Palantir Anti-Money Laundering: How Banks Use Foundry for AML, KYC, and Financial Crime

Palantir Anti-Money Laundering: How Banks Use Foundry for AML, KYC, and Financial Crime

Last updated: October 23, 2026

TL;DR Palantir’s anti-money laundering work isn’t a boxed transaction monitoring product. It’s Foundry used as a data and decision layer that resolves customers and counterparties into one view, triages alerts with that context, and feeds investigations and filings. It usually sits beside the detection and screening tools a bank already runs. Societe Generale, AUSTRAC, and Credit Suisse are the public examples. Our regulatory intelligence work applies the same Ontology pattern to compliance.


Palantir anti-money laundering means using Foundry to unify customer, account, and transaction data into one resolved view, then running alert triage, KYC reviews, and investigations on top of it, usually alongside existing monitoring and screening tools.

Ask ten compliance leaders what’s broken in AML and most will say the same thing. Too many alerts. Too little context on each one.

The money tells the story. LexisNexis Risk Solutions’ 2024 True Cost of Financial Crime Compliance study put annual compliance spend at $61 billion across the US and Canada, with costs rising at 99% of the institutions surveyed and alert volumes climbing at 83% of mid-sized and large ones. More analysts haven’t fixed it. They rarely do.

That’s the gap Palantir pitches into. Search for Palantir anti-money laundering and you’ll find press releases and vendor PDFs, but nothing that explains where Foundry actually fits in a bank’s AML stack, what it replaces, and what it doesn’t. This guide covers that, plus the 2026 regulatory shift in the US and EU that makes the question more pressing. We’re an independent Palantir consultancy, not Palantir, so the vendor claims here are labelled as vendor claims.

What Is Palantir’s Anti-Money Laundering Offering, Really?

It’s Foundry configured for financial crime. Palantir publishes AML, KYC, and transaction monitoring material and sells an anti-financial-crime offering built on Foundry, but the core is the same platform: data integration, entity resolution, an Ontology, and investigation workflows.

Palantir runs a dedicated AML offering page and has published a Foundry AML and KYC overview that positions Foundry for customer due diligence, screening, transaction monitoring, and a single golden record per customer. Its Foundry for Crypto brief describes case management that supports regulatory reporting, including SARs and CTRs.

So what are you buying? Not a rules library that ships with 400 typologies on day one. You’re buying the plumbing and the decision layer.

In practice that looks like this.

  • Customer, account, transaction, and screening data land in one governed place, pulled through Foundry’s connectors
  • Entity resolution merges duplicate customers and links counterparties into households, companies, and networks
  • Those resolved entities become Ontology objects, like Customer, Account, Alert, and Case, with the relationships between them
  • Analysts work alerts and cases in Workshop apps built on those objects, with every action logged
  • AIP can draft case summaries or flag patterns, inside the same permissions

If the Ontology is new to you, our Palantir Ontology explainer covers it in plain terms.

Scattered customer records and transactions resolving into one linked customer network reviewed by an AML analyst

Which Financial Institutions Use Palantir for Financial Crime?

The public record is short. Societe Generale announced a financial crime deployment in 2025, AUSTRAC used Palantir from 2017 through 2025, Credit Suisse built a single client view on Foundry from 2016, and the UK FCA ran a 2026 proof of concept.

InstitutionWhat was announcedWhenStatus worth noting
Societe GeneralePalantir anti-financial-crime tools built on Foundry across its international retail networks, for money laundering and fraud riskMarch 2025No outcome metrics published
AUSTRAC (Australia’s FIU)Gotham and Foundry for financial crime investigations, extended by A$8.1M2017 to December 2025No renewal found after 2025
Credit SuisseFoundry single client view for AML, under FINMA pressureFrom 2016Bank now part of UBS
UK FCA12-week proof of concept including entity resolution across individuals and firms2026Pilot, not a contract, and publicly contested

Sources for each row, in order. Silicon UK’s republished Societe Generale release, ARN on the AUSTRAC extension, finews.com on Credit Suisse, and the Law Gazette on the FCA trial.

