Checklist

How to choose an AML/KYC solution

This is a practical selection framework designed for how teams actually buy compliance infrastructure: performance constraints, reviewer workload, and audit evidence.

Selection checklist

Coverage and data sources

  • Which sanctions and watchlists are included?
  • Is PEP coverage documented (scope, update cadence)?
  • How are list updates tracked and audited?
  • Can you export source evidence for audits?

Match quality (false positives)

  • Can you tune thresholds and matching logic?
  • Do results include identifiers and match evidence?
  • Can you test with real names from your pipeline?

Developer experience

  • Latency and throughput under load
  • Batch APIs and webhooks for alerts
  • Clear versioning and stable response shapes
  • Sandbox + documentation that matches production behavior

Compliance operations

  • Reviewer UI or structured payloads for triage
  • Disposition workflow support (clear / hit / needs info)
  • Audit logs, retention controls, and export
  • Ongoing monitoring hooks: re-screening and transaction monitoring

Pricing and predictability

  • Transparent unit pricing and scaling expectations
  • Overage behavior and rate limits
  • Clear definition of “screening” vs “match” pricing

Recommended reading