KYB Was Misunderstood. Now the Market Is Catching Up.
Written by Liam Chennells, CEO
I have written this because KYB is being misunderstood at exactly the moment it is becoming strategically important.
For years, the market treated KYB as a narrow verification task: check the company, identify the people behind it, screen the risk and move on. That definition is now too small.
The real requirement is bigger. Companies need to onboard, verify, risk assess, decide and monitor businesses across countries, customer types and regulatory expectations. That is not a lookup problem. It is an operating model problem. With that comes all compliance services, including KYC being natively integrated.
That is also why the market numbers are changing. The wider compliance market is growing at around 11% annually, but the all-in-one platform segment is growing at around 22% annually. In other words, the part of the market that matters most to Detected is growing roughly twice as fast.
This article explains why that shift is happening, why the opportunity is larger than traditional KYB definitions suggest, and why Detected is well placed as the market catches up with the platform we have built.
KYB is the core. Full-stack compliance is the outcome.
When we started Detected, the problem looked simple enough to explain: businesses needed a better way to know whether another business was real, legitimate and safe to work with.
That still sounds simple. It is not.
A person can usually be verified through a fairly standard set of attributes: name, date of birth, address, identity document and, in some cases, a biometric check. There is complexity in that process, but the structure is broadly understood.
A business is different.
A business has a legal entity, directors, shareholders, beneficial owners, trading names, websites, licences, documents, addresses, jurisdictions, sanctions exposure, adverse media exposure, commercial behaviour, ownership structures and ongoing changes. It may be registered in one country, trading in another and owned by people somewhere else entirely.
Then you learn that every country holds business information differently. Some registries are strong. Some are weak. Some data is structured. Some is buried in documents. Some is public. Some is not. Some updates quickly. Some information does not update properly at all. In many cases, the only reliable way to complete the picture is to collect information directly from the customer because no single source of truth exists anywhere else.
That is where the real lesson appears.
KYB is not a data lookup problem. It is an infrastructure problem.
That distinction matters because most of the market has spent years trying to solve infrastructure problems with point solutions. A company data provider here. An identity verification tool there. A screening provider somewhere else. A workflow layer sitting on top. A CRM being forced to behave like a compliance platform. A spreadsheet quietly holding together the parts nobody wants to admit are still manual.
That model worked just well enough to survive, which is often the worst place for a process to be. If something is completely broken, people fix it. If something sort of works, it can stay broken for years.
That is what happened in KYB.
The market was smaller when the problem was defined too narrowly
For a long time, KYB was treated as a narrow verification task. That made the market look smaller than it really was.
If the problem is defined as “checking whether a company exists”, the opportunity is limited. If the problem is defined as “managing how businesses onboard, verify, risk assess, decide and monitor other businesses”, the opportunity changes completely.
That is what has happened to the market.
The global compliance market is estimated to grow from $32.2bn in 2024 to $61bn by 2030. That is clearly a large market, but the headline number is not the most important point. The more important signal is the growth of the all-in-one compliance platform segment, which is estimated to grow from $3.8bn to $12.6bn over the same period.
That means the platform layer is growing significantly faster than the broader compliance market.
That is the signal.
The market is not just buying more compliance software. It is changing what it wants compliance software to be.
For years, buyers were sold checks. Company check. Director check. UBO check. ID check. Sanctions check. Document check. Each could be bought separately, integrated separately and managed separately. That made sense when the buyer saw the problem as a set of isolated tasks. It stops making sense when the buyer needs to run the whole process.
A compliance team does not wake up wanting a check. It needs to onboard a customer, understand the business, verify the entity, identify associated people, complete KYC where required, screen for risk, collect missing information, apply policy, manage review, make a decision, evidence that decision and monitor the customer over time.
That is not one lookup.
It is a lifecycle.
This is why the market numbers have changed. Demand has moved from individual checks to operating infrastructure. The spend is moving from “help me access more data” to “help me run this process properly”.
KYB is still the foundation
The important point for Detected is this: KYB remains the core.
What has changed is the market’s understanding of what it takes to do KYB properly. You cannot solve KYB if you only solve the company lookup. You need to manage the onboarding journey, collect the right information, identify the people behind the business, verify individuals where required, screen the business and its associated people, apply risk logic, manage cases, store evidence, create audit trails and monitor changes over time.
So KYB is the starting point, but full-stack compliance is the product outcome.
That is not a loss of focus. It is the result of taking the problem seriously.
A narrow company lookup tool can call itself KYB. A KYC company can add a business search and call itself KYB. A workflow product can add a few compliance templates and call itself KYB. But none of that solves the operating model.
