Services and operating scope
Sections ↑SEON supplies a connected fraud and compliance platform for digital customer journeys. For a brokerage, the relevant control points are account opening, repeated logins, funding and withdrawals: the same customer or device can be assessed as activity changes. Its financial-services offering combines early risk signals with formal identity checks and ongoing monitoring, so a suspicious registration can be investigated before the firm completes a more costly verification flow.[1]
Core modules and their operational role
| Module | What it does | Useful distinction |
|---|---|---|
| Fraud API | Combines email, phone, IP, card-BIN, device and AML signals with rules and scoring. | Modules can be enabled separately; custom fields can feed broker-specific rules.Source 2 |
| Identity Verification | Document authenticity, selfie/liveness, address checks, electronic identities and database checks. | NFC, document uploads and session recording are configurable components.Source 4 |
| AML Compliance | Screens individuals/entities and payment identifiers; monitors suspicious transaction patterns. | Banking identifiers and flagged crypto-wallet screening extend beyond customer-name matching.Source 5 |
| Case Management | Connects alerts, transaction history, analyst notes and supporting documents. | Fraud and AML teams can share evidence while preserving separate responsibilities.Source 6 |
| Workflows | Builds conditional verification journeys in a visual editor. | Each check creates a transaction record; a workflow run can be approved, declined, under review, pending or abandoned.Source 8 |
The Scoring Engine returns APPROVE, REVIEW or DECLINE using rules, lists and risk signals. Default rules can be switched on or off; custom rules can change scores, decisions and list membership. AI Insights produces a separate 0–100 probability score that can be incorporated into rules. These distinctions matter operationally: changing a threshold, setting a list exception and accepting a machine-learning suggestion are different changes to the decision process.[7]
Integrations and event handling
Sections ↑Integration combines server requests with client-side collection where needed. JavaScript, iOS and Android components gather device/session signals; the server sends the appropriate data for analysis. Requests use X-API-KEY. The documented default rate is two requests per second for trial accounts and 20 after trial, measured per licence key; higher requirements go through support. Client timeout settings should allow 500–1,000 milliseconds beyond the configured SEON timeout.[3]
Integration controls
| Component | Documented behaviour | Operational implication |
|---|---|---|
| Verification session | The backend initializes an active workflow with its UUID and required user_id, receiving an execution ID and frontend token. | Keep the API key server-side; additional inputs depend on enabled checks. US/APAC access requires contact with SEON.Source 9 |
| Licence keys | Administrators create separate Production or Sandbox keys; other roles can have narrower viewing rights. | Named keys can be viewed or deleted through the organisation settings.Source 11 |
| Webhook receiver | When signing keys are configured, JSON events carry HMAC-SHA256 signatures. Request-Id supports deduplication; delivery is at least once. | Respond within ten seconds. Retryable cases include HTTP 429, 5xx and network/time-out failures; ordinary 4xx responses are not retried.Source 10 |
| Webhook migration | Legacy URLs were migrated, but their consumers must adopt the new payload/signature scheme before re-registration. | Update and test the consumer before deleting the old entry; an unchanged URL does not make the old parser compatible.Source 10 |
A webhook endpoint must answer the validation ping with HTTP 200. SEON permits ten endpoints and retains delivery-attempt logs for 30 days. The published retry delays double from one minute through 256 minutes. These records let an operations team distinguish an underlying risk event from repeated delivery attempts.[10]
Pricing and commercial conditions
Sections ↑Published platform plans
| Plan | Published charge | Included scope |
|---|---|---|
| Starter | $699 per month, as printed | 2,500 fraud checks monthly, ten users, 50 custom rules, platform/API access, ticket/email implementation help and standard reporting.Source 12 |
| Premium | Custom quotation | Advertised unlimited calls/users/rules, Case Management and AML, dedicated implementation, 24/7 support/account management and advanced monitoring.Source 12 |
The price page prints a dollar sign without a currency code. SEON’s billing FAQ says invoice currency follows the billing agreement, and requests to change EUR/USD billing should reach its finance team before the next invoice.[16]
Consumption beyond the plan headline
| Activity | Billing treatment |
|---|---|
| Device data | SDK collection is free; decrypting session data through Fraud API counts as a call. Adding device fingerprinting alongside other Fraud API modules carries no additional module charge.Source 13 |
| AML monitoring | An initial check includes 12 months of monitoring. Active monitoring renews every 12 months; monthly invoices include new checks and renewals.Source 14 |
| Batch uploads | Additional charges apply; the FAQ publishes no numerical rate.Source 15 |
| Sandbox | Calls count toward the normal API allowance despite the separate environment.Source 18 |
Separately signed agreements prevail. Default fees are prepaid, tax-exclusive, due 30 days from invoice; late interest is 1.5% monthly or the lower legal maximum. Fixed terms renew equally with 5% uplift unless 60 days’ notice is given. Indefinite online orders allow immediate cancellation and require 30 days’ price-change notice.[17]
Implementation and change control
