The cost of a compliance team: salaries, tools and the build vs buy maths

Compliance cost is what a regulated firm spends to meet its obligations: the people, the tools and data, the audits and the hiring. A first compliance team at a UK fintech (an MLRO and two KYC analysts) costs about £220,000 a year in salary and employer costs alone, using 2026 London market rates and current UK employer contributions. People are the largest line: employment and training made up 57.2% of UK financial crime compliance spend in 2023, external technology 31.9%, according to a LexisNexis Risk Solutions study run by Oxford Economics (True Cost of Financial Crime Compliance, 2024).

So the build vs buy question is rarely software against software. It is software against analyst hours, and the maths is simple once you price an hour.

What does a compliance team cost?

The cost of a compliance team is the largest part of it: its loaded salaries (base pay plus employer taxes and pension), plus hiring, tools, data, training and independent audit. Every figure below is a public source with its year. Salary guides publish base pay, before bonus.

Compliance salaries in London (2026)

Compliance salaries in France and Germany

Two cautions. Outside Paris, Michael Page takes 5% to 20% off these grids, depending on the region. And the spread for an MLRO is wide because the market prices experience with a supervisor, not the title.

How do you turn a salary into a loaded cost?

Add what the employer pays on top of base salary.

• UK: employer National Insurance at 15% on earnings above £5,000 a year from April 2025 (GOV.UK, rates and thresholds 2026 to 2027), plus at least 3% pension on qualifying earnings between £6,240 and £50,270 (GOV.UK, workplace pensions). Eligible employers may offset up to £10,500 through the Employment Allowance; the model below leaves it out.
• France: employer contributions run between 25% and 42% of gross salary depending on pay level (L-Expert-Comptable.com, 2026). The OECD puts French employer social security contributions at 26.7% of total labour cost for an average worker in 2024, the highest in the OECD (Taxing Wages 2025, Table 1.2).

Worked example: a UK EMI's compliance team at two stages

Average London base salaries from Robert Walters 2026, loaded with UK employer National Insurance and minimum pension. The org chart behind each stage is in how to build a compliance department.

• First customers: MLRO and two analysts. £219,597 a year.
• Scale: MLRO, a deputy at AVP level and four analysts. £384,569 a year.

Then add what this table does not hold: recruitment (the CIPD puts the median cost per hire at £2,000 for senior managers and £1,500 for other staff in 2024, Resourcing and talent planning report), the independent audit the law requires, training and the tools and data every analyst works in.

Interim cover is where the maths turns. A permanent fintech MLRO costs about £548 per working day loaded (£127,071 over 232 days). A contract fintech MLRO bills £450 to £650 a day on PAYE (Robert Walters 2026): parity, before agency fees. A senior interim MLRO or project lead runs at £1,000 to £1,600 a day across sectors (Barclay Simpson 2026), up to three times the seat it covers.

What does an hour of review cost?

A full-time analyst on a 37.5-hour week, minus the statutory 5.6 weeks of leave (GOV.UK, holiday entitlement), has 1,740 working hours a year at most. At £46,263 loaded, that is £26.59 per hour before management, office or tools. An MLRO hour costs £73.03.

That number is the denominator of every build vs buy decision. Every 10 minutes a tool takes off a file is worth £4.43 of analyst time; every 10 minutes it takes off an MLRO escalation is worth £12.17.

Where does a compliance team's time actually go?

On Dotfile, 29.5% of manual check decisions on rated files went to files currently rated low risk, and 71.7% to files rated low or medium. Less than a third went to the high, critical and prohibited files that justify a specialist's time.

That is the build vs buy lever. You do not save money by paying analysts less; you save it by not spending an analyst hour on a file your own risk policy already calls low risk. Automate clear low-risk outcomes and keep human review for the rest: the same team covers more customers before the next hire.

Method: Dotfile analysis, October 2026. Manual check approvals and rejections in customer workspaces on Dotfile over the past year, by the current risk level of the case; files without a risk level excluded; aggregates only.

Should you build or buy compliance tools?

Building means registry connectors per country (the KYB process touches one per jurisdiction, more for ownership structures that cross borders), sanctions and PEP data, screening and matching, case management, an audit trail and ongoing maintenance as registries and lists change. In the same LexisNexis study, technology roles alone made up 30% of UK financial crime compliance spend in 2023, more than half of all people costs. Building is hiring engineers into your compliance budget, permanently.

Buying is a licence plus usage. The test is one line:

Buy when (minutes saved per file × files per year × loaded cost per minute) is greater than the tool's annual cost, after counting the hires you no longer make.

Run it with your own volumes. With the UK figures above, a tool that takes 10 minutes off 20,000 files a year frees 3,333 hours, nearly two analysts, worth £88,600 at £26.59 an hour.

What you cannot buy is the accountability. In the UK, MLR 2017 regulation 21 requires an officer from the board or senior management responsible for compliance, where the size and nature of the business warrant it, and a nominated officer in every case; at FSMA-authorised firms under the Senior Managers and Certification Regime the MLRO is SMF17. In the EU, the AMLR makes a compliance manager and a compliance officer mandatory from 10 July 2027 (Article 11, Regulation (EU) 2024/1624) and keeps the customer decision and suspicious activity reporting with you (Article 18(3)). See compliance outsourcing.

How Dotfile changes the maths

Dotfile runs the checks and applies the rules you configure. AI agents can clear the obvious screening false positives with a written reason, under rules your team sets (see Autonomy), and the rest goes to the right analyst through assignment rules. Periodic reviews follow your risk levels. The decisions the law keeps with you stay with your team.

FAQ

How much does an MLRO cost in the UK?

£90,000 to £130,000 base at a fintech or payments firm in London (Robert Walters 2026), about £127,000 loaded at the £110,000 average. Interim MLROs bill £450 to £650 a day at fintechs (Robert Walters 2026) and £1,000 to £1,600 for senior cross-sector roles (Barclay Simpson 2026).

How much does a KYC analyst cost?

£35,000 to £45,000 in London (Robert Walters 2026), €37,000 to €45,000 at entry level in French banking (Michael Page 2026) and €50,000 to €65,000 in Germany (Michael Page 2025/2026).

What share of compliance cost is people?

57.2% in the UK in 2023, against 31.9% for external technology (LexisNexis Risk Solutions study by Oxford Economics, 2024).

How big should my compliance team be?

No regulation sets a headcount: from July 2027 the AMLR asks for resources "in proportion to the size, nature and risks" of the business (Article 11(3)). See how to build a compliance department for the org chart at each stage.