dates from March 2015 under the former TerraNua name and relies on Safe Harbor, invalidated that year, while the procurement page cites Privacy Shield, invalidated in 2020. Neither describes handling of the employee holdings, personal device messages and connected persons data the service holds.
SOC 2 Type II and ISO 27001 are named, with encryption in transit and at rest, and current reports with scope and dates come when a buyer asks.
Modules map to named obligations, including the adviser code of ethics rule, the European Market Abuse Regulation and MiFID II, with evidence packages built for examinations. No regulator has admitted or tested the product or its model features.
Policy language fills the Responsible AI guide for compliance officers, with no testing or independent assessment behind it. Lexicon models can flag informal writers and second language speakers into supervisory records that affect employment, and no per language accuracy is published across a footprint where much monitored communication is not in English.
Recorded dispositions and point in time evidence packages let an institution reconstruct and contest a supervisory outcome. A wrongly flagged employee carries the entry through registration and employment with no published correction or appeal path, and MCO publishes no warranty for a message noise detection wrongly suppressed.
Neither noise detection nor alert summarization has a named provider, base model or build position, and the subprocessor list is available only on request. Employee communications from personal devices may or may not reach a third party model, and nothing published says which.
Capture runs across email, collaboration tools and WhatsApp, with a named partnership for retaining iMessage traffic and brokerage feeds strengthened by the 2022 Schwab Compliance Technologies acquisition. Order management systems, core platforms and a public connector catalog are not named.
Separate European and American sign in portals and delegated regional administration control access but do not state where data sits. Hosting jurisdiction, region choice and tenancy are available only on request.
A demo request is the only route to a number, and no rate card, tier ladder or billing basis is published. Across thirty products, pricing by module, employee or monitored channel would produce very different totals for the same firm.
Asset managers, broker dealers and banks lead a buyer list that extends to insurers, private equity and regulated crypto firms, each with segment material. Stories span firm types from a Canadian bank to a Swiss law firm, and reach runs to more than 125 countries.
Product updates
Material product, regulatory, evidence and commercial changes at MyComplianceOffice, each verified against a live source and tagged to the capability axis it bears on. Funding rounds and awards are not product changes and are not logged.
MCO extended its personal trading and digital asset controls to employee activity on prediction markets, so firms can manage that trading under the same oversight rules. It also widened its AI assisted communications surveillance to more collaboration platforms, naming Telegram and Slack.
Alternatives to MyComplianceOffice
Vendors in the same categories as MyComplianceOffice whose profiles look most alike, each with a line on what the product does. Similar is not the same: check that each one does the job you need. No vendor pays for placement.
ACA Group is a governance, risk and compliance provider to financial services firms, founded in 2002 by five former regulators.
Red Oak Compliance Solutions sells advertising and marketing review software to registered investment advisers, broker dealers, asset managers and insurers, and has done so since 2010.
Luthor reviews regulated marketing before it goes live and describes itself as an artificial intelligence native compliance firm rather than a pure software vendor.
PerformLine runs marketing compliance oversight across every channel a regulated brand speaks through, covering both halves of the lifecycle in one platform: automated review and scoring of…
Exiger assesses risk in the third parties, suppliers and customers an organization depends on.
CUBE sells automated regulatory intelligence and regulatory change management to financial institutions.
The index publishes no overall score or ranking. See what we assess and the methodology.
Pricing
Vendor-published figures are labeled as such. Figures labeled “Estimated” are derived from third-party sources and have not been confirmed by the vendor.
No pricing data has been verified for this vendor. Pricing information will be published here once confirmed through vendor disclosure or third-party estimation.