About OnyxOne — short boilerplate
OnyxOne is an enterprise governance, risk and compliance (GRC) operating system for regulated organisations. It brings risk registers, internal controls, policies, regulatory obligations, audit, evidence, compliance cases and regulatory reporting onto one platform and one record — with an immutable audit trail behind every decision. It governs the customer due-diligence lifecycle and integrates with the screening, identity and risk providers an organisation contracts, rather than acting as a real-time transaction-monitoring engine. OnyxOne is a technology vendor, not a regulated financial institution or an obliged entity, and operates under the laws of England & Wales.
About OnyxOne — long boilerplate
OnyxOne is building the operating system for governance, risk and compliance. Compliance and risk teams at financial institutions, fintechs, insurers, lenders, investment firms, corporate and trust service providers and other regulated enterprises typically run their programmes across disconnected point tools, spreadsheets and shared inboxes — making work hard to see, harder to audit and slow to defend.
OnyxOne replaces that fragmentation with a single system of record. Risk, controls, policy, obligations, audit, evidence, cases and regulatory reporting share the same underlying record and workflow, so a decision, the evidence behind it and its place in the wider programme are never separated. Every assessment, control test, decision, override and policy change is captured in an immutable, timestamped audit trail, so audit readiness is a by-product of the work rather than a project in its own right.
The platform is configured to each customer's own policy, risk methodology and frameworks rather than imposing a fixed model, and is built to an enterprise security standard: server-only secret handling, role-based access with segregation of duties, encryption in transit and at rest, and fail-safe integrations. Where OnyxOne applies AI, it is assistive — it supports the people accountable for a decision and keeps a human in control. OnyxOne is a technology vendor, not a regulated firm; responsibility for meeting regulatory obligations remains with the organisations that use the platform. SOC 2 and ISO 27001 are on the roadmap and are not yet held. OnyxOne operates under the laws of England & Wales.
Fast facts
- What it is
- A governance, risk & compliance (GRC) operating system for regulated enterprises.
- Category
- Enterprise governance, risk & compliance (GRC) software.
- What it does
- Enterprise risk, internal controls, policy, compliance obligations, audit, evidence, cases and regulatory reporting on one platform — plus a governed KYC/KYB lifecycle that orchestrates the customer's chosen screening and identity providers.
- Positioning
- A technology vendor — not a regulated financial institution or an obliged entity under AML law.
- Governing law
- England & Wales. Data protection under the UK GDPR and Data Protection Act 2018.
Media kit
The official OnyxOne brand assets are below for editorial use. Please use the marks as provided, don't alter, recolour or reconstruct them, and don't imply partnership or endorsement. These are the only official OnyxOne marks — please don't recreate your own.
Press contact
For interviews, briefings, fact-checking or additional assets, email hello@onyxone.uk with your outlet, your deadline and what you need. We'll respond with accurate information, share the current contracting-entity details on request, and won't confirm anything we can't stand behind.
We do not have manufactured press coverage, customer names or third-party quotes to offer, and we won't invent them. What we can give you is accurate, on-the-record information about what OnyxOne is and does.