Investment services
Incident reporting & compliance platform
A risk-incident platform for an international investment services company: structured intake, role-based workflows, master data management and regulator-ready Excel reporting, operated as 70+ cooperating services and jobs.
The challenge
Operational risk incidents were captured in ad-hoc spreadsheets and mail threads. The company needed structured intake with strict permission boundaries (including confidential incidents), lifecycle workflows, and compliance reports whose format is dictated by group and regulator templates - plus ongoing evolution as requirements change every quarter.
What we did
We built and still operate a platform of more than seventy cooperating .NET services, background jobs and web applications, orchestrated with Hangfire and backed by SQL Server.
A master data subsystem keeps organizational units, roles and reporting lines synchronized from authoritative sources, driving both permissions and report aggregation.
Excel compliance reports are generated from templates the risk team maintains themselves, so a changed regulator format doesn't require a release.
The outcome
- Single auditable pipeline from incident intake to regulator-ready reports
- Confidential incidents isolated by fine-grained, centrally synchronized permissions
- Quarterly regulatory changes absorbed by configuration, not redevelopment
- Platform in continuous production use and active development for years