AML, KYC & Financial Crime
P

Pegasystems

Pegasystems is a Cambridge, Massachusetts headquartered enterprise software company founded in 1983 and listed in the United States, selling a low code platform built on unified rules, process and case management with decisioning and workflow automation. Financial services is addressed through separately named prebuilt applications.

Pega Client Lifecycle Management and Pega Know Your Customer orchestrate sales, onboarding, due diligence, credit, fulfillment and servicing end to end, handling institutional, advisor, fund and correspondent bank onboarding, with rules driven processes applying know your customer requirements by country, booking entity and product, and periodic reviews triggered automatically when screened third party information changes. Identity verification integrates facial recognition, video identification and biometrics, and the client lifecycle product integrates Moody's entity data and entity verification.

A December 2025 release added agentic features across onboarding, document processing, screening and risk assessment, with agents scoped to giving analysts context aware regulatory guidance rather than acting alone. Pega GenAI runs on managed models from Amazon Web Services, Microsoft Azure OpenAI and Google Cloud, and Pega states that client data is never used by Pega or the model providers to train models; clients can bring their own models from the Infinity 25 release. Pega GenAI Blueprint generates a build ready workflow from a stated vision.

Pega's trust center lists SOC 1 and SOC 2 Type II, ISO 27001, ISO 42001 and FedRAMP, and it publishes its subprocessor list. ING is a named client for a global know your customer deployment, and the company reports onboarding seventy percent faster at sixty percent lower cost.

Last VerifiedOctober 2, 2026
Compare Pegasystems with other vendors
Founded
1983
Headquarters
Cambridge, Massachusetts, United States
Website
www.pega.com
Categories
aml-kyc-financial-crime, compliance-and-surveillance, lending-and-banking-operations
Assessment

Capability Axes

Capability grades

15 of 15 axes rated · 10 graded A or B

AI Capability
AI Centrality
CC on AI CentralityArtificial intelligence is present but peripheral: a feature layer on a product whose value stands without it.
Vendor Published

Sold since 1983, the rules, process and case management platform would keep running with every model stripped out, and know your customer checks are described as rules driven. The agentic capability added in December 2025 across onboarding, screening and risk assessment is real, but it is the newest layer on a deterministic spine.

Autonomy and Oversight Model
BB on Autonomy and Oversight ModelA written commitment that the models work alongside human judgment, with real review surfaces, short of the full control structure: commonly the threshold at which the system stops or what happens after it is wrong.
Vendor Published

Compliance agents give analysts context aware regulatory guidance while the analyst decides, and human intervention thresholds are configurable. Defaults for those thresholds, and what routes a case to a person, are not stated.

Model Risk Management and Transparency
CC on Model Risk Management and TransparencyTransparency is claimed in general terms with no mechanism a model validator could interrogate.
Vendor Published

Generative document processing, screening models and compliance agents carry no published validation method, accuracy figure or drift monitoring. Bring your own model support from Infinity 25 moves validation onto the buyer, and the company once conceded that powerful AI can make decisions not always explainable to regulators.

Operational and Outcome Evidence
BB on Operational and Outcome EvidenceVendor aggregate claims with real figures, or audited scale disclosures from a publicly listed company.
Vendor Published

ING is named for a global know your customer deployment, but the seventy percent faster onboarding at sixty percent lower cost is stated as a product outcome, attributed to no institution. Proximus and Lloyds Banking Group appear as platform stories outside this compliance line.

AI Safety and Data Stewardship
AA on AI Safety and Data StewardshipThe cross client data boundary is answered specifically and falsifiably: commitments like zero training on customer data or per customer model instances.
Vendor Published

Client data is never used by Pega or its model providers to train models, prompts and completions from client applications are not logged, and the third party models are stateless. That July 2024 commitment covers the generative layer, leaving the onboarding and screening models to confirm in contract.

Regulatory and Compliance
GLBA and Data Privacy Posture
BB on GLBA and Data Privacy PostureA substantive privacy document that reaches the product itself, short of the subprocessor list or the full data handling detail.
Vendor Published

Grafana Labs, NetApp and MessageBird appear on a public subprocessor list updated July 2026, and the trust center offers a data processing addendum. No retention schedule covers the identity documents, video recordings and biometric templates the onboarding applications create.

Security Certifications and Trust Center
BB on Security Certifications and Trust CenterA recognized certification named in the vendor’s own material without the artifact, or with a scope or renewal question the buyer has to raise.
Vendor Published

A Conveyor trust center lists SOC 1 and SOC 2 Type II reports, ISO 27001, and FedRAMP and IRAP for Pega Cloud among 39 documents, with annual third party audits and penetration tests. Access terms for those reports are not shown.

Regulatory Status and Licensure
CC on Regulatory Status and LicensureThe regulatory position is unstated. Most vendors in this index are technology suppliers and being unlicensed is the correct posture, so this grade records silence about the posture, not a missing license.
Vendor Published

Regulatory language describes obligations the applications help an institution meet, and no financial services license or supervisory relationship of its own is stated. Its United States stock listing is securities regulation, not standing for the product.

AI Governance and Bias Disclosure
BB on AI Governance and Bias DisclosureAn independent demographic evaluation the vendor has submitted to, such as the NIST face evaluation class, or a governance framework with named process behind it.
Vendor Published

ISO 42001 certification of the AI management system is listed in the trust center, and the GenAI FAQ cites that standard in designing human oversight. Facial recognition in account opening has no published demographic performance breakdown, and no fairness evaluation appears.

