duna.io

What It Is

Duna positions itself as an AI-native business identity platform designed to address fraud, friction, and compliance penalties in online business identity verification. Its first product focuses on “compliant business onboarding and customer lifecycle management,” making it closer to an enterprise identity, KYB/KYC, AML, and compliance automation platform than a traditional cybersecurity product such as a firewall, EDR, or vulnerability scanner.

Core Capabilities and Protection Scope

Based on the available content, Duna’s core capability is its Policy Engine, which turns regulatory compliance procedures into code and drives risk decisions across the entire customer lifecycle. The Onboard module provides no-code compliant onboarding journeys, with an emphasis on improving conversion while meeting regulatory requirements. Decide is used to automate case management, reducing manual reviews, long approval cycles, and back-and-forth emails. Lifecycle covers ongoing KYC, daily AML screening, re-KYC, re-KYB, advanced policy monitoring, and legal agreement management. Data Platform integrates KYC data sources such as global sanctions lists and local registries through a single API.

Deployment, Integration, and Management

The website does not disclose the deployment model, so it is unclear whether Duna is offered as SaaS, private deployment, or a hybrid setup. In terms of integration, Duna clearly highlights a single API for connecting multiple types of KYC data sources, which can be valuable for fintech companies, banks, and platform businesses looking to reduce data fragmentation. On the management side, its strengths are automated case management and continuous compliance monitoring, but there is no detailed information about alert rules, audit reports, permission models, or SIEM integration.

Pricing and Compliance Certifications

Pricing is not publicly available. The site offers a “Schedule a demo” option, suggesting an enterprise sales model. For compliance certifications, the main content only states that Duna takes data privacy and security seriously and links to Trust and Security pages, but it does not list specific certifications such as SOC 2 or ISO 27001. As a result, its certification maturity cannot be assessed based on the public information available.

Pros, Cons, and Best Fit

Duna’s strengths are its vertical focus and complete workflow coverage, spanning onboarding through ongoing AML/KYC, along with no-code processes and API-based data integration. The founders and advisors have backgrounds at Stripe, Adyen, Trade Republic, and similar companies, which adds credibility in payments and identity infrastructure. The main weakness is the lack of public information: pricing, deployment, certifications, SLA, China accessibility, and local payment options are all unspecified. Duna is suitable for regulated companies such as fintech firms, banks, and B2B platforms. It is not a good fit for teams that only need endpoint protection, perimeter security, or cloud security scanning.

China Access and Alternatives

Access from mainland China is unknown, and payment methods are not disclosed. If your use case involves local Chinese business identity verification, corporate registry data, AML, or cross-border data compliance, you should carefully evaluate local accessibility, data source coverage, and compliance boundaries. International alternatives include Persona, Onfido, Trulioo, and ComplyAdvantage. In the Chinese market, consider local providers of KYC/KYB, AML, and corporate registry data services.