AMLA Opens Its Doors, Capital Floods In: Why RegTech Just Became the Industry's Hottest Buy
Europe's new anti-money laundering authority is up and running in Frankfurt, agentic compliance tooling is raising nine-figure rounds, and the EU AI Act has an opinion on both. The compliance stack is officially the new battleground.
If 2024 was the year every bank hired a Chief AI Officer, 2026 is the year every Chief Compliance Officer discovered they needed one too. As of this week, the regulatory and funding environment around financial crime technology has moved from "interesting" to "unignorable", and the people responsible for KYC, AML, sanctions and regulatory reporting are reaching for the vendor shortlists.
AMLA: live, in Frankfurt, writing the rulebook
The Anti-Money Laundering Authority, the EU's new centralised AML/CFT supervisor, is in start-up mode in Frankfurt. According to the Peterson Institute for International Economics event hosted on 8 October 2026, AMLA is "now starting up its operations" after being established by Regulation (EU) 2024/1620, which generally applies from 1 July 2025.
The timeline matters. AMLA has already taken over the European Banking Authority's AML/CFT mandate during 2026, according to the LSEG RegTech glossary. The first round of selection for direct supervision is set for 2027, and direct supervision itself is scheduled to begin in January 2028. According to the Alessa compliance briefing, AMLA will directly supervise up to 40 high-risk financial institutions operating in at least six EU member states, and will oversee and coordinate national supervisors through peer reviews, convergence work and joint supervisory teams.
Separately, GRC Report notes that AMLA has published its 2026 to 2028 game plan, laying out how the agency intends to grow into its mandate. The companion AML Regulation (AMLR) is expected to apply from 10 July 2027, which gives firms a precise date to work backwards from on data standards, beneficial ownership records, transaction monitoring, and the single AML rulebook.
The practical implication is that financial institutions have roughly twenty months to industrialise AML operations to a standard a brand-new, centralised supervisor can inspect. That is the real reason RegTech funding looks the way it does right now.
The capital flow: agentic compliance writes the cheques
The headline deal of the cycle is Bretton AI, formerly Greenlite, which raised 75 million US dollars in a Series B led by Sapphire Ventures earlier this year, according to FinTech Global. The platform covers KYC and KYB reviews, AML and sanctions investigations and ongoing transaction monitoring, and the company has said it will use the money to expand into further financial crime domains, strengthen regulator engagement and win larger, more complex institutions.
Napier AI has had its own capital story. According to FinTech Global and FinTech Futures reporting, the London-based firm raised 45 million pounds from Crestline Investors as its first outside capital round, and then announced a further investment from Marlin Equity Partners in early 2025 to fund R and D and go-to-market expansion. Napier's Continuum platform is now used by more than 100 global institutions, with named reference customers including HSBC, State Street and Starling Bank.
They are not alone. Novatus Global reportedly closed 30.5 million pounds for regulatory reporting technology, IDfy raised 52 million dollars in Series F, and the roundup of September 2026 RegTech deals includes Numeral's 100 million dollar Series C for sales tax compliance, Baselayer's 35 million dollars for business identity verification and Footprint's 25 million dollars for AI investigative tooling for bank and fintech compliance teams.
Market context, with the usual caveats on data providers, suggests US RegTech alone attracted roughly 2 billion dollars across 103 deals in Q1 2026, and global RegTech funding was 8.5 billion dollars across 546 deals in 2025. The direction is unmistakable: capital is flowing to anyone who can take a compliance workflow and bend it into a software subscription with measurable throughput.
Smaller rounds matter too. According to RegTech Analyst, UK start-up Vivox AI secured 1.3 million pounds to build voice-first compliance tooling, a reminder that the agentic compliance story is not only a Series B game. The long tail of RegTech is funding real engineers to work on real pain points.
The AI Act, the awkward houseguest
All of this capital is being deployed under a new regulatory regime. The EU Artificial Intelligence Act, now fully in force, classifies agentic systems used in high-risk financial contexts as high-risk AI, which triggers obligations around risk management, data governance, documentation, human oversight, accuracy, robustness and cybersecurity.
That has two consequences for RegTech buyers. First, the vendor shortlist is going to shrink, because the overhead of operating a compliant high-risk AI system favours mature teams with real governance capacity. Second, buyers will need their own AI Act controls lined up before procurement, not after. If your bank is about to run an agentic KYC co-pilot on 20 million customer records, your model inventory, bias testing, override logs and incident reporting need to be in place first.
The upside is leverage. According to earlier FinanceX Magazine analysis of the agentic turn in compliance, well-governed agentic systems are already reducing false positive rates and investigator caseloads at tier-one institutions. The downside is accountability: the Act makes clear that outsourcing AML to a vendor's model does not outsource AML responsibility.
What CCOs should do this quarter
Three concrete moves make sense before year end.
First, pick an AMLA scenario. Even if your firm is nowhere near the direct supervision list, assume AMLA's standards will cascade through your national supervisor via convergence work and peer reviews. Run a quiet gap analysis against the single rulebook timetable.
Second, test an agentic workflow in production, not in a demo environment. The Bretton AI and Napier AI customer bases now include enough tier-one institutions that there is reference-ready evidence to point your model risk and audit teams at. The question for 2027 is throughput and audit trail, not whether an agent can draft a Suspicious Activity Report.
Third, read the AI Act clauses in your vendor contracts. If an agentic compliance platform is covered under the Act's high-risk classification, your firm's residual obligations are not negotiable. According to the FinanceX Magazine summary of the Act's financial services impact, the detail on documentation and human oversight is where most procurement teams underestimate the work.
The quiet joke
For years, the running gag was that compliance was where fintech ambition went to die. In October 2026, compliance is where fintech ambition is being funded, deployed and regulated, all at once. The vendors who used to pitch "we help you tick the box" are now pitching "we run the box." AMLA has opened its doors. The money has arrived. The AI Act has an opinion. The next move is yours.
