A know-your-customer (KYC) provider is a company that sells software or data services used by regulated businesses to identify and verify their customers. Typical services include checking identity documents, comparing a selfie with the document photo, testing for liveness, checking personal data against official or commercial databases, and screening customers against sanctions and politically exposed persons (PEP) lists.
Demand for these services comes from anti-money-laundering law. In the United States, the Customer Due Diligence (CDD) Rule requires covered financial institutions to identify and verify the identity of customers and of the beneficial owners of companies opening accounts. In the United Kingdom, firms covered by the Money Laundering Regulations must apply risk-based customer due diligence, enhanced due diligence for higher-risk customers, and ongoing monitoring. The law generally does not prescribe how the checks are performed, which leaves room for a commercial vendor market.
This list covers ten vendors that offer identity verification as a commercial service in November 2026. It notes recent ownership changes, published pricing and the certifications each vendor states on its own pages.
Contents
- What a KYC provider does
- Certifications commonly cited by vendors
- Methodology
- The list
- Comparison table
- Selection considerations
- Frequently asked questions
- See also
What a KYC provider does
KYC vendors package several checks that a regulated business would otherwise perform manually. Document verification inspects a passport, identity card or driving licence for signs of tampering and extracts its data. Biometric checks compare the holder's face with the document photo and test whether a live person is present rather than a photo, mask or injected video. Database or "non-document" verification matches name, address and date of birth against authoritative or commercial records. Screening modules compare customers against sanctions, PEP and adverse-media lists, and many vendors add ongoing monitoring of existing customers.
Most vendors also offer know-your-business (KYB) checks, which apply the beneficial-ownership element of customer due diligence to corporate customers. The software does not transfer legal responsibility: the regulated firm remains the party that must apply due diligence and keep monitoring its customers.
Certifications commonly cited by vendors
Vendors in this list commonly cite four families of assurance. ISO/IEC 27001 is a certification of an information-security management system. SOC 2 Type II is an auditor's attestation report on security controls over a period of time, not a certificate. ISO/IEC 30107-3 testing, often performed by the laboratory iBeta, measures presentation-attack (spoof) detection in liveness checks. In the European Union, ETSI TS 119 461 sets requirements for identity-proofing components used by trust service providers under the eIDAS Regulation. A certification describes the scope that was audited, so buyers usually request the certificate or report itself rather than relying on a logo.
Methodology
Entries were selected from companies that sell document, biometric or database identity verification as a commercial service, operate under the stated name in November 2026, and publish product information on their own websites. Ownership changes were checked for each vendor; Onfido is listed under its current owner, Entrust.
The order is an editorial assessment, not the result of product testing or user ratings. It weighs three verifiable criteria: the breadth of KYC, KYB and AML modules described on the vendor's own site; the third-party certifications the vendor states on its own security or compliance pages; and whether prices are published. Larger platforms with broad module sets and published certifications appear first; vendors with narrower or newer offerings follow. Prices are list prices shown on official pricing pages when they were consulted in November 2026 and exclude tax and negotiated discounts. Coverage figures (countries, document types) are the vendors' own claims and have not been independently verified.
The list
1
Verification platform spanning KYC, KYB, transaction monitoring and fraud prevention
Best for: Firms wanting KYC, KYB and transaction monitoring from one vendor
Sumsub was founded in 2015 and, by its own account, began as a tool for detecting manipulated images. The company lists offices in London, Singapore, Riga, Limassol, Berlin, Miami, Dubai and Tel Aviv and states that it is used by more than 4,000 companies. Its platform combines identity-document and liveness checks with business verification, AML screening, transaction monitoring and fraud-prevention tools, which makes it one of the broader single-vendor stacks in the market. Sumsub states that it holds a SOC 2 Type II attestation and ISO/IEC 27001 certification, plus ISO/IEC 27017 and 27018 certifications for cloud security and personal-data protection. Pricing is published: the Basic plan costs US$1.35 per verification with a US$149 monthly minimum, and the Compliance plan US$1.85 per verification with a US$299 minimum; a custom plan is quote-based.
