Ondato
Product sources reviewedIdentity not reviewedOndato currently offers document, selfie, liveness, video, NFC, and age verification, business onboarding, sanctions and PEP screening, adverse-media checks, and ongoing watchlist monitoring through APIs, SDKs, hosted flows, dashboards, and Ondato OS.
Identity, Age, KYB, and AML Screening
Multi ProductMixedAvailability: Standalone and BundledOndato currently offers document, selfie, liveness, video, NFC, and age verification, business onboarding, sanctions and PEP screening, adverse-media checks, and ongoing watchlist monitoring through APIs, SDKs, hosted flows, dashboards, and Ondato OS.
The ownership model is mixed. Ondato supplies the workflow and orchestration layer, while its own FAQ and security materials identify FaceTec and other third-party technology, registries, databases, and data providers. Transaction monitoring is explicitly supplied through partner providers rather than as an Ondato-owned engine.
The public site identifies UAB ONDATO for website and service privacy processing and separately presents a London headquarters matching ONDATO LTD. Public product pages do not establish one universal customer contracting entity.
Integration: Identity flows are available through a static hosted URL, web and mobile SDKs, and REST API. AML screening can also use a dashboard and batch upload. The public site does not publish a standard implementation schedule, customer MSA, DPA, subprocessor schedule, or one universal coverage matrix.
- Entity Boundary
The Ondato brand is presented across active Lithuanian UAB ONDATO and active UK ONDATO LTD, while public product pages do not identify one universal customer contracting entity
Public entity, privacy, and location records; the signed customer agreement controls the counterparty
- Independently Checked2026-07-11
- Ownership Boundary
Liudas Kanapienis is the disclosed 75-percent-or-more controller of ONDATO LTD, while the direct and ultimate parent of UAB ONDATO are non-public in the LEI relationship record
The UK filing must not be used to infer ownership of the Lithuanian company
- Unresolved2026-07-11
- Brand Start
Ondato says operations under the brand began in 2018
Brand operating date; UAB ONDATO's legal-entity creation date is July 3, 2014
- Vendor Reported2026-07-11
- Identity Pricing
EUR 0.50 to EUR 1.40 per completed identity verification, depending on volume, features, and additional checks
Current public rate card; not a final customer quotation
- Vendor Reported2026-07-11
- Screening Pricing
AML screening is listed at EUR 0.04 to EUR 0.45 per check and ongoing monitoring at EUR 0.04 to EUR 0.32 per user per month
Current public rate card; module and volume dependencies apply
- Vendor Reported2026-07-11
- Age Pricing
Age verification is listed at EUR 0.01 to EUR 0.30 per verification
Current public rate card; volume and selected checks apply
- Vendor Reported2026-07-11
- Transaction Monitoring Ownership
Ondato supplies transaction monitoring through partner KYT providers rather than an evidenced Ondato-owned engine
Current product boundary; the selected partner and commercial chain are agreement-specific
- Vendor Reported2026-07-11
- Gambling Evidence
Ondato's 2023 TonyBet case study covers identity verification and AML screening and monitoring
Vendor-published case study; no current contract, jurisdiction, volume, or independently measured outcome is established
- Vendor Reported2026-07-11
- Age Algorithm Evaluation
Ondato-submitted age-estimation algorithms appear in NIST's current FATE Age Estimation and Verification results
Algorithm benchmark only; not certification, regulatory approval, or validation of the complete service
- Independently Checked2026-07-11
- Current ISO Certificate
A current ISO/IEC 27001:2022 certificate was not established from the public site; the security page still references the superseded 2013 edition
Request the current certificate, legal entity, scope, issuer, accreditation chain, and expiry date
- Unresolved2026-07-11
Delivery options
API, SDK, hosted-flow, dashboard, and batch access to selected Ondato identity, age, KYB, and screening modules, with optional partner-supplied transaction monitoring.
- Operator license
- Operator
- Merchant of record
- Unknown
- Player data controller
- Operator
Included
- + Contracted document and biometric identity checks
- + Contracted age estimation or document-based age checks
- + Contracted AML screening and recurring list monitoring
- + Business onboarding and KYB when selected
- + API, SDK, hosted-flow, dashboard, or batch access covered by the agreement
Not included
- ! An Ondato-owned transaction-monitoring engine
- ! The operator's gambling license or final compliance decision
- ! Ownership of third-party biometric, registry, watchlist, and media data
- ! Guaranteed global document, registry, list, or regulator coverage
- ! A standard implementation timeline
- ! A currently verified ISO/IEC 27001 certification
- ! Independent confirmation of customer outcomes or an ongoing TonyBet contract
- + Current public pages document hosted, SDK, API, dashboard, and batch delivery options.
- + The rate cards separate identity, age, screening, monitoring, and business-onboarding charges.
- + A direct gambling case study covers both identity verification and AML screening and monitoring.
- + The transaction-monitoring page explicitly preserves the partner ownership boundary.
- + NIST publishes current results for Ondato-submitted age-estimation algorithms without requiring the profile to repeat a vendor certification claim.
- ! Ondato is presented across an active Lithuanian UAB and an active UK company; public pages do not identify one universal customer contracting entity.
- ! The UK PSC record applies to ONDATO LTD and must not be presented as ownership evidence for UAB ONDATO.
