Xapien
Xapien automates the research step of due diligence and returns a document rather than a score. The product takes the name of a person or a company and produces a fully sourced background report, typically in minutes, drawing on corporate registries, sanctions and watchlist data, politically exposed person data, court records and the indexed open internet; Xapien puts the average at 7.5 minutes across a sample of a thousand reports.
It publishes an argument that generative AI on its own cannot be used for due diligence, naming hallucination, inconsistency between similar prompts and the absence of structured compliance data, and positions itself as the answer, triangulating structured screening data against web material and citing every finding to a source. Its identity resolution engine decides which of several similarly named subjects a report concerns, and Google Cloud's case study names Gemini 2.5 Flash for high volume parsing and Gemini 2.5 Pro for risk summaries, running on Google Kubernetes Engine.
Financial services is one of six industry lines, with know your customer and customer due diligence for banks, client onboarding for wealth managers and private banks, investor and target diligence for private equity, and underwriting and claims research for insurers. Named financial customers include Griffin, a United Kingdom bank, and Dow Jones Risk and Compliance, which sells Integrity Check built on Xapien, and a Xapien app is listed on the ServiceNow Store. The workflow runs identify, run report, review and edit, share, then decide and approve, with review manual or automated by configurable rules.
It is sold as an annual subscription in three tiers set by report volume, with unlimited users. Xapien publishes a downloadable ISO 27001 certificate and commits that customer data is never used to train its models. The legal entity is Digital Insight Technologies Ltd, founded in London in 2018 by two former BAE Systems engineers.
Capability Axes
Capability grades
15 of 15 axes rated · 10 graded A or B
Language models parse material in its original script, resolve which similarly named subject a report concerns and write the risk summary a compliance officer reads. A list of source links, the manual process being replaced, is what would remain.
Review, edit and approval can all be configured to run automatically, so a machine written dossier on a named person can lead to approval with no one reading it. Decisions the product refuses to automate are not described.
Report accuracy of 97 percent and a 7.5 minute average are published without saying what accuracy means or how ground truth was set. Misses against known adverse subjects, drift and per language results are not given.
Quotes come from Dow Jones Risk and Compliance's global head of due diligence, Griffin's money laundering reporting officer and Pinsent Masons' general counsel, and Chartis placed the firm in its FCC50 and RiskTech100. The detailed named references sit in law, education and philanthropy, while financial ones are anonymized by role.
Customer data never trains the models, a specific commitment stated on the information security page. Every finding is cited to a retrievable source, so a fabricated one can be checked.
Only public online sources are processed, personal data is encrypted in transit and at rest, and searches are aggregated so sources cannot identify the inquiring customer, under GDPR. Each report profiles a named person who did not choose it, and their access or correction route, dossier retention and a US privacy position are left out.
Linked for download, an ISO 27001 certificate issued to Digital Insight Technologies Limited sits beside a statement of regular independent external audits. Scope over the research pipeline, a SOC report and a trust center are not shown.
Digital Insight Technologies Ltd claims no financial authorization, the norm for a supplier, but states no controller or processor position for report subjects and nothing on the EU AI Act, though it profiles named people for regulated decisions. Analyst placements are commercial recognition only.
What has been written and indexed about a person varies with country, language and press freedom, so a subject from a thin press market can come back clean for reasons unrelated to conduct. Identity resolution across transliterated names, and a filter that discards about three quarters of candidate sources, carry no published bias testing or per language performance.
Unhappy customers pay nothing for a report, which returns one report's price out of an annual commitment of at least 250. Terms, warranties and a liability cap are unpublished, and the remedy turns on dissatisfaction rather than demonstrated error.
Gemini 2.5 Flash handles parsing and Gemini 2.5 Pro writes risk summaries, per Google Cloud's case study, with Gemini 3 Pro under evaluation. Model names appear on the provider's page rather than the firm's own, and the sanctions and registry data suppliers are not named.
A ServiceNow Store app screens organizations and individuals and stores risk scores inside ServiceNow, a ServiceNow partnership followed in September 2026, and Dow Jones sells Integrity Check built on the engine. API access is held for the top tier, and no connector catalog is published.
The information security page places processing in a dedicated AWS virtual private cloud, while Google Cloud's case study quotes the founder on Google Kubernetes Engine with data kept in specific regions. Those statements conflict, and no region list settles it.
