Nabu Tech
Belgian platform that automates KYC onboarding and ongoing due diligence for private equity and venture capital funds, payment providers, leasing companies and insurers, pulling entity and beneficial-owner data straight from official registries instead of chasing documents.
What is Nabu Tech?
Nabu Tech is a Belgian compliance platform, marketed as NABU, that automates KYC onboarding and ongoing due diligence for regulated firms. Its core idea is an inversion of the usual workflow: rather than asking a counterparty repeatedly for documents, the system identifies the legal entity and pulls what it can from official sources first. The named sources are the Belgian Crossroads Bank for Enterprises (KBO), the Belgian UBO register, the notarial records of FedNot, and the eIDAS-compliant digital identity itsme. The counterparty only uploads what is genuinely missing, once, and the platform maps it across every required field.
The same product is presented through four audience pages rather than sold as four products. Private equity and venture capital funds use it for limited partners and portfolio companies; payment providers for merchants; leasing companies for lessees and guarantors; insurers and brokers for policyholders, beneficiaries and their beneficial owners. On the payments side the platform is broken into six named modules grouped under the heading Deep KYC: an API Orchestrator that consolidates several data sources into one check, an MCC Analyzer for merchant category codes, a VOP IBAN Check that confirms account name and IBAN match without a test transfer, a UBO Check, an Ecommerce Analyzer that reviews online shops against a checklist, and a Merchant Monitor for continuous PEP and sanctions screening.
Around that sits the part the company argues matters most under the incoming EU rules: a time-stamped audit log of every action, continuous monitoring that triggers re-onboarding when something material changes, and AI-generated summaries of long documents such as articles of association. The homepage claims up to 90% less manual work and tenfold faster KYC.
The company is young. Nabu Tech BV was incorporated on 23 June 2025 by three founders, and the published evidence base is correspondingly thin: one named customer, the Belgian PE and VC firm Smartfin, and two data partnerships, with Altares Dun & Bradstreet and with Corporify. There is no public pricing, no API, no terms of service and no security certification on the site.
What it does
- Pull company and beneficial-owner data directly from official registries and pre-fill the file
- Identify the ultimate beneficial owner and resolve indirect ownership chains automatically
- Score counterparty risk using the customer's own model and question weights
- Screen entities continuously against PEP and sanctions lists, with CRS and FATCA classification
- Verify individual identity through eIDAS-compliant digital identity rather than document uploads
- Log every action in a time-stamped audit trail
- Summarise articles of association and financial statements with AI
When to use Nabu Tech / When not to
A quick filter to help you decide if Nabu Tech is the right fit.
When to use Nabu Tech
- Compliance officers at EU obliged entities preparing for the AMLR deadline of 10 July 2027
- KYC and AML analysts who spend their days chasing documents and re-keying registry data
- Private equity and venture capital funds onboarding limited partners and portfolio companies
- Acquirers, payment facilitators and ISOs that need merchant onboarding measured in minutes
- Leasing companies and insurers that must verify lessees, guarantors, policyholders and their UBOs
When not to use Nabu Tech
- Teams that need a published price list, a self-service signup or a free trial before talking to sales
- Engineering teams looking for a public API or developer documentation to embed checks themselves
- Organisations outside Belgium that need the named registry coverage proven for their own jurisdiction
- Buyers whose procurement requires an ISO 27001 or SOC 2 certificate before any pilot
- Anyone needing a mobile app or an interface in a language other than English
How to use Nabu Tech
A typical end-to-end flow, from setup to results.
- Pick the vertical page that matches your business: PE and VC, payments, leasing or insurance
- Submit the demo request form with your name, work email, company and vertical
- Wait to be contacted: there is no self-service signup and no published trial
- Agree commercial terms directly with the vendor, since no price list is published
- During setup, transcribe your AML manual into the platform's risk model and question weights
- Connect the platform to the data sources and to your existing onboarding workflows and portals
- Sign in to the NABU portal with an email and password, or through Microsoft single sign-on
- Start a case: the platform identifies the entity and pulls available registry and API data
- Send the pre-filled file to the counterparty, who reviews and approves it in a secure environment
- Read the risk score and profile overview, then let continuous monitoring run on flagged entities
Pros & Cons
Pros
- Data is pulled from official registries first, which removes most of the document chasing
- The publisher's legal identity is verifiable: the VAT number on the site matches the Belgian register and VIES
- Identity verification through itsme means no copies of identity documents are transmitted or stored
- Continuous monitoring and event-triggered re-onboarding match where the AMLR is heading for 2027
- The risk model is configurable with the customer's own question weights rather than fixed
- Two documented data partnerships, including Altares Dun & Bradstreet's coverage of over 600 million companies
- One named, documented reference customer with quotes attributed to its CFO and its founder
Cons
- No public pricing at all: no price page, no amount, no plan, no trial anywhere on the site
- No security certification is published, neither ISO 27001 nor SOC 2 nor any audit report
- No terms of service and no legal notice; the only legal page covers the website, not the service
- No public API and no technical documentation, so programmatic integration is not offered
- No data processing agreement is published or even mentioned, and no subprocessor is named
- Every named data source is Belgian, while the positioning is European
- The company was incorporated in June 2025 and the team is three people
Pricing & Plans
Nabu Tech publishes no pricing whatsoever. There is no pricing page, no plan, no amount and no currency anywhere on the site, and none is listed in its sitemap or its llms.txt file. Neither a free plan nor a free trial is offered or ruled out; the subject is simply never raised. The only commercial route is the demo request form, so terms are agreed case by case with the vendor.
Data, GDPR & hosting
A consolidated view of how Nabu Tech handles your data.
