Budgeting for compliance data checks starts with scope, not with a price per check. Decide which entity you are checking, in which jurisdiction, which checks it needs and which sources answer them. Then set a maximum for each check, a total for batches and a ceiling for recurring monitoring. When a run reaches its limit, it should stop and report what it did not check rather than return a partial result that looks complete.
This guide is for compliance, procurement and finance teams, and for anyone letting an AI agent run paid checks. It explains what drives the cost, how to set limits that match risk and how to record spend next to evidence.
Scope first: budgeting for compliance data checks
A useful budget is a set of limits attached to a defined check. The definition comes first: the entity, its jurisdiction, the checks to run, the sources for each, and how often they repeat. Only then does a number mean anything.
The cost of a check is driven by a handful of variables:
- The number of entities, which multiplies everything else in a batch.
- The number of checks per entity, such as registry, ownership, sanctions and court records.
- The price model of each source: free official data, per-document fees or commercial per-call pricing.
- Extra steps, such as a name search that returns several candidates before the right record is found.
- Frequency, because monitoring repeats the cost on every cycle.
- Review time, which is usually spent on exceptions rather than on clean records.
The budget then supports concrete decisions. Which suppliers get a deeper check, whether to pay for filed documents, when a price change needs new approval and what to do with a run that hits its cap.
Open-ended checks. Surprise bills.
Checks without a defined scope expand. A broad name search returns ten candidates, and someone pays to open each profile. An agent that cannot find ownership data tries another source, then another. A batch is rerun in full because three rows failed.
Uniform monitoring is another quiet cost. Running every supplier through every source on the same schedule spends as much on a low-risk domestic stationery vendor as on a new cross-border payee.
The opposite failure is less visible and more dangerous. A hard cap that silently skips the expensive source produces a report with fewer findings, and fewer findings can look like a cleaner result. Missing evidence is not a negative finding. Our guide to source-backed company checks for AI agents explains how to keep incomplete checks visible.
Write the check down first
The mandatory inputs are the legal name of the entity, its country of registration and the list of checks your policy requires for it. Without the jurisdiction, nobody can tell which register applies or what it charges.
Useful optional inputs reduce cost:
- The registration number, which avoids paying for candidate profiles during a name search.
- An LEI or VAT number, where the counterparty supplies one.
- Ownership information the counterparty has already provided.
- Results of earlier checks, with their retrieval dates, so you can decide what still needs refreshing.
You also need a policy decision: how deep should each check go? For banks and other obliged entities, the FATF Recommendations set out a risk-based approach that countries implement in national law, under which measures follow the risks identified. In the EU, the Anti-Money Laundering Regulation (EU) 2024/1624 applies from 10 July 2027. Many procurement teams are not obliged entities, so their tiers come from internal policy and contracts. Either way, the budget follows the risk tier, not the other way round.
Finally, name who approves a budget increase. A run that needs more money should reach a person, not wait in a queue nobody owns.
Price each step. Then cap it.
Treat a check as a sequence of priced steps, and approve the sequence rather than a single figure.
First, resolve the entity. An identifier lookup is usually the cheapest reliable step, and it prevents paying for the wrong company's records.
Second, price each source. Prices differ by source type. In the EU, Commission Implementing Regulation (EU) 2023/138 lists basic company information, such as name, status, registration date, registered address, legal form and registration number, as a high-value dataset. It must be available free of charge through APIs and bulk download, and the obligations apply from June 2024. Under Article 19 of Directive (EU) 2017/1132, fees for documents obtained through the EU interconnection of business registers may not exceed the administrative costs. Commercial datasets set their own prices.
Third, account for limits that cost time rather than money. In the UK, the Companies House API rate limit is 600 requests in five minutes, after which requests receive a 429 response until the window resets. A large batch may need to be spread out, which matters if a deadline is part of the budget.
Fourth, set ceilings at three levels:
- A maximum per check, approved before it runs.
- A total for each batch.
- A ceiling for each monitoring period.
Fifth, define the stop rule. When a ceiling is reached, the run stops, marks unfinished entities and steps, and asks for a decision.
Keep the layers separate in the record. The quote is an estimate. Retrieved data is a source fact. A match is an algorithmic result. An AI summary is an interpretation. Approval of a supplier is a human decision. The spend record sits beside these layers and does not replace any of them.
One budget. Then a cadence.
Start with a single use case, such as onboarding new suppliers above a contract value. Inventory the sources it needs and note each price model, update frequency and access condition.
Run a pilot on a representative sample, including companies with no registration number, a foreign entity and a known name collision. Compare the quoted maximum with the actual charge, and note which steps returned nothing. Our article on sanctions screening name match review shows why review time belongs in the estimate.
Then set tiers. A fictional example: a procurement team gives domestic low-value suppliers a registry check and a sanctions screen. Cross-border or high-value suppliers also get ownership and court-record checks. Each tier has its own maximum per check, and monitoring runs more often for the second tier.
Ownership data needs extra planning. On 22 November 2022, the Court of Justice of the EU ruled that the provision giving the general public access in all cases to beneficial ownership information was invalid. Access conditions now vary by country, so some ownership evidence may have to come from the counterparty rather than a paid lookup.
Set monitoring per tier and per source. A register that updates daily may justify a different cadence from an annual filing. See company registry data freshness for how update cycles affect what a result means.
Review the budget against actual runs at a fixed interval. The trade-offs are real: lower ceilings mean more incomplete runs and more manual follow-up, and broader coverage costs more per entity. Choose deliberately and record the reason.
How we approach it
Our pricing page describes pay per check with no subscription. Before anything runs, Apiosk shows the sources and the maximum cost, including our service fee. After a run, you see the actual charge, and unused reserved budget is released when the work settles.
For recurring checks, the pricing page offers a fixed number of prepaid runs or pay-as-you-go with a maximum per run. Connected agents follow your account's spending limits and approval rules, as described on our agents page. Our batch screening page describes a running total against your budget and a stop when the budget is reached.
Coverage depends on the source. Results identify data that was unavailable, and our source coverage shows the registers and lists behind each check. We do not publish a fixed price per check because sources and steps differ.
As of 12 November 2026, the public website marks app access as “Soon available.” Confirm availability with the Apiosk team before planning around it.
Checks running over budget? Scope them first.
If your checks cost more than expected or stop without explanation, contact the Apiosk team to discuss which sources, steps and limits your check needs.
This article was prepared with AI assistance using the linked EU legislation, the CJEU press release, the FATF Recommendations, Companies House documentation and Apiosk's public pages. It is not legal advice, and the procurement example is fictional.
Frequently asked questions
How much does a compliance data check cost?
There is no single price. Cost depends on the sources and steps a check needs. In the EU, basic company information from business registers falls under the high-value datasets rules and must be offered free of charge, while documents, extracts and commercial datasets can be priced. Ask for a quote that lists each source and the maximum cost before you approve a run.
Should every supplier get the same checks?
Not necessarily. For obliged entities, the FATF Recommendations and EU anti-money laundering rules expect measures to reflect the risks identified, so depth can differ by risk. Outside those regimes, the depth of checks is set by your own policy and contracts. Write the tiers down and have them approved, and take legal advice on your specific obligations.
What should happen when a check reaches its budget?
It should stop and say which entities, sources or steps were not completed. It should not drop a source silently and report the rest as clear. A step that was not funded produced no evidence, so the record must stay incomplete until someone approves more budget or accepts the gap.
How often should recurring compliance checks run?
There is no universal interval. Set the frequency per risk tier and per source, considering how often the source updates and how quickly a change would matter to you. Add event triggers, such as a change of bank details, rather than raising the frequency for every counterparty.
