Can every balance be explained?
Balances are derived from postings and never overwritten. Any figure can be traced to the transactions behind it, and a mistake is corrected by a new posting, not by an edit.
Fintech · ledger
Ledger and reconciliation that match every bank and provider, every day
Your balances sit in a table that is updated in place, and nobody can say for certain that they match what the banks hold. We build a double-entry ledger and a daily reconciliation against every bank, BaaS and custody provider, with the reports your safeguarding auditor and partner bank will ask for.
Typical lengthweeks
From€10,000
Built onDouble-entry ledgers, Banking-as-a-service, Fireblocks
When teams call us
What usually triggers the work
It usually starts with a review. In the UK, the FCA's safeguarding rules now expect payment and e-money firms to reconcile safeguarded funds every day, file a monthly return and have an annual audit. In the US, sponsor banks want proof that a fintech's ledger matches the money they hold for its customers, after the collapse of Synapse in 2024 left a gap of tens of millions of dollars between its records and the funds behind them.
Then someone asks a simple question: what did we owe each customer at the close of business last Tuesday? If the answer takes a spreadsheet and two days, that is the gap.
Left alone, small breaks pile up: a provider fee posted twice, a refund never booked, an event that arrived after the cut-off. Finance finds them by hand, the auditor finds the ones finance missed, and a partner bank that can't get a clean answer slows your launch or your limits.
What we deliver
In your repository, demoed every week
- Double-entry ledger design or rebuild (balances from postings, never overwritten)Every movement is a balanced set of postings, and balances are calculated from them. You can check any balance by adding up its history, line by line.
- Daily reconciliation against each bank, BaaS and custody provider, with alerts on breaksEach provider's statement or API is matched against the ledger every day, and anything unmatched opens a break with an owner. You can see every open break, its amount and its age.
- Safeguarding evidence: the reports and audit trail your auditor and the FCA ask forDaily reconciliation records, the figures behind your monthly return and an audit trail of who changed what. Your auditor gets reports the system produces, not ones rebuilt in a spreadsheet.
- Migration from the current balance tables without downtimeThe new ledger runs next to the old tables, the two are compared every day, and you switch over only when they agree. You see the comparison before you decide.
How it holds up
The questions a reviewer will ask, answered in the build
What if a provider sends the same event twice?
Every posting carries a key tied to the provider's own reference, so a repeated or late event can't move money twice. Late events are posted to the day they belong to, and that day's reconciliation runs again.
Who sees a break, and when?
A break raises an alert the same day, with the amount, the provider and the likely cause. It stays open until someone resolves it and records why.
Proof
Where we have done this before
Banking orchestration
One system of record across Sumsub, Fireblocks, a ledger and banking-as-a-service partners, in production for a European payment platform.
Built on
- Double-entry ledgers
- Banking-as-a-service
- Fireblocks
- PostgreSQL
Often built together: banking-as-a-service integration and Fireblocks custody.
Price
What it costs
Ledger and reconciliation builds start from €10,000 (£8,700 · $11,500). The final price depends on how many banks and providers hold your customers' money and on the state of your current balances. typical duration
Most teams start with the Readiness Review: €4,900 (£4,250 · $5,500), fixed, 7 working days, with every fix priced. If you then build with us, the fee is credited to the build.
Questions
Before you book
Can you work with the ledger we already have?
Usually, yes. If your ledger already records movements rather than overwriting balances, we add reconciliation and reporting around it. If it doesn't, we build a new one alongside and migrate once the two agree. The Readiness Review tells you which case you are in.
How long does a safeguarding reconciliation build take?
It depends on how many banks and providers hold your customers' money and how clean the current data is. After the Readiness Review you get a fixed plan with milestones and dates. Because the daily reconciliation is what the rules check first, we build it first and the reporting after it.
Do you replace our auditor?
No. Your safeguarding audit is done by your auditor, independently of the people who built the system. We give the auditor what they need: reconciliation records, reports, access to the audit trail and an engineer to answer their questions.
Who owns the code and the IP?
You do, from the first commit. We work in your repository and your accounts, and the contract assigns the IP to you in the present tense, not at some later date.
Who will actually work on our project?
The engineers named in the proposal, and you meet them before you sign. A key-person clause means nobody is swapped without your written consent.
How do time zones work for a UK or US team?
We work on Lisbon time, which is the same clock as London: Mon–Fri, 08:00–18:00 UK time. That leaves about four working hours a day in common with the US East Coast. You get a demo of working software every week and a short written update every working day.
What contracts do you sign?
A master services agreement with a statement of work for each project, or your own paper if you prefer. A mutual NDA before we see anything, and a GDPR data processing agreement. US clients get a W-8BEN-E from us. Which law governs the contract is answered on Contracts & security.
How do we pay?
The fixed-price first step is paid upfront. Builds are billed by milestone, after you have seen the work running. Monthly care, if you want it, is billed at the start of each month. We invoice in euros, pounds or dollars.
Free 30-minute call
Tell us what has to work, and by when
You talk to an engineer who would work on it, not a salesperson. You leave the call knowing what it would take and what the first step costs, or we tell you that you don't need us.