Investor brief — competitive position & market
In one paragraph. TrustRelay Atlas is the auditable, registry-native, multi-tenant entity-resolution and risk graph for regulated KYB/AML in Benelux + Romania. The global giants out-scale everyone on data but ship opaque "golden records," are thin on native Romania, and offer no claim-level provenance or buyer-configurable reproducible risk. A regulation-driven, double-digit-growth market (AMLR 2027, AMLA, DORA) creates non-discretionary, dated demand for exactly that — and Atlas only needs a focused slice of greenfield verticals the enterprise incumbents ignore.
This is the executive synthesis of two verified research passes (25 established competitors + 32 funded startups; load-bearing claims adversarially verified, refuted claims corrected in the open). The deep pages are: Market opportunity · Where to win · Competitive landscape · Competitor compendium · Competitive advantage.
The thesis in five lines
- Market: EU KYB/AML software is ~$1.4–1.6B inside a ~$6B Europe-RegTech TAM, growing ~15–18%, with a statutory demand cycle (AMLR applies 10 Jul 2027).
- Gap: no platform combines native NL/BE/LU/RO depth + claims/survivorship provenance + configurable reproducible risk + durable OSINT investigations — Atlas is the only one strong on all four of 25 vendors scanned.
- Beachhead: license-gated greenfields the incumbents ignore — NL trust offices and RO/BE crypto CASPs first — short cycles, named buyers, non-discretionary spend.
- Challengers: the funded startup wave (incl. Belgian Harmoney) is largely orthogonal; none owns a claims/survivorship ownership graph. The real risk is capital, not features.
- Plan: ~150–300 tenants at ~$15–30k ACV → a conservative ~$3.5–7.5M ARR in 3 years.
The market
- Demand is dated and non-discretionary: AMLR (10 Jul 2027, 25%-or-more UBO threshold, CASPs & luxury goods in scope), AMLA (operational 1 Jul 2025 → direct supervision 2028), DORA (+$3–4B EU spend), and the post-CJEU UBO-register lockdown (NL gatekeeper API only ~Q2 2026).
- Both home markets are bigger than they first look: Romania has ~1.26M+ active companies (not ~290k); Belgium has ~40–50k obliged entities (not ~10–15k). Full sizing, assumptions and the honestly-flagged SAM are in market opportunity.
Competitive position — the four-pillar moat
Across 25 vendors, no rival rates "strong" on more than one of Atlas's four pillars:
| Pillar | Atlas | Sayari | Quantexa | Moody's | D&B/Altares | ComplyAdvantage | GraydonCreditsafe |
|---|---|---|---|---|---|---|---|
| Native BE+RO registry & UBO depth | ●●● | ●●○ | ●○○ | ●●● | ●●● | ●○○ | ●●● |
| Claims / survivorship / provenance | ●●● | ●○○ | ●○○ | ●○○ | ●○○ | ●○○ | — |
| Configurable, reproducible risk | ●●● | ●○○ | ●●○ | ●○○ | ●●○ | ●●○ | ●○○ |
| Durable agentic OSINT | ●●● | ●●○ | ●○○ | ●●○ | ●●○ | ●●○ | ●○○ |
| Pillars rated "strong" | 4 | 0 | 0 | 1 | 1 | 0 | 1 |
The field splits into four tiers — global ER-graph platforms (Sayari, Quantexa), the incumbent data/screening oligopoly (Moody's, D&B/Altares, LexisNexis, LSEG, Dow Jones, Encompass), AML/KYB SaaS (ComplyAdvantage, Ondato, Sumsub, Fenergo …), and the regional incumbents Atlas actually displaces (GraydonCreditsafe, Coface, Companyweb, Termene.ro, RisCo, ListaFirme). Tiers 1–3 out-scale Atlas on data and are the wrong battleground; deals are won in Tier 4.
We do not claim "nobody covers both regions." Competitor data products (GraydonCreditsafe, D&B/Altares, Coface, Kyckr, Vespia) reach both. And Atlas is a data aggregator, not a provider — NorthData, which also spans both, is one of Atlas's own data sources, not a rival. The defensible difference is the resolution + provenance + configurable risk + investigation bundle, which no in-region vendor productises. Stating this plainly is the point: the positioning survives diligence.
"Aren't you about to be disrupted by funded startups?"