Three annual tiers run from 250 to 3,000 reports a year on a twelve month term, with unlimited users and one report as the billable unit. No figure is published, and the plans and platform pages disagree on the middle tier floor, 650 against 600.
Banking, private equity and insurance each get their own material, from know your customer for banks to underwriting research for insurers, with Griffin and Dow Jones named as financial customers. Finance is one of six industry lines, and the detailed case studies sit elsewhere.
Product updates
Material product, regulatory, evidence and commercial changes at Xapien, each verified against a live source and tagged to the capability axis it bears on. Funding rounds and awards are not product changes and are not logged.
Xapien released a native application on the ServiceNow AI Platform, available in the ServiceNow Store with free trials for ServiceNow customers. The app runs a full, sourced background check on any company or person inside ServiceNow workflows and enriches the out of the box risk scores in ServiceNow Third-Party Risk Management, with configuration for other modules.
Compared With
Most editorial comparisons pair two vendors the index assesses as direct competitors for the same buyer. Some pair vendors that are adjacent rather than rival, where the useful question is where one ends and the other begins. Each carries a verdict, the buyer conditions that favor each vendor, and a graded side by side.
Alternatives to Xapien
Vendors in the same categories as Xapien whose profiles look most alike, each with a line on what the product does. Similar is not the same: check that each one does the job you need. No vendor pays for placement.
Rulebase reviews every customer interaction a financial services firm has, across calls, chats and emails, replacing the three to five percent sample a human quality assurance team can…
ibl.ai sells an AI agent platform that institutions run themselves, in their own cloud, on premise or fully air gapped, with the full code licensed perpetually to the customer.
Acin sells operational risk data and AI tools to large banks and other financial institutions.
Aptus.AI converts financial regulation into a machine readable format and sells the result to compliance and legal functions at banks, insurers and other regulated firms.
Sedric turns a regulated firm's policies and the rules it operates under into enforceable system logic, then applies preventive, detective and corrective controls across every customer touchpoint.
Aveni builds AI for UK banks, advice networks and wealth managers.
The index publishes no overall score or ranking. See what we assess and the methodology.
Pricing
Vendor-published figures are labeled as such. Figures labeled “Estimated” are derived from third-party sources and have not been confirmed by the vendor.
| Entry Price | Pricing Basis | Data Protection Terms | Implementation | Source |
|---|---|---|---|---|
|
Not published. Entry commitment is stated as a volume rather than a figure, at 250 reports a year on a twelve month term
|
Annual subscription across three tiers set by report volume rather than by seat, with unlimited users and teams at every tier. The entry tier starts from 250 reports a year, the middle tier from 650 on the plans page and from 600 on the platform page, and the top tier from 3,000. One report is one billable unit, and a company report and a person report count identically. Xapien describes the model as scaling with usage and states there are no extras. It sells no single reports or consulting, so access runs through the annual commitment. Corporate records, sanctions, watchlist and politically exposed person screening and multilingual research are included at every tier. The platform page places single sign on and bulk upload at the middle tier and holds API access, configurable report templates, the configurable risk framework and custom branding for the top tier, while the plans page shows every feature under all three. Discounted pricing is published for university and non profit buyers. | Not tiered on any published pricing. Xapien's information security page commits uniformly to publicly available sources only, encryption in transit and at rest, search aggregation so the enquiring customer is not disclosed to the sources queried, and no use of customer data to train its models, and links a downloadable ISO 27001 certificate. No data processing agreement, sub processor list or retention schedule is published. | No separate implementation, onboarding or setup fee appears on any published surface, and the vendor markets deployment as launching in days with no heavy integration work. Support is included rather than charged: every tier carries access to the help center and the user community, the middle tier adds a named customer success manager, and the top tier adds premium support and solutions team access. The vendor publishes a satisfaction remedy under which a customer does not pay for a report they are not happy with, and offers a co branded or fully white labeled reporting interface through its own design team, with the white label option stated as available to top tier customers. Whether the branding work carries a charge is not stated. A thirty minute demonstration is the published entry route and no free tier or self serve trial exists. | Vendor Published |
Xapien publishes its tier structure and billing unit but no figure as of 2 October 2026, so a buyer can size its commitment in reports without a price. Two inconsistencies between its own pages belong on the buyer's question list: the middle tier floor reads 650 reports on the plans page and 600 on the platform page, and the pages disagree on which tier unlocks API access, which matters to a buyer that intends to embed the product.