- Founded
- 2015
- Offices
- London, Singapore, Riga, Limassol, Berlin, Miami, Dubai, Tel Aviv
- Pricing
- Basic US$1.35/verification (US$149 monthly minimum); Compliance US$1.85/verification (US$299 minimum); Custom quote-based
- Free trial
- 14 days, 50 checks
- Stated certifications
- SOC 2 Type II; ISO/IEC 27001, 27017, 27018
Strengths
- Published per-verification prices and a free trial
- KYC, KYB, transaction monitoring and fraud modules on one platform
- Several ISO certifications stated on its own pages
Limitations
- Monthly minimum commitments apply even on self-serve plans
- The company's about page does not name a headquarters, which complicates contracting-entity checks
2
Identity verification company with self-serve per-verification plans
Best for: Small and mid-sized businesses wanting published prices and a broad certification set
Veriff is an identity-verification company that offers document, biometric and database checks. It states that it supports documents from more than 230 countries and territories, recognises more than 12,500 documents and localises its user interface in 50 languages and dialects. The certifications listed on its website are among the most extensive in this list: SOC 2 Type II, ISO/IEC 27001:2022, UK Cyber Essentials, ISO/IEC 30107-3 Levels 1 and 2 for presentation-attack detection, the UK Digital Identity and Attributes Trust Framework (DIATF), and FIDO certifications for document authentication and face verification. Veriff publishes self-serve prices for organisations running fewer than 5,000 verifications a month and charges only for verification decisions, not retries; larger customers move to custom Enterprise pricing.
- Pricing
- Essential US$0.80/verification (US$49 monthly minimum); Plus US$1.39 (US$99); Premium US$1.89 (US$209); Enterprise custom
- Free trial
- 15 days or 50 live verifications, whichever comes first
- Stated coverage
- 230+ countries and territories; 12,500+ documents
- Stated certifications
- SOC 2 Type II; ISO/IEC 27001:2022; ISO/IEC 30107-3 L1/L2; UK DIATF; FIDO DocAuth and Face Verification; Cyber Essentials
Strengths
- Low entry price and a trial without a credit card
- Billing on decisions rather than retries
- Broad set of security and biometric certifications listed
Limitations
- Self-serve plans are capped at 5,000 verifications a month
- The pricing page displays a notice that the service is not available in some locations
3
Enterprise identity verification and risk-signal provider based in Sunnyvale, California
Best for: Large enterprises with high verification volumes
Jumio is headquartered in Sunnyvale, California, and is backed by Centana Growth Partners, Great Hill Partners and Millennium Technology Value Partners; its chief executive is Mark Lorion. In its third-quarter 2026 update the company said it had processed more than 1 billion transactions across more than 200 countries and territories, that its identity graph held more than 75 million identities, and that it had added more than 30 customers during the quarter. Its products cover document and selfie verification, liveness detection, AML screening and risk signals, with a reusable-identity product, selfie.DONE, for returning users. Jumio sells mainly to large enterprises, including gaming operators, and does not publish a self-serve price list on the pages consulted for this review.
- Headquarters
- Sunnyvale, California, US
- CEO
- Mark Lorion
- Stated scale
- 1 billion+ transactions across 200+ countries and territories (Oct 2026)
- Pricing
- Quote-based
Strengths
- Large stated transaction history and a cross-customer identity graph
- Reusable verification for returning users
Limitations
- No published prices or self-serve plan
- Certifications are not listed on its homepage or Q3 2026 release; its trust centre could not be accessed for this review
4
EI
Former Onfido platform, now sold under the Entrust brand
Best for: EU trust service providers and firms needing ETSI-certified identity proofing
Onfido was founded in 2012 as a University of Oxford spinout and was acquired by Entrust, which announced completion of the deal on 9 April 2024; at the time Onfido had about 500 staff and reported revenue of more than £140 million. The product has since been rebranded: Entrust's documentation states that following the acquisition Onfido is now known as Entrust, and new Entrust IDV mobile SDKs replace the earlier Onfido Smart Capture SDKs. Its European credentials are notable. Entrust states that its identity-verification package is certified by an EU-accredited conformity assessment body against ETSI TS 119 461, ETSI EN 319 401 and the eIDAS Regulation, and that it has passed conformity assessment against Romanian Decision 564/2021. These certifications let qualified trust service providers use it for identity proofing.