The operating model is where the value sits.
This is why Detected has become a full-stack compliance platform. Not because we wandered away from KYB, but because KYB done properly forces the full stack to exist around it: onboarding, KYB, KYC, screening, case management, decisioning, auditability and ongoing monitoring in one connected system.
That is what buyers are now starting to demand.
The old workaround is now more expensive than the fix
The market is not moving because KYB has suddenly become fashionable. It has not.
The market is moving because the cost of the workaround has become too high.
For years, businesses tolerated fragmented compliance operations because there was no obvious alternative. They added another data provider, another workflow, another analyst, another spreadsheet, another internal tool and another manual review step. Each decision made sense in isolation. Together, they created operating models that were slow, expensive and difficult to control.
Internal build decisions often look rational at the time. A product team can connect a data source, create an approval flow and build a basic internal dashboard. The problem is that compliance operations rarely stay basic. Each new jurisdiction, customer type, risk rule and audit requirement adds another layer of complexity. Over time, the internal workaround becomes a product in its own right, only without the roadmap, resilience or specialist focus of a dedicated platform.
The real cost is rarely visible in one budget line. It appears through analyst time, engineering effort, vendor management, delayed revenue, poor customer experience, inconsistent decisioning, weak audit trails and leadership teams not having one clear view of the process.
That cost becomes much harder to ignore as regulation widens and cross-border onboarding becomes normal. Non-financial sectors are now being pulled into compliance expectations that used to sit more obviously inside financial services. Marketplaces, crypto and digital assets, gaming, supply chain, professional services and other sectors increasingly need to verify, risk assess and monitor businesses properly.
Non-financial business spend within combined KYC and KYB systems is set to grow by 140% over the next five years. That matters because these buyers do not want to become compliance software companies themselves. They do not want to stitch together vendors and maintain the gaps forever. They want a platform that lets them meet the requirement without turning every new market, customer type or product into another internal build.
That is the shift.
The regional picture reinforces the same point
The growth is not evenly distributed, but the direction is consistent.
APAC is modelled to grow from $6.4bn in 2024 to $15.5bn in 2030, driven by fintech expansion, FATF alignment and increased enforcement pressure. Europe, including the UK, is modelled to grow from $10.9bn to $21.5bn, driven by the EU AML package, AMLA, the UK Economic Crime Act and a broader tightening of expectations. North America is larger today, moving from $12.9bn to $19.4bn, but growing more slowly as a more mature market.
The point is not that every region behaves the same. It does not.
The point is that the requirement is becoming global. Companies increasingly need multi-jurisdiction onboarding by default. Single-country tools do not work well when the customer base, ownership structure, regulatory exposure and data availability are all cross-border.
That is why platform capability matters so much.
A narrow solution can look good inside one country or one use case. It breaks when the buyer needs to operate across regions, industries, risk models and customer types. The market leader in this category will need to handle that complexity without pushing it back onto the customer.
“All-in-one” needs to mean something
The phrase “all-in-one” is becoming overused.
Some vendors use it because they have connected a few data sources. Some use it because they have a dashboard. Some use it because they have forms and approvals. Some use it because they can build more things if the customer pays and waits long enough.
That is not enough.
A genuine all-in-one compliance platform needs to manage the customer-facing onboarding journey, business verification, associated person verification, embedded KYC, sanctions and adverse media screening, configurable risk rules, case management, decisioning, audit trails, reporting, integrations and ongoing monitoring.
More importantly, it needs to connect those things into one operating model.
That connection is the point. A company data provider can be useful. An ID verification provider can be useful. A screening provider can be useful. A workflow tool can be useful. Detected works with and alongside these businesses because the ecosystem matters. The insight created by the interconnectivity of these data points is valuable.
But useful components are not the same as infrastructure.
Infrastructure is where the process lives. It is where work is done, decisions are made, evidence is stored and changes are monitored. It is the layer the team actually uses every day.
That is what buyers are now starting to demand. They do not want another vendor in the stack. They want a way to reduce the stack.
The economics show where the value is moving
The product shift is also an economic shift.
Pure data and per-lookup API businesses typically operate at lower gross margins because every lookup carries a through-cost. IDV point tools usually improve on that, but they still sit inside one part of the workflow. A unified KYB and KYC platform is different because it owns the operational layer.
The margin profile makes this clear. Pure data and per-lookup APIs typically sit around 30–50% gross margin. IDV point tools sit around 55–70%. Unified KYB and KYC platforms sit around 85–95%. Detected’s actual gross margin is 92%.
