Compliance AI
for financial services

Umbra is the operating system that takes financial firms from reactive compliance to continuous trust.

Book an intro Learn more

Framework agnostic
Second-line focus
AI-native GRC

EU focus
MiFID II
MiCA
MAR
PSD2
DORA
GDPR
And more

Netherlands
Germany
France
Belgium
Czech Republic
Poland
Spain
And more

Track regulatory change, see which policies, procedures, and controls are impacted, and auto-trigger the right reviews.
Map key obligations into policies, procedures, and controls, run audit-ready gap analysis with remediations, and set auto-reminders.
When processes change, see how they link to related risks and controls. Umbra keeps the full interconnected picture current and flags gaps that need remediation.
Identify risks, run inherent and residual scoring, auto-map controls, and see status at a glance as requirements change.
Create a control monitoring plan with continuous attestations. Umbra pulls evidence from existing systems and tests design and operating effectiveness.

Umbra connects your policies, controls, and regulations into one living codebase — continuously reviewed, executed, and tested by AI agents.

Embedded in

SharePoint

OneDrive

Notion

Google Drive

Google Docs

And more Custom integrations

Built on integrity and transparency

Exacting standards for accuracy, transparency, and data protection, grounded in curated datasets from trusted regulatory and compliance sources.

GDPR & DORA compliant

Built with strict GDPR-aligned governance, access controls, and audit-ready security boundaries. Designed for regulated enterprise environments.

European sovereign cloud

All client data is stored and processed on European sovereign cloud infrastructure, with AI inference hosted on secure Dutch servers.

Data integrity

Client data is never used for AI training. Only processed to deliver the service. Regulatory datasets trace to verified government sources.

Agents detect.
You decide.

Regulation change

Process change

Business activity

Policies

Risks

Controls

Reviewing

Monitoring

Reporting

Interconnected codebase

Compliance review

Officer verification Approved

Changes

Regulation change

Process
change

Business
activity

Agents detect.
You decide.

Interconnected codebase

Compliance review

Officer verification Approved

SOLUTIONS

Umbra streamlines everything from risk assessments to drafting and review.

Review financial products

Launch regulated financial products without getting stuck waiting for compliance approvals.

Map legislation

Filter relevant regulations to find the business requirements that apply to your legal profile.

Policy and control analysis

Run gap analyses using your internal documentation and address blind spots with actionable suggestions.

			Documentation
MiFID II	Article 1Art. 1	Applicable	[13] Structural Risk AssessmentRisk Assessment	No gap
MiFID II	Article 2Art. 2	Applicable	[19] Outsourcing	Gap
MiFID II	Article 3Art. 3	Not Applicable
MiFID II	Article 4Art. 4	Not Applicable
MiFID II	Article 5Art. 5	Applicable	[37] Financial ReportingFin. Reporting	Gap
MiFID II	Article 6Art. 6	Applicable	[49] IT Infrastructure	No gap
MiFID II	Article 7Art. 7	Applicable	[3] Access ManagementAccess Mgmt	No gap
MiFID II	Article 8Art. 8	Not Applicable

IT Access Management

Access to systems is granted according to the principle of least privilege, in line with DORA Article 9 requirements for ICT risk management. Access requests must be approved by the user’s manager and the system owner. Periodic access reviews are conducted quarterly as part of the controls mandated under DORA Article 9(2)(d).

Product Governance and Launch Controls

Before launching any new financial product, the product governance team must identify document the target market and intended distribution strategy, and assess the product’s risks. All product information must be reviewed and approved by compliance. All product approvals must include a sign-off from compliance and a periodic review schedule to ensure ongoing suitability, in line with MiFID II Article 16.

Require review 3

Approved 14

Cutting enforcement riskfor regulated industries

Capital markets

Trusted by compliance, risk, and legal teams

55h+

Saved on monitoring and reporting per user per year

90+

Adoption in under two months

ROI

In the first year

Report they find results faster than with existing tools

day onboarding

Self-serving platform. 3 days per custom integration

Paula Steiner on advisory board

Team 1 min

Umbra Ai is live

Product 1 min

Compliance AI
for financial services

Solving the problems that enable the business

Scan

Review

Link

Identify

Test