Ophir Controls · for regulated financial institutions
Controls that reconcile.Evidence an examiner can walk.
You run the payment rails and the detection engine. We build the reconciliation, exception handling and evidence layer that proves they agree — for DORA, instant payments and the AML rulebook — and prove it in a parallel run before you commit.You choose the detection engine. We build the integration, reconciliation and evidence layer that wires it into your core banking — and prove it in a parallel run before you commit.
Active controls
6 of 12 shownActivity
- 09:42:11SEPA Instant reconciliation completedNIP reconciliation completed41,208 transfers · 5 exceptions raised184,902 matched · 7 exceptions raised
- 09:41:55Verification of Payee batchBVN validation batch posted3,120 checks · 12 close matches3,120 applications · 0 errors
- 09:40:30Chargeback bot resolved 412 casesChargeback bot resolved 412 casesauto-matched to settlement fileauto-matched to settlement file
- 09:38:02Exception escalated to analystException escalated to analystE2E-7Q44 — amount mismatchNIP ref 0110…8842 — amount mismatch
- 09:35:18Nostro reconciliation completedNostro reconciliation completed42 accounts · balanced42 accounts · balanced
Seven modules in the live demo: Control Tower · reconciliation · evidence & lineage · goAML assurance · CDD/KYC linkage · parallel run · model validation
The gap the rules leaveThe gap the mandate leaves
Buying the engine is the easy part.
Every regime asks the same thing in its own words: show that transactions link to customer risk, that reports reconcile, and that you can walk any alert end to end.The Baseline Standards require the engine to integrate with core banking for real-time, cross-channel monitoring, linked to your CDD/KYC data — and to stand up to a live examiner walkthrough.
01 · Linkage
Effective linkage
A tool running on transaction data alone, without CDD/KYC and customer risk, would not meet the bar. Closing that is integration, not detection.
02 · Reconciliation
Reports that reconcileReconciled into goAML
Suspicious-activity reports reconciled against the alerts that raised them — filed and accepted.Since February 2026 goAML auto-rejects malformed filings. Transactions, alerts and STR/CTR records must reconcile end to end, or filings bounce.
03 · Evidence
Examiner-ready
Supervisors walk alerts through live systems. Every alert has to walk back to its record.Examiners are reported to test live systems and walk alerts through. Every alert has to walk back to its record.
Paraphrased from reporting on CBN circular BSD/DIR/PUB/LAB/019/002 (10 March 2026).
Evidence & lineage
Walk one finding, end to end.
An illustrative breach from an instant-payments day, as a supervisor would see it. Examiner mode shows the record itself.The breach from our engine’s reference run, on synthetic data, as an examiner would see it. Examiner mode shows the record itself.
- Type
- Missing ledger postingMissing ledger posting
- Leg
- SCT Inst · inboundON-US · First Bank
- Amount
- €19,750.00₦3,850,000
- Initiated
- T+0s · illustrative08 Aug 2026 · 11:02
- Age / window
- over policy window28.5h / 24h
- ExposureFine exposure
- incident logged₦10,000
IMMEDIATE: post or return; attach the pacs.002 trail; clear suspense with a posting; record under the operational-incident register.IMMEDIATE: Issue reversal or complete posting; attach TSQ trail; clear suspense with a posting. File the breach in the monthly failed-transaction return.
{
"generated_at": "2026-08-09T15:30:00",
"engine": "Ophir Automation settlement assurance (reference)",
"ref": "NIP240808B005",
"type": "MISSING_LEDGER",
"leg": "ON-US",
"counterparty": "First Bank",
"amount": 3850000,
"initiated_at": "2026-08-08T11:02",
"age_hours": 28.5,
"window_hours": 24,
"clock": "BREACH",
"fine_exposure": 10000,
"note": "Settled on the rail but not posted to the ledger — funds in suspense",
"recommended_action": "IMMEDIATE: Issue reversal or complete posting; attach TSQ trail; clear suspense with a posting. File the breach in the monthly failed-transaction return."
}{
"illustrative": true,
"ref": "E2E-7Q45",
"type": "MISSING_LEDGER",
"rail": "SCT Inst",
"direction": "inbound",
"amount": 19750,
"currency": "EUR",
"clock": "BREACH",
"note": "Settled on the rail but not posted to the ledger — funds in suspense",
"recommended_action": "IMMEDIATE: post or return; attach the pacs.002 trail; clear suspense with a posting; record under the operational-incident register."
