Sumsub

Sumsub supplies one integration layer for identity verification, business verification, AML screening, transaction monitoring, and case management. Ongoing AML screening rechecks people or entities against selected data sources. Transaction Monitoring analyzes submitted activity, while Case Management supports investigation, assignment, escalation, records, and reporting workflows.

Page updated August 13, 2026

Visit website

Company details

Organization typebrand

Statusactive

ParentRaritex Trade Ltd

Websitesumsub.com

Research checkedJuly 13, 2026

Main categoryiGaming Compliance Providers

Sumsub is a multi-entity supplier brand. Its May 2026 contract assigns customers to one of five jurisdiction-specific service providers unless earlier or bespoke terms apply. Cyprus company Raritex Trade Ltd is the immediate parent of Sum and Substance Ltd., owns group intellectual property, and uses the UK company as a distributor and reseller. Raritex is also the group holding company and main operating entity. The full group structure is undisclosed, and the customer counterparty depends on the order.

Buyer decision brief

Use this summary to decide whether the offer belongs on your shortlist and which terms need a written answer.

iGaming Compliance Providers iGaming AML and KYC Providers iGaming KYC & Identity Verification Providers iGaming AML Transaction Monitoring Software

Fit and use case

Editorial fit

Operators that want identity, KYB, screening, transaction monitoring, and investigations through one vendor interface while contracting the underlying AML data provider and module scope separately.

Primary offer: Verification and AML Platform

Primary offer delivery

Integration boundary: Operators can connect through Sumsub REST APIs, web and mobile SDKs, webhooks, and dashboard workflows.

Critical contract questions

Start with unresolved terms, negotiated terms, and dependencies that need a named owner.

8 of 11

Resolve before shortlist

No usable standard answer is available on the public terms.

Threshold and error-profile acceptanceNot disclosed: Verification and AML Platform · Operations and service
Module, check, and review chargesNot disclosed: Verification and AML Platform · Commercial terms

Fix in the signed order

The answer changes by operator, market, package, or negotiated order.

Market, data, and biometric acceptanceSet in contract: Verification and AML Platform · Market and approvals
Contracting Sumsub companySet in contract: Verification and AML Platform · Contract and supplier
Purchased product boundarySet in contract: Verification and AML Platform · Contract and supplier
AML intelligence providerSet in contract: Verification and AML Platform · Operations and service
Retention, return, and deletionSet in contract: Verification and AML Platform · Exit and portability

Reconfirm before signature

A current boundary is available, but the final order still needs to match it.

1 of 4 shown

Controller, processor, and separate-purpose rolesPublished boundary: Verification and AML Platform · Operating responsibilities

Next buyer step

Ask Sumsub to resolve “Threshold and error-profile acceptance” and “Module, check, and review charges” before moving Verification and AML Platform to a commercial shortlist. Then compare the answer with the complete product record below.

Read the full product record Open the category RFP builder

Confirm every selected term in the proposal and signed order. No price, market approval, availability, or contracting entity is implied unless it is stated above.

What this provider offers

1 offering

OfferingVerification and AML Platform
TypeAML KYC · Multi Product
Ownership and packagingMixed · Standalone and Bundled
DeliveryAPI
Compare in
- iGaming Compliance Providers · Service Provider
- iGaming AML and KYC Providers · Service Provider
- iGaming KYC & Identity Verification Providers · Service Provider
- iGaming AML Transaction Monitoring Software · Service Provider

Verification and AML Platform

Multi ProductMixedAvailability: Standalone and Bundled

The ownership model is mixed. Sumsub operates the verification, workflow, transaction-monitoring, and case-management software, while providers such as ComplyAdvantage, World-Check One, or Quantifind supply the underlying AML screening data. Those datasets and any separately integrated crypto analytics are not Sumsub-owned.

Sumsub is an active brand rather than one legal company. The contracting entity and data role vary by customer jurisdiction and agreement.

Products

Identity Verification: Document, selfie and liveness flows, with optional database-based non-document verification where configured and available.

Business Verification: KYB workflow for company information, corporate documents, ownership and beneficiary review, related-person identity checks, and entity screening.

AML Screening and Ongoing Monitoring: Sanctions, PEP, watchlist, and adverse-media screening using selected third-party data providers plus Sumsub configuration, matching, review, and reporting tools.

Transaction Monitoring: Rules and scenarios applied to submitted transactions and user activity to surface suspicious behavior for operator review.

Case Management: Investigation queues, blueprints, assignment, escalation, audit records, and report workflows for KYC and transaction-monitoring cases.

iGaming Workflows: Player onboarding, age checks, multi-accounting and fraud controls, ongoing screening, transaction analysis, and withdrawal-stage review assembled from the platform modules.

Integration: Operators can connect through Sumsub REST APIs, web and mobile SDKs, webhooks, and dashboard workflows. Transaction Monitoring and Case Management have their own API resources in addition to the applicant-verification flow. The selected AML data provider, enabled modules, thresholds, human-review process, and customer decision logic are configuration and contract choices.

Delivery options

API

Delivery model

API and SDK access to the contracted verification and AML modules, with webhooks and dashboard review for configured events and results. The client is controller and Sumsub is processor for client-instructed verification; Sumsub acts as controller for separate purposes such as service development. Roles are purpose-specific and do not automatically make the parties joint controllers.

