Coris: AI Merchant Risk Intelligence for Payment Processors | Review

Coris is a full-stack AI-powered risk platform that automates merchant onboarding, underwriting, monitoring, and fraud detection for payment processors and payment facilitators. Founded in 2022 by former PayPal, eBay, and Google risk leaders, Coris centralizes merchant lifecycle management in a single operating system, reducing false positives by up to eighty percent and delivering five times return on investment within the first year.

Founded 2022 | HQ: San Francisco | Funding: $9.5 million

MM Verified

Overview

Coris addresses a critical challenge in payments infrastructure: merchant risk assessment at scale. As payment processors and software platforms onboard hundreds of thousands of merchants globally, traditional manual underwriting becomes untenable. Coris's platform unifies merchant profiling, risk decisioning, and transaction monitoring into one operating system (Fuzio), enabling teams to auto-approve low-risk merchants while routing edge cases to analysts.

The platform operates across three core functions. MerchantProfiler consolidates real-time merchant intelligence across 330 million merchants in fifty-plus countries. CorShield detects merchant fraud, including business impersonation and third-party abuse. The Risk Platform provides a unified rule engine, alert routing, and case management with native integrations to Stripe, Adyen, Snowflake, and major processor rails.

Co-founders Vinodh Poyyapakkam and Shyam Maddali spent over two decades managing small business risk at PayPal, eBay, WePay, and Google before launching Coris. The team's deep fintech pedigree is evident in the platform's architecture, designed specifically for the compliance and operational constraints of payment infrastructure companies.

What We Like

Merchant Fraud Detection at Signup

Coris's CorShield model tackles a blind spot in most fraud platforms: merchant-level fraud during onboarding. Most solutions focus on transaction or account fraud, leaving platforms vulnerable to business impersonation and third-party fraud schemes. CorShield's merchant fraud model catches these attacks at signup, preventing compromised merchants from accessing processing capabilities. This upstream approach reduces downstream fraud and chargeback exposure.

AI Agents Reducing Manual Review Workload

Risk AI, Coris's Slack-based conversational agent, automates decisioning for ninety-five percent of false positive cases. Rather than requiring analysts to manually review routine alerts, Risk AI learns each customer's risk playbooks and operates autonomously with full audit trails. This reduces operational overhead while preserving control: analysts focus on high-risk cases that actually need human judgment. The platform has demonstrated up to eighty percent reductions in manual review volume.

Native Integrations with Major Processors

Coris has built integrations with Stripe, Adyen, Fiserv, and TSYS, allowing risk teams to modernize underwriting without ripping and replacing existing payment processor infrastructure. For payment facilitators and ISOs, this means onboarding Coris without forcing migration projects. Integration depth matters in payments infrastructure, and Coris has invested in the right connections.

Merchant Intelligence Scale

Unifying intelligence on 330 million merchants across fifty-plus countries gives Coris's risk models substantial training data. Network effects are real in merchant risk: the more merchants profiled, the better the models become at detecting anomalies. This creates a moat that competitors with smaller networks struggle to match.

Governance and Compliance by Default

Coris holds SOC 2 Type II certification, demonstrating sustained effectiveness of security controls over time. The platform's rule-driven architecture maintains full audit trails for every underwriting and monitoring decision, a critical requirement for regulatory oversight and fair lending compliance.

What to Watch

Pricing Opacity Creates Friction

Coris does not publish pricing, forcing potential customers into sales conversations before understanding cost. For payment processors evaluating multiple vendors, this opacity slows vendor selection cycles. Competitors like Sift and Kount publish pricing bands, allowing initial cost-benefit analysis before engagement. In an increasingly transparent SaaS market, hidden pricing signals either complexity or aggressive pricing strategies.

Limited Public Customer Roster

While Coris counts GoFundMe, Kajabi, Clio, and Cherry among customers, the company has not disclosed customer count or market penetration metrics. For a platform targeting payment processors and ISOs, transparency on which Tier 1 or Tier 2 processors use Coris would strengthen confidence in production readiness. The startup status (founded 2022 with 9.5 million dollars in funding) means Coris lacks the customer depth of established platforms that manage hundreds of billions in transaction volume.

Merchant Profiling Data Sources Unclear

Coris consolidates merchant intelligence "across 330 million merchants," but the public documentation does not clearly explain data sourcing. Are these merchants from internal customer datasets, third-party data vendors, or both? How frequently is profiling data refreshed? For risk models, transparency on data provenance and freshness matters. This ambiguity raises questions about coverage and accuracy in edge markets or regions with sparse merchant data.

Pricing and Deployment

Coris employs a custom pricing model tied to transaction volume, merchant count, and feature set. The company does not publish pricing online; interested customers must request a demo and negotiate terms with the sales team. Deployment follows a SaaS model with REST APIs and Slack integration for Risk AI. Implementation typically takes one to three months depending on existing infrastructure and integration scope.

Compliance and Security

Coris holds SOC 2 Type II certification, verified by Advantage Partners, demonstrating sustained effectiveness of security controls. The platform maintains full audit trails for all underwriting decisions, supporting fair lending compliance and regulatory review. API traffic operates over TLS encryption. The platform supports webhooks and event-driven architecture for real-time risk event propagation. For GDPR compliance, Coris processes data under data processing agreements, though explicit GDPR certification is not publicly stated.

Verdict

Coris solves a real problem: merchant underwriting at scale without drowning in false positives. The combination of AI-driven decisioning, merchant fraud detection, and Risk AI automation delivers measurable operational value, particularly for payment facilitators and growing SaaS platforms building embedded payments. The team's fintech background and emphasis on compliance reduce deployment risk.

However, startup maturity limits the platform's appeal for Tier 1 payment processors with existing enterprise risk stacks. Pricing opacity and lack of public customer transparency require due diligence before commitment. The merchant profiling data sourcing needs clarity.

For payment facilitators, SaaS platforms, and growing fintechs outgrowing manual risk workflows, Coris is worth a serious evaluation. Expect to negotiate pricing and push on data governance during sales conversations.

Try Coris: coris.ai

Editorial disclaimer: Reviews reflect the independent editorial assessment of Major Matters and are not sponsored or endorsed by the companies reviewed. We recommend conducting your own evaluation to determine whether any product is the right fit for your specific requirements.

Charlie Major is a Product Development Manager at Mastercard. The views and opinions expressed in Major Matters are his own and do not represent those of Mastercard.