GDPR overview
The word "GDPR" never appears on the site, yet the privacy policy is written in the regulation's vocabulary. It enumerates four legal bases (contract performance, legitimate interest, consent, legal obligation), allows consent withdrawal at any time, and lists data subject rights: access, correction or deletion, restriction of processing, objection to marketing, withdrawal of consent and complaint to a supervisory authority. Transfers are covered in one sentence promising adequate safeguards outside the EEA, without naming a mechanism. No DPO is appointed and no Article 27 representative is needed, the publisher being established in Belgium. Two caveats: the address given for exercising rights sits on a domain the publisher does not appear to operate, and the policy carries two different dates.
Who owns the data?
The only legal document published is a privacy policy, and it is scoped to the website rather than to the KYC platform: it covers nabutech.eu and "other sites we own and operate". No terms of service, no legal notice and no data processing agreement are published anywhere on the site, so nothing states who owns the customer records processed in the product. Nabu Tech BV names a data controller, Koen Handekyn, and lists recipients only by category: service providers, affiliates and employees, courts and authorities, subcontractors, third-party data processors. One clause is worth reading closely: if the company is acquired or enters bankruptcy, user data may be transferred as an asset.
Reuse rights
Nothing on the site grants the end user any reuse right, because no terms of service exist. The privacy policy only describes what Nabu Tech does with website data: personalising the visit, granting access to the site and its features, keeping internal usage records, improving the site, running website promotions and meeting legal obligations. Cookies are split into essential, performance, functionality and targeting categories, with consent requested before non-essential ones are set. Third-party analytics and advertising partners are acknowledged but never named. On the product side, customers presumably retain their own client files, but that is an assumption: the site never addresses it, and it never mentions using customer data to train AI models either.
Data retention & training
Hosting summary
Hosting information is minimal. The privacy policy states in a single sentence that data may be processed in Belgium, the Netherlands, Germany or other locations, and that adequate safeguards are ensured for transfers outside the European Economic Area. No safeguard mechanism is named, so neither standard contractual clauses nor an adequacy decision is invoked explicitly. No hosting provider, data centre or region is identified, and no subprocessor is listed by name; the policy only enumerates categories of recipients. The open-ended phrase "or other locations" means the three named countries should be read as examples rather than as a closed list. Note also that this policy is scoped to the website, not to the KYC platform, so it does not describe where customer onboarding files are actually stored. A buyer with data residency requirements will need to obtain that in writing.
Things to keep in mind
Risks and trade-offs to weigh before adopting Nabu Tech.
- The published address diverges from the register: the footer says Ghent, while the Belgian register and VIES both place the registered seat and the only establishment unit at Douvieweg 83, 8978 Poperinge
- The privacy policy asks users to write to an address on nabutech.com to exercise their rights, but that domain does not appear to be operated by the publisher, whose own mail runs on nabutech.eu
- No terms of service exist, so the commercial and liability terms of the service are entirely unpublished and negotiated privately
- No security certification is published, which for a tool handling identity and beneficial ownership data leaves the buyer to verify controls unaided
- The privacy policy states that user data may be transferred as an asset if the company is acquired or enters bankruptcy
- Screenshots on the site show a demonstration dataset mixing invented funds with the names of real companies; they are illustrations, not customers
- Automated risk scoring can encourage teams to accept a score without reviewing the reasoning behind it, which is exactly what a supervisor will ask them to explain
Setup & Integrations
Technical difficulty
Moderate, and largely a project rather than a signup. There is no self-service registration: access starts with a demo request and a commercial conversation. Setup then involves transcribing the customer's AML manual into the platform's risk model and question weights, connecting the data sources through the API Orchestrator, and fitting the platform into the existing onboarding workflows and portals, which the payments page explicitly describes. No integration guide, API documentation or technical specification is published, so the effort cannot be scoped from the site alone. Day-to-day use of the portal itself looks straightforward, with email or Microsoft single sign-on.
Deployment
Integrations
Supported languages
Behind Nabu Tech
Social
Resources
All the official URLs gathered for verification and reference.
Frequently asked questions
Who is Nabu Tech built for?
Where does the data come from?
How much does it cost?
Is there a free trial or a free plan?
Does Nabu Tech offer an API?
Is there a mobile app?
How is an individual's identity verified?
What security certifications does Nabu Tech hold?
Where is the data hosted?
Who is behind the product?
Should you pick Nabu Tech?
Nabu Tech is a coherent, well-argued answer to a real problem. Its premise, that most of the data needed for a clean onboarding already exists in public registers and should be fetched rather than requested, is sound, and the regulatory reasoning behind it is unusually well sourced for a vendor site: the blog links to EUR-Lex, to the AMLA and to the Belgian registers themselves rather than paraphrasing them.
What is harder to assess is everything a buyer normally checks second. There is no pricing, no terms of service, no legal notice, no data processing agreement, no named subprocessor and no security certification. For a product that handles identity documents and beneficial ownership data on behalf of regulated firms, that last gap is the one most likely to stop a procurement review. The privacy policy that does exist is scoped to the website, not the platform, so it answers almost none of the questions a compliance buyer would ask.
Scope is worth checking too. Every data source the site names is Belgian, and the identity flow described in the customer story applies to Belgian investors, while the positioning is European. Coverage elsewhere is asserted rather than demonstrated.
The company was incorporated on 23 June 2025 and has three founders, all of whom appear in the Belgian register as permanent representatives of the company's directors. Against that, it already shows one named customer and two data partnerships, which is more evidence than most firms of its age publish. Nabu Tech is best read as an early but credible product: worth a demo for a Belgian or Benelux compliance team preparing for 2027, and worth a firm list of contractual and security questions before signing anything.
- Choosing a selection results in a full page refresh.
- Opens in a new window.