}T+0s08 Aug · 11:02
Settled on the railSettled on the NIP rail
Instant credit transfer settled; the funds are with us.₦3,850,000, on-us, counterparty First Bank.
→08 Aug · 11:02 →
No matching ledger postingNo matching ledger posting
The match finds the settlement but no core-ledger entry. Funds sit in suspense.The match finds the settlement but no core-ledger entry. Funds sit in suspense.
window closes09 Aug · 11:02
The policy window closesThe 24-hour window closes
Status moves from escalated to breach; the incident is logged.The on-us clock expires: escalated becomes breach, and exposure is calculated.
written09 Aug · 15:30
Evidence pack writtenEvidence pack written
evidence-pack.json · sha256 recordedevidence-pack.json · sha256 c9f1732e…9d56739
Month endMonth end
Reported to the incident registerFiled in the failed-transaction return
With the recommended action and the trail that cleared suspense.With the recommended action and the trail that cleared suspense.
Proof before commitment
Thirty days, two systems, discrepancies to zero.
A parallel run against your existing process, on your real volumes, before anything cuts over. You decide on evidence, not on a demonstration.
Run it yourself →How we deliver
A go/no-go gate at every step.
Nothing scales without verified value and your sign-off. It runs inside your environment, and your data stays in the country.
01 · then a gate
Assess
A paid, time-boxed readiness assessment. The roadmap is yours to keep.
02 · then a gate
Design
Edge cases before the happy path, failing safe to a human.
03 · then a gate
Build
Integration, reconciliation and evidence around your engine.
04 · then a gate
Test
A parallel run against your existing process.
05 · then a gate
Deploy
Through your change board: documented and reversible.
06 · then a gate
Operate
We run it, or hand it to your team. No lock-in.
The due-diligence shelf
What your CISO and internal audit will ask for.
Real engine output on synthetic data, to take before the first meeting. We welcome your penetration test and vendor due diligence.
Sample evidence pack
The reference run: four exceptions with their clocks, exposure and recommended actions.
Download evidence-pack.json · 2.3 KBSample suspense ledger
The same run, row by row, as your operations team would work it.
Download suspense-ledger.csv · 0.9 KBSecurity & architecture
- In-country processing under the NDPA 2023 and the CBN’s payment-data localisation rule
- Least privilege; secrets in a vault, never in code or logs
- A full audit trail of every action
- Segregation of duties: maker-checker stays intact
- Every change through your change board
# every delivery: a SHA-256 checksum and a detached ECDSA P-256 signature
shasum -a 256 -c ophir-engine-<ver>.tar.sha256 openssl dgst -sha256 -verify signing.pub \ -signature ophir-engine-<ver>.tar.sig ophir-engine-<ver>.tar
# expected: OK · Verified OK
DELIVERY KEY · SHA-256 OF THE PUBLIC KEY (DER)
113d 5b85 279e 8fc8 c236 6523 1446 e7f3 bc68 7150 b324 5c61 d3b2 f814 2484 7eb5
Confirm it out of band: it is also printed in the engagement schedule. Download signing.pub ↓
Who leads it
Samuel Lawal — inside UK payments and clearing since 1998.
Reconciliation and clearing at clearing-house and tier-one bank scale: getting transaction, settlement and reference data to agree across fragmented systems, and proving it to auditors and examiners.
Vocalink / Mastercard · Barclays · HSBC · LCH.Clearnet · Citibank · BP · Reuters
That record is Samuel’s career at those institutions, not Ophir client history. Ophir Controls is a new, deliberately narrow practice.
- Detection-agnosticWe wire in the engine you chose — Actimize, ComplyAdvantage, Youverify and the like. We never sell or replace it.
- Runs inside your wallsIn-country, least privilege, a full audit trail.
- Proved before you commitA parallel run, then your sign-off.
Compliance briefing
Pressure-test your roadmap against the standard.
A working session for your Chief Compliance Officer or CRO, with your Head of Operations and CISO. We map the integration, reconciliation and evidence gaps between your chosen tooling and your live stack.