Shufti adds digital signatures & Travel Rule tools

Shufti has launched qualified electronic signatures, transaction trust monitoring and Travel Rule compliance tools, extending its compliance product range across identity, payments and digital asset checks.

The London-based firm said the three products are designed to connect identity verification records with signing, transaction review and compliance evidence in a single workflow. The launch comes as financial firms, digital asset operators and other regulated businesses face tighter rules on digital identity, anti-money laundering controls and information sharing.

At the centre of the release is a qualified electronic signature offering that links a signer's verified identity to the signing process. Shufti said the product combines identity verification, trust services, certificate issuance and signing records so businesses can maintain a single audit trail for legal and regulatory review.

The signing tool is designed to meet the requirements of the EU's eIDAS regime, under which qualified electronic signatures carry the same legal standing as handwritten signatures across the bloc. Users can verify signers through a national electronic identity, a document and face biometric check, or an NFC chip and face biometric route.

Shufti also said the product includes a hash-signing option. Under this model, only a SHA-256 hash of a document is sent during the signing process, allowing the underlying contract file to remain in the customer's own environment.

Compliance link

The broader strategy behind the launch is to reduce the number of separate systems companies use for identity checks, electronic signing, fraud controls and anti-money laundering oversight. Businesses often stitch together specialist tools for different tasks, making investigations, reporting and record-keeping harder to manage.

Regulatory changes are driving that demand. In Europe, the updated eIDAS framework is tightening expectations around trusted digital identification and signatures. The EU's Anti-Money Laundering Regulation also places greater emphasis on higher-assurance digital identity methods, while cryptoasset firms must meet Travel Rule obligations under the Financial Action Task Force framework and the EU's Transfer of Funds Regulation.

Shufti's second product, transaction trust monitoring, combines fraud and anti-money laundering assessment in a single scoring system tied to a verified customer identity. The company said each transaction is assessed in real time using a combined set of indicators, including sanctions exposure, politically exposed person checks, structuring patterns, mule activity and transaction velocity.

Rather than relying on separate fraud and AML tools, Shufti said it uses a single FRAML model to generate one composite score. The system also compares activity against a customer's behavioural baseline to distinguish unusual conduct from expected transaction patterns.

Shufti said transactions with missing or incomplete information are marked as not assessable rather than allowed through as low risk, a choice intended to preserve a clear audit record.

The product also includes alert triage, investigation records and support for preparing suspicious activity and related regulatory filings. Shufti said a money laundering reporting officer remains responsible for approving any submission sent to a regulator, while artificial intelligence tools can assist with detection, prioritisation and case preparation.

Digital assets

The third launch focuses on compliance for virtual asset transfers. Travel Rule obligations require virtual asset service providers to share originator and beneficiary information for qualifying transfers, mirroring requirements long applied in traditional finance.

Shufti said its product offers a single integration that connects users to multiple Travel Rule networks. It also matches receiving institutions against a directory of more than 12,000 counterparty entities and assigns a risk score to each counterparty virtual asset service provider before a transfer is completed.

According to the company, the system exchanges originator and beneficiary information in encrypted form using the IVMS 101 messaging standard. It also includes routing, retries, delivery tracking and a full audit trail, along with tools to verify ownership of self-hosted wallets through four methods using a secure link.

The expansion reflects how compliance software suppliers are trying to broaden their role inside client operations. Instead of offering point solutions for onboarding, fraud, signing or crypto transfers, vendors are increasingly trying to tie multiple compliance processes to a single identity record.

Shufti said it serves more than 2,000 businesses across banking, fintech, payments and iGaming. That customer base suggests the company is targeting sectors where firms need to prove who a customer is, monitor what they do over time and retain documentation that can withstand scrutiny from auditors, courts and regulators.

"Businesses are facing growing compliance requirements but still managing them through separate systems," said Frayam Asif, chief technology officer at Shufti.

"We expanded Shufti to connect these critical compliance activities around a verified identity. These new capabilities under our Innovation Drop Summer Edition 2026 help businesses reduce fragmented workflows and unify compliance from identity verification and transaction monitoring to signing through a QTSP-verified vendor," said Asif.