Ondato
Ondato currently offers document, selfie, liveness, video, NFC, and age verification, business onboarding, sanctions and PEP screening, adverse-media checks, and ongoing watchlist monitoring through APIs, SDKs, hosted flows, dashboards, and Ondato OS.
Page updated
Ondato is a multi-entity supplier brand spanning Lithuanian company UAB ONDATO, code 303342439, and UK company ONDATO LTD, number 13018132. The UK company uses Ondato's London headquarters address, and its ownership record applies only to that entity. The legal relationship between the companies, ownership of the brand and software, and a universal customer counterparty are undisclosed. The Lithuanian company's direct and ultimate accounting-consolidation parents are non-public.
Buyer decision brief
Use this summary to decide whether the offer belongs on your shortlist and which terms need a written answer.
Fit and use case
Editorial fitOperators that want identity, age, KYB, and screening modules with indicative range pricing and can contract the legal entity, third-party data chain, partner transaction-monitoring product, and target-market scope separately.
Primary offer: Identity, Age, KYB, and AML Screening
Primary offer delivery
- API
Integration boundary: Identity flows are available through a static hosted URL, web and mobile SDKs, and REST API.
Critical contract questions
Start with unresolved terms, negotiated terms, and dependencies that need a named owner.
Resolve before shortlist
No usable standard answer is available on the public terms.
- Ondato contracting and IP entityUnresolved
- Identity, Age, KYB, and AML Screening · Contract and supplier
- Model and workflow acceptance baselineNot disclosed
- Identity, Age, KYB, and AML Screening · Operations and service
- Security assurance packageUnresolved
- Identity, Age, KYB, and AML Screening · Operations and service
- Retention and multi-supplier portabilityNot disclosed
- Identity, Age, KYB, and AML Screening · Exit and portability
Fix in the signed order
The answer changes by operator, market, package, or negotiated order.
- Coverage and regulator acceptanceSet in contract
- Identity, Age, KYB, and AML Screening · Market and approvals
- Customer and Ondato data rolesSet in contract
- Identity, Age, KYB, and AML Screening · Operating responsibilities
- Operator decision authoritySet in contract
- Identity, Age, KYB, and AML Screening · Operating responsibilities
Reconfirm before signature
A current boundary is available, but the final order still needs to match it.
1 of 4 shown- Native and partner product scopePublished boundary
- Identity, Age, KYB, and AML Screening · Contract and supplier
Next buyer step
Ask Ondato to resolve “Ondato contracting and IP entity” and “Model and workflow acceptance baseline” before moving Identity, Age, KYB, and AML Screening to a commercial shortlist. Then compare the answer with the complete product record below.
Confirm every selected term in the proposal and signed order. No price, market approval, availability, or contracting entity is implied unless it is stated above.
What this provider offers
1 offering- TypeAML KYC · Multi ProductOwnership and packagingMixed · Standalone and BundledDeliveryAPICompare in
- iGaming Compliance Providers · Service Provider
- iGaming AML and KYC Providers · Service Provider
- iGaming KYC & Identity Verification Providers · Service Provider
Identity, Age, KYB, and AML Screening
Multi ProductMixedAvailability: Standalone and BundledOndato currently offers document, selfie, liveness, video, NFC, and age verification, business onboarding, sanctions and PEP screening, adverse-media checks, and ongoing watchlist monitoring through APIs, SDKs, hosted flows, dashboards, and Ondato OS.
Ondato supplies the workflow and orchestration layer. FaceTec and other third parties provide technology, registries, databases, and data inputs, while partner providers supply transaction monitoring rather than an Ondato-owned engine.
UAB ONDATO handles website and service privacy processing, while ONDATO LTD uses the London headquarters address. The universal customer contracting entity remains unresolved.
Products
Integration: Identity flows are available through a static hosted URL, web and mobile SDKs, and REST API. AML screening can also use a dashboard and batch upload. The implementation schedule, customer MSA, DPA, subprocessor schedule, and universal coverage matrix remain undisclosed.
Key facts
- The Ondato brand spans active Lithuanian UAB ONDATO and active UK ONDATO LTD; the customer contracting entity remains agreement-specific
- Liudas Kanapienis controls 75 percent or more of ONDATO LTD, while UAB ONDATO's direct and ultimate parent are undisclosed
- Operations under the Ondato brand date to 2018
- EUR 0.50 to EUR 1.40 per completed identity verification, depending on volume, features, and additional checks
- AML screening is listed at EUR 0.04 to EUR 0.45 per check and ongoing monitoring at EUR 0.04 to EUR 0.32 per user per month
- Age verification is listed at EUR 0.01 to EUR 0.30 per verification
- Ondato supplies transaction monitoring through partner KYT providers rather than an Ondato-owned engine
- A 2023 TonyBet deployment covered identity verification and AML screening and monitoring
- Ondato-submitted age-estimation algorithms appear in NIST's current FATE Age Estimation and Verification results
- A current ISO/IEC 27001:2022 certificate is unavailable; the security materials still reference the superseded 2013 edition
Delivery options
API
Delivery modelAPI, SDK, hosted-flow, dashboard, and batch access to selected Ondato identity, age, KYB, and screening modules, with optional partner-supplied transaction monitoring.