- Founded
- 2012 (as Onfido)
- Owner
- Entrust (acquisition completed April 2024)
- Stated certifications
- ETSI TS 119 461; ETSI EN 319 401; eIDAS (EU) 910/2014
- Pricing
- Quote-based
Strengths
- ETSI TS 119 461 certification relevant to eIDAS qualified trust services
- Backed by a larger security group with identity and PKI products
Limitations
- Rebrand means SDK and product names are changing; integrators must migrate to new SDKs
- No published self-serve pricing
5
Configurable identity platform with a published entry plan
Best for: Product teams building custom verification flows
Persona offers identity verification, database checks and reports that customers combine into configurable verification flows. Unlike most enterprise vendors it publishes the price of its entry tier: the Essential plan starts at US$250 a month on an annual contract and includes 500 services (verifications or reports) per month, with further services at US$1.50 each; unused allotments expire at the end of each billing cycle. The Growth and Enterprise plans are custom-priced. A 60-day trial of the Essential plan allows up to 50 services without a credit card, and a one-year startup programme provides a monthly allotment of free services for eligible small businesses and venture-backed startups. Persona's own security and company pages returned access errors during this review, so its certifications are not listed here.
- Pricing
- Essential from US$250/month (annual contract, 500 services included, US$1.50 per extra service); Growth and Enterprise custom
- Free trial
- 60 days, up to 50 services
Strengths
- Published starting price and a long trial
- Startup programme with free monthly services
Limitations
- Entry plan requires an annual contract
- Unused included services do not roll over
6
Person and business verification sold under a single enterprise contract
Best for: Combined consumer and business onboarding under one contract
Trulioo provides person verification (KYC), business verification (KYB), document verification and AML screening, and it is particularly associated with database-based verification of individuals and companies. Its security page states that the company has been ISO 27001-certified since 2015 and obtained a SOC 2 Type 2 report in February 2024, and that it aligns its data handling with the EU General Data Protection Regulation. Trulioo does not publish prices; its pricing page directs buyers to sales and describes "one end-to-end platform, one contract". The model suits organisations that want a single supplier for consumer and business onboarding but provides no public figures for comparing costs.
- Pricing
- Quote-based
- Stated certifications
- ISO 27001 (since 2015); SOC 2 Type 2 (February 2024)
Strengths
- Long-standing ISO 27001 certification
- KYC and KYB available from the same supplier
Limitations
- No published pricing or self-serve plan
- Its about page gives no founding date, headquarters or coverage figures
7
US-focused identity and fraud platform with a self-serve tier
Best for: US banks, fintechs and public-sector agencies
Socure combines identity verification with fraud-risk scoring and is strongly oriented to the US market. It states that it has more than 3,000 customers, including 19 of the 20 largest US banks and 13 of the 15 largest US credit-card issuers, and 130 public-sector organisations. Its product catalogue includes the Sigma fraud models, Predictive DocV document verification, watchlist screening, deceased-person checks and the US Social Security Administration's eCBSV service, delivered through its RiskOS platform. Socure Launch, a self-serve tier, bills per evaluation with US$1,000 of monthly credits; documentary verification costs US$0.80 per evaluation and the combined KYC, fraud and watchlist bundle with document step-up US$1.00. Socure Enterprise is custom-priced.
- Stated customers
- 3,000+
- Pricing
- Launch: per evaluation with US$1,000 monthly credits (DocV US$0.80; KYC + Fraud + Watchlist with DocV step-up US$1.00); Enterprise quote-based
Strengths
- Deep US data coverage, including eCBSV
- Published per-evaluation prices for the self-serve tier
Limitations
- Several modules, such as eCBSV and deceased checks, are specific to the US
- Certifications are not listed on its homepage
8
Verification vendor with a free tier and a broad stated certification set
Best for: Teams wanting a free tier and documented security audits
Shufti Pro offers identity verification, AML screening and related compliance tools. Its certifications page lists ISO/IEC 27001:2022 certification audited by Insight Assurance, a SOC 2 Type II report covering 12 months of controls, a PCI DSS assessment by an independent qualified security assessor, UK Cyber Essentials 3.2, KJM age-verification approval, and iBeta liveness testing at Levels 1, 2 and 3 under ISO/IEC 30107-3. Pricing is partly published. A Free Forever tier allows up to ten verifications a month, the Essentials plan starts at US$1.50 per verification for up to 20,000 verifications, and Enterprise pricing is quoted according to volume. The free tier makes it possible to integrate and test the service before any commercial commitment.
