Category
KYC, KYB & Identity
Identity providers verify consumers (KYC) and companies (KYB), run sanctions/PEP screening, and monitor risk over the customer lifecycle. Compare on document coverage, biometric accuracy, data sources per country, orchestration flexibility and pass rates.
In one minute
What it is
Services that verify who your customers are — people (KYC) and companies with their owners (KYB) — and screen them against sanctions, PEP and adverse-media lists.
What you get
Document and biometric checks, database and registry lookups, ownership mapping, screening, risk scoring, decision rules and audit trails.
What you still own
Your risk policy, the decision on who you accept, manual review, record keeping and ongoing due diligence. Outsourcing the check does not outsource the obligation.
When you need it
Whenever regulation or your partners require you to know your customer — and whenever fraud makes it worth knowing.
How it works
Many providers resell or combine third-party data sources. Ask which checks are performed in-house and which are passed through, per country.
Who does what
| Task | You | Provider | Licence holder |
|---|---|---|---|
| Risk policy and appetite | Owns | Advises | Approves (if you use their licence) |
| Data capture | Presents flow | Supplies SDK | — |
| Document and biometric checks | — | Performs | — |
| Registry and ownership lookups | — | Performs | — |
| Sanctions and PEP screening | Reviews matches | Screens | Oversees |
| Decision | Final decision | Suggests via rules | Sets minimum standards |
| Manual review | Performs | Supplies tooling | — |
| Record keeping | Retains | Stores per contract | Audits |
| Ongoing monitoring | Acts on alerts | Re-screens | Oversees |
Risk policy and appetite
- You
- Owns
- Provider
- Advises
- Licence holder
- Approves (if you use their licence)
Data capture
- You
- Presents flow
- Provider
- Supplies SDK
- Licence holder
- —
Document and biometric checks
- You
- —
- Provider
- Performs
- Licence holder
- —
Registry and ownership lookups
- You
- —
- Provider
- Performs
- Licence holder
- —
Sanctions and PEP screening
- You
- Reviews matches
- Provider
- Screens
- Licence holder
- Oversees
Decision
- You
- Final decision
- Provider
- Suggests via rules
- Licence holder
- Sets minimum standards
Manual review
- You
- Performs
- Provider
- Supplies tooling
- Licence holder
- —
Record keeping
- You
- Retains
- Provider
- Stores per contract
- Licence holder
- Audits
Ongoing monitoring
- You
- Acts on alerts
- Provider
- Re-screens
- Licence holder
- Oversees
Use cases
Onboard consumers with document + selfie
Verify ID documents plus a liveness selfie, with automated decisioning and manual review fallback.
Read the use caseVerify businesses and UBOs
Pull company registry data, map the ownership tree, and screen directors/UBOs against sanctions and PEP lists.
Read the use caseScreen for sanctions, PEP and adverse media
Run initial and ongoing screening against global watchlists with configurable match thresholds.
Read the use caseOrchestrate multiple identity vendors
Route each user through the best-fit vendor by geography, risk score or document type — from one integration.
Read the use caseWhat to compare
Country and document coverage
Gaps become manual work or lost customers
Ask: Which documents and countries are supported natively?
Pass rates and false rejects
Conversion versus risk
Ask: How do you measure pass rates, and can we test on our own traffic?
Liveness and fraud detection
Deepfakes and document fraud are rising
Ask: Which presentation-attack standards do you test against?
KYB depth
Business onboarding is slow without good registry data
Ask: Which registries, how is the ownership tree built, how current is the data?
Screening quality
False positives cost analyst time
Ask: Which lists, update frequency, fuzzy-matching controls?
Orchestration and rules
Different risk levels need different flows
Ask: Can we route by country, risk or document type?
Manual review tooling
Your team works in it daily
Ask: Case tools, audit trail, four-eyes approval?
Data protection
Biometric data is sensitive
Ask: Where is data processed and stored, and for how long?
Reliance and reuse
Avoids repeating checks
Ask: Can results be reused across products or partners?
How providers charge
Per verification
Often priced by check type — document, biometric, database
Per KYB lookup
Registry and ownership data priced per company or per source
Screening
Per screening event and per monitored entity per month
Platform fee
Monthly minimum or subscription
Manual review
If the provider offers analysts
Setup
Configuration and integration support
Ask each provider for the all-in cost at your expected volume, for year one and year three.
Regulatory context
EU
- GDPR treats biometric data used for identification as special-category data
- Some countries set specific rules for remote identification, such as video identification standards.
UK
- The Money Laundering Regulations and JMLSG guidance set customer due diligence expectations
- The UK is developing a digital identity trust framework.
US
- Customer identification and beneficial-ownership requirements apply to covered financial institutions.
Orientation only, not legal advice.
What providers will ask you
Have these ready before you publish.
- Customer types and countries
- Expected verifications per month
- Risk appetite and required assurance level
- Regulatory status and licence holder
- Current flow and pass rates
- Data residency requirements
Red flags
- Pass rates quoted without methodology or a trial
- Coverage that silently falls back to manual review
- Unclear data retention for biometrics
- Screening lists updated infrequently
- No audit trail export
How Finlane fits
Your RFP covers
- Customer types and markets
- Verification methods
- KYB depth
- Screening scope
- Orchestration and rules
- Manual review tooling
- Data protection
- Volumes and pricing
- 1Scope your verification requirements with the AI advisor
- 2Matching providers receive your brief
- 3Compare structured responses side by side
- 4Shortlist and run a test on your own traffic
Frequently asked questions
Related reading
- Seven reasons BaaS providers reject applicantsRejection from a banking-as-a-service provider is usually a risk decision made early and rarely explained. Here are the seven reasons it happens — and what to change before you apply again.
- Paying marketplace sellers across bordersSeller payouts across corridors: what breaks, which provider categories are involved, and the questions that separate a payout provider that works from one that looks like it does.
- Launching a business account inside a SaaS platformWhat a vertical SaaS platform needs to offer its customers a branded business account: the licence question, the stack, the onboarding reality and the sequence to procure in.
Buying in KYC, KYB & Identity?
Post a structured RFP on Finlane and compare providers’ answers side by side. Free for buyers.
Not ready for an RFP? Ask up to five providers for a call.