- Operator license
- Operator
- Merchant of record
- Unknown
- Player data controller
- Operator
Included
- + Contracted document and biometric identity checks
- + Contracted age estimation or document-based age checks
- + Contracted AML screening and recurring list monitoring
- + Business onboarding and KYB when selected
- + API, SDK, hosted-flow, dashboard, or batch access covered by the agreement
Not included
- ! An Ondato-owned transaction-monitoring engine
- ! The operator's gambling license or final compliance decision
- ! Ownership of third-party biometric, registry, watchlist, and media data
- ! Guaranteed global document, registry, list, or regulator coverage
- ! A standard implementation timeline
- ! A current ISO/IEC 27001 certification
- ! Guaranteed customer outcomes or continuation of the 2023 TonyBet contract
Procurement record
Current product boundaries and the terms that still have to be fixed in the signed order or service agreement.
Known is usable now. Contract specific changes by order or market. Not disclosed has no usable standard term. Unknown remains unresolved. Outside provider scope is handled by the operator or another supplier.
Contract and supplier
- Ondato contracting and IP entityUnknown
- The brand spans UAB ONDATO and ONDATO LTD, but their legal relationship, software ownership, and universal customer counterparty are undisclosed. The agreement must name the contractor, invoice entity, processor, IP licensor, and support provider.
- Native and partner product scopeKnown
- Identity, age, screening, ongoing monitoring, and KYB workflows are available within Ondato. Transaction monitoring is integrated from partner KYT providers rather than supplied as an Ondato-owned engine.
Implementation
- Hosted, SDK, API, dashboard, and batch routesKnown
- Identity can use a hosted URL, web or mobile SDKs, and REST APIs; AML also supports dashboard and batch operation. Each purchased route needs field mapping, callback, fallback, retry, queue, and environment acceptance.
Operating responsibilities
- Customer and Ondato data rolesContract specific
- The customer is controller and Ondato is processor for described end-user processing, but no customer DPA or subprocessor schedule is available. Biometric, registry, screening, partner-KYT, analytics, support, and improvement purposes need a signed allocation.
- Third-party technology and dataKnown
- FaceTec supports liveness, and registry, screening, monitoring, and KYT functions depend on external technology or data. The order must name each supplier, dataset, permitted use, territory, refresh, failure route, and replacement right.
- Operator decision authorityContract specific
- The operator must define identity, age, screening, KYB, monitoring, referral, and account-action rules. Partner transaction alerts and Ondato workflow results remain inputs to the operator's final compliance decisions.
Operations and service
- Security assurance packageUnknown
- The available security material references ISO/IEC 27001:2013 after the transition deadline. A current certificate, scope, issuer, accreditation, audit report, incident terms, penetration-test summary, and subprocessor schedule are not established.
- Model and workflow acceptance baselineNot disclosed
- Comparable results for document and biometric errors, age-estimation error by cohort, screening matches, false positives, manual review, KYB completion, partner alerts, and latency are not established for a production configuration.
Commercial terms
- Published ranges and final priceKnown
- Identity verification is listed at EUR 0.50–1.40, AML screening at EUR 0.04–0.45, ongoing monitoring at EUR 0.04–0.32 per user monthly, and business onboarding from EUR 600 monthly. Volume, features, extras, and partner services determine the final price.
Market and approval scope
- Coverage and regulator acceptanceContract specific
- Document, biometric, age, registry, watchlist, adverse-media, and partner-KYT coverage varies by jurisdiction. The contract needs a market schedule and must not treat an algorithm benchmark as certification or regulatory approval.
Exit and portability
- Retention and multi-supplier portabilityNot disclosed
- Retention is agreement-specific. Bulk exports, media and case return, monitoring history, partner-KYT portability, backup deletion, deletion evidence, transition support, and surviving external-data rights are not established.
Strengths
- + Hosted, SDK, API, dashboard, and batch delivery options are available.
- + The rate cards separate identity, age, screening, monitoring, and business-onboarding charges.
- + A named gambling deployment covers both identity verification and AML screening and monitoring.
- + Transaction monitoring retains a clear partner-ownership boundary.
- + Ondato-submitted age-estimation algorithms appear in current NIST results without implying service certification.
What to verify in procurement
- ! Ondato spans a Lithuanian UAB and a UK company. The customer contractor is agreement-specific, and the UK company's ownership applies only to that UK entity, not UAB ONDATO.
- ! Transaction monitoring is supplied through partners rather than Ondato-owned technology.
- ! Identity, biometric, registry, screening, and monitoring workflows depend on third-party technology and data sources.
- ! Customer terms, a DPA, a subprocessor schedule, and a standard implementation SLA are unavailable.
- ! The security materials still reference ISO/IEC 27001:2013; a current ISO/IEC 27001:2022 certificate is unavailable.
- ! NIST FATE is an algorithm evaluation, not certification, regulatory approval, or validation of the full platform.
- ! The TonyBet deployment dates to 2023; its current contract, jurisdiction, scale, and measured outcomes are unresolved.
- ! Indicative range pricing is available; final cost depends on volume, modules, extras, and the customer agreement.
Reference documents8
Key public documents supporting the company identity, primary offer, delivery route, and highest-priority questions above.
- DocumentGlobal Legal Entity Identifier Foundation — api.gleif.org / lei records / 98450001384959I72E67
- DocumentGlobal Legal Entity Identifier Foundation — api.gleif.org / 98450001384959I72E67 / direct parent reporting exception
- DocumentGlobal Legal Entity Identifier Foundation — api.gleif.org / 98450001384959I72E67 / ultimate parent reporting exception
- DocumentOndato — ondato.com / faq
- DocumentOndato — ondato.com / identity verification
- DocumentOndato — ondato.com / privacy policy
- DocumentOndato — ondato.com / about us
- DocumentUK Companies House — find-and-update.company-information.service.gov.uk / company / 13018132
