AML, KYC & Financial Crime
N

Nufi

Nufi verifies people and businesses for more than 530 Mexican banks, fintechs, insurers, marketplaces and government agencies, processing around 1.2 to 1.3 million checks a month and aiming to become Latin America's first alternative identity bureau. Its distinguishing asset is direct integration with four official government registries covering population records, the national electoral identity document, the tax authority and the social security institute, combined within one automated flow alongside more than 130 real-time sources, biometrics, document reading, judicial background and watchlist checks, and employment stability indicators.

Its business verification product extracts data from incorporation documents, validates legal representatives biometrically, analyses shareholders and produces an evidence file with full traceability for audit. The company reports profitability since 2023 and holds a service organisation control report.

Last VerifiedAugust 15, 2026
Compare Nufi with other vendors
Founded
2020
Headquarters
Monterrey, Nuevo Leon, Mexico
Website
www.nufi.mx
Categories
aml-kyc-financial-crime, credit-decisioning, fraud-and-transaction-risk
Assessment

Capability Axes

Capability grades

15 of 15 axes rated · 10 graded A or B

AI Capability
AI Centrality
BB on AI CentralityThe models are the engine of a core capability, layered on a product that would still function without them as a rules or workflow system.
Vendor Published

Models handle document reading, biometric matching, extraction from incorporation papers, shareholder analysis and risk scoring, and the company describes deriving indicators of earning capacity and employment stability rather than only returning raw lookups.

Held at B because a substantial share of the value is authoritative integration rather than inference: querying the population registry, the electoral identity document, the tax authority and the social security institute returns facts of record, and that capability would remain if the models were removed, which is also why the results are as reliable as they are.

Autonomy and Oversight Model
BB on Autonomy and Oversight ModelA written commitment that the models work alongside human judgment, with real review surfaces, short of the full control structure: commonly the threshold at which the system stops or what happens after it is wrong.
Vendor Published

The customer defines the standard and retains the decision, selecting which documents and validations a given process requires and setting the criteria a file must meet, with the platform reporting whether those criteria are satisfied rather than issuing a verdict. An explicit escalation route exists, allowing a reviewer to decide immediately or forward the file to other areas for approval, which is the mechanism most vendors in this category leave undescribed. Each flow produces an evidence file supporting audit. No threshold or automatic clearance rule is published.

Model Risk Management and Transparency
CC on Model Risk Management and TransparencyTransparency is claimed in general terms with no mechanism a model validator could interrogate.
Vendor Published

Published performance is entirely about speed, with verification completing in under five minutes and individual validations in seconds, and no accuracy, false positive, false negative or match rate figure appears for biometric matching, document reading or risk scoring.

That gap matters for the synthetic identity problem the company itself identifies as the fastest growing fraud in its market, since detecting fabricated identities is precisely a question of model accuracy rather than lookup speed.

Operational and Outcome Evidence
AA on Operational and Outcome EvidenceNamed customers with hard performance figures and enough method to test them.
Vendor Published

More than 530 business customers, up from 370 a year earlier, processing around 1.2 to 1.3 million verifications monthly, and profitable since 2023 on total funding under two million dollars. That combination of scale, visible growth and capital efficiency is rare anywhere in this index.

The customer base spans banks, fintechs, insurers, marketplaces and government agencies, and the company describes itself as the first alternative identity bureau in its market, a claim its query volume supports.

AI Safety and Data Stewardship
CC on AI Safety and Data StewardshipGeneral assurances that do not answer the question this axis asks, which is whether one customer’s data trains models serving its competitors. Unbounded cross client learning stated with no boundary grades here too.
Vendor Published

No boundary statement was located. At 1.2 to 1.3 million verifications monthly across 530 customers including competing lenders, the platform sees a substantial share of a country's onboarding activity, and its stated ambition to become an identity bureau implies accumulating a persistent record rather than performing transient checks.

Nothing states whether verification results are retained and reused across clients, whether one lender's rejections inform another's assessment, or what a subject's data becomes once a check is complete.

Regulatory and Compliance
GLBA and Data Privacy Posture
BB on GLBA and Data Privacy PostureA substantive privacy document that reaches the product itself, short of the subprocessor list or the full data handling detail.
Vendor Published

Compliance with the national personal data protection statute is stated explicitly and dated to its 2025 form, which matters because that framework was revised and a vendor naming the current version is asserting something specific rather than generic. Every validation generates a file with status, evidence and traceability, so a subject's record is at least documented rather than opaque.

Held at B because no data processing agreement, retention schedule, subprocessor list or deletion commitment was located, and the platform holds government registry results, biometrics and judicial records on millions of people.

Security Certifications and Trust Center
BB on Security Certifications and Trust CenterA recognised certification named in the vendor’s own material without the artefact, or with a scope or renewal question the buyer has to raise.
Vendor Published

A service organisation control report is held and named, which is a third party assessed control set rather than a self declaration and is the credential a regulated bank's supplier review requires. Held at B because it is the point in time variant rather than the report covering controls over an operating period, no trust centre or subprocessor register was located, and no penetration testing summary or further framework appears alongside it.

Regulatory Status and Licensure
AA on Regulatory Status and LicensureThe regulatory position is stated and a formal admission process stands behind it: a register entry, an eCBSV enrolment, a payment network partner admission, or presence inside SAR or CTR filing paths.
Vendor Published

The disclosure names both the supervisor and the statute, stating conformity with the banking and securities regulator's requirements and with the national data protection law in its 2025 form, and aligning its records to money laundering prevention obligations.

More substantively, the platform operates through direct integration with four official state registries covering population records, electoral identity documents, tax records and social security, which means verification rests on authoritative government sources rather than on inference or commercial databases. Few vendors anywhere in this index can point to state registry access as the basis of their product.