That matters because it shows where the strongest software economics are. The value is moving away from isolated checks and towards the platform layer: workflow, case management, audit trail, decisioning and monitoring.
It also changes switching cost. If a vendor is one data source inside someone else’s workflow, it can be replaced. If a vendor is one check inside a broader process, it can be swapped. But if the platform owns the workflow, the case record, the decisioning, the audit trail and the monitoring process, removing it becomes much harder.
At that point, the platform is not just a supplier. It is part of how the business operates.
This is why the platform opportunity is so much more interesting than the point-solution opportunity. The platform is not only capturing more of the workflow. It is capturing the part of the market with better margins, stronger retention and higher strategic value.
The customer profile has become clearer
A broad market does not mean every customer is a good customer. One of the things we have learned is that the ICP only becomes useful when it is specific enough to say no.
There are two buyer types that matter most to those selling Detected.
The first is the regulated enterprise: banks, payment institutions, crypto businesses, insurance companies, large law firms, accountancies, regulated marketplaces and similar businesses with multi-jurisdiction needs and existing stacks they want to consolidate.
The second is the marketplace, supply chain or platform buyer: businesses onboarding sellers, merchants, suppliers, professionals, counterparties or partners, often newly in scope as regulation widens.
Those two buyer types explain the scale of the opportunity better than a generic statement like “any company that needs KYB”. They also explain why Detected needed to become full-stack. These buyers do not just need a data response. They need a system that can run the process.
The red flags matter just as much. A pure data buyer looking only for raw lookups is not the right platform buyer. A very small customer below the economic floor is not the right fit. A narrow single-country verification requirement is often better served by a data provider or a lightweight workflow. A buyer that wants only backend plumbing with no compliance operations layer may be technically possible, but it is not where the platform value sits.
Being disciplined about this is important. The market is large enough that focus matters more, not less.
Partners made Detected stronger
One of the least understood things about Detected is how much partner-led distribution has shaped the product.
It is one thing to build a platform Detected can sell directly into one type of customer. It is another thing to build a platform that serious partners can take into different industries, different countries and different operating models.
That is a much harder test.
If a partner is going to sell your platform into its customer base, the product cannot be fragile. It cannot only work for one narrow use case. It cannot require endless custom work. It cannot fall over when the buyer is in a different vertical, jurisdiction or risk environment.
Partners need confidence that the platform can support different types of customers without becoming a different product every time. That forced Detected to build at a higher level: not narrow, not generic, but configurable.
That is the difficult middle ground. A narrow tool breaks when the use case changes. A generic tool does not solve the operational problem deeply enough. A services-heavy tool can appear flexible, but only because people are doing the hard work behind the scenes. The real answer is a platform that is configurable in the product.
Different journeys. Different risk rules. Different data partners. Different document requirements. Different review processes. Different monitoring needs. Different customer types.
One platform.
That is what Detected has had to become.
This is also why the partner point is central to the market leadership argument. Partner distribution is not just a route to market. It is evidence of product depth.
A partner selling into payments, marketplaces, financial services, compliance providers, data providers or other sectors cannot rely on a product that only works in one carefully controlled environment. The platform has to be strong enough to travel.
That is the test most vendors have not had to pass.
Detected has, and has done so with flying colours – head-to-head with the big names across industries.
Vertical breadth is evidence, not decoration
A lot of companies talk about verticals because it makes the market slide look bigger. That is not the point here.
The point is that business verification is a horizontal infrastructure problem that appears vertically.
A payments company onboarding merchants, a marketplace onboarding sellers, a financial services firm onboarding corporate customers, a crypto business managing institutional counterparties, an insurance business assessing customer risk, a professional services firm completing client diligence and a data provider embedding compliance capability into its own product all look different on the surface.
Underneath, the structure is similar.
The business has to be identified, understood, verified, risk assessed, reviewed, approved and monitored. The people connected to that business may need to be identified, verified and screened. The decision needs to be evidenced. The process needs to be repeatable. The controls need to be defensible.
The difficulty is the variation. Different countries. Different data availability. Different regulation. Different risk appetite. Different customer journeys. Different products. Different internal teams. Different policies. Different escalation paths.
This is why Detected’s reach across more than 190 countries and a wide range of industry verticals matters. It shows that the platform has been built at the right level of abstraction.
Too narrow, and it only works in one segment. Too broad, and it becomes vague. Too customised, and it becomes a services business. Too rigid, and it breaks in the real world.
The market leader in this category will not be the company with the neatest niche story. It will be the company that can handle the real-world complexity of business verification and compliance operations across industries, jurisdictions and customer types without forcing every buyer into the same process.
