Technology thesis · Computing Infrastructure
high conviction growthRegulatory technology
RegTech is a regulation-cycle business with multiple compliance regimes hitting enforcement through 2026, and the resulting demand spike outlasts the initial deadlines by 18-24 months.
Position maintained continuously · last reviewed Jun 3, 2026
The thesis
State of the art (2026)
RegTech in 2026 is driven by a stacked enforcement calendar rather than a single regime. Six US agencies (OCC, FDIC, NCUA, Treasury, FinCEN, OFAC) are racing a 18 July 2026 statutory deadline to finalise GENIUS Act stablecoin rules, with NPRMs issued March-April 2026 and roughly a 120-day compliance runway after. EU MiCA reached full application at the end of 2024 (stablecoin provisions from June 2024) and the EU AI Act high-risk regime, originally due to apply from 2 August 2026, has been deferred to December 2027 under the Digital Omnibus agreed by EU co-legislators in May 2026. Gen-AI-native AML challengers (Hawk AI, Lucinity, Resistant AI, ComplyAdvantage) are cutting false-positive review labour and pressuring NICE Actimize, Oracle Mantas and SAS on mid-market deals. Category leaders re-rated: Quantexa hit a 2.6bn dollar valuation in March 2025; Featurespace was acquired by Visa. The notable reversal is the US Corporate Transparency Act, where FinCEN now exempts domestic entities outright.
GENIUS Act + EU MiCA + AI Act stack creates multi-year structural RegTech demand
GENIUS Act (signed July 2025) imposes 100% reserves, monthly disclosure, a BSA programme and seize/freeze/burn on stablecoin issuers - a new sub-market for issuer compliance tooling, with six agencies racing an 18 July 2026 final-rule deadline. EU MiCA reached full application end-2024 across all crypto-asset service providers. The EU AI Act high-risk regime, once due August 2026, has been deferred to December 2027 under the Digital Omnibus. The US Corporate Transparency Act has narrowed sharply - FinCEN now exempts domestic entities - but the broader stack remains unprecedented in breadth through 2026-2027.
Gen-AI-native AML tooling pressures legacy NICE Actimize / Oracle Mantas / SAS
Hawk AI (transaction monitoring with explainable AI), Lucinity (gen-AI investigator workbench), Resistant AI (fraud + AML), ComplyAdvantage (gen-AI investigation summarisation) reset the AML / TMS unit economics by reducing false-positive review labour 30-50%. Legacy NICE Actimize / Oracle Mantas / SAS retain enterprise mainframe deployments but lose mid-market + neobank wins.
Sanctions intelligence + entity beneficial-ownership becomes structural in post-2022 sanctions regime
Russia + Iran + DPRK + Venezuela + China-Russia shadow-fleet + Wagner / Rosneft / Lukoil + IRGC + secondary sanctions create permanent compliance burden on banks + commodity traders + insurance + maritime. Kharon, Castellum.AI, Sayari, Dow Jones Risk Compliance + screening providers benefit. Each new sanctions package (UK + EU + OFAC) tightens demand by 10-20%.
Everything below is live inside CanaryIQ
The full analysis behind the verdict — the structure is real; the content unlocks when you log in.
Signal stack
Evidence stacked leading → lagging
Technology-native KPIs
Metrics that predict trajectory, tracked over time
Landscape map
Who builds what — and who depends on whom
Catalyst calendar
Dated events that will move the position
Technology roadmap
Milestones on the path to maturity
Watchlists
Companies, people and papers — each with a remove-by condition
Decision frameworks
The same call, framed for your desk
Thesis changelog
When our view changed, and why
Change our mind
5 disconfirming conditions
The rest is inside
You've read the verdict. The file is much deeper.
The full signal stack, technology-native KPIs tracked over time, the landscape of who depends on whom, the dated catalyst calendar, decision frameworks for every desk, live watchlists and the changelog of every time our call on Regulatory technology has changed — all live inside CanaryIQ.