Sections ↑Workflows let the implementation team separate journeys by customer segment, jurisdiction or event. A route can start with low-friction checks, request documents only when a condition warrants it, and retain the results of each step for investigation. Analysts inspect the full run rather than only its final state. Configuration still determines which information the backend must supply and which checks the user actually completes.[8]
The sandbox has its own database, rules and settings. Its transactions and labels do not alter production. That separation supports integration work and rule tuning before a live change, while its shared consumption allowance remains relevant to the commercial plan.[18]
Configuration and feedback controls
| Control | How it operates |
|---|---|
| Two-person approval | Propose-only or manage permissions turn covered rule/list changes into proposals. A different user approves or rejects them; the original values remain active until approval and actions are logged.Source 19 |
| Outcome labels | A transaction has one label representing its verified outcome. Labels feed model learning, including corrections after an investigation.Source 20 |
| Operational tags | Up to 100 tags classify transactions or alerts and support filters/rules. Tags do not directly train the models.Source 20 |
| API compatibility | Breaking changes require a new major version. Added optional/request-response fields, error codes and enum values are treated as non-breaking. Consumers must tolerate these additions.Source 21 |
Support and service commitments
Sections ↑Managed Risk Services adds a senior fraud consultant, daily alert review and rule adjustments, weekly trend analysis and monthly performance reporting. It is an ongoing operational service alongside technical support, with training and tailored risk settings. Its scope is especially relevant where a broker wants help maintaining rules after the initial integration.[22]
Standard-term response goals: one hour/S1, same business day/S2 and next business day/S3. Measured from complete incident information, within Monday 02:00–Friday 22:00 UTC, excluding holidays. Monthly uptime is 99.5% web/99.9% API, excluding scheduled maintenance; credit requests are due within 30 days of the event.[17]
The Premium page separately advertises 24/7 support access; the response clocks above describe the standard contractual schedule.[12]
Official contact routes
Decision authority and data responsibilities
Sections ↑AML search results identify potential matches, not a conclusive identity or eligibility determination. SEON’s AML notice assigns interpretation and final verification to the customer and prohibits solely automated significant decisions based on those results. SEON acts as controller when building its public-source AML database; that role differs from processing customer verification data on instructions.[24]
Product-specific retention
| Data or identifier | Published rule |
|---|---|
| Device/Fraud API data | Default one year unless agreed otherwise; the customer can request earlier deletion. True Device ID expires after 20 days without another observation unless configured longer.Source 25 |
| IDV notice effective 9 January 2025 | One year after session completion, subject to customer instructions. Biometrics are not returned to the customer and are permanently deleted when the customer relationship ends or the retention period expires.Source 26 |
| DPA effective 1 October 2026 | Configurable defaults: Fraud one year and AML five years after query completion; IDV three years after session completion.Source 17 |
The linked IDV notice and later DPA publish different defaults; confirm the configured period.[17][26]
The October 2026 Device Intelligence notice lists Ireland as the default storage region, with Northern Virginia, Singapore and Jakarta options. It separately allows processing elsewhere by group companies and providers, so storage selection does not mean that every processing activity stays in that location.[25]
SEON’s current-linked security whitepaper describes AES-256 at rest, TLS 1.2 or higher in transit and logically separated customer data in shared infrastructure. It describes an independently provisioned AWS account as a negotiated option, plus multifactor access and quarterly access reviews. ISO 27001 and SOC 2 Type2 are vendor-disclosed assurance credentials; the whitepaper is not the underlying audit report.[27]
Company and portfolio context
Sections ↑SEON Technologies dates its founding to 2017. Its current leadership page names Tamás Kádár as chief executive and Bence Jendruszák as chief operating officer, and places the identity-verification launch in January 2026. The company lists offices across Austin, London, Budapest and Asia-Pacific, reflecting a customer base wider than financial services alone.[28]
The group includes SEON Technologies Kft. in Hungary and SEON Technologies US Inc. in Delaware.[25]
The September 2025 financing announcement reported USD 80 million of Series C funding led by Sixth Street Growth, with IVP, Creandum, Firebolt and Hearst among participating investors. Complytron is an acquired AML business incorporated into SEON’s screening offering; it should be treated as part of this provider’s history rather than a separate current platform purchase.[29][30]
- Operator
- SEON Technologies Kft.; contracting entity depends on the order
- Service scope
- Fraud signals and decisions, identity verification, AML screening, transaction monitoring and case operations.
- Customer types
- Financial institutions; Fintech and payment businesses; Digital platforms
- Delivery
- SaaS; API; Managed service
- Pricing publication
- Public and quoted pricing
- Platforms
- Fraud API; Workflows; Identity Verification; AML Compliance; Case Management; SEON MCP
- Pricing scope
- Public Starter price; Premium is quoted. API, monitoring and sandbox consumption have distinct billing rules.