AI Governance and Bias Disclosure
BB on AI Governance and Bias DisclosureAn independent demographic evaluation the vendor has submitted to, such as the NIST face evaluation class, or a governance framework with named process behind it.
Vendor Published

The inclusion mechanism is stated plainly, with the platform enabling lenders to validate identity, risk and compliance even where an applicant has no traditional credit history, which in this market is most of the adult population. Verification against state registries is also structurally fairer than the device or behavioural proxies used elsewhere in this index, since a person's presence in the population and tax registries does not correlate with the price of their phone.

Held at B because two signal types cut the other way and are unexamined: employment stability indicators disadvantage informal and irregular workers who form a large share of the workforce, and judicial background checking imports whatever unevenness exists in the criminal justice record. No fairness testing or rejection analysis is published.

AI Liability and Recourse
CC on AI Liability and RecourseMechanisms that enable challenge, such as audit trails and source traceability, with nothing standing behind the output and no route for the person affected.
Vendor Published

No guarantee, indemnity or correction process was located. The institution receives a documented evidence file it can audit. The person verified has nothing described, and the exposure is specific here: a mismatch against a government registry, an outdated tax or social security record, or a judicial entry attached to a similar name can block an account opening, and nothing states whether the subject learns which check failed, how a registry error is corrected, or whether a rejection follows them across the 530 institutions querying the same platform.

Integration and Deployment
Model Supply Chain Disclosure
BB on Model Supply Chain DisclosureSubstantial partial disclosure, or a chain that is structurally short: an explicit in house build, on premise deployment, per customer instances, or zero retention at the model layer.
Vendor Published

Four authoritative sources are named individually rather than described by category, covering population, electoral identity, tax and social security registries, which is more source transparency than most vendors in this index provide and lets a buyer assess exactly what a verification rests on and what would be affected if access changed.

Held at B because the remaining sources are given only as a count exceeding 130, national and international risk lists are unnamed, and no model provider, biometric engine or subprocessor is identified.

Core Systems and Integration Depth
BB on Core Systems and Integration DepthNamed systems or a documented public API, with the depth or the production evidence left open.
Vendor Published

The integration achievement is upstream rather than into customer systems, connecting four separate government registries plus more than 130 real-time sources into a single automated flow, which is what allows a check that would otherwise require several separate official processes to complete in minutes. Interfaces let customers embed validations directly into their own workflows, and business verification is delivered by sending a link to a counterparty who uploads documents themselves. No named core banking, origination or human resources system appears.

Deployment Model and Data Residency
CC on Deployment Model and Data ResidencyCloud only with nothing stated, which is the category norm.
Vendor Published

No hosting provider, region selection, residency commitment or private deployment option was located. Operations are domestic and the platform holds government registry results and biometric data on a large share of one country's banking applicants, which makes processing location a question the data protection framework it cites would ordinarily address.

Commercial
Commercial Transparency
CC on Commercial TransparencyNo price is published and engagement runs through a demo form, which is the norm in this index.
Vendor Published

No pricing, packaging or basis of charge was located. With more than a million verifications a month across 530 customers, per query pricing is the obvious structure and nothing confirms it, nor whether the business verification product, the individual checks and the interface access are priced separately.

Institution and Segment Coverage
BB on Institution and Segment CoverageNamed segments with dedicated material behind part of the coverage.
Vendor Published

Buyers span banks, fintechs, insurers, marketplaces, property technology firms and government agencies, and coverage runs across individual verification, business onboarding, supplier due diligence, anti money laundering screening and background checking.

The two constraints are geography and focus: this is built on one country's registries and therefore not portable, and the customer base extends into human resources screening, which sits outside financial services even though the regulatory framing and the leading buyers are financial.

Head to Head

Compared With

Most editorial comparisons pair two vendors the index assesses as direct competitors for the same buyer. Some pair vendors that are adjacent rather than rival, where the useful question is where one ends and the other begins. Each carries a verdict, the buyer conditions that favor each vendor, and a graded side by side.

Alternatives to Nufi

The closest documented capability profiles to Nufi in the same categories, ordered by similarity across the same fifteen axes the index grades every vendor on. Closest documented profile, not a claim that either product does the same job. No vendor pays for placement.

Documents Model Risk Management and Transparency where Nufi does not

Documents AI Safety and Data Stewardship and Model Risk Management and Transparency where Nufi does not

Documents Model Risk Management and Transparency where Nufi does not

A lighter documented profile than Nufi

Stronger documented coverage on Institution and Segment Coverage and Core Systems and Integration Depth

Stronger documented coverage on Institution and Segment Coverage and Core Systems and Integration Depth

Similarity is computed axis by axis from published grades, not from a composite score. The index does not aggregate grades into a total. See the fifteen axes and the methodology.

Commercial

Pricing

Vendor-published figures are labeled as such. Figures labeled “Estimated” are derived from third-party sources and have not been confirmed by the vendor.

No pricing data has been verified for this vendor. Pricing information will be published here once confirmed through vendor disclosure or third-party estimation.

Contact us

Found a vendor we missed? Have feedback on the index? We’d love to hear from you.

AI FinTech Index

The AI FinTech Index is an independent index that tracks changes to AI vendors in financial services. It holds 489 vendors across banking, lending, insurance, wealth, capital markets and financial crime compliance, each graded on the same 15 capability axes from public sources. No vendor pays for inclusion, placement, or rating.

Index Status
Last index update
September 5, 2026
The AI FinTech Index is an editorial reference, not a regulatory body. Vendor data is verified against published sources and public regulatory filings. Figures labeled “Estimated” have not been confirmed by the vendor. See the Methodology page for evaluation standards and limitations.
© 2026 AI FinTech Index
3801 N Capital of Texas Hwy, Ste E240 · Austin, TX 78746