Thirdfort
Combined identity verification and source-of-funds checks built with law firms in mind — strong on evidence capture, weaker on the proportionality judgement regulation 33 actually requires.
Tier C — watch, and better than most of its category. The killer question in our 20-point self-check still applies: does a human verification record survive the workflow? Here it can, if you configure the evidence export deliberately instead of trusting the dashboard. Commercial score is low for per-check pricing at low volumes.
What it does
Client ID verification, AML screening, source-of-funds evidence collection at onboarding.
Where it holds up
- Purpose-built for legal onboarding, not retail banking
- Captures verification evidence in one place
- Faster onboarding for clients than manual collection
Where it doesn't
- Per-check pricing is punishing at low volume
- Proportionality judgement remains a human task
- Evidence export needs deliberate configuration
Data posture, as documented
What the vendor's own material and terms say — and where the answer was not published, we say so rather than guess.
| location | UK-hosted |
| training | No training on client data |
| retention | Configurable; agree a deletion schedule |
| subprocessors | Documented; UK-based |
What it costs, realistically
Per-check or subscription tiers; model the annual volume before choosing.
Who it suits
High-volume consumer-facing practices — conveyancing, family, immigration.
Low-volume firms where manual verification is cheaper.
How we assessed it
Documentation review; evidence-export behaviour assessed from vendor material and our own reg 28 checklist.
Review history
| Date | Change |
|---|---|
| Sep 2026 | First entry. Scored against the reg 28 verification-record standard. |