ComplyAdvantage industry provider profile

ComplyAdvantage supplies financial-crime intelligence and workflow software. Its Mesh platform combines customer and company screening, ongoing monitoring, transaction monitoring, payment screening and investigation tools. Financial institutions, fintechs and other businesses can use a browser interface, APIs or supported batch routes to connect those functions to their own onboarding and payment operations. The important buying decision is which risk problem and dataset a module addresses, rather than whether the supplier offers a generic “compliance platform.”[1]

Customer screening is a risk-information check. It should not be described as proving that a passport is genuine, performing liveness verification or establishing that an applicant controls an identity. The customer-screening product emphasizes match configuration, case routing, decision checkpoints and approval hierarchies. A brokerage can combine it with identity verification, but those functions answer different questions and have different evidence requirements.[2]

Company screening can accept corporate and beneficial-ownership information through an API, including information obtained from registry sources. Screening an owner supplied by the buyer is distinct from discovering the complete ownership chain or validating control over the company. This matters for a broker onboarding legal entities: the source of the corporate structure, the entities selected for screening and the treatment of unresolved matches need to remain visible in the process.[3]

Mesh’s setup guide starts with a screening configuration, before the first screening request. The compliance or risk team selects the relevant data and settings, while the implementation team creates credentials with the required access and expiry. Separate credentials for distinct integrations make their permissions and lifecycle easier to control. A technically successful request is therefore only one part of setup; its screening configuration determines the risk checks actually performed.[8]

The transaction endpoint has an important update restriction: updating an existing transaction is supported for synchronous transaction monitoring, not for fast payment screening or asynchronous monitoring. Configuration and account permissions also determine which products the call can invoke. If a customer array is supplied, its external identifiers must be populated as the endpoint requires. Treating all transaction calls as an interchangeable create-or-update operation can therefore produce an incorrect integration.[7]

The API reference publishes defaults of 1,000 production and 300 sandbox requests per minute and directs customers to confirm their actual account limit.[11]

The migration FAQ instead gives 600 production and 60 sandbox requests per minute. This conflict means neither public default should replace the account-specific capacity agreed with the provider.[16]

For ongoing monitoring, initial and subsequent screening configurations can be aligned or differ. The product supports sandbox configuration testing and external events through APIs or webhooks. Profile muting also changes future alert behaviour, making it part of the risk policy rather than merely a display preference. Review procedures should distinguish a resolved case from a profile deliberately muted for later screening.[4]

ComplyAdvantage publishes Starter Essentials and Agentic plans, while Enterprise pricing is quoted. Starter is aimed at smaller screening volumes, with the public range extending to 2,000 entities; the Enterprise offer covers a broader negotiated product and support scope. The general pricing page describes setup within one business day after subscription and cancellation taking effect at the end of the current billing cycle. Those self-service statements should not be read as a universal enterprise implementation timetable.[13]

One-off screening allowances reset monthly without rollover; monitored entities accumulate. Screening then monitoring the same entity counts once. Additional monitored entities beyond the plan cost 1.5 times the per-entity rate in the next cycle; annual subscribers pay overages monthly. Entity allowances are distinct from API request counts.[12]

ComplyLaunch is a separate application-based programme offering eligible early-stage startups 12 months of free access to specified sanctions, PEP and related-person screening and ongoing-monitoring functions. Applicants need an online presence, and existing partners are excluded under the published eligibility conditions. It is not a blanket free version of every Mesh product, nor a universal entitlement for a new brokerage.[14]

The SFTP workflow requires the connection and account to be provisioned, with host keys checked and optional IP restrictions available. Files go to the designated customer creation-and-screening directory; mandatory values include the screening configuration, external identifier and relevant name fields. The documentation allows up to 24 hours for processing. A batch procedure therefore needs to track validation failures and eventual results rather than assume that a successful file transfer created every customer.[15]

Transaction-monitoring scenarios can examine individual transactions, aggregate activity such as velocity, or behaviour relative to a customer’s history. ComplyAdvantage documents CSV and JSON REST integration routes. The implementation task includes choosing and tuning the scenarios for the business; it is not just connecting the largest available volume of transaction data.[5]

The migration FAQ says legacy customer-screening audit logs are supplied as CSV rather than imported into the Mesh interface. It also says migrated customers and cases are absent from routine exports, while subsequent activity appears. Preserve the historic archive and identifier mapping when reconciling old and new records.[16]

The public contact page separates commercial enquiries, technical support for existing customers and privacy requests.[24]

The provider’s G-Cloud 14 submission specifies one-hour responses for priority-one and priority-two incidents on a 24/7 basis, three business hours for priority three and five for priority four. These are published public-sector service terms, not evidence that every Starter or brokerage contract receives the same support.[28]

The G-Cloud listing also describes account-management, training and troubleshooting assistance. Exit assistance and the export arrangement depend on the agreed service scope. Its value as evidence is that it identifies concrete support and handover functions; the customer’s actual order needs to state which of them are included.[28]

