Governance, risk & compliance
Counterparty-grade governance, by design.
A development-finance partner underwrites the platform as much as the portfolio. Our control framework is built to that standard from the outset — AML/CFT, data protection, tax transparency, an EIB-aligned exclusion list, an independent risk function and audited financials — not assembled for a single transaction.
Data protection
GDPR by default, ISO 27001 by control.
Counterparty and SME data is handled under a GDPR-compliant programme and protected by an ISO/IEC 27001-aligned information-security management system. Data minimisation, role-based access, encryption in transit and at rest, and a tested incident-response process are standard, not optional.
Data protection controls
- GDPR: lawful basis, minimisation, retention limits, data-subject rights
- ISO/IEC 27001-aligned information-security management system
- Role-based access, encryption in transit and at rest
- Tested incident-response and breach-notification process
Financial crime, tax & conduct
The first line of institutional trust.
Before a single receivable is financed, the counterparty and the structure clear a control framework built for development-finance scrutiny.
- Financial crime
AML/CFT & KYC/KYB
Risk-based onboarding with identity, beneficial-ownership and sanctions screening on every counterparty. Ongoing monitoring, PEP and adverse-media checks, and a documented escalation path.
- Transparency
Tax transparency
No structuring through non-cooperative jurisdictions. Transparent legal structure, clear tax residency and reporting aligned with EU good-governance standards for public-finance counterparties.
- Framework
Conduct & policies
A written policy stack — credit, AML/CFT, ESG, data protection, conflicts — owned by named functions, version-controlled, and reviewed on a fixed cadence with board oversight.
ESG policy & exclusion list
Aligned with EIB Group excluded activities. No fossil fuels.
Our exclusion list mirrors the EIB Group's: we do not finance fossil-fuel extraction, transport or power generation, nor any activity on the EIB Group excluded list. Positively, we tag and prioritise EU-Taxonomy-aligned renovation and energy-efficiency work — the climate outcomes a public-investment evaluator is mandated to reward.
- No fossil-fuel extraction, transport, processing or power generation
- Full alignment with the EIB Group list of excluded activities
- Exclusions enforced at eligibility — screened before any advance
- EU-Taxonomy-aligned renovation prioritised and tracked, not just permitted
- SFDR-consistent sustainability disclosure on the financed book
The line we hold
No fossil fuels.
The exclusion list is enforced at eligibility — screened before any advance, aligned with the EIB Group's excluded activities, and consistent with SFDR disclosure on the financed book.
Independent risk & board
Three lines of defence, role-based by design.
Governance is described by function and mandate — never by an invented individual. Independence between origination, risk and audit is the point.
- Second line
Independent risk function
Credit and portfolio risk is owned by a risk function independent of origination, reporting to the board. Limits, provisioning and exception approval sit outside the commercial line — the second line is genuinely second.
- Oversight
Independent board oversight
Governance sits with a board including independent members and a risk committee. Mandate, limits and material exceptions are board-approved — described by role, never by an invented name.
- Third line
Internal audit & controls
A third line of defence tests the control framework independently, with findings tracked to closure and reported to the board's audit committee.
Audited financials & transparency reporting
Independently audited, transparently reported.
Financial statements are prepared under IFRS — including IFRS 9 expected-credit-loss provisioning on the receivables book — and independently audited by [Auditor]. Portfolio and impact reporting is published on a fixed cadence, and the portfolio is externally rated by [Agency], so counterparties evaluate audited facts, not assertions.
- Financials independently audited by [Auditor]
- IFRS 9 expected-credit-loss provisioning on the book
- Standardised portfolio and impact reporting on a fixed cadence
- Portfolio externally rated by [Agency]
Independent assurance
Audited by [Auditor]. Provisioned under IFRS 9. Externally rated by [Agency]. Reported on a fixed cadence — facts a counterparty can verify.
Built & affiliated to
The standards we hold ourselves to.
Frameworks and standards only — no client logos, no testimonials. The same credential set we carry across the site.
- InvestEU-aligned
- EU-Taxonomy ready
- STS-eligible
- ISO 27001
- GDPR
- FCI / EUF member
- Audited by [Auditor]
- Rated by [Agency]
Keep Europe building. Get paid today.
Two doors: finance your construction invoices, or partner with us on risk-sharing.
INVESTEU-ALIGNED · ISO 27001 · GDPR