Top-down risk intelligence for the regulated enterprise

A defensible top-down view of the risks your firm actually faces —
for your board, every quarter.

Pilot-ready for JFSC-regulated firms. Methodology built and evidenced.

Your board, your CRO and your risk owners all need the same thing: one defensible record of every material risk — inherent, residual, target — with appetite, controls, KRIs and scenarios on one canvas. Your spreadsheets don't produce it. Your GRC tool buries it under 40 fields per row. RiskAlign™ is the oversight layer that does — built on a five-band 5×5 methodology, sitting above your operating systems and alongside RegAlign at the control.

Built by a serving Tier-1 Jersey Head of Compliance5×5 methodology, frozen and versionedMethodology versioned per assessment

Demo = the running system, seeded with a realistic firm. Pilot = your own tenant, your own taxonomy, six-month commitment.

Built for firms supervised by the J·F·S·C under the Codes of Practice and the AML / CFT / CPF Handbook — trust company, fund services, investment, money services and banking businesses.

Three things you walk away with
Appetite vs reality, live

Board-set limits per category, live tracking against actual exposure, and clear visual breach signals before they reach board day.

One canvas, every link

Risk ↔ control ↔ KRI ↔ incident ↔ obligation. Update once, flow everywhere. No more reconciling four spreadsheets the night before the board pack.

A board pack that prints itself

One-click A4 export. Heatmap, top movers, breaches, KRI trend, scenario results — with the audit trail behind every number.

What's in the pilot, by name
Daily operating surface
On the record

Top-down risk intelligence for the regulated enterprise. Pilot-ready for Jersey trust company businesses; Crown Dependencies and UK on the roadmap. Risks, appetite, KRIs and controls on one canvas. Above core business systems, alongside RegAlign.

RegAlign® + RiskAlign™
Two systems. One spine.

RegAlign works obligations-up: regulatory change → obligations → controls → evidence. RiskAlign works risks-down: enterprise risks → appetite → controls → KRIs. The two meet at the control. Run RiskAlign standalone, or pair it with RegAlign for the only GRC stack where the obligation evidence and the risk picture share one source of truth.

See how they fit together
"It's a single founder — what happens if you get hit by a bus?"

Fair question, asked first by every board. Named successor on the role spec, source-code escrow with defined release triggers, BCP outline published, six-month notice and 90-day exit assistance in every contract. Read the founder note →