Due-Diligence Readiness Review

Know what the reviewer will find, before they find it

A fixed-price technical due diligence review of your system against the questions your partner bank, safeguarding auditor or enterprise buyer is about to ask: the ledger, reconciliation, onboarding, custody flows and the supplier terms behind them. Every finding is priced, so you know what it costs to pass, and if you build with us the fee is credited to the build.

Book a call See the two editions ↓
Price€4,900 · £4,250 · $5,500
Time7 working days
If you build with usFee credited to the build

Two editions

Pick the review you are facing

Same depth, same price. The difference is whose questions we answer and how the report is written.

Edition A

Bank & Enterprise Review

For a payments, e-money, crypto or BaaS company facing a partner-bank review, a safeguarding audit, or a bank or enterprise buyer whose security team has sent a questionnaire.

  • Ledger accuracy and daily reconciliation, as safeguarding rules and sponsor banks expect
  • Security questionnaires (SIG, CAIQ or the buyer's own) answered against the code
  • DORA Art. 30 supplier terms: audit rights, incidents, exit, data location
  • FCA operational resilience and US sponsor-bank expectations
  • PCI DSS 4.0.1 payment-page controls where cards are involved
  • Gaps to close before a SOC 2 or ISO 27001 audit
Edition B

Series A Tech DD Readiness

For founders one to three months from a raise, whose codebase was built fast, often largely with AI tools, and is about to be read by the investor's engineer.

  • Architecture and scalability against your next 12 months of plans
  • Code quality, tests and how changes reach production
  • Which code was AI-generated, how it was reviewed, licence hygiene
  • Security, data protection and GDPR basics
  • Team and key-person risk, documentation, technical debt priced

What you get

A report a reviewer would recognise

Written the way due-diligence firms write: a verdict first, then evidence, then cost.

If you build the fixes with us, they are priced as ledger and reconciliation, KYC and KYB onboarding, custody or banking-as-a-service work.

  • One-page verdictReady, ready with fixes, or not ready, and the three things that decide it.
  • Findings mapped to the reviewer's questionsEach question, the evidence you have, and the gap where you don't.
  • Every fix pricedEffort in days and cost in euros, ordered by what blocks the deal first.
  • Keep-or-rebuild callAn honest recommendation on whether the current code is worth hardening.
  • Draft answersSuggested wording for questionnaire items you can already answer truthfully.
  • Walk-through callWe take your team, and your investor or buyer if you want, through the findings.
  • Re-test letter after fixesOnce the gaps are closed, a signed letter you can forward to the reviewer.

Seven working days

From access to verdict

  1. Day 0

    Kick-off

    NDA signed, read-only access to code, cloud and docs, the reviewer's questionnaire if you have it.

  2. Days 1–3

    Deep review

    Code, infrastructure, data flows and every integration that touches money or personal data.

  3. Day 4

    Map to the review

    Each question your reviewer will ask, the evidence you have, the gap where you don't.

  4. Days 5–6

    Price the fixes

    Every finding costed in euros and days, ordered by what blocks the deal first.

  5. Day 7

    Verdict

    A one-page verdict, the full report, and a call to walk your team through it.

What we need from you

About two hours of your time

  • Read-only accessRepository, cloud console and error tracking. We never need production write access.
  • A 60-minute kick-offWith whoever knows the system best, often the founder who built it.
  • The questionnaire or term sheetIf the reviewer has sent one. If not, we use what they typically ask.

What it is not

Clear about the edges

  • Not a penetration testWe tell you if you need one and work alongside the tester.
  • Not a certificationWe don't issue SOC 2 or ISO 27001. We get you ready for the auditor.
  • Not legal adviceWe map technical controls to regulations. Your lawyer signs off the contract.

Questions

Before you book

Our app was built with Lovable / Cursor / Bolt / Replit. Is that a problem?

No. Many good products start that way. Reviewers don't reject AI-written code; they reject code nobody can explain, test or recover. We review it like any other codebase and tell you what to keep.

Lovable and other tools already run security scans. Why pay for this?

Scanners catch the obvious: an open database, a leaked key. They don't check who can see whose data through your business logic, whether money reconciles, or whether you can answer a bank's questionnaire with evidence. That's what reviewers ask, and what we review.

What if the verdict is “rebuild”?

Then we say so, with the reasons and a price, and you decide. Often only one part needs replacing, such as the data model or the payment flow, not the whole product.

Do we have to do the fixes with you?

No. The report is yours and is written so any competent team can act on it. If you then build or fix with us, the review fee is credited to the build.

Who actually does the review?

The engineers who built the banking orchestration platform in our case study, which is in production, not a junior with a checklist. You'll meet them on the kick-off call.

How do you handle our code and data?

NDA first, read-only access, no production data copied unless you ask, working copies on EU infrastructure deleted when we finish. A data processing agreement is available on request.

Free 30-minute call

Tell us what has to work, and by when

You talk to an engineer who would work on it, not a salesperson. You leave the call knowing what it would take and what the first step costs, or we tell you that you don't need us.

Or write to us
info@jobsdone.pro
Lisbon time: the same clock as London, 4–5 hours ahead of New York

We answer within one working day. We sign an NDA before seeing any code.

Thank you, it's with us

An engineer will reply within one working day with a few times for the call. If it's urgent, email info@jobsdone.pro.