Rules that protect the business, and that people actually follow.

Compliance simply means having clear rules and controls for your biggest risks, and being able to show they work. We help you build that, sized to your company.

Best for:

Companies building their first program
Clients or contracts asking for proof
Policies that exist only on paper

Sound familiar?

Signs you need this

A major client sent us a compliance questionnaire.

We wrote our policies after a problem, not before.

We have policies, but no idea if anyone follows them.

We don't know which risks matter most.

Our documents contradict each other.

Our whistleblowing line never rings, and that worries us.

The payoff

What you get

Know your top risks

Focus time and money where it actually matters.

Clear ownership

Everyone knows who decides, who checks and who escalates.

Proof when asked

Answer client questionnaires, audits and buyers with confidence.

Sized for you

No corporate bloat: a program that fits your size and operations.

How a program project runs

Three steps

Assess
We learn your business, review what you already have and spot the gaps.
Design
We build or fix the code of conduct, policies, controls and reporting procedures your risks call for.
Implement
A prioritized plan with owners, documentation, training and metrics to track progress.

How we can help

Services

Program design & review

Starting from zero, or not sure what you have still fits? We build it or fix it.

You get: a gap assessment, risk map, policies and a prioritized improvement plan.

What's included

Understand your business, structure and key relationships
Review existing documentation and identify gaps
Define program components within the agreed scope
Responsibilities and escalation paths
Incident reporting and handling procedures
Training and communication
Recommended controls and monitoring
Implementation plan with owners and metrics

Code of conduct & policies

Documents written for your company that tell employees exactly what to do when things get tricky.

You get: a code of conduct and the specific policies your risks require, without contradictions.

Typical documents

Code of conduct
Conflicts of interest
Gifts, hospitality and business courtesies
Anti-corruption, where relevant
Whistleblowing and escalation
Record retention
Third-party review procedures
Confidentiality and information handling

Risk assessment & control matrix

A one-page view of your biggest risks: what already protects you, who's responsible and what's missing.

You get: a prioritized view of your risks and a clear list of fixes with owners.

What's included

Identify relevant processes
Describe risk scenarios, causes and consequences
Examine existing controls
Identify gaps and weaknesses
Documented rating criteria
Mitigation measures, owners and priorities

Procedures & training

Turn policies into everyday steps: who does what, when, and how it gets recorded.

You get: workflows, checklists, forms and training your team can realistically follow.

Can include

Operating procedures and workflows
Responsibility matrices
Checklists, forms and records
Training materials
Guides for supervisors and process owners
Exception escalation
Metrics to check procedures are applied

Ethical culture check

Good policies fail when targets push people the other way, or nobody trusts the reporting line.

You get: recommendations to improve communication, training, reporting and consistency.

What we examine

How ethical expectations are communicated
Whether policies make sense to the people applying them
Whether owners know their obligations
How exceptions are handled
Barriers to reporting problems
Whether training fits real situations

Every program is tailored to your company and the legal requirements that apply to it. We don't sell one-size-fits-all templates, and no policy can guarantee compliance on its own.

Starting from scratch, or fixing what you have?

Either way, one short call is enough to know where to begin.

Book a call