ComplyAdvantage supplies intelligence and technology for the customer’s financial-crime controls. The published service terms say results do not constitute automatic conclusions and should not be relied on alone. A risk match, a cleared profile and a decision to onboard a customer are different events. The brokerage remains responsible for its policy, escalation and final use of the information; buying the software does not confer a financial-services permission.[29]

The subprocessor list, updated 7 January 2026, includes AWS, Google Cloud and Microsoft Azure, with analytical and operational services such as Databricks, Grafana and Sigma. It also lists group affiliates providing support, and identifies Resistant AI for a product-specific use. The relevant processing chain therefore depends on selected products and contractual regions; the presence of a supplier on the list does not mean every customer uses every listed service.[18]

The published DPA provides for return or deletion following a written request made a reasonable time before termination, subject to legal retention requirements. It requires notification of a personal-data breach without undue delay. A separate 72-hour clause concerns forwarding data-subject requests, so that number should not be presented as the breach-notification commitment. These are provisions in the identified public version, not confirmation of an individual buyer’s signed terms.[17]

The privacy notice also distinguishes the provider’s own intelligence collection from data submitted by customers for screening and discusses international-transfer safeguards. This distinction matters when asking for deletion: removing a broker’s submitted record is not necessarily the same request as challenging an entry in the provider’s independently maintained risk database.[19]

The website terms name IVXS UK Ltd as the website operator, registered at 86–90 Paul Street, London. These are website terms, not the production service agreement. The profile therefore distinguishes the public-facing operator from the precise entity named on a customer’s service order.[25]

The service terms published through G-Cloud, dated 6 October 2023, describe IVXS Technology SG Pte Ltd for Asia-Pacific customers, IVXS Technology USA, Inc. for the Americas and IVXS UK Ltd elsewhere. That is a dated contracting framework, not proof that every October 2026 order uses the same allocation. The relevant supplier should be checked on the actual order form.[29]

A company announcement from October 2016 records that ComplyAdvantage was founded in 2014 by Charles Delingpole. The current company page identifies Delingpole as founder and executive chairman and Vatsa Narasimha as CEO. It names investors including Balderton, Index Ventures, Ontario Teachers’, Goldman Sachs and Andreessen Horowitz. Those names establish the company’s published investor history, not ownership percentages or control of a particular operating subsidiary.[26][27]

Operator

ComplyAdvantage group; IVXS UK Ltd is the website operator

Service scope

Financial-crime risk intelligence, customer/company screening, ongoing monitoring, payment screening, transaction monitoring and configurable case workflows. Screening is distinct from identity-document verification.

Customer types

Banks and financial institutions; FX and CFD brokerages; Fintech and payment businesses; Other businesses with AML screening needs

Delivery

SaaS; API

Pricing publication

Public and quoted pricing

Headquarters

London, United Kingdom

Pricing scope

Public Starter Essentials and Agentic prices; quoted Enterprise scope. Usage counts, annual billing and overages require careful reading.

Implementation

Browser/API and supported batch/SFTP routes. Screening configurations, permissions, data mappings and monitoring rules require setup.

Support

Product support and knowledge-base routes are published. Enterprise and priority-response commitments depend on the contracted service.

Permissions and regulatory scope

AML intelligence and compliance technology. Results support the customer’s decisions and do not confer financial-services authorisation.

Provider metadata checked 20 Oct 2026Source 1Source 2Source 8Source 13Source 24Source 25Source 28Source 29

Starter Agentic requires manual case assignment. Remediation and muting occur at profile level; the final case decision remains human. Its settings are fixed rather than configurable in the interface. Those limits distinguish the Starter price from broader enterprise automatic remediation.[12]

The enterprise help article describes configurable risk thresholds, profiles-only or profiles-and-cases remediation, and either manual assignment or automatic processing of an unassigned backlog. Agent access can be enabled and controlled through permissions. A configuration example focused on high-confidence false positives is an example of a chosen policy, not proof that every customer’s agents act under that rule. The appropriate scope is the configuration and permissions actually commissioned.[21]

The wider agentic product also describes behavioural investigation using transaction history and customer information, with resolution, escalation and explanatory notes. ComplyAdvantage states that proprietary information is not used to train external models. That is a specific vendor statement; it should not be expanded into an unsupported claim that no data is ever used for internal model development.[20]

The export documentation also records human or AI-agent actors where supported, and warns that some newly added fields are not backfilled historically. That matters when comparing operational performance before and after an agent rollout. An apparent change in attribution or record completeness can reflect the export schema as well as a change in staff or system behaviour.[23]

ComplyAdvantage’s site states that it is not a consumer reporting agency for US Fair Credit Reporting Act purposes and restricts use for decisions such as credit, employment, insurance and housing eligibility. AML intelligence access should therefore not be repurposed as an unrestricted background-check product. The permitted purpose remains part of the service boundary.[24]