- Implementation
- Backend APIs, device SDKs and visual verification workflows.
- Support
- Plan-dependent technical support, documentation and optional specialist fraud services.
- Permissions and regulatory scope
- Risk and identity software. The customer assesses AML matches and remains responsible for consequential decisions.
Provider metadata checked 21 Oct 2026Source 28Source 17Source 1Source 22Source 12Source 9Source 24Source 30Source 8
Additional information
Sections ↑Different AI functions have different authority
| Function | What the documentation permits | Human control |
|---|---|---|
| SEON MCP | Read-only queries of transactions, customers, alerts, rules and logs. OAuth respects the user’s existing permissions; account limit 300 requests/minute. | Disabled by default, enabled by admins, with logged queries and an immediate account-wide disable switch. It cannot edit rules, label transactions or change settings.Source 31 |
| AML Screening Agent | Checks screening hits for mismatches and suggests likely false positives with confidence scores. | An analyst launches it and may accept suggestions individually or in bulk; final disposition remains with the analyst.Source 32 |
| Regulatory reporting | Prefills reports and generates narratives; validates and exports XML/ZIP or submits directly. Current supported filing is FinCEN; other FIUs are described as forthcoming. | The analyst reviews the report and selects filing. A generated narrative is part of report preparation, not evidence of regulatory acceptance.Source 33 |
The AI disclaimer distinguishes customer-specific models trained within that customer’s account from cross-customer models built with sanitized, aggregated or anonymized information that identifies neither customers nor individuals. It says customer data is not used to train third-party AI models. Customers remain responsible for the oversight and configuration of their decision processes.[34]
Erase API v2 requires product domains plus at least one identifier filter or date range. The published domains cover fraud, AML screening and AML case management. Optional start/end dates must be supplied together, cannot be future dates and may span no more than seven days. With dates but no identifier filters, all transactions in the interval are selected. Processing is asynchronous, with a request ID for status checks and logged outcomes; there is no dry run. Erasing a transaction also removes its underlying session record, so other transactions sharing that session lose their device/session data, including in exports.[35]
After termination, export remains available for at least 30 days. Deletion or anonymization follows within 30 days after that window, subject to return instructions and legal retention.[17]
Sources & further reading
- Financial-services fraud controls SEON · Accessed 21 Oct 2026
- Fraud API SEON · Accessed 21 Oct 2026
- API integration and limits SEON · Accessed 21 Oct 2026
- Identity verification components SEON · Accessed 21 Oct 2026
- AML compliance modules SEON · Accessed 21 Oct 2026
- Case management overview SEON · Accessed 21 Oct 2026
- Scoring Engine overview SEON · Accessed 21 Oct 2026
- Workflow orchestration SEON · Accessed 21 Oct 2026
- Workflow API SEON · Accessed 21 Oct 2026
- Webhook delivery and migration SEON · Accessed 21 Oct 2026
- API licence-key controls SEON · Accessed 21 Oct 2026
- Starter and Premium pricing SEON · Accessed 21 Oct 2026
- API usage billing SEON · Accessed 21 Oct 2026
- AML check billing SEON · Accessed 21 Oct 2026
- Batch-upload charges SEON · Accessed 21 Oct 2026
- Invoice currency and billing contact SEON · Accessed 21 Oct 2026
- Terms of Service, 1 October 2026 SEON · Accessed 21 Oct 2026
- Sandbox environment SEON · Accessed 21 Oct 2026
- Four-eye approval controls SEON · Accessed 21 Oct 2026
- Labels and tags SEON · Accessed 21 Oct 2026
- API version policy SEON · Accessed 21 Oct 2026
- Managed Risk Services SEON · Accessed 21 Oct 2026
- Sales and support routes SEON · Accessed 21 Oct 2026
- AML Screening Privacy Notice SEON · Accessed 21 Oct 2026
- Device Intelligence Privacy Notice, October 2026 SEON · Accessed 21 Oct 2026
- Identity Verification Privacy Notice SEON · Accessed 21 Oct 2026
- Privacy and Security Whitepaper SEON · Accessed 21 Oct 2026
- Company history and leadership SEON · Accessed 21 Oct 2026
- September 2025 Series C financing SEON · Accessed 21 Oct 2026
- Complytron acquisition and AML integration SEON · Accessed 21 Oct 2026
- MCP investigation connector SEON · Accessed 21 Oct 2026
- AML Screening Agent SEON · Accessed 21 Oct 2026
- Regulatory report preparation and filing SEON · Accessed 21 Oct 2026
- AI Disclaimer, September 2026 SEON · Accessed 21 Oct 2026
- Erase API v2 SEON · Accessed 21 Oct 2026
This profile reports dated public information, including provider-published services and terms. It does not independently test or guarantee service delivery, integrations or performance. Inclusion is not an endorsement. Permissions and protections apply only to the named legal entity, service and client category; check the current official records and your contract.