Nufi
Nufi verifies people and businesses for more than 530 Mexican banks, fintechs, insurers, marketplaces and government agencies, processing around 1.2 to 1.3 million checks a month and aiming to become Latin America's first alternative identity bureau. Its distinguishing asset is direct integration with four official government registries covering population records, the national electoral identity document, the tax authority and the social security institute, combined within one automated flow alongside more than 130 real-time sources, biometrics, document reading, judicial background and watchlist checks, and employment stability indicators.
Its business verification product extracts data from incorporation documents, validates legal representatives biometrically, analyses shareholders and produces an evidence file with full traceability for audit. The company reports profitability since 2023 and holds a service organisation control report.
Capability Axes
Capability grades
15 of 15 axes rated · 10 graded A or B
Models handle document reading, biometric matching, extraction from incorporation papers, shareholder analysis and risk scoring, and the company describes deriving indicators of earning capacity and employment stability rather than only returning raw lookups.
Held at B because a substantial share of the value is authoritative integration rather than inference: querying the population registry, the electoral identity document, the tax authority and the social security institute returns facts of record, and that capability would remain if the models were removed, which is also why the results are as reliable as they are.
The customer defines the standard and retains the decision, selecting which documents and validations a given process requires and setting the criteria a file must meet, with the platform reporting whether those criteria are satisfied rather than issuing a verdict. An explicit escalation route exists, allowing a reviewer to decide immediately or forward the file to other areas for approval, which is the mechanism most vendors in this category leave undescribed. Each flow produces an evidence file supporting audit. No threshold or automatic clearance rule is published.
Published performance is entirely about speed, with verification completing in under five minutes and individual validations in seconds, and no accuracy, false positive, false negative or match rate figure appears for biometric matching, document reading or risk scoring.
That gap matters for the synthetic identity problem the company itself identifies as the fastest growing fraud in its market, since detecting fabricated identities is precisely a question of model accuracy rather than lookup speed.
More than 530 business customers, up from 370 a year earlier, processing around 1.2 to 1.3 million verifications monthly, and profitable since 2023 on total funding under two million dollars. That combination of scale, visible growth and capital efficiency is rare anywhere in this index.
The customer base spans banks, fintechs, insurers, marketplaces and government agencies, and the company describes itself as the first alternative identity bureau in its market, a claim its query volume supports.
No boundary statement was located. At 1.2 to 1.3 million verifications monthly across 530 customers including competing lenders, the platform sees a substantial share of a country's onboarding activity, and its stated ambition to become an identity bureau implies accumulating a persistent record rather than performing transient checks.
Nothing states whether verification results are retained and reused across clients, whether one lender's rejections inform another's assessment, or what a subject's data becomes once a check is complete.
Compliance with the national personal data protection statute is stated explicitly and dated to its 2025 form, which matters because that framework was revised and a vendor naming the current version is asserting something specific rather than generic. Every validation generates a file with status, evidence and traceability, so a subject's record is at least documented rather than opaque.
Held at B because no data processing agreement, retention schedule, subprocessor list or deletion commitment was located, and the platform holds government registry results, biometrics and judicial records on millions of people.
A service organisation control report is held and named, which is a third party assessed control set rather than a self declaration and is the credential a regulated bank's supplier review requires. Held at B because it is the point in time variant rather than the report covering controls over an operating period, no trust centre or subprocessor register was located, and no penetration testing summary or further framework appears alongside it.
The disclosure names both the supervisor and the statute, stating conformity with the banking and securities regulator's requirements and with the national data protection law in its 2025 form, and aligning its records to money laundering prevention obligations.
More substantively, the platform operates through direct integration with four official state registries covering population records, electoral identity documents, tax records and social security, which means verification rests on authoritative government sources rather than on inference or commercial databases. Few vendors anywhere in this index can point to state registry access as the basis of their product.
The inclusion mechanism is stated plainly, with the platform enabling lenders to validate identity, risk and compliance even where an applicant has no traditional credit history, which in this market is most of the adult population. Verification against state registries is also structurally fairer than the device or behavioural proxies used elsewhere in this index, since a person's presence in the population and tax registries does not correlate with the price of their phone.
Held at B because two signal types cut the other way and are unexamined: employment stability indicators disadvantage informal and irregular workers who form a large share of the workforce, and judicial background checking imports whatever unevenness exists in the criminal justice record. No fairness testing or rejection analysis is published.
No guarantee, indemnity or correction process was located. The institution receives a documented evidence file it can audit. The person verified has nothing described, and the exposure is specific here: a mismatch against a government registry, an outdated tax or social security record, or a judicial entry attached to a similar name can block an account opening, and nothing states whether the subject learns which check failed, how a registry error is corrected, or whether a rejection follows them across the 530 institutions querying the same platform.
Four authoritative sources are named individually rather than described by category, covering population, electoral identity, tax and social security registries, which is more source transparency than most vendors in this index provide and lets a buyer assess exactly what a verification rests on and what would be affected if access changed.
Held at B because the remaining sources are given only as a count exceeding 130, national and international risk lists are unnamed, and no model provider, biometric engine or subprocessor is identified.
The integration achievement is upstream rather than into customer systems, connecting four separate government registries plus more than 130 real-time sources into a single automated flow, which is what allows a check that would otherwise require several separate official processes to complete in minutes. Interfaces let customers embed validations directly into their own workflows, and business verification is delivered by sending a link to a counterparty who uploads documents themselves. No named core banking, origination or human resources system appears.
No hosting provider, region selection, residency commitment or private deployment option was located. Operations are domestic and the platform holds government registry results and biometric data on a large share of one country's banking applicants, which makes processing location a question the data protection framework it cites would ordinarily address.
No pricing, packaging or basis of charge was located. With more than a million verifications a month across 530 customers, per query pricing is the obvious structure and nothing confirms it, nor whether the business verification product, the individual checks and the interface access are priced separately.
Buyers span banks, fintechs, insurers, marketplaces, property technology firms and government agencies, and coverage runs across individual verification, business onboarding, supplier due diligence, anti money laundering screening and background checking.
The two constraints are geography and focus: this is built on one country's registries and therefore not portable, and the customer base extends into human resources screening, which sits outside financial services even though the regulatory framing and the leading buyers are financial.
Compared With
Most editorial comparisons pair two vendors the index assesses as direct competitors for the same buyer. Some pair vendors that are adjacent rather than rival, where the useful question is where one ends and the other begins. Each carries a verdict, the buyer conditions that favor each vendor, and a graded side by side.
Alternatives to Nufi
The closest documented capability profiles to Nufi in the same categories, ordered by similarity across the same fifteen axes the index grades every vendor on. Closest documented profile, not a claim that either product does the same job. No vendor pays for placement.
Documents Model Risk Management and Transparency where Nufi does not
Documents AI Safety and Data Stewardship and Model Risk Management and Transparency where Nufi does not
Documents Model Risk Management and Transparency where Nufi does not
A lighter documented profile than Nufi
Stronger documented coverage on Institution and Segment Coverage and Core Systems and Integration Depth
Stronger documented coverage on Institution and Segment Coverage and Core Systems and Integration Depth
Similarity is computed axis by axis from published grades, not from a composite score. The index does not aggregate grades into a total. See the fifteen axes and the methodology.
Pricing
Vendor-published figures are labeled as such. Figures labeled “Estimated” are derived from third-party sources and have not been confirmed by the vendor.
No pricing data has been verified for this vendor. Pricing information will be published here once confirmed through vendor disclosure or third-party estimation.