Every connector KURAL claims to support, with the actual status of its live-mode path. We refuse to anchor evidence on regulator-critical controls (UKGC SR 3.5.x, MGA PPD, AML SR) from mock connectors — those routes return a 503 instead of writing fabricated compliance attestation to the ledger.
| Vendor | Kind | Jurisdiction relevance | Status | Notes |
|---|---|---|---|---|
| DigiCert RFC 3161 TSA | TSA | all (evidence integrity) | LIVE | Production timestamps issued on every 24h ledger checkpoint. |
| FreeTSA RFC 3161 TSA | TSA | all (evidence integrity) | LIVE | Dual-anchor with DigiCert; redundant EU-based authority. |
| Anthropic Claude (vision + extraction) | Regulator | all (reg-change extraction, cert-PDF OCR) | LIVE | Rasterized images + public regulator text only. Never PII/SAR. |
| UKGC business register | Regulator | UK | LIVE | Daily pull of the public CSV; powers /ukgc-register lookup. |
| GAMSTOP (UK national self-exclusion) Regulator-critical — mock anchoring refused | RG | UKGC (LCCP SR 3.5) | FIXTURE | Sync + recent-exclusions endpoints return deterministic fixtures; per-player live check throws pending sandbox credentials. The /gamstop routes REFUSE to anchor mock evidence against SR.3.5.x — operators see a 503, not fabricated history. |
| SoftSwiss PAM | PAM | MGA + multi-jurisdiction | FIXTURE | REST adapter coded against the published partner API. Live-validated badge pending signed partner-sandbox NDA + URL-path test against real sandbox. |
| EveryMatrix PAM | PAM | UKGC + MGA | ROADMAP | Outreach in flight; live integration unblocks at customer-broker conversation. |
| OpenBet / Playtech IMS / Kambi PAM | PAM | Tier-1 operators | ROADMAP | Partner agreements only paying customers can broker — added reactively per pilot. |
| Sumsub KYC | KYC | MGA + UKGC + DGOJ | FIXTURE | Webhook + read-only fetch coded; live-mode credentials per-operator. |
| Refinitiv World-Check One (LSEG) | Screening | all (AML CDD) | SANDBOX | HMAC-SHA256 auth implemented; per-tenant credentials. Vendor sandbox tested. Live-mode activates when operator wires REFINITIV_WC_* secrets. |
| Dow Jones Risk & Compliance | Screening | all (AML CDD) | FIXTURE | Coded; live credentials not yet onboarded with any operator. |
| ComplyAdvantage | AML | all (PEP / sanctions) | FIXTURE | Coded; live credentials not yet onboarded with any operator. |
| Featurespace ARIC | AML | Tier-1 fraud + AML | ROADMAP | Webhook-only stub on the backlog; full read-only adapter Q4 2026. |
| Microsoft Graph (M365 SharePoint + Calendar) | Docs | all (policy library) | LIVE | OAuth delegated; live-tested via founder Entra ID tenant. |
| Atlassian Jira Cloud | Ticketing | all (Tier-1 + mid-market) | LIVE | OAuth 2.0; live-tested. Findings auto-route into operator's Jira project. PII filter applied server-side. |
| NCA SAR Online (UK) | Regulator | UKGC (POCA s.330) | FIXTURE | XML drafts to NCA SAR Online v2 schema + four-eyes-approve flow. Submit is manual upload-and-paste-ack; partner-portal NDA pending. |
| goAML (FIAU Malta + multi-jurisdiction) | Regulator | MGA + EU AML | ROADMAP | On the strategic roadmap — pluggable jurisdiction-XML registry (Q3 2026). |
| Spelpaus (Sweden) Regulator-critical — mock anchoring refused | RG | SE-SPI | ROADMAP | National self-exclusion register — added when first SE-licensed operator onboards. |
| Cruks (Netherlands) Regulator-critical — mock anchoring refused | RG | NL-KSA | ROADMAP | National self-exclusion register. |
| ROFUS (Denmark) / RUA (Italy) / LUGAS (Germany) Regulator-critical — mock anchoring refused | RG | DK / IT / DE | ROADMAP | National self-exclusion registers per jurisdiction. |
Generated 21/07/2026, 23:20:27 UTC · live platform posture →