Compliance risk analysis · tailored to your company

Know your integrity exposure before regulators, partners or competitors do.

We analyse bribery, money-laundering, antitrust, fraud, data-privacy, export-control and human-rights risk for the exact countries and sectors you operate in — from public enforcement data and, on request, from your own records under NDA.

Request your scope Book a free info session (30 min)

Coverage7 focus areas
Geometryany country × sector combination
OutputPDF report + XLSX evidence annex
Pricingpricing on request

Scope builderExample scope

You define the scope. We map the exposure.

Combine one sector with five countries, one country across all sectors, or several sectors in several markets. Add the internal module when you want the picture to include your own data.

Countries5 selected

Sectors1 selected

Modules2 selected

Focus areas7 selected

Sector lens: Oil & Gas · View: External × Internal (combined)Illustrative example – not an assessment

Illustrative example heat matrix: countries by focus area, scores from 1 (low) to 5 (severe). Not an assessment.
Country · ref	Anti-bribery & corruption	Anti-money laundering	Antitrust & competition	Fraud	Data privacy	Export control & sanctions	Human rights
USUnited States38.90N 077.04W	4 High	3 Elevated	4 High	3 Elevated	2 Moderate	5 Severe	3 Elevated
BRBrazil15.79S 047.88W	5 Severe	3 Elevated	3 Elevated	4 High	2 Moderate	3 Elevated	4 High
NGNigeria09.08N 007.40E	5 Severe	4 High	2 Moderate	4 High	1 Low	4 High	5 Severe
KZKazakhstan51.17N 071.43E	5 Severe	4 High	2 Moderate	3 Elevated	1 Low	5 Severe	4 High
INIndia28.61N 077.21E	5 Severe	3 Elevated	3 Elevated	4 High	2 Moderate	3 Elevated	4 High

Legend1 Low → 5 Severe · likelihood × impactInternal layer · your data under NDA

5 countries×1 sector×2 modules×7 focus areas→pricing on request

Request this scopeScope and price grow with the combination. Pricing on request.

Services2 modules · combinable

Two modules. The outside view and, if you want it, the inside view.

Module 1 · EXT

External analysis

Your exposure as the outside world sees it.

Public sources

Legal and regulatory environment per country (statutes, thresholds, extraterritorial reach)
Enforcement record of the relevant authorities (e.g. DOJ, SEC, SFO, PNF, Bundeskartellamt, EU Commission, data-protection authorities)
Cases and fines in your sector, drawn from press releases, court records and authority publications
Compliance cases at your direct competitors
Indicators and statistics put in context (e.g. CPI, Basel AML Index, FATF status), with their limits stated

DeliverableRisk scores per focus area × country × sector, case register, source list.

Internal analysis

Your exposure as your own data shows it.

Optional · under NDA

Internal cases and investigations
Business-partner exposure (agents, distributors, JV partners, suppliers) by country and sector
Sponsorships, donations and memberships
Gifts, hospitality and meals

Confidentiality

NDA before any data transfer
Data minimisation
Your data is used for your analysis only and deleted after delivery on request

DeliverableCombined risk view (external × internal), prioritised red flags, recommendations.

Seven focus areas, mapped against every source we read.

Indicative coverage matrix: seven focus areas against external and internal source types.
Focus area	Law & regulation	Enforcement record	Sector cases	Competitor cases	Indicators	Internal cases	Business partners	Sponsoring, donations, memberships	Gifts & hospitality
	Module 1 · External analysis					Module 2 · Internal analysis (NDA)
ABCAnti-bribery & corruption	Core source	Core source	Core source	Core source	Core source	Core source	Core source	Core source	Core source
AMLAnti-money laundering	Core source	Core source	Core source	Core source	Core source	Core source	Core source	Where relevant	Not used
ATRAntitrust & competition	Core source	Core source	Core source	Core source	Where relevant	Core source	Where relevant	Core source	Where relevant
FRDFraud	Core source	Core source	Core source	Core source	Where relevant	Core source	Core source	Where relevant	Where relevant
PRVData privacy	Core source	Core source	Core source	Core source	Where relevant	Core source	Where relevant	Not used	Not used
EXCExport control & sanctions	Core source	Core source	Core source	Core source	Where relevant	Core source	Core source	Not used	Not used
HRTHuman rights	Core source	Core source	Core source	Core source	Where relevant	Core source	Core source	Where relevant	Not used

Core sourceWhere relevantNot usedIndicative mapping — fixed per engagement in the proposal

We stay focused. Cybersecurity, tax and EHS are outside our scope.

Use cases4 triggers

When clients call us

Market entry
Before you enter a new country or sector, show the board what risks come with it.
M&A and joint ventures
Integrity exposure of the target's markets and sectors, before signing.
Board and supervisory-board reporting
A documented, source-backed basis for risk decisions.
Annual compliance risk assessment
Input that maps to IDW PS 980, ISO 37301, ISO 37001, the US DOJ Evaluation of Corporate Compliance Programs and the German Supply Chain Act (LkSG).

Method5 stations · fixed sequence

From scoping call to walkthrough, in five steps.

Step 1: Scoping callFree
Countries, sectors, modules, focus areas, decision context.
Step 2: Proposal
Fixed scope, timeline and price.
Step 3: Research & data intake
Public sources; internal data only after NDA.
Step 4: Analysis & scoring
Likelihood × impact per focus area, sources for every finding.
Step 5: Delivery & walkthrough
PDF report, XLSX annex, results session with your team.

How we work

DeliverablesPDF · XLSX · Session

What lands on your desk.

PDF report .pdf

Management summary, risk heatmap, chapter per focus area, case patterns and red flags, recommended measures, source register.

XLSX annex .xlsx

Case register, indicator tables, scoring sheet — filterable and reusable for your own risk register.

Results session

Results session with Legal/Compliance and, if needed, management.

Aligned with

IDW PS 980
ISO 37301
ISO 37001
US DOJ ECCP
UK Bribery Act guidance
LkSG

InsightsExample articles

Insights

ExampleABC · US

FCPA enforcement after the 2025 pause: what changed for non-US companies

Planned article

ExampleThird parties

Why the CPI alone is a weak country filter for third-party risk

Planned article

ExampleATR · PRV

Antitrust and data-privacy risk: where strong enforcement means higher exposure

Planned article

All insights

Request your scope

Tell us your markets. We'll tell you what to watch.

Send us your countries, sectors and the decision you are preparing.

Request your scope Book a free info session

Know your integrity exposure before regulators, partners or competitors do.

You define the scope. We map the exposure.

Two modules. The outside view and, if you want it, the inside view.

External analysis

Internal analysis

Seven focus areas, mapped against every source we read.

When clients call us

Market entry

M&A and joint ventures

Board and supervisory-board reporting

Annual compliance risk assessment

From scoping call to walkthrough, in five steps.

Step 1: Scoping callFree

Step 2: Proposal

Step 3: Research & data intake

Step 4: Analysis & scoring

Step 5: Delivery & walkthrough

What lands on your desk.

PDF report .pdf

XLSX annex .xlsx

Results session

Aligned with

Insights

FCPA enforcement after the 2025 pause: what changed for non-US companies

Why the CPI alone is a weak country filter for third-party risk

Antitrust and data-privacy risk: where strong enforcement means higher exposure

Tell us your markets. We'll tell you what to watch.