How this started
Poland, a shared desk, and an argument that never really ended.
MetTwo Portuguese on the same large operation in Poland, a long way from home.
ApartOne went down into the machinery. One went out into the market.
AgainWorking the same problem inside a global bank’s risk governance function.
NowThe same firm, built around the gap they had each been falling into for years.
We met in Poland — two Portuguese a long way from home, on the same operation, neither of us yet doing the job we would end up doing.
What we had in common was a habit of arguing. About the work, about how it ought to be done, about why the process everyone had quietly agreed to tolerate was obviously broken. We were young enough to think that was a personality trait rather than a career.
Then we went in opposite directions.
João went down. Into the machinery. Control testing, control environments, cybersecurity, ICT and third-party risk — the unglamorous discipline of proving that a control actually operated on the date it claimed to. He spent years in the part of this profession where you cannot bluff, because the evidence either exists or it does not.
António went out. Into operations at scale — thirty, forty people running AML and KYC — and then into the commercial side of the work, where you have to convince a board, price the programme and own the number.
Then we ended up on the same problem again.
Inside the risk governance function of a global bank, working the same control estate from our two different halves. It is where this stopped being an observation between friends and became the argument for a company.
Because we could finally see the whole failure at once. João would find a control framework that was technically correct and commercially orphaned — designed properly, then quietly abandoned because nobody senior enough ever sponsored it. António would find a programme that had been sold, approved and budgeted, and was sitting on a shelf because nobody in the building could actually implement it.
Same failure. Opposite ends of it.
That gap — between the advice and the execution — is where most regulatory findings are born, where most compliance budgets die, and where we spent years watching good work go to waste from either side of a wall.
We started this firm to close it. One of us knows what it costs to build a control that survives testing. The other knows what it costs to get that work funded, staffed and finished. We are not guessing that the pair works — we ran it inside a global bank before we ran it as a company.
That is the whole company. Everything else is method.
