Unit21

Unit21 sells its agents as AI Risk Infrastructure. A Rule Writer Agent and a Rule Recommendation Agent work the detection side, turning live data and analyst feedback into suggested rule changes. Alert, Case and SAR agents work the investigation side, triaging alerts, investigating whole cases and drafting report narratives. Beneath them, the no code rules engine, connected entity model and case management run without the agents, and they remain the product customers tune daily.

Autonomy climbs a four level ladder that each institution sets per queue, use case and risk tier. Agents start on standby, then complete investigations for a person to decide, then recommend dispositions a person approves with sampling, and only at the top close clear, low risk alerts inside configured guardrails, escalating when confidence is low. Filing never moves without a person: agents pre populate reports, and an analyst approves every suspicious activity and currency transaction report before it leaves the platform.

Accuracy figures are customer reported, such as Nexo's 93 percent fewer false positives, and no validation report for the agents is published. Each agent is backtested against a golden set of historical alerts already decided by the institution's own analysts before it touches a live queue, and teams sample both agreement and disagreement cases once it is live. Rules run in shadow mode on live traffic and replay against history before release.

OFAC screening reports, added in October 2026, run the sanctions list through Unit21's screening each month and show what matched, ready for model validation or an exam. Every agent run logs the data accessed, checks performed and assumptions made, and agents write code to query data instead of reading raw records.

Underdog cut its alert backlog by 72 percent with Unit21's agent and customer risk rating, and Nexo reports 93 percent fewer false positives than its previous in house system, with AI handling 57 percent of alert reviews. Kinecta Federal Credit Union cut daily alerts from more than 100 to fewer than 50 while catching twice as many true positives. Uphold reports alert reviews 44 percent faster. Green Dot, which processes more than 3.6 billion transactions a year, went from contract to go live in seven months. Underdog's and Nexo's cuts come with no figure for the true detections kept.

Retention terms and the model providers behind the agents go unstated, but the training answer is direct: Unit21 does not train models on customer data, and analyst overrides are reviewed by people rather than feeding an automated training loop. Its Fraud Consortium pools anonymized, aggregated signal across the customer network, so a pattern first seen at one institution sharpens detection for others without any customer seeing another's raw records.

Personal information processed for customers is expressly excluded from the privacy policy, apart from custom forms handled at a business's direction. Hosting location, subprocessors and the Gramm Leach Bliley Act are not mentioned.

Report dates and audit periods go unstated, but the auditors are named: Armanino attests to SOC 2 Type I and Type II covering security, availability and confidentiality, and Doyensec and Cobalt run penetration tests. A trust center gives access to security documents, and compliance with the General Data Protection Regulation and the California Consumer Privacy Act is stated.

Suspicious activity, suspicious transaction and currency transaction reports, 314(a) requests and goAML filings are prepared inside the platform, through which 5 percent of United States suspicious activity reports are filed. Suspicious activity and currency transaction reports go straight to FinCEN from Unit21, and suspicious transaction reports go to FINTRAC in Canada. Filings for goAML jurisdictions leave as a validated export for the financial intelligence unit's own portal. Filing obligations stay with the institution.

Tailored risk scores for segments such as small businesses or groups designated high risk are a marketed feature, and that is where uneven treatment enters untested. Segment level false positive rates and checks against proxy encoding are unpublished.

Every investigative step an agent takes is logged, so a wrong outcome can be traced and unwound internally. Agents draft narratives for legal filings, yet a customer restricted or reported on that basis meets no accuracy guarantee or correction route.

Institutions bring their own first and third party sources, so they largely know their own data chain. The security page names Auth0 for sign in. Subprocessors, the hosting provider and the model provider behind the agents are not named.

Unit21's integrations page names the cores it connects to, including Fiserv DNA, Fiserv Premier, Jack Henry SilverLake, Symitar and Corelation Keystone. Corelation and Alkami both list Unit21 on their own partner pages, and both partnerships were announced in October 2026. On the Alkami digital banking platform, logins, profile changes and payments reach Unit21 over a synchronous API and get a pass, step up or block answer before the action completes. Data platforms such as Snowflake, Databricks and BigQuery feed a connected entity model. The agents run inside Unit21's own case management or beside an institution's existing system.

Agents connect by API, run bolted on beside an existing case manager, or come embedded in the full platform. Payments customers are told they can operate globally while complying locally, but no hosting provider or region stands behind that claim. Sponsor banks get a multi tenant workspace that keeps each fintech program separate, and no in country hosting option is described.

Replacing fragmented tools and removing engineering dependency are cost claims, yet no rate, tier or billing unit is published to set them against. A demo request leads every path.

Financial institutions, credit unions and sponsor banks get distinct material alongside fintechs, payments firms and crypto businesses, each framed around the obligations binding it. Sponsor banks can customize rules per fintech partner and oversee a portfolio from one platform.