Notice what’s missing? Hard numbers. None of these public announcements include a false positive reduction or a cost figure you can take to a board. Palantir’s own marketing quotes improvements from unnamed banks. Treat those as vendor claims until a reference customer tells you the same thing on a call.

The Credit Suisse story is the most instructive one. FINMA had criticized the bank for not having a consolidated view of its clients, and Foundry was the tool it used to build one. That’s the real AML use case in a sentence. Not smarter alerts first. One customer, one record, first.

How Does Entity Resolution Cut Transaction Monitoring False Positives?

By giving every alert context. When an analyst sees one resolved customer with all accounts, related parties, and history together, most benign alerts close in minutes, and genuinely linked activity across accounts stops hiding in separate records.

Here’s the mechanics, without the marketing.

A legacy monitoring system usually scores activity per account. The same person appears as three customers because of a typo, a maiden name, and a business account. Each record looks thin, so rules fire on normal behavior, and each alert lands with an analyst who has to rebuild the picture from five screens. That rebuild is where the hours go.

Entity resolution fixes the input. Records that refer to the same real person or company are matched and merged, and relationships like shared addresses, directors, devices, or counterparties are drawn as links. Now an alert on one account opens with the whole customer attached.

Two effects follow.

  • Faster closure on benign alerts, because the explanation is usually visible on the first screen
  • Better detection on real risk. Structuring across five accounts shows up as one pattern, not five small ones

Which matters more? Honestly, the first one pays for the program. The second one is what regulators care about.

We’d add one operator warning. Entity resolution is a model, and models make mistakes. Over-merging two different people with the same name is worse than leaving them apart, because it contaminates both risk profiles. Every match rule needs a threshold, a review queue for borderline matches, and an audit trail. Our Foundry data governance guide covers how markings and restricted views keep sensitive KYC fields locked down while this happens.

Separate thin customer records merged into one complete profile with linked accounts for AML alert triage

Where Does Palantir Fit Next to Your Existing AML Stack?

Mostly as the layer above and between your tools. Keep your sanctions screening lists, regulatory e-filing, and in most cases your core monitoring engine. Use Foundry to unify their data, resolve entities, triage alerts with context, and run investigations.

Rip-and-replace is rarely the right first move. Your existing monitoring models are tuned, validated, and known to your examiners. Throwing them out to start fresh on a new platform resets model validation, and in a regulated bank that’s a long road.

Here’s how the layers usually split.

AML layerTypical incumbentFoundry’s usual role
Sanctions and PEP listsDow Jones, LSEG World-Check, or similar data feedsIngests list matches and adds customer context
Name and payment screeningExisting screening engineFeeds hits into the resolved customer view
Transaction monitoring rulesNICE Actimize, Oracle, SAS, or in-houseOften kept; Foundry triages its alerts, or adds network-based detection beside it
KYC and CDD refreshOnboarding and KYC platformsPulls periodic review data together and drives refresh workflows
Investigations and case managementLegacy case toolStrong candidate to replace with Workshop apps on Ontology objects
Regulatory filingBank’s e-filing route to FinCEN or local FIUPrepares the case file; filing usually stays where it is

Our default recommendation is to start with alert triage and investigations. It’s where analysts lose the most hours, it doesn’t touch validated detection models, and it shows value inside a quarter.

Bias disclosed. We build on Palantir, so we’d naturally like Foundry to do more. But we’ve watched teams try to make it the detection engine, the screening engine, and the case tool in one program. They spend year one on model validation instead of on the analysts.

How Does Palantir Compare to Quantexa, NICE Actimize, and Hawk AI?

They solve different parts of the problem. NICE Actimize is a long-established detection and case management suite. Quantexa focuses on entity resolution and network analytics. Hawk AI sells AI-driven monitoring and screening. Palantir is a broader data and operations platform used for AML among other things.