- ! Transaction monitoring is supplied through partners, not evidenced as Ondato-owned technology.
- ! Identity, biometric, registry, screening, and monitoring workflows depend on third-party technology and data sources.
- ! The public site does not expose customer terms, a DPA, a subprocessor schedule, or a standard implementation SLA.
- ! The security page still references ISO/IEC 27001:2013; no current public ISO/IEC 27001:2022 certificate was found.
- ! NIST FATE is an algorithm evaluation, not certification, regulatory approval, or validation of the full platform.
- ! The TonyBet case study is dated 2023 and does not establish a current contract, jurisdiction, scale, or independently verified outcome.
- ! Pricing is vendor-published range pricing; final cost depends on volume, modules, extras, and the customer agreement.
- ! No current gambling-regulator approval or gambling supplier license was established for Ondato.
- OndatoVendorchecked 2026-07-11— The current website privacy policy identifies UAB ONDATO, company code 303342439, at Lvivo st. 25-104 in Vilnius. It does not establish that the Lithuanian company signs every customer agreement.
- Global Legal Entity Identifier FoundationFilingchecked 2026-07-11— The fully corroborated live LEI record identifies active UAB "ONDATO", registration code 303342439, creation date July 3, 2014, and a Vilnius legal and headquarters address validated against the Lithuanian Register of Legal Entities.
- Global Legal Entity Identifier FoundationFilingchecked 2026-07-11— The live LEI relationship record reports NON_PUBLIC for the Lithuanian entity's direct accounting-consolidation parent.
- Global Legal Entity Identifier FoundationFilingchecked 2026-07-11— The live LEI relationship record reports NON_PUBLIC for the Lithuanian entity's ultimate accounting-consolidation parent.
- UK Companies HouseFilingchecked 2026-07-11— The official register lists active ONDATO LTD, company number 13018132, incorporated November 13, 2020, at the same London address that Ondato's current About page calls its headquarters.
- UK Companies HouseFilingchecked 2026-07-11— The current PSC record gives Liudas Kanapienis 75 percent or more of ONDATO LTD shares and voting rights. This filing applies to the UK company and is not ownership evidence for UAB ONDATO.
- OndatoVendorchecked 2026-07-11— The current About page says the Ondato brand began in 2018, names Liudas Kanapienis and Andrej Vistorskij, calls London its headquarters, and identifies Vilnius as R&D. Company and scale claims remain vendor-reported.
- OndatoVendorchecked 2026-07-11— The current FAQ describes the customer as controller and Ondato as processor for customer end-user data, makes retention agreement-specific, names FaceTec in liveness technology, and dates brand operations to October 3, 2018.
- OndatoVendorchecked 2026-07-11— The current identity page documents photo, document, selfie, liveness, video, and NFC verification delivered by static URL, web and mobile SDKs, and API. Accuracy, time, and coverage statements remain vendor-reported.
- OndatoVendorchecked 2026-07-11— The current rate card lists identity verification at EUR 0.50 to EUR 1.40 per completed verification, AML screening at EUR 0.04 to EUR 0.45 per check, and ongoing AML monitoring at EUR 0.04 to EUR 0.32 per user per month, with volume and feature dependencies.
- OndatoVendorchecked 2026-07-11— The current age-verification rate card lists EUR 0.01 to EUR 0.30 per verification and says price depends on request volume, selected solutions, features, and additional checks.
- OndatoVendorchecked 2026-07-11— The current business-onboarding rate card starts at EUR 600 per month and covers Ondato OS, business reports, information monitoring, forms, signing, and screening, with final scope dependent on selected checks.
- OndatoVendorchecked 2026-07-11— The current AML page covers sanctions, PEP, adverse-media, ongoing monitoring, case workflow, and audit records. It says transaction-monitoring solutions can be set up through partners rather than claiming an Ondato-owned engine.
- OndatoVendorchecked 2026-07-11— The current transaction-monitoring page explicitly says Ondato partners with established KYT providers and integrates those providers into its AML suite.
- OndatoVendorchecked 2026-07-11— The August 29, 2023 case study describes identity verification and AML screening and monitoring for TonyBet. It does not disclose jurisdiction, volume, measurement method, contract term, or independent outcome verification.
- OndatoVendorchecked 2026-07-11— The current security page still references ISO/IEC 27001:2013 and says Ondato uses certified third-party technologies. It does not link a current ISO/IEC 27001:2022 certificate, scope, issuer, accreditation chain, or expiry date.
- US National Institute of Standards and TechnologyIndependent Reviewchecked 2026-07-11— The current FATE Age Estimation and Verification results list ondato-000 and ondato-001 algorithms. This is a benchmark of submitted algorithms, not certification, regulatory approval, or validation of the entire Ondato service.
- International Accreditation ForumIndependent Reviewchecked 2026-07-11— IAF MD 26 required certified-client transitions to ISO/IEC 27001:2022 by October 31, 2025 and says certifications based on ISO/IEC 27001:2013 expire or are withdrawn at the end of the transition period.
- OndatoDirect Checkchecked 2026-07-11— The current public page index exposes a privacy policy and security page but no customer MSA, DPA, service terms, or subprocessor schedule.
