9Lenses

The company now presents itself as an AI platform, with an AI relationship assistant that briefs the banker and an assistant that drafts recommendations from assessment responses. Underneath is an adaptive questionnaire and scorecard engine that has been the product since 2011, when the pitch was digitising consulting intellectual property.

Remove the AI framing and the assessment, the scorecard and the benchmark comparison all still work, which places this squarely in the middle band rather than lower: the AI is a real layer on a real product, not the product.

Autonomy is low and the boundary is clear from how the product works. The questionnaire is dispatched by a person to a named client, the scorecard is generated from that client's own answers, and the assistant briefs the relationship manager rather than contacting anyone. The company is explicit that the platform enhances bankers rather than replacing them and that the human remains the relationship owner. What is not documented is the review path for AI generated recommendations before they reach a client.

No model provider, no version, and no account of how the platform turns questionnaire responses into a scorecard, a benchmark position or a product recommendation. For a product whose output is an advisory recommendation shown to a bank's own client, the logic behind that recommendation is the transparency question, and it is unaddressed. Nothing states whether recommendations are rules based, benchmarked or model generated.

Every outcome claim is unattributed. The site reports that what once took four weeks now takes thirty minutes, that customers complete the advisory tools more than ninety percent of the time, and that one top ten United States bank has run thousands of customers through the process. Not one is tied to a named customer, a stated period or a defined denominator, and the summary claims of faster cycles, larger deals and higher win rates carry no numbers at all. The specificity of the top ten bank reference makes the absence of a name conspicuous rather than excusable.

The platform sends assessment invitations to a customer's clients and prospects, which is regulated communication in most of the jurisdictions its buyers operate in, and nothing published describes consent handling, suppression, opt out mechanics or where responsibility transfers to the bank. The company notes generally that the platform is designed to work within financial institution processes, which is not the same as documenting how the sending obligation is met. No public enforcement action located.

A real privacy policy exists and covers more than boilerplate: it states that information is collected globally and stored in the United States, describes the organisation as administrator model for customer accounts, and names transfer mechanisms. It also carries a material defect. The policy still relies on the EU United States and Swiss United States Privacy Shield frameworks, invalidated in 2020, alongside standard contractual clauses.

For a vendor selling to European exposed financial institutions in 2026, a stale transfer basis sitting in the live policy is a finding in itself. No data processing agreement, subprocessor list or data subject rights process was located.

No third party data is bought or resold. The inputs are the customer's own client responses collected through the assessment, plus whatever flows in from the connected CRM, and the company states plainly that data is not shared with third parties. Provenance is therefore unambiguous by construction. It stops short of the top band because the benchmark feature implies aggregation across responses and no published document establishes the footing on which that aggregation happens.

Minimal exposure. The product collects its own first party responses and connects to CRM and marketing platforms through their own interfaces, with no automation of any third party network and no data extraction that would draw enforcement. As with most vendors in this position, no conformance statement of its own is published, so the grade reflects architecture rather than a documented commitment.

The cross client question is left open by the product's own description. Assessment responses are aggregated into benchmarks, which is the platform's stated value, and nothing published resolves whether those benchmarks are built inside a single customer's data or across the install base, nor whether any customer can be excluded. There is no statement on whether client responses inform model development, and no retention or deletion terms. The company does state that data is not shared with third parties, which is why this is not lower.

The people on the receiving end here are a bank's own customers, who complete a questionnaire and then receive a scorecard and recommendations. Nothing published states whether that analysis is identified as machine generated, what the client is told about how their answers will be used and benchmarked, or how long their responses are held. No Article 50 position is stated for the assistant surfaces. The relationship context is more consented than cold outreach, which is why this is not lower.

Integrations are named rather than documented: Salesforce, Marketo, HubSpot and Microsoft Dynamics appear on the platform page, followed by an invitation to ask the company to demonstrate how the data flows. That invitation is an accurate description of the state of the documentation. No API reference, object mapping, sync direction or marketplace listing was located, and for a product that both reads pipeline context and writes insights back, direction and depth are the whole question.

Unusually clear for a vendor of this size, and clear in a way that matters to the buyer: the privacy policy states that information is collected globally and stored in the United States, with hosting providers in the United States. That is a documented residency posture rather than silence. It is a posture with no options in it, which is what keeps it out of the top band. European and United Kingdom financial institutions evaluating this platform can see the answer without asking, and the answer is that their client responses leave the region.

Security is asserted in general terms, as technical measures used to secure data, with no trust centre, no enumerated certification, no audit report and no penetration test attestation located. The buyer set makes this gap heavier than the grade suggests: this platform holds structured needs assessments completed by the commercial clients of banks and insurers. A public review of the product raises the same point from the buyer side, asking to see more of the security protocols.

Book a demo is the entire commercial disclosure. No pricing page, no published tier, no unit of pricing, no free version and no trial, and the review platforms record a single unpriced plan. A buyer cannot establish whether this is priced per seat, per assessment or per institution without entering a sales process.

No export path, no post termination data rights, no deletion commitment and no renewal terms were located in public material. The privacy policy handles the question by redirecting it: where the service is provided through an organisation, that organisation administers the account and data questions go to the administrator.

That answers the individual respondent and leaves the buying institution without a published position on what it can take with it, which is a live question given the assessment history and benchmark position accumulate inside the platform.

The platform sends assessment invitations and delivers results by email, so sending is part of the workflow, and completion rate is the metric the company leads with. No sending infrastructure, authentication guidance, deliverability mechanism or bounce handling is documented anywhere public. Deliverability is invoked implicitly through the completion claim with no mechanism behind it.

The segment is stated with real precision and the product is shaped to it: commercial and business banking relationship managers first, then insurance brokers and carriers, consulting and technology, with dedicated solution material for each and a stated focus on portfolios of fifty to a hundred or more clients per banker. What is missing is evidence.

The customers behind the claim are described rather than named, including the top ten bank reference, and no geographic or language coverage is published for a company of roughly 28 people operating across two continents.