Kensho (S&P Global) AI Vendor Risk Profile
Financial AI research and solutions arm of S&P Global. Develops NLP, speech, and extraction models fine-tuned for financial documents and indexing. Licenses Kensho LLM-ready Data and NERD for enterprise use.
Visit Kensho (S&P Global) website
Risk overview
Risk score: 29/100
Risk tier: Moderate
Safety rating: 71/100 (higher is better)
Lower risk scores indicate lower assessed risk.
Last verified: Apr 19, 2026 Aging
Risk dimensions
| Dimension | Risk score |
|---|---|
| Data Handling | 28/100 |
| IP Exposure | 34/100 |
| Jurisdiction | 13/100 |
| Security | 30/100 |
| Regulatory Compliance | 50/100 |
| Transparency | 25/100 |
| Business Stability | 37/100 |
| Dependency Chain | 29/100 |
| Agent Governance | Not assessed |
Analyst summary
Rating: Recommended
Kensho is an S&P Global-owned financial AI subsidiary (SPGI acquired it in 2018 for ~$550M). Strong enterprise compliance inherited from S&P Global (SOC 2 Type II, ISO 27001), deep financial-market data integration, and investment-grade parent stability. A safe choice for financial-services AI that requires regulatory lineage.
Bottom line: Recommended for financial-services AI workloads anchored in the S&P Global ecosystem.
Strengths
- S&P Global parent (NYSE: SPGI) provides investment-grade financial stability
- Inherited SOC 2 Type II and ISO 27001 certifications from S&P Global enterprise program
- Deep integration with S&P financial data (market data, credit ratings, indices)
- Financial-domain AI models trained on decades of proprietary financial data
Concerns
- Narrow focus on financial services; not a general-purpose AI vendor
- Limited transparency on specific Kensho-only security posture vs parent-wide posture
- HIPAA BAA not a primary offering
- Subsidiary strategic direction depends on S&P Global roadmap
Best for
- Asset managers, banks, and insurance firms needing financial-domain AI
- Workflows already anchored in S&P Global Market Intelligence or Capital IQ
- Regulated financial services wanting AI with a clear parent-company compliance lineage
Avoid if
- You need general-purpose AI (Kensho is a financial-domain specialist)
- You process healthcare or non-financial regulated data
- You require full transparency into Kensho-specific (vs SPGI-wide) compliance documentation
Citations
- Data Handling — Data Residency Options
Kensho products are delivered through S&P Global's cloud infrastructure with US and EU data processing regions.
- Data Handling — Trains On User Data
Kensho does not use customer queries or data to train its financial AI models without explicit customer consent.
- Governance — Financial Stability
S&P Global (NYSE: SPGI) is an investment-grade public company with over $13 billion in 2023 revenue, providing strong parent-company stability for Kensho.
- Governance — Strategic Investors
S&P Global acquired Kensho Technologies in April 2018 for approximately $550 million; Kensho operates as a subsidiary within S&P Global Market Intelligence.
- Jurisdiction Profiles — Incorporation Country
Kensho Technologies, LLC is a Delaware limited liability company headquartered in Cambridge, Massachusetts, operating as a wholly-owned subsidiary of S&P Global.
- Security Compliance — Iso 27001
S&P Global holds ISO/IEC 27001 certification covering the Kensho product line and financial AI services.
- Security Compliance — Soc2 Type2
S&P Global (Kensho's parent) maintains SOC 2 Type II and ISO 27001 certifications across its enterprise products.