AI Liability and Recourse
CC on AI Liability and RecourseMechanisms that enable challenge, such as audit trails and source traceability, with nothing standing behind the output and no route for the person affected.
Vendor Published

Case history and audit trails let an institution reconstruct and contest a decision, but Pegasystems publishes no commitment behind the output. When an agent's wrong regulatory guidance is acted on, responsibility is divided between supplier and analyst, and a person wrongly matched has no relationship with Pega at all.

Integration and Deployment
Model Supply Chain Disclosure
AA on Model Supply Chain DisclosureEvery party between the customer’s data and the output is enumerated by name, canonically through a public subprocessor list naming the model providers.
Vendor Published

The subprocessor list names Amazon Web Services, Google and Microsoft for generative AI with locations, and the GenAI FAQ names the managed models it runs on: Amazon Bedrock, Azure OpenAI and Google Cloud models. Model families and versions are not given.

Core Systems and Integration Depth
AA on Core Systems and Integration DepthNamed integrations with the systems of record, core banking, policy administration, custodial or contact center platforms, verifiable in marketplace listings or public API documentation.
Vendor Published

Moody's entity data and verification sit inside the client lifecycle product, onboarding runs front to back office on unified rules and case management, and robotic automation reaches legacy systems without interfaces. Continuous screening triggers client reviews when third party data changes, which needs live connections.

Deployment Model and Data Residency
BB on Deployment Model and Data ResidencyStated residency commitments or regional hosting options.
Vendor Published

Pega Cloud runs on Amazon Web Services or Google Cloud in supported regions, with a client chosen deployment region in the United States or the European Union paired with a comparable GenAI region. An on premises or client managed option is not documented beside those terms.

Commercial
Commercial Transparency
CC on Commercial TransparencyNo price is published and engagement runs through a demo form, which is the norm in this index.
Vendor Published

License basis, per case or per user metering and tiers are unpublished for the compliance applications, and platform pages route buyers to trials and sales. Whether Pega GenAI and agent use carry separate consumption charges is unknown.

Institution and Segment Coverage
AA on Institution and Segment CoverageThe financial segments served are named and each carries its own maintained material, whether the coverage is broad or deliberately narrow.
Vendor Published

Institutional, fund and correspondent bank onboarding are handled as distinct shapes, with due diligence applied by country, booking entity and product across jurisdictions. Large institutions running onboarding across many jurisdictions are the target.

Tracked Since Listing

Product updates

Material product, regulatory, evidence and commercial changes at Pegasystems, each verified against a live source and tagged to the capability axis it bears on. Funding rounds and awards are not product changes and are not logged.

Sep 23, 2026Integration / interoperability

Pega released the 26.2 Association Compliance GA package for Smart Dispute for Issuers and Smart Dispute for Acquirers (versions '23 through 26.1) and for Smart Dispute Agentic Automation (25.1 and 26.1). It updates dispute questionnaires, chargeback qualification logic and Visa Resolve Online transaction inquiry elements to match Visa, Mastercard and American Express rule changes published April to August 2026, including removal of Amex ZIP Code Verification eligibility checks and India specific MCC exclusions. It also adds a new response parameter to the Mastercard Retrieve claim details and Retrieve clearing details API calls.

Bears on: Core Systems and Integration DepthSource
Our read on this update →Tracked since Sep 2026

Alternatives to Pegasystems

Vendors in the same categories as Pegasystems whose profiles look most alike, each with a line on what the product does. Similar is not the same: check that each one does the job you need. No vendor pays for placement.

Deconflict runs a two sided intelligence network connecting more than 2,000 law enforcement agencies with banks, credit unions, fintechs, exchanges and stablecoin issuers on digital asset…

SymphonyAI is a Palo Alto headquartered vertical AI company operating across several industries.

Fenergo sells client lifecycle management software to banks, asset managers, fund administrators and other regulated institutions: onboarding, know your customer (KYC) and anti money…

AiPrise verifies businesses and the individuals behind them across more than 200 countries through one interface, pulling registry records, local documents, sanctions and watchlist data…

Appian is a McLean, Virginia headquartered enterprise process automation company, founded in 1999 and listed in the United States, selling a low code platform for designing, automating and…

Sybrin is a South African enterprise software company established in 1991, selling to banks, insurers and telecommunications operators primarily across Africa, the Middle East and South…

The index publishes no overall score or ranking. See what we assess and the methodology.

Commercial

Pricing

Vendor-published figures are labeled as such. Figures labeled “Estimated” are derived from third-party sources and have not been confirmed by the vendor.

No pricing data has been verified for this vendor. Pricing information will be published here once confirmed through vendor disclosure or third-party estimation.

Contact us

Found a vendor we missed? Have feedback on the index? We’d love to hear from you.

AI FinTech Index

The AI FinTech Index is an independent index that tracks changes to AI vendors in financial services. It holds 610 vendors across banking, lending, insurance, wealth, capital markets and financial crime compliance, each graded on the same 15 capability axes from public sources. No vendor pays for inclusion, placement, or rating.

Index Status
Last index update
October 20, 2026
The AI FinTech Index is an editorial reference, not a regulatory body. Vendor data is verified against published sources and public regulatory filings. Figures labeled “Estimated” have not been confirmed by the vendor. See the Methodology page for evaluation standards and limitations.
© 2026 AI FinTech Index
3801 N Capital of Texas Hwy, Ste E240 · Austin, TX 78746