Compliance Cost as a Share of Revenue: The Mid-Market Gap

This is the economics of a fixed cost meeting a variable revenue line. Most of what compliance requires, a capture and retention system, written supervisory procedures, someone accountable, the ability to produce records on demand, is close to fixed. A firm one-hundredth the size of a bank does not get to build one-hundredth of an archive; it needs a working archive. So the same absolute cost lands on a much smaller revenue base, and the share of revenue consumed by compliance rises sharply as firms get smaller.

Two things are well documented. First, sector-wide compliance cost is significant and rising: industry surveys such as Thomson Reuters Regulatory Intelligence’s annual Cost of Compliance report have tracked, year after year, compliance teams expecting workloads and budgets to grow. Financial-crime compliance cost specifically has been quantified in LexisNexis Risk Solutions’ True Cost of Financial Crime Compliance studies. I will not put a single headline percentage on the mid-market’s cost-to-revenue ratio, because I have not found a source that measures it cleanly for firms this size, and an invented figure would be worse than none.

Second, the downside is not scaled to firm size either. The penalty for an incomplete archive is set by the failure, not the revenue. The off-channel actions produced flat, large numbers, eight firms paid $125 million each in the 2022 round alone (SEC Release 2022-174), and the 2024 round reached smaller registrants (Release 2024-144). A mid-market firm cannot assume a proportionate penalty.

The gap is not at the bottom or the top; it is in the middle. The smallest firms sometimes fall under lighter regimes. The largest amortise a compliance department across enormous revenue. The mid-market firm is caught between: large enough that the full obligation applies and a manual approach no longer fits, but not large enough to justify a standing compliance function with its own tooling budget. It is the same population we model in our UK brokerage scenario and describe in our design-partner account.

Measure your own ratio before benchmarking it. Calculate your fully loaded compliance cost, people, tools, and the hours other staff spend on it, as a share of revenue. You cannot manage the number you have never named.

Attack the fixed cost, not the variable one. Reducing per-review labour does more for a small firm’s ratio than trimming any single line item.

Price the tail risk into the budget. A non-proportionate penalty is a real, if infrequent, cost. Under-investing in capture to save on the fixed cost trades a known small number for an unknown large one.

Prefer tools that remove hours over tools that add features. The only compliance spend that improves the ratio is spend that reduces total human time on the task.