The verdict in three sentences
For a licensed payment institution with 40,000 customers (supervised by DNB in the Netherlands, or the ACPR in France), a custom KYC and AML back-office costs between EUR 50,000 and 120,000 excluding VAT in 2026, before per-check data provider fees. The critical piece is not the onboarding screen but the alert queue with an audit trail, which proves to the supervisor that every alert was reviewed, decided and justified. A fintech still working its alerts in a spreadsheet should prioritise this before its next on-site inspection.
Development budget and recurring costs in 2026
Total cost combines an initial build and usage-based fees (identity verification, sanctions and PEP screening). 2026 orders of magnitude for a European fintech.
| Component | Build cost excl. VAT | 2026 recurring cost | Note |
|---|---|---|---|
| KYC onboarding (ID document, selfie, proof of address) | EUR 12,000 to 25,000 | EUR 0.80 to 2.50 per verification | Certified remote ID provider advised |
| Sanctions and PEP screening (onboarding + rescreening) | EUR 8,000 to 18,000 | EUR 0.05 to 0.30 per check | EU, UN, OFAC and national lists |
| Customer risk scoring (AML matrix) | EUR 6,000 to 14,000 | Included | Configurable by compliance |
| Transaction monitoring (rules + thresholds) | EUR 12,000 to 30,000 | 0.5 to 1 day/month of tuning | The core of the setup |
| Alert queue, four-eyes workflow, audit trail | EUR 10,000 to 22,000 | Included | Strong supervisory expectation |
| Suspicious transaction report preparation (FIU-NL, TRACFIN) | EUR 4,000 to 8,000 | Included | Structured export, timestamps |
| Reporting and KPIs for the compliance committee | EUR 3,000 to 6,000 | Included | Alert volume, lead times, false positive rate |
For 40,000 customers with monthly rescreening, screening means about 480,000 checks a year, that is EUR 24,000 to 144,000 a year depending on the provider. Negotiating this line often matters more than the build itself.
Manual, SaaS or custom: the comparison
| Criterion | Manual (spreadsheet) | Compliance SaaS | Custom back-office |
|---|---|---|---|
| Annual cost (40,000 customers) | 2 to 3 FTEs, EUR 130,000 to 190,000 | EUR 60,000 to 150,000 subscription | 15 to 20% of build in maintenance |
| Time to deploy | Immediate | 2 to 4 months | 4 to 6 months |
| Defensible audit trail | Weak | Good | Good, tailored to your procedures |
| Fit with your risk matrix | Full but fragile | Limited to built-in parameters | Full |
| False positive rate | Not measured | 85 to 95% typical | 60 to 80% after tuning |
| Risk at a supervisory inspection | High | Moderate | Moderate to low |
Custom makes most sense when your product has atypical flows (wallets, remittances to Africa, merchant accounts) that standard SaaS rules flag in bulk.
Mini case study
Camille, compliance officer at a payment institution specialised in remittances to West Africa, receives 1,200 alerts a month. Each alert takes 12 minutes manually, or 240 hours a month. With an EUR 85,000 back-office that prefills customer context, groups related alerts and brings false positives from 92% down to 75%, volume falls to 700 alerts at 6 minutes each, or 70 hours a month. Saving 170 hours a month is about 1.2 FTE, roughly EUR 75,000 a year (more in Amsterdam, where compliance analysts cost EUR 65,000 to 80,000 loaded). Payback arrives in about 14 months, before counting the reduced risk of a fine, often in the hundreds of thousands of euros.
FAQ
Need a professional website?
Kolonell builds websites that attract clients, optimized for the Sénégalese market. Free quote in 2 minutes.
Is the back-office enough to be compliant?
No. It supports your procedures, but supervisors also review risk classification, staff training and governance. The software does make evidence much easier, with a timestamped history of 100% of decisions.
How long must KYC data be kept?
Five years after the end of the business relationship under the EU AML directives. Encrypted storage of 40,000 files costs under EUR 1,500 a year.
Can we plug in several screening providers?
Yes. An abstraction layer lets you switch provider without rewriting the workflow, which helps negotiate EUR 0.05 to 0.10 per check instead of EUR 0.30.
Do we need AI to reduce false positives?
Not in version one. Good rule tuning and fuzzy matching adapted to West African names already cut false positives by 15 to 25 points. A scoring model can come later.
How long until a first operational version?
Allow 10 to 14 weeks for the alert queue, screening and audit trail, then 6 to 8 weeks for full transaction monitoring.
Let's scope your project. Send us your customer count, monthly alert volume and current providers, and we will price a back-office between EUR 50,000 and 120,000 with a plan aligned to your supervisory calendar. Detailed quote within 48 h. WhatsApp +221 77 596 93 33.
Mohamed Bah
Fondateur, Kolonell
Passionate about digital and entrepreneurship in Africa, Mohamed has been helping Sénégalese businesses with their digital transformation since 2020. Founder of Kolonell, he believes every SME deserves a professional and accessible online présence.
