Comply

Name: Comply
Brand: Comply
Rating: 4.5 (47 reviews)

COMPLY is a B2B compliance management platform that provides software, managed services, and training to help financial services firms operationalize regulatory and employee compliance workflows and produce audit-ready evidence.

Est 2003|Valuation $70.2M|Raised $194.5M|7 Ref Customers

LinkedIn 19K|Website|Web traffic 33K|FTEs 772|HQ New York, New York, US

MarketsInvestment Compliance

Published Sep 16, 2026

01Common complaints

1. Solo or very small RIAs that primarily need consulting, templates, and periodic reviews rather than a software platform. - For organizations mainly seeking human-led guidance and occasional documentation assistance, a services provider can be more cost-effective. 2. Organizations that require fully public security documentation as a procurement precondition. - Vendor references SOC certification in a PDF; however, if procurement requires publicly downloadable SOC 2 Type II and ISO certificates with scope, the vendor's public disclosure may not be sufficient and NDA-based sharing may be required. 3. Teams that prefer a narrow "point solution" approach. - If the requirement is limited to a single capability (for example, employee compliance data enrichment or only RIA calendar/workflows), a specialized tool or service may be simpler and lower cost than an integrated suite. 4. Buyers concerned about product rationalization risk following acquisitions. - The vendor's acquisition-driven expansion can introduce integration and roadmap uncertainty. Organizations that prioritize a single, uniform codebase and consistent UX should validate integration and migration plans during evaluation.

Deal disqualifiers (poor fit)

Organizations seeking simple, transparent, self-serve pricing and immediate online purchase.
Very small firms with minimal employee trading complexity and low exam burden; a services provider may be more cost-effective.
Buyers requiring immediately downloadable, fully public SOC 2 Type II and ISO certificates with scope publicized without an NDA.

Publicly visible limitations

Pricing opacity for the core platform: public per-month pricing and clear package definitions for the main financial compliance suite were not found; expect a sales-led quote process and validate contract minimums and renewal terms.

Roadmap / not-yet-available features

No detailed public product roadmap was located in accessible materials for this research session. Buyers should request a product roadmap and planned integration milestones for modules of interest.

Scale and benchmark limitations

Vendor materials reference broad scalability claims; independent benchmark data and large-scale performance metrics were not found in the sources reviewed. Request performance and scalability references if required for large-scale deployments.

Security/compliance gaps (diligence perspective)

While the vendor cites SOC certification in published materials, the SOC 2 type/scope and ISO certificate scope are not fully documented in publicly accessible sources. This is a common vendor behavior in B2B SaaS (many vendors provide detailed reports under NDA), but enterprises should include these items in security diligence.

02Why they buy

Claims supported by vendor materials (with caveats)

Integrated product portfolio that covers multiple compliance domains via the unification of ComplySci, RIA in a Box, NRS, and illumis.
Expansion of international capabilities through acquisition activity aimed at conduct risk and accountability frameworks in additional jurisdictions.

Practical differentiation

For organizations that prefer a consolidated vendor for employee compliance workflows, RIA program management, and professional services, the vendor's combined portfolio may reduce vendor management overhead. Buyers should validate the level of technical integration and unified user experience during proof-of-concept.

Areas where competitors may have an edge

StarCompliance: deeper capabilities in employee compliance data enrichment and global monitoring.
Services-first RIA specialists: potentially more responsive support models and clearer pricing for small firms.

03Field reports

Review platforms (G2, Capterra, SoftwareAdvice, TrustRadius)

Third-party review pages exist for the vendor and its component products. Marketplaces report a mix of positive and critical comments; however, marketplace summaries can obscure reviewer roles and firm size and can be subject to bias. Buyers should read raw reviews and consider additional reference checks.

Community / social (Reddit)

There are community discussions that mention the vendor in practitioner contexts. These discussions are anecdotal but useful for understanding buyer decision criteria (for example, cost sensitivity among small RIAs and service responsiveness). Community posts should be treated as anecdotal input rather than robust evidence.

Representative quotes (balanced)

Vendor-published testimonial (vendor-authored and not independently verified): - A vendor-published document includes language indicating that working with the vendor produced a significant reduction in time spent on certain manual tasks. The specific firm was not named and the methodology was not provided. Community sentiment (summarized): - Some small-practice users questioned whether the platform's features justify higher cost compared with smaller alternatives. Marketplace sentiment (summarized): - Some marketplace snippets note that the platform assists with compliance certifications and that customer support can be responsive; buyers should validate such claims with references and in-context examples from firms of similar size and complexity.

Vendor case studies / claimed outcomes

Vendor materials include case study and testimonial language asserting substantial time savings for certain manual processes. These claims are vendor-published and were not independently validated in this research. In several instances the customer is anonymous or not fully described and baseline measurement methodologies are not provided. Critical evaluation: - Claims in vendor case studies are useful as indicative examples but should be validated with named references, measured baselines, and descriptions of the scope and timeframe before being used as procurement evidence.

Third-party case study involving ComplySci (contextual)

A third-party case study described ComplySci as a customer of a security/risk automation vendor, indicating that ComplySci has operated in security-conscious vendor ecosystems. This is contextual and pertains to vendor operational practices rather than verifying product performance claims.

04Best fit

Company sizes

Based on the platform's scope and the presence of broker feeds and multi-office workflows, the platform appears to align best with firms from small, multi-office advisory practices through large, multi-office enterprises. Very small firms should carefully evaluate cost/benefit.

Industries / verticals

Registered investment advisers (RIAs)
Broker-dealers
Private fund advisers (hedge funds, private equity, venture capital)
Asset and wealth managers

Roles and personas

Decision makers:

Chief Compliance Officer (CCO)
General Counsel / Legal
COO / Head of Operations
Risk leadership

End users:

Compliance analysts
Supervision teams
Employees completing attestations and preclearance workflows

Qualification criteria (strong fit)

Organizations requiring both firm compliance program management and employee compliance monitoring within a single vendor ecosystem.
Firms with recurring audit/exam cycles that require audit-ready evidence trails.
Organizations that value access to training, education resources, and managed services in addition to software.

05The pitch

What the product does (core value proposition)

COMPLY (vendor website) is a B2B compliance management vendor focused on financial services firms. The company's offering comprises software, managed services/consulting, and training/resources intended to support firms in operationalizing regulatory compliance processes (for example, SEC-registered investment advisers and broker-dealers) and employee compliance (for example, code-of-ethics workflows such as personal trading, gifts/entertainment, political contributions, outside business activities). COMPLY’s suite is built around legacy products unified under the COMPLY brand, including: - ComplySci Platform (employee compliance / code-of-ethics monitoring and workflows) - RIA in a Box (RIA-focused compliance program management, with private fund adviser compliance described in product collateral) - National Regulatory Services (NRS) and illumis (political contribution data aggregation/verification; employee risk intelligence)

Target market and positioning

Primary target: regulated financial services firms that require repeatable compliance workflows and audit-ready evidence. - SEC-registered RIAs, private fund advisers, broker-dealers, asset managers, hedge funds, private equity, and related financial institutions. - COMPLY materials include content oriented to broker-dealer requirements and references to SEC/FINRA obligations. Positioning themes observed in vendor collateral (presented here as vendor claims, noted and contextualized): - Centralized repository for compliance activities (vendor messaging describes a single repository of record). - Reduction of manual and spreadsheet-driven compliance work (vendor messaging emphasizes automation of manual tasks). - Combination of technology with regulatory expertise (vendor references former examiners and consultants among staff).

Get a comprehensive analysis of Comply including market position, competitive landscape, adoption trends, and peer benchmarks.

Download full report →