Here’s how we’d frame the fit, based on how each vendor publicly positions itself.

VendorCenter of gravityUsually a fit whenWatch out for
Palantir FoundryGeneral data and decision platform with an Ontology, applied to financial crimeYou want one platform for AML plus fraud, risk, and operations, and have the engineering appetiteNeeds real build work and strong governance; not a packaged rules library
QuantexaEntity resolution and network analytics for financial crimeEntity resolution and networks are the main gapStill needs detection and filing tools around it
NICE ActimizeEstablished monitoring, screening, and case management suiteYou want a packaged, examiner-familiar AML stackData unification outside the suite can be harder
Hawk AIAI-based monitoring and screening, often for banks and fintechsYou want explainable machine learning detection quicklyNarrower scope than a general data platform

Vendor comparison lists in this market tend to leave Palantir off entirely, which is part of why buyers find the decision confusing. The cleaner question isn’t which vendor wins. It’s which layer you’re actually trying to fix.

Short version? If your problem is fragmented data and slow investigations, a platform like Foundry earns its cost. If your problem is purely a weak detection model, a specialist may get you there faster and cheaper.

Four AML platform options in separate lanes leading to a bank, compared by a compliance lead

What Do the 2026 FinCEN Proposal and EU AMLA Change for AI in AML?

Both push toward effectiveness over box-ticking. FinCEN’s April 2026 proposal would judge AML programs on whether they work, and EU AMLA begins direct supervision of large institutions in 2028. Better data and documented decisions matter more under both.

In the US, FinCEN issued a new AML/CFT program proposal in April 2026 that withdraws and replaces the 2024 version. Davis Wright Tremaine’s summary notes it focuses on program effectiveness rather than technical compliance, and that banks responsibly using AI wouldn’t face added enforcement risk solely for doing so. Comments closed June 9, 2026, and the proposal sets an effective date 12 months after a final rule. As of this update it’s still a proposal. Check the Federal Register before you plan around dates.

Investment advisers got more runway. Cleary Gottlieb reports that FinCEN pushed their AML program and SAR filing deadline from January 1, 2026 to January 1, 2028.

In Europe, the Anti-Money Laundering Authority in Frankfurt has existed since June 2024. It plans to select 40 obliged entities for direct supervision during 2027, with direct supervision starting in 2028.

What does that mean for tooling? Effectiveness is a data question. You need to show which alerts led to SARs, how long reviews took, why a model flagged what it flagged, and who approved each disposition. A system that logs every decision on a resolved customer record answers those questions. A spreadsheet of alert counts doesn’t.

This is also where AI gets interesting and a little nerve-wracking. If AIP drafts a case narrative, someone still signs it, and the bank still needs to explain the model. Our guide to AIP Logic and Evals covers how to test language model functions before they touch a regulated workflow. For tracking the rule changes themselves, see our piece on regulatory change monitoring.

What Does a Foundry AML Program Look Like in the First 90 Days?

Start narrow. Connect core customer, account, and alert data, build entity resolution and a customer Ontology, then ship one triage app for one alert type. Measure analyst time per alert before and after. Expand only after that number moves.

Here’s the sequence we use.

  1. Pick one alert population with real pain, like cash structuring alerts in retail, and record today’s volume, closure time, and SAR conversion rate
  2. Connect the customer master, accounts, transactions, and the alert feed from your existing monitoring system
  3. Build entity resolution with match thresholds and a human review queue for borderline merges
  4. Model the Ontology objects, at minimum Customer, Account, Transaction, Alert, Case, and the links between them
  5. Apply markings and restricted views so KYC and SAR data only reach people cleared to see them
  6. Ship one Workshop triage app that opens each alert with the resolved customer, related parties, and history
  7. Run it beside the old process for a few weeks and compare closure time and escalation quality
  8. Document model logic, match rules, and decisions in a form your model risk and audit teams can review

Step 1 matters more than people expect. Without a baseline you can’t prove the program worked, and under an effectiveness standard that’s the whole argument.