- Pricing
- Free Forever (up to 10 verifications/month); Essentials from US$1.50/verification (up to 20,000); Enterprise quote-based
- Stated certifications
- ISO/IEC 27001:2022; SOC 2 Type II; PCI DSS; iBeta Level 3 (ISO/IEC 30107-3); Cyber Essentials 3.2
Strengths
- Permanent free tier for low volumes
- Names its ISO auditor and describes the scope of each certification
Limitations
- Essentials pricing is a starting rate; final per-check costs depend on the services used
- Company background (founding date, headquarters) is not stated on the pages reviewed
9
C
Credit-based KYC and AML platform with published monthly plans
Best for: Smaller firms using a mix of check types
ComplyCube sells identity verification, document and biometric checks and AML screening through a credit model. On the Starter plan, at US$99 a month, and the Core plan, at US$299 a month, the monthly fee converts into usage credits that can be spent on any verification type, and only successful verifications are charged. Growth and Enterprise plans are custom-priced. The company offers a 14-day free trial with 50 checks once an account moves from test to live mode. Badges on its pricing page indicate ISO/IEC 30107-3 Level 2 presentation-attack detection certification and UK Cyber Essentials certification, as well as a UK DIATF-certified right-to-rent check. The credit model suits businesses that use a mix of check types in small volumes.
- Pricing
- Starter US$99/month (credits); Core US$299/month (credits); Growth and Enterprise custom
- Free trial
- 14 days, 50 checks
- Stated certifications
- ISO/IEC 30107-3 Level 2 PAD; Cyber Essentials
Strengths
- Monthly fee converts fully into usage credits
- Charges only for successful verifications
Limitations
- Certifications are shown as badges, with the ISO standard for its security certification not named
- Per-check rates are not summarised on the main pricing view
10
Modular, pay-per-module identity verification with a free monthly credit
Best for: Developers wanting granular per-module pricing
Didit sells identity verification as separately priced modules rather than bundled plans, and it publishes list prices for each. A full KYC bundle covering ID verification, passive liveness, face match and device and IP analysis costs US$0.33 per check, while individual modules include ID verification at US$0.15, AML screening at US$0.20 and proof of address at US$0.20 per check. The Free plan includes US$10 of credit each month, which Didit says covers about 30 full KYC checks; the Growth plan costs US$99 a month and the Scale plan US$299 a month, each with larger credits and discounts, and an Enterprise plan uses annual contracts. Modules are billed when they run, regardless of whether the result is approved or declined. Its pricing page also refers to a pricing change effective 1 November 2026, so current rates should be confirmed.
- Pricing
- Free (US$10 monthly credit); Growth US$99/month; Scale US$299/month; Enterprise annual contract; full KYC bundle US$0.33/check
- Billing basis
- Per module executed, no minimums on self-serve plans
Strengths
- Lowest published per-check list prices among vendors reviewed
- No minimum commitment on self-serve plans
Limitations
- Modules are charged even when the verification is declined
- Pricing page notes a recent pricing change, so published rates may shift
Frequently asked questions
What is a KYC provider?
A KYC provider is a company that supplies software or data services for verifying customer identities. Services usually include identity-document checks, selfie and liveness tests, database matching, and screening against sanctions and politically exposed persons lists. Banks, payment firms, crypto businesses and other regulated companies use these services to meet customer due diligence obligations under anti-money-laundering law.
How much does KYC verification cost per check?
Published list prices in November 2026 ranged from about US$0.33 for Didit's full KYC bundle to US$1.85 for Sumsub's Compliance plan per verification. Veriff's self-serve plans run from US$0.80 to US$1.89. Many vendors add monthly minimums or credit-based subscriptions, and enterprise vendors such as Jumio, Entrust and Trulioo quote prices individually.
Does using a KYC provider make a business compliant?
No. Regulators place the due-diligence obligation on the regulated firm itself. The UK Financial Conduct Authority, for example, requires firms to apply risk-based customer due diligence and to continue monitoring customers, and notes that the rules do not prescribe in detail how checks are carried out. A vendor supplies tools and evidence; the firm remains responsible for its controls.
What is the difference between KYC and KYB?
KYC (know your customer) verifies individual people. KYB (know your business) verifies companies, including their registration details and the people who own or control them. In the United States, the CDD Rule requires covered financial institutions to identify and verify beneficial owners of legal-entity customers, which is the main legal driver for KYB products.
What happened to Onfido?
Onfido, a University of Oxford spinout founded in 2012, was acquired by the security company Entrust, which announced completion of the deal on 9 April 2024. The product line has since been rebranded, and Entrust's documentation states that Onfido is now known as Entrust. New Entrust IDV mobile SDKs replace the former Onfido Smart Capture SDKs.
Should your company be on this list?
Submit your logo, description, image and link for review. Approved listings appear in the Featured section above.
Add your company