Snapshot 212282
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Nov 04, 2026 Resistant AI helps to protect AI systems from targeted manipulation, adversarial machine learning attacks and advanced fraud. Announcements Resistant AI SOC 2 Type II Compliant Resistant AI has successfully completed its SOC 2 Type II audit. The audit report is now available for download, accompanied by a bridge letter. Compliance SOC 2 Type II SOC2 Type 2 - Bridge Letter Security Acceptable Use Policy Access Control Policy Application Security Policy Asset Management Policy Backup Policy BCDR Policy Change Management Policy Code Of Conduct Policy Data Deletion Policy Encryption Policy Incident Response Policy Information Security Policy Password Policy Physical Security Policy Third Party Management Policy Authorised sub-processors Risk Assessment Policy Vendor Management Policy Software Development Life Cycle Policy Vulnerability Management Policy Anti Bribery Policy Data Retention Policy Data Protection Policy Legal Cyber Insurance Policy Privacy Policy Resistant AI and the AI Act Master Services Agreement FAQs Frequently Asked Questions Will my data be transferred or shared with any third party? No. Resistant AI does not sell or share customer data with any third party, except for the infrastructure cloud providers (e.g., AWS) used to operate the service. These providers act as authorized sub-processors and are bound by contractual data protection obligations. For a detailed description, please see our list of authorized sub-processors, along with their purpose and location. Is sensitive data encrypted at rest and in transit? Yes. Resistant AI encrypts all customer data both in transit and at rest using industry-standard controls. Data in transit is encrypted over HTTPS/TLS using TLS 1.2 and TLS 1.3 with common secure ciphers. Data at rest is encrypted using AES-256, with keys managed by a FIPS 140-3 (Level 3) compliant KMS. For more details, refer to our [Encryption Policy]. Are all personnel required to use Multi Factor Authentication (MFA) to access company systems? Yes. Resistant AI enforces FIDO2-compliant multi-factor authentication (MFA) for personnel through an authentication policy managed in our identity management system. Does Resistant AI maintain a risk management program, perform risk assessments, and track the treatment of those risks? Yes. Resistant AI maintains a comprehensive risk management program and conducts annual company-wide risk assessments. In addition, annual security committee meetings with risk owners are held to review identified risks and track their treatment. Please refer to our [Risk Assessment Policy] for further information. What physical security controls are in place to protect data and systems? Resistant AI relies entirely on certified cloud providers (AWS) for physical infrastructure. These providers are responsible for implementing and maintaining the physical security controls for the underlying infrastructure. When evaluating physical security protections, we recommend referring to the cloud provider's reports, certifications, and attestations (e.g., SOC 2, ISO 27001). When were your last Business Continuity Plan (BCP) and Disaster Recovery (DR) plans tested? Our Business Continuity Plan (BCP) and Disaster Recovery (DR) plans are tested at least annually. After each test, we document lessons learned, identify improvement opportunities, and iterate accordingly. - Last DR test: Q2 2026 - Last BCP test: Q3 2025 Company details Describe the role or team responsible for information security at the company The organization has a designated Chief Security Officer (CSO) responsible for staying up to date on all relevant legislation and regulatory developments in the field of information security. The CSO ensures the security policy and practices are updated accordingly to address the most current requirements. A dedicated team of security engineers supports this effort by staying informed about the evolving security landscape and emerging threats. They do so by attending industry events, monitoring vulnerability and risk advisory feeds, and engaging with insights from security professionals. Is the company traded publicly? No Company name Resistant AI Are there any material claims against the company? No Company description Founded in 2019, Resistant AI uses AI and machine learning to provide identity forensic solutions that protect automated financial services from fraud and manipulation, including customer onboarding, AML and existing fraud detection systems. The Resistant AI founding team has a deep background in machine learning, artificial intelligence and computer security with more than 15 years of experience applying AI in the computer security domain. Backed by GV (formerly Google Ventures), Index Ventures, Credo Ventures, Seedcamp and several angel investors specializing in financial technology and security, Resistant AI is headquartered in Prague with offices in London and New York. Resistant AI Awarded ‘Digital Crime Fighter of the Year’ for Winning Inaugural Hackathon at ACAMS Hollywood Industries served include Financial Services, Robotic Automation Processors, Identity Verifiers, Anti-money laundering transaction monitoring providers, and Government agencies. Company URL resistant.ai What exchange is the company listed on? Not listed When was the company founded? 2019-01-23 Product details Product URL https://resistant.ai/ Product name Documents and Transactions Forensics Product description Resistant AI makes the automation systems of financial companies resilient to manipulation and attack. By analyzing everything from submitted documents to ongoing customer behaviors and transactions, we uncover and prevent: - document forgery - serial onboarding fraud - synthetic identities - account takeovers - money laundering and as yet unknown financial threats operating at scale. It works with and extends existing customer onboarding, KYC, credit risk assessment, fraud detection, and anti-money laundering systems through a simple API. Our current offering tends to be deployed under two umbrellas: Document Forensics, which: - Enables automation of document processing in high-fraud risk environments. - Reduces workloads for investigators to focus on real cases of fraud and brings them to confident conclusions. - Protects institutions from organized fraud rings. Transaction Forensics, which: - Layers atop existing transaction monitoring systems designed to prevent fraud or detect money laundering. - Reduces the noise of false alerts produced by underperforming rules running on those systems. - Prioritizes the remaining alerts for investigators to focus their efforts. - Highlights anomalies in customer behaviours to uncover new, previously unknown risks. Penetration Test Reports Pentest Report 2026 - API Document Forensics Pentest Report 2026 - UI Document Forensics Pentest Results Review 2026 - UI Document Forensics Pentest Results Review 2026 - API Document Forensics Business Continuity and Disaster Recovery DR Exercise summary BCP Incident response test