Behavox

Behavox covers more of the compliance control lifecycle than any peer in this segment. Its products span regulatory change, information barriers, personal dealing, communications and voice surveillance in 50+ languages, insider risk and a WORM archive, with agents that triage first-level alerts — including in other vendors' queues. BNY and Mizuho are live, the company reports 120+ institutions including ten of the 24 global systemically important banks, and it was profitable in 2024 on $35.6m of audited revenue. HPS, part of BlackRock, invested $175m in June 2026.

Several pieces are still maturing. Trade surveillance (Polaris) has slipped from late 2025 to "summer 2026" without a general-availability announcement located. There is no public API, and SSO, SCIM and ISO 27001 were not verified. All alert-reduction figures are vendor-run, the providers behind its generative features are not named, and headcount has fallen about a fifth since 2023 while the product range grew.

We initiate at 6.83, Established, with an Improving outlook. Data & Content (7.58) and Workflow Fit (7.17), on the segment variant, are strengths; Commercial Value, at 5.00, is the weakest. Polaris reaching general availability and a public API would move the score most.

Strengths

• Control breadth. Regulatory change, information barriers, conflicts, communications, voice and insider surveillance, archive and agents from one vendor.
• Tier-one references. BNY enterprise rollout across 16+ languages and Mizuho Securities live within three months; ten of 24 G-SIBs as customers (company).
• Domain models. Risk policies trained on more than a million labelled examples, with ranked, plain-language alert explanations.
• Financial position. Profitable in 2024 with audited revenue of $35.6m; $175m from HPS; venture debt repaid.
• Assurance. Several years of clean SOC 2 Type II reports from Schellman and ISO 42001 certification for AI management.
• Agents alongside incumbents. Digital Employees triage first-level alerts in Smarsh, Global Relay, NICE, Nasdaq and Eventus queues.

Cautions

• Trade surveillance timing. Polaris was targeted for late 2025, then the second quarter and then summer 2026; no general-availability announcement was located.
• Integrations. No public API (MCP and REST "coming soon"), and OMS/EMS and HR connectors are not published.
• Assurance gaps. ISO 27001 appears on one product page but not the trust centre; SSO and SCIM were not documented.
• Model disclosure. Detection models are proprietary, but the frontier models behind agents are not named; buyers should request providers and terms.
• Evidence. Recall and false-positive reductions are vendor-run; profitability statements conflict with the audited FY2023 loss.
• Scale. Third-party data show headcount down from about 300 to 235 since 2023.
• Ownership terms. HPS holds preferred equity on undisclosed terms; SoftBank sold part of its stake.