About
About PureTrace
PureTrace is built and operated by Tenth Bridge Consulting Limited, a United Kingdom governance, risk and compliance consultancy trading as 10th Bridge.
We are the practice and the product. The methodology came first and the software second.
Why it exists
Risk functions are offered two shapes of tool. A spreadsheet register is cheap, familiar and proves nothing: it will not tell you who changed a score, when or what the previous version said. An enterprise platform arrives shaped to somebody else's model and consumes a change programme before it holds a single risk.
PureTrace is a third shape. A complete governance core that stands up on your own structure, with the evidence architecture of something far heavier.
Built by people who have had to answer for it
PureTrace is built by risk and compliance professionals who have spent their careers inside heavily regulated businesses. Between us we have held executive and board positions, including chief executive, chief operating officer and chief risk officer. We have been accountable for this work rather than advising on it from outside.
We have chased the indicator returns. We have rebuilt the committee pack the weekend before the meeting. We have also sat on the other side of the table, taking the challenge when the group number did not stand up.
So the workflow matches how a risk function operates rather than how a database prefers to store it. The register is structured the way a risk professional structures one. The approval chain has the steps a real committee cycle has. The audit trail records the line of defence, because that is what segregation-of-duties evidence turns on.
How it is built
Judge a supplier on the working rather than on a logo wall.
- Environments are built from a written definition, not assembled by hand, so they are reproducible and nothing depends on somebody remembering a step.
- Every change is tested automatically before it lands, including against a real database rather than a stand-in for one.
- Your data is held to meet your obligations, in line with the regulation that applies to you. For United Kingdom clients that is Amazon Web Services' London region.
- We will show our working. Technical documentation goes to prospective clients on request.
Where the depth came from
The deepest domain work behind PureTrace is in United Kingdom financial services, one of the most heavily evidenced regulatory environments there is. Building to that bar produced a platform any board, auditor or assurance team recognises: segregation of duties enforced rather than asserted, a permanent record behind every change and reporting that traces back to source.
You set the risk categories, the causes and consequences, the appetite wording and the impact dimensions you score on. The discipline travels.
How we work
- Email from the platform is transactional only: invitations, security notifications and workflow reminders. There is no path in the system for anything else.
- This website is a plain page. It sets no cookies and runs no analytics.
- Your data is used to run your platform and for nothing else. It never trains anything.
- Every risk judgement in the platform is made by a written rule you control, not by a model.
- We answer technical and assurance questions directly, in writing, from the people who built it.
Working with us
The consultancy comes alongside the platform. We help you shape the register, agree the indicator set and the thresholds behind it, then bring your existing records across.
Migration is controlled, not a data entry marathon: structured templates, an offline pre-flight over your own workbooks, a dry run that writes nothing, then the committed load. Every imported change lands its audit row as if a person had typed it.
If PureTrace does not fit your framework, we will say so in the first conversation rather than the third.