About
Who we are, and why PureTrace exists
Owned by Decima Technologies Limited and delivered in partnership with 10th Bridge Consulting.
The methodology came first and the software second. The people behind PureTrace
The people
Who we are
PureTrace is built by risk and compliance professionals who have spent their careers inside heavily regulated businesses, from running the process to answering for it in front of a board. Between us we have held executive and board positions (chief executive, chief operating officer and chief risk officer among them), and we have been accountable for this work rather than advising on it from outside. We have chased the indicator returns, rebuilt the committee pack the weekend before the meeting and, across the table, taken the challenge when the group number did not stand up. We also know which of those things are merely irritating and which are dangerous.
So the workflow follows the way a risk function operates: the register is laid out as a risk professional would lay it out, the approval chain has the steps a committee cycle has and the audit trail records the line of defence, because segregation-of-duties evidence turns on it.
The reason
Why it exists
Risk functions are usually offered two kinds of tool. The first is a spreadsheet register. It is cheap and familiar, and it proves nothing, because it cannot say who changed a score, when or what the previous version was. The committee pack shows it: under a spreadsheet it is rebuilt by hand every quarter, and nobody can say afterwards which version of which number went into it. The second is an enterprise platform, built around somebody else's model, which often takes a change programme to implement before it holds a single risk.
PureTrace is a complete governance core, set up on your own structure, that keeps the evidence an enterprise platform would.
The background
Where the depth came from
The deepest domain work behind PureTrace is in United Kingdom financial services, one of the most heavily evidenced regulatory environments there is. Building to that standard produced segregation of duties enforced in the software, a permanent record behind every change and reporting that traces back to source.
PureTrace is tied to no industry or jurisdiction. You set the risk categories, the causes and consequences, the appetite wording and the impact dimensions you score on.
Commitments
How we work
- Email from the platform is transactional only (invitations, security notifications and workflow reminders). There is no path for anything else.
- This website is a plain page. It sets no cookies and runs no analytics.
- Your data is used to run your platform and for nothing else. It never trains anything.
- Every risk judgement in the platform is made by a written rule that you control, and never by a model.
- Environments are built from a written definition, so they can be rebuilt identically and nothing depends on somebody remembering a step.
- Every change is tested automatically against a real database before it lands, so the protections we describe have been checked.
- We answer technical and assurance questions directly, in writing, from the people who built it.
Working together
Working with us
The consultancy comes with the platform. We help you shape the register, agree the indicator set and its thresholds and bring your records across, so the platform holds your own framework.
If PureTrace does not fit your framework, we will say so in the first conversation.