Financial services
Built for regulated finance.
Insurers, lenders, brokers, wealth firms and fintechs with 50 to 250 people and a small IT team. You need the same evidence and controls as a bank, without a bank's budget.
What usually brings financial services teams to us
- A VMware or data centre renewal. The bill is coming, and moving to AWS needs a plan your board and risk team will accept. AWS migration funding can cover part of the cost.
- AI that has to survive a review. Credit, claims or onboarding automation that needs logging, human review and a clear account of how decisions are made.
- Regulator and auditor questions. For APRA-regulated entities, CPS 234 for information security and CPS 230 for operational risk and material service providers. For everyone, ASIC expectations and the Privacy Act.
- An AWS bill that keeps growing. Spend that nobody owns, and a CFO asking why.
Privacy Act: automated decisions from 10 December 2026
If a computer program makes or substantially helps make a decision that significantly affects someone, such as approving credit or assessing a claim, your privacy policy will need to say so. Our AI Production Readiness Review finds where that happens and makes it reviewable. This is not legal advice.
"They were upfront about what they didn't yet know, and their work formed the foundation of the business case for our leadership team."
Solutions that fit
Common questions
Do you only work with APRA-regulated entities?
No. Many of the teams we work with are brokers, lenders, wealth and advice firms or fintechs that answer to ASIC or hold an AFSL or credit licence rather than being APRA-regulated. We frame the work for the rules that apply to you.
Can you help us show CPS 234 or CPS 230 compliance for our AWS environment?
We map your AWS controls to the requirements, close the gaps, and produce evidence your risk and audit teams can review. We are not a law firm or an auditor, so sign-off stays with your compliance function and auditors.
What does the Privacy Act change in December 2026 mean for us?
From 10 December 2026, if you use computer programs to make or substantially help make decisions that significantly affect individuals, your privacy policy has to say so. Credit, claims and onboarding decisions are typical examples. We help you find where that happens in your systems and make it reviewable. This is not legal advice.
We are an NZ fintech. Is that a fit?
Yes. We work across Australia and New Zealand, and the NZ Privacy Act 2020 and RBNZ expectations sit alongside the Australian rules in how we frame the work.
Find out in 30 minutes whether we can help, and how.
Bring the problem, and we’ll tell you what we’d do first.