Where is the evidence?
Show the risks, the actions and the owners
We turn "where is the evidence?" from weeks of work into a click. Below are three questions that come up in most reviews. Pick one and the platform's answer is shown.
The risks, with the reasoning
Each risk has a score (worked out by the platform from likelihood and impact), an appetite with the reasoning written next to it and a named owner. The register shows which risks are outside appetite at any given time, so there is nothing to assemble before a meeting.
The actions, each with an owner
Values to submit, breaches waiting for a response and actions to close are all held against a named person and a date. Signing in shows what is due, and every item has somebody responsible for it.
Every change is an entry
Open the risk and the history of its score is there: who changed it, in what role, from what to what, when and the reason they gave. Entries cannot be edited or deleted, so the answer you give a regulator later is the same record that was written at the time.
Does it fit
Built for firms like yours
PureTrace was built inside FCA-regulated financial services and is designed for any industry and jurisdiction. Most of the firms we work with have more than one entity and already run part of their framework in other tools, and the platform is built with that in mind.
Answers kept on the record
Questions come from the regulator, the board and clients' assurance teams, and each answer needs to be on the record, which is where the platform keeps it, rather than in somebody's memory.
One record for the whole group
A risk is written once at group level. Each entity then holds its own position and owner where these differ, anything not set locally inherits the group view and the centre sees one consolidated picture.
The whole system, or one part of it
The governance core is complete on its own and each module works either alone or alongside it, so it is possible to take a single module and run it beside a vendor you already have.
Five modules, each licensed on its own or with the core
The bar is the core, one record in eight linked parts, and the pills are the five modules. The core, part by part The modules
Refusals
Some things the platform will not let you do
Most systems record who did what and leave the control itself to a written policy. PureTrace refuses the action in the software itself.
- The person who submitted a breaching value cannot write the response to it, and neither can the author of the original submission.
- The person who compiled a committee pack cannot approve any step of it, and no one person can clear two steps of the same pack.
- The person who asks to close a remediation action cannot approve that closure, so closing one takes two people.
Nobody grants themselves a role, deactivates their own account or resets their own second factor. Nobody, at any level, edits or deletes an audit entry. There is no administrator override, because no code path performs one.
Who we are
Who is behind it
PureTrace is owned by Decima Technologies Limited and delivered in partnership with 10th Bridge Consulting.
We have been accountable for this work rather than advising on it
PureTrace is built by risk and compliance professionals who have spent their careers inside heavily regulated businesses, from running the process to answering for it in front of a board. Between us we have held executive and board positions (chief executive, chief operating officer and chief risk officer among them). We have chased the indicator returns, rebuilt the committee pack the weekend before the meeting and, across the table, taken the challenge when the group number did not stand up.
Where the depth came from
The deepest domain work behind PureTrace is in United Kingdom financial services, one of the most heavily evidenced regulatory environments there is. The platform itself is tied to no industry or jurisdiction: you set the risk categories, the causes and consequences, the appetite wording and the impact dimensions you score on.
The consultancy comes with the platform
We help you shape the register, agree the indicator set and its thresholds and bring your records across, so the platform holds your framework rather than a generic one. If PureTrace does not fit your framework, we will say so in the first conversation.
Matt Price, chief executive · Nick Broker, commercial director · Graeme Chalmers-Allan, head of product · Christian Dougal, managing director