That is why Detected is well placed.
The vendor landscape is still confused
The KYB and compliance software market has too many vendors making claims that do not survive proper scrutiny.
Some KYC companies say they do KYB because they have added a company lookup. Some business data providers describe themselves as KYB platforms because they provide company information. Some orchestration tools describe themselves as platforms because they connect multiple data sources. Some workflow tools describe themselves as all-in-one because they have forms and approvals. Some vendors call something case management when it is really a dashboard with a button.
This matters because buyers are not just choosing a feature. They are choosing the operating layer for a regulated process.
Broadly, the market still has five types of vendor.
There are KYC vendors adding KYB language. There are business data providers. There are data orchestrators. There are pretend all-in-one solutions that look good in a demo but fall short when the customer needs real onboarding, case management, decisioning, monitoring and flexibility. Then there are genuine full-stack compliance platforms that manage the whole process from onboarding through to ongoing monitoring.
Detected belongs in the final category.
That is not just a product claim. It is a market position. The businesses that win this category will not be the ones selling another check into an already broken process. They will be the ones that become the operating layer for how companies verify and monitor businesses.
Why I see this market differently
I am not looking at this market from the outside.
That matters.
It is easy to write about KYB from a distance. It is easy to produce a market map. It is easy to say regulation is increasing and companies need better tools. It is easy to say compliance is a growing category.
All of that is true, but it is not enough.
The real understanding comes from building inside the mess. It comes from seeing where onboarding actually breaks. It comes from watching customers try to force CRMs, spreadsheets and point tools to behave like infrastructure. It comes from understanding why a data lookup is not the same as a decision. It comes from seeing the difference between a vendor that demos well and a platform that can support real operational complexity.
It also comes from seeing demand across the market, not just from one narrow buyer type. Payments. Marketplaces. Financial services. Crypto and digital assets. Insurance. Professional services. Compliance providers. Data providers. Partner distribution. Different industries, different requirements, same underlying problem.
A point solution sees the part of the process it solves. A vertical specialist sees one industry. A data provider sees the lookup. A consultant sees the project.
A platform company sees the operating model.
That is the view I have spent years building from, and it is why I am confident about where the category is going. KYB is moving from a fragmented set of checks to a unified operating layer. But the end state is bigger than KYB alone. The end state is a full-stack compliance platform where KYB, KYC, case management, decisioning and monitoring work together as one system.
Really simply, it is what customers are asking for - and what else really matters?
Why Detected can become the market leader
Market leadership in this category will not come from having the loudest brand, the longest list of data sources or the most aggressive claim about automation.
It will come from owning the operating layer, and we definitely had to slow down to speed up.
That means the platform customers use to manage onboarding, KYB, KYC, risk assessment, case management, decisioning, audit trails and ongoing monitoring. It means the system that sits between regulatory obligation, customer experience and commercial growth.
Detected is positioned there because of the product we have built and the market we have had to serve.
We have had to support direct customers and partner-led distribution. We have had to operate across industries rather than hiding inside one vertical. We have had to make the platform configurable enough to handle different operating models while keeping the product coherent. We have had to build for KYB, KYC, case management and ongoing monitoring as one connected process, not as disconnected features.
That is why this is not just a KYB opportunity. It is a full-stack compliance platform opportunity, with KYB as the foundation.
The broader compliance market is growing. The all-in-one platform segment is growing faster. Buyers are moving away from fragmented stacks. Partners need platforms they can take across verticals. Customers need systems that reduce complexity rather than adding to it.
Detected sits exactly where those forces meet.
The market is catching up with the platform
For years, KYB was treated as a narrow verification task. That made the market look smaller than it really was.
The market is now correcting that mistake.
Businesses do not just need to know whether a company exists. They need to onboard that company, understand it, verify it, identify the people behind it, screen the risk, apply policy, manage review, evidence the decision and monitor change over time.
That is not a lookup. It is an operating model.
KYB remains the core because it is the hardest and most misunderstood part of the process. But once KYB is solved properly, the full compliance stack naturally has to exist around it: onboarding, KYC, screening, case management, decisioning, auditability and ongoing monitoring.
That is the platform Detected has built.
The opportunity is large because the workaround has become too expensive to maintain. Fragmented vendors, internal tools, spreadsheets and manual review processes are no longer good enough for companies operating across jurisdictions, customer types and regulatory expectations.
The category will not be won by another point solution selling another check into an already broken process. It will be won by the company that becomes the infrastructure layer underneath how businesses onboard, verify, risk assess, decide and monitor.
Usually, companies chase the market. In our case, the market is catching up with the platform.