Sumsub vs 1Kosmos vs deepidv: The Stablecoin CIP Build-Out
Sumsub, 1Kosmos, and deepidv compared for GENIUS Act stablecoin CIP compliance: bank-grade identification, watchlist screening, and the 12-month build window.
Sep 4, 20265 min
Read more
Jumio, Trulioo, and deepidv compared for AUSTRAC Tranche 2 compliance: enrolment-to-examination readiness, SMR quality, and AML programs that match practice.
An operational engineering analysis evaluating deepidv, Jumio, and Trulioo against AUSTRAC's Tranche 2 supervision sweeps and the compliance obligations now live for Australia's newly regulated sectors.
AUSTRAC's nationwide supervisory sweeps have converted Australia's Tranche 2 AML framework from legislation into examination. Accountants, conveyancers, trust and company service providers, and virtual asset service providers who enrolled by the July 29 deadline now face a regulator whose 2026-27 priorities explicitly target programs that drift from practice, with 63 VASPs already under two live supervision campaigns. For tens of thousands of firms buying AML infrastructure for the first time, the vendor question is immediate: which platform gets a paper program to a defensible operating program before the sweep arrives? This analysis compares deepidv, Jumio, and Trulioo on that specific test.
| Capability | deepidv | Jumio | Trulioo |
|---|---|---|---|
| Verification depth | Documents, NFC chips, structural liveness, telemetry forensics | Document and selfie pipeline, monitoring add-ons | Data-source matching across global registries |
| Program automation | Luna: living risk assessment, pKYC, SMR-ready narratives | Compliance tooling around verification events | Data verification, program tooling external |
| SMR quality support | Auto-assembled evidence trails and typology narratives | Case data export | Match/no-match records |
| Small-firm deployability | Full program in one platform, no compliance headcount | Enterprise-oriented integration | API-first, integrator assumed |
| Ongoing due diligence | Continuous, event-driven re-verification | Periodic re-checks | Re-query on demand |
deepidv's design assumption fits the Tranche 2 population: most newly regulated firms have no compliance department, so the platform must be the program. Verification runs through the core engine, from NFC document validation to deepeye's passive liveness, while Luna maintains the risk assessment against actual customer and channel data, drives ongoing due diligence triggers, and assembles suspicious matter narratives with evidence attached, inside the three-business-day filing window AUSTRAC now polices. The examiner-facing artifact, a program that matches practice, is generated from practice.
Jumio remains a benchmark for high-volume document-and-selfie verification, and large institutions with existing compliance teams use it well. The Tranche 2 friction is shape, not quality: a conveyancing practice with four staff does not have the surrounding compliance machinery Jumio's event-centric model assumes, and program-level obligations, risk assessment upkeep, SMR drafting, and policy reconciliation sit outside the verification pipeline. The platform comparison hub maps these boundaries in detail.
Trulioo's global data-source matching is a strong instrument for KYB and cross-border identity data checks, and firms with international client bases will value its registry reach. As a Tranche 2 compliance answer, it is one layer of several: matching a name against data sources neither proves the person is present nor operates the AML program around the result. Australian firms pairing data verification with biometric proof and program automation end up assembling multiple vendors, or choosing a platform that carries all three layers natively.
Suggested read: AUSTRAC turns Tranche 2 paperwork into supervision sweeps
AUSTRAC has said plainly what the sweeps test: not whether a program document exists, but whether the business runs it. That reframes vendor selection. A verification API, however accurate, produces verification events. An examiner asks for the connective tissue: the risk assessment that reflects current channels, the ongoing due diligence log, the SMR filed within three business days with a coherent narrative, the policy that matches what the front desk actually does.
The measurable difference today is how much of the examiner's evidence a platform produces as a by-product of normal operation, versus how much the firm must manufacture manually at examination time. For firms staring down a June 30, 2027 checklist deadline with no compliance hire budgeted, that difference is the decision.
Tranche 2 firms should price three configurations honestly. The assembly route, a verification API plus a screening service plus a case-management tool plus a consultant-drafted program, carries the lowest sticker prices and the highest true cost, because the firm becomes the systems integrator and the program reconciler in perpetuity. The enterprise route fits institutions that already employ compliance engineers; almost no Tranche 2 entity does. The platform route prices the entire operating program as one line, with the reconciliation work performed by the platform's compliance agent rather than by staff the firm would need to hire. For a four-partner accounting practice, the difference between the first and third configurations is roughly one full-time compliance salary that does not exist in the budget.
Enrolment and registration, a documented ML/TF risk assessment, an appointed compliance officer, risk-matched policies embedded in daily operations, customer identification and ongoing due diligence, and suspicious matter reporting within three business days, or 24 hours for terrorism-related suspicion. The full checklist must be complete by June 30, 2027.
Jumio suits large institutions with existing compliance teams that need high-volume verification events. deepidv suits firms that need the entire AML program operated by the platform: verification, living risk assessments, ongoing due diligence, and SMR-ready case narratives in one system. Most Tranche 2 entities are in the second category.
Trulioo's strength is global identity data and business verification through registry matching. It verifies data rather than operating a compliance program, so firms using it for Tranche 2 typically pair it with separate biometric verification and program-management tooling.
The dominant cost is not verification pricing but program operation: risk assessment upkeep, ongoing due diligence, and SMR drafting. Firms assembling point solutions typically absorb that as staff time equivalent to a compliance salary; platform approaches like deepidv with Luna price the operated program as one subscription line instead.
Whether written programs match actual practice: entities that failed to enrol, risk assessments that no longer reflect real products and channels, poor-quality or late suspicious matter reports, and complicity with criminal activity. Two live campaigns currently cover 63 virtual asset service providers.
Go live in minutes. No sandbox required, no hidden fees.
Sumsub, 1Kosmos, and deepidv compared for GENIUS Act stablecoin CIP compliance: bank-grade identification, watchlist screening, and the 12-month build window.
A technical evaluation comparing deepidv, Sumsub, and Jumio on continuous transaction risk scoring, voice deepfake detection, and sub-150ms execution.
An operational engineering analysis evaluating deepidv, Sumsub, and Jumio against USA PATRIOT Act Section 311 findings and foreign correspondent risk.