A second pass profiled 32 recently-funded/about-to-raise startups. The short answer: no — not by this field, and for a specific reason. They fall into four buckets, none of which is what Atlas is:
- Transaction-monitoring/AML (Hawk $83M, Discai, Sygno, Harmoney €10M, Salv) watch money flows — a different job, inside the same banks; no registry-built ownership graph.
- US-KYB / identity (Middesk ~$77M, Baselayer, Fourthline €50M, Casca) are best-in-class at US business or person verification; their "Europe" is an unshipped, unnamed-jurisdiction waitlist.
- AI-native agentic (Greenlite/Bretton ~$95M, Norm Ai $140M+, Parcha) validate our agentic-OSINT thesis but automate workflow/narratives/regulatory text, not a canonical entity graph; their "provenance" is LLM reasoning, not auditable per-attribute lineage.
- Entity-resolution data (Veridion, our Romanian neighbour) owns the data substrate but sells horizontal firmographics with coarse parent/affiliate flags — not UBO-to-natural-person chains.
The risk we don't wave away is capital. Bretton (
$95M), Norm Ai ($140M+) and Middesk ($77M) could buy registry depth and an ER layer if they decide EU KYB-graph is their wedge. The defensibility is time-and-focus — ship integrated NL/BE/LU/RO + provenance + agentic-OSINT references within a few quarters — not impossibility. Romania is the most defensible flank: no funded foreign challenger targets it today. Full two-sided profiles: emerging challengers.
Where the first revenue comes from
Attack the greenfields the enterprise incumbents ignore — not tier-1 banks (mature stacks, 12+ month procurement). Ranked beachheads (full analysis in where to win):
| Beachhead | Why it lands | Why now | ACV |
|---|---|---|---|
| NL trust offices | Wtt 2018 forces full group-structure/UBO work; no platform incumbent; named compliance-officer buyer | DNB enforcing; post-CJEU UBO gap | €15–75k |
| RO/BE crypto CASPs | Greenfield, founder-led, license-gated | MiCAR cliff 1 Jul 2026; RO is the fastest EU route | €20–80k |
| Corporate service providers | UBO verification is their day job; spans all 4 registries | AMLR targets gatekeepers, 25% threshold | €15–60k |
| RO/EU iGaming | Fresh B2B-affiliate KYB gap; real budgets | AMLA iGaming supervision ~Q3 2026; fines to 10% turnover | €40–150k |
Honest SWOT — TrustRelay as a challenger
| Strengths | Only platform with all four moat pillars; claims/survivorship provenance is a true category gap; configurable, reproducible, hashed risk engine no competitor offers; Romania-native wedge; real multi-tenant SaaS (RLS + per-tenant AES-256-GCM) at mid-market TCO |
| Weaknesses | Large raw-data deficit vs Tier 1–2 (cannot win on coverage breadth); no brand / analyst recognition; the differentiator is a nuanced depth story (competitor data products already "cover" both regions); dependency on continued registry/UBO access amid moving regulation; heavy build-and-maintain burden across four registries |
| Opportunities | AMLR/AMLA/DORA dated demand; post-CJEU UBO-access gap; greenfield verticals (trust offices, CASPs, CSPs, iGaming); consume-and-resell incumbents (World-Check, kompany, Dilisense) as claim sources; under-served Romania |
| Threats | Incumbents going agentic (D&B × Anthropic, Moody's, Dow Jones, ComplyAdvantage); D&B–Altares Benelux entrenchment; regulatory access risk; build-vs-buy "good enough"; heavyweights (Quantexa, Sayari) adding BE/RO connectors; capital-rich startups |
The positioning statement
TrustRelay Atlas resolves native NL/BE/LU/RO company and UBO registers plus financials and OSINT into one canonical knowledge graph where every attribute carries its source, survivorship and full provenance — then scores risk with a customer-configurable, deterministic, hashed engine a regulator can replay, and runs investigations as durable, repeatable workflows. It is the only platform bundling native Benelux+Romania depth, claim-level auditability, reproducible configurable risk, and orchestrated OSINT in one true multi-tenant SaaS — purpose-built for the 2027 AMLR/AMLA regime and priced for the mid-market the enterprise incumbents ignore.
Synthesised 2026-06-08 from two adversarially-verified research passes (~50 sources). Market figures are unaudited estimates; vendor and funding metrics are source-reported. Re-validate before fundraising use.