Timelines vary with data quality more than with Palantir. Ninety days to a working triage app on one alert type is realistic when source data is reachable. If your customer master lives in three core banking systems with no shared key, add time for that before anything else. Our Foundry pricing guide covers the cost side.

Path from data connection to resolved customer network to a single analyst triage app in a 90-day Foundry AML pilot

What Are the Risks and Objections?

Three come up in every conversation. Privacy and public perception, vendor lock-in, and the build effort. None are deal breakers, but each needs an answer before procurement does.

Privacy first. Palantir’s public sector work draws criticism, and the FCA trial coverage shows that AML data access is sensitive territory. Your board will ask. Have a clear answer on data residency, who at the vendor can see what, and how markings restrict access.

Lock-in is real too. Logic, investigations, and audit history built in Foundry don’t move out with a CSV export. Keep detection models documented outside the platform and keep your system of record for filings where it is.

And the build. Foundry is a platform, not a turnkey AML suite. Someone has to model your data and maintain it. If you don’t have that team, budget for it or pick a packaged tool.

Fix the Customer View Before the Alerts

Three takeaways. Palantir anti-money laundering is Foundry used as a data and decision layer, strongest at entity resolution, alert triage, and investigations. It usually complements your existing detection and screening tools rather than replacing them. And the 2026 shift toward effectiveness in the US and EU rewards exactly what Foundry does well, which is documented decisions on resolved data.

PAL4C Labs is an independent, Palantir-exclusive consultancy that builds Foundry Ontologies, pipelines, and AIP workflows for regulated teams. We’re not affiliated with Palantir. Our Regulatory Intelligence offering applies the same approach to tracking and acting on regulatory change.

Weighing Foundry for financial crime? Send us your alert volumes, your current monitoring stack, and the one alert type that eats the most analyst hours. We’ll map a 90-day triage pilot with you, including the baseline metrics you’ll need to prove it worked.


AML Questions Compliance Teams Ask

Does Palantir Sell a Packaged AML Product or Is It Built on Foundry?

Built on Foundry. Palantir markets an anti-financial-crime offering and AML materials, but the delivery is Foundry configured with your data, entity resolution, an Ontology, and investigation apps, rather than a fixed rules package.

Which Banks Have Publicly Used Palantir for Anti-Money Laundering?

Societe Generale announced a Foundry-based financial crime deployment in March 2025. Credit Suisse used Foundry for a single client view from 2016. AUSTRAC, Australia’s financial intelligence unit, used Palantir from 2017 to 2025, and the UK FCA ran a proof of concept in 2026.

Can Palantir Replace NICE Actimize or Our Monitoring System?

Technically it could, but we rarely recommend starting there. Validated detection models are hard to replace quickly. Most banks get faster value by keeping detection and using Foundry for alert triage, entity resolution, and investigations, then revisiting detection later.

How Is Palantir Different From Quantexa for AML?

Scope, mostly. Quantexa centers on entity resolution and network analytics for financial crime. Palantir Foundry is a general data and operations platform that can do entity resolution and also runs fraud, risk, and other workflows on the same Ontology.

Does Foundry Support SAR Filing Workflows?

Palantir’s own materials describe case management that supports regulatory reporting, including SARs and CTRs. In practice, banks often keep their existing e-filing route and use Foundry to assemble the evidence, narrative, and approvals behind each filing.

What Does the 2026 FinCEN Proposal Mean for AI in Transaction Monitoring?

It’s friendlier to AI than past rules, at least as proposed. The April 2026 proposal focuses on program effectiveness and says responsible AI use alone wouldn’t add enforcement risk. It wasn’t final at our last check, and an effective date would come 12 months after a final rule, so watch the Federal Register.

How Long Does a Foundry AML Pilot Take?

About 90 days for a working triage app on one alert type, if source data is reachable. Messy customer masters spread across several core systems add time before that.