Operator license: Operator
Merchant of record: Operator
Player data controller: Depends on processing purpose

Included

+ Contracted identity or business verification checks
+ Contracted AML screening and ongoing monitoring
+ Transaction monitoring when separately enabled
+ Case-management workflows when separately enabled
+ APIs, SDKs, webhooks, and dashboard access covered by the agreement

Not included

! Gambling license or regulated-operator status
! Ownership of third-party AML or crypto-risk datasets
! Guaranteed availability in an unspecified market
! Publicly fixed commercial terms for advanced modules
! Transfer of the operator's final onboarding, AML, or regulatory-reporting responsibility
! A blanket joint-controller designation for every processing purpose

Procurement record

Current product boundaries and the terms that still have to be fixed in the signed order or service agreement.

Known is usable now. Contract specific changes by order or market. Not disclosed has no usable standard term. Unknown remains unresolved. Outside provider scope is handled by the operator or another supplier.

Use the provider procurement guide

Contract and supplier

Contracting Sumsub companyContract specific: The customer jurisdiction and accepted contract version determine the Sumsub service provider. The order must name the signing, invoicing, support, data-processing, and IP-licensing companies.
Purchased product boundaryContract specific: Identity verification, KYB, AML screening, ongoing monitoring, transaction monitoring, and case management are separable capabilities. The order must list each enabled module, workflow, environment, user allowance, and support route.

Implementation

API, SDK, webhook, and dashboard scopeKnown: Applicant verification uses REST APIs, web or mobile SDKs, webhooks, and dashboard review. Transaction Monitoring and Case Management add their own resources, so acceptance tests must cover every purchased route and status transition.

Operating responsibilities

Controller, processor, and separate-purpose rolesKnown: The client controls client-instructed verification and sets its retention period; Sumsub processes that work for the client. Sumsub also controls specified service-development and improvement processing, so the data map must separate those purposes.
Onboarding and reporting decisionsKnown: The operator owns the customer-due-diligence rules and final account, risk, escalation, and regulatory-reporting decisions. The contract should identify every automated step that requires human review or operator approval.

Operations and service

AML intelligence providerContract specific: Screening can use ComplyAdvantage, World-Check One, Quantifind, or a bring-your-own-key setup. The order must name the selected dataset, account holder, territories, permitted use, refresh cadence, result fields, fallback, and replacement rights.
Threshold and error-profile acceptanceNot disclosed: A production acceptance baseline for document decisions, biometric checks, name matching, false positives, false negatives, manual-review rates, and transaction alerts is not established. Buyers need results for their exact population and configuration.
Investigation record and exportKnown: Case Management supports assignment, escalation, investigation records, and regulatory-report workflows. Required case fields, attachments, audit history, exports, report formats, and authority submission steps remain order and configuration items.

Commercial terms

Module, check, and review chargesNot disclosed: Setup, platform, environment, verification, screening, monitoring, case, manual-review, data-provider, overage, support, and minimum charges are not established for an enterprise gambling deployment.

Market and approval scope

Market, data, and biometric acceptanceContract specific: Document coverage, database checks, biometric permissions, AML datasets, transfer routes, and regulatory acceptance vary by jurisdiction. Each launch market needs a signed coverage and lawful-use schedule.

Exit and portability

Retention, return, and deletionContract specific: The client sets service-delivery retention, while Sumsub can retain specified data for separate lawful purposes. The agreement must define export format, transfer timing, deletion evidence, backups, litigation holds, fraud records, and continuing controller-purpose retention.

Best for: Operators that want identity, KYB, screening, transaction monitoring, and investigations through one vendor interface while contracting the underlying AML data provider and module scope separately.

Strengths

+ Watchlist monitoring, transaction monitoring, and case management are separate capabilities rather than one generic AML feature.
+ The iGaming workflow uses the same modules available in the general platform.
+ Named external AML data providers make the data-ownership boundary clear for supported configurations.

What to verify in procurement

! The Sumsub brand can represent different legal service providers; the entity, data role, and applicable terms are agreement-specific.
! The client-controller and Sumsub-processor allocation applies to configured service delivery. Sumsub has separate controller purposes, so the deployment data map and DPA must allocate each purpose.
! Screening-list content is supplied by third parties, and data-provider choice can affect result fields, availability, and additional integration cost.
! Final decision responsibility is contract-specific, and no global market or commercial schedule is available.
! Accuracy, speed, coverage, client-count, and savings figures do not predict results for a new deployment.

Questions about Sumsub

Product, delivery, and company details that affect an operator order.

Which Sumsub company should appear in the order?

The customer jurisdiction and accepted contract version determine the Sumsub service provider. The order must name the signing and invoicing company, support provider, data processor, and intellectual-property licensor. Earlier customers can remain under terms with a different provider, so the brand name alone is not a sufficient counterparty description.

Are Sumsub identity, AML, and transaction tools one module?

No. Identity verification, business verification, AML screening, ongoing monitoring, Transaction Monitoring, and Case Management are separable capabilities. The order should list every enabled workflow, environment, user allowance, third-party screening dataset, webhook, manual-review step, and support route instead of assuming that one verification package includes the full platform.

Reference documents8

Key public documents supporting the company identity, primary offer, delivery route, and highest-priority questions above.