Assess & transform
A defined engagement to assess, design or improve your compliance programme, ending with a prioritised, risk-based roadmap.
Available nowBest forBoards and leaders who need an independent view of what works and what to fix first.
Compliance expertise · Automation · Managed services
Your compliance programme.
Your compliance programme.
Smarter. Connected.
Under control.
Compliance Shield helps organisations build, automate, manage and strengthen their compliance programmes through practical expertise, intelligent technology and flexible service delivery.
Approval DeskIllustrative example
RequestHCP speaker engagement
Region · policy setAPAC · Anti-bribery policy
Proposed feeWithin fair-market-value range
- 1Request submitted with CV and agendaRequester
- 2Policy and risk checkRules · optional AI
- 3Compliance officer reviewHuman
- 4Decision recorded with reasonsHuman
- 5Evidence and audit trail retainedAutomatic
- 6Reported to management dashboardAutomatic
Simulated data. Workflow steps and rules are configured to each organisation's policies.
The challenge
Compliance is getting more complex. Most teams are not getting bigger.
Disconnected processes, limited resources and rising expectations make effective oversight harder to maintain, and harder to evidence when a regulator, auditor or board asks.
Fragmented systems and spreadsheets
Manual approvals chased by email
Growing regulatory obligations
Limited compliance capacity
Risk and control data that doesn't connect
Slow reporting, inconsistent documentation
One partner. Connected compliance solutions.
Four ways to work with us. Start with the one you need.
You don't need to replace your systems or build a large internal team to strengthen your compliance programme. Choose the right mix of expertise, technology and operational support, and add more only when it creates value.
Automate a process
A project to digitise one compliance process, such as approvals, declarations or due diligence, inside the technology you already use.
Available nowBest forTeams stuck with email, spreadsheets and manual chasing on a high-risk process.
Use the platform
Access to Compliance Shield workspace modules, with implementation and support options. Hosted by us or deployed in your environment.
Early accessBest forOrganisations wanting one connected place for approvals, risks, actions and reporting.
Engage compliance experts
Ongoing advisory, co-sourced or managed compliance support under an agreed scope, from a virtual compliance officer to periodic testing.
Available nowBest forGrowing or lean organisations that need senior capability without a full-time hire.
Optional AI enhancement. Any of the four can include AI assistance, subject to feasibility, governance and licensing. None of them require it.
How we use AI responsibly →
SOLUTION 01Available now
Understand your compliance maturity. Strengthen what matters.
An independent, evidence-based view of how your compliance programme performs in practice, not just on paper. We test what exists, identify the gaps that carry real risk, and give you a prioritised plan your executives can act on.
- Programme effectiveness assessment
- Maturity and gap assessment
- Anti-bribery & anti-corruption reviews
- Compliance risk assessments
- Control design & operating effectiveness
- Governance framework development
- Policy and procedure reviews
- Monitoring programme design
- Remediation roadmaps
- Digital transformation strategy
Our assessment journey
- AssessObligations, risks, current controls
- PrioritiseRank gaps by risk and effort
- DesignControls, owners, evidence
- ImplementProcess, policy and tools
- MonitorTesting and indicators
- ImproveClose findings, re-test
ISO 37301ISO 37001COSO Internal ControlISO 31000FCPA / UK Bribery Act guidance
Assessments are benchmarked against these frameworks. Compliance Shield does not issue certifications or accreditations.
SOLUTION 02Available now
Automate your compliance processes, one at a time.
We turn a manual, high-risk compliance process into a controlled digital workflow, built on the technology you already have. That improves consistency, strengthens controls and gives your team time back for the risks that matter.
Start with one process. You don't need to buy or implement a whole compliance platform. Automate the process that hurts most, then expand if it makes sense.
HCP / HCO interactionsGifts, hospitality & sponsorshipsThird-party due diligenceConflicts of interestABAC risk assessmentsPolicy attestationsMonitoring & testingInvestigations & casesCorrective actionsAudit findingsDashboards & reporting
We work with your existing technology environment, often Microsoft 365, SharePoint and Power Platform, and recommend practical options that suit you. Third-party licences, premium connectors and enterprise AI features are not included by default.
From fragmented to controlledIllustration
Before
Request form attached to an email
Approver unclear, chased by reminders
Policy check done from memory
Evidence spread across inboxes
Monthly report rebuilt by hand
After
One structured request, required documents enforced
Routing by risk, region and value
Policy rules applied consistently
Decision, reasons and evidence on one record
Live dashboard and full audit trail
SOLUTION 03Available now
Extend your compliance capability without building everything internally.
Senior compliance capacity when you need it, from a defined piece of work to an ongoing virtual compliance officer role. We fit around your team, your governance and your budget.
- Virtual compliance officer
- Outsourced operational compliance
- Co-sourced programme delivery
- Periodic monitoring & testing
- Third-party compliance reviews
- Policy development & roll-out
- Training & awareness
- Compliance reporting
- Corrective action follow-up
- Programme administration
Accountability stays with you. When activities are outsourced, compliance accountability and legal responsibilities remain with your organisation and its governing bodies. We support and evidence the work. Your leadership owns the decisions.
Choose your level of support
Advisory support
On-call expert guidance, reviews and second opinions while your team runs the programme.
Your teamUs
Co-sourced compliance
We deliver defined parts of the programme alongside your team, such as testing, reviews and training.
Your teamUs
Managed services
We run agreed operational activities end-to-end under a service scope, with regular reporting to you.
Your teamUs
Bar shows the share of day-to-day delivery, not accountability.
Solution 04 · Compliance Shield Platform
One connected workspace for your compliance programme.
Bring requests, risks, third parties, testing, actions and reporting together in one place, or connect selected modules to the systems your organisation already uses. The platform is modular and in active development. Early-access organisations help shape it.
Compliance overview · Sample organisationConcept screen · simulated data
Open approval requests186 awaiting review
High residual risks42 with actions overdue
Third parties due for review11this quarter
Control tests completed27/40on plan
Compliance risk heat map
Approval queue
Sponsorship · EMEAReview
HCP consultancy · APACApproved
Distributor onboardingInfo requested
Gift & hospitalityClosed
Audit trail · latest
HCP consultancy · APAC: approved by compliance officer, reasons recorded09:42
Distributor onboarding: due diligence questionnaire returned09:15
Control test P2P-07: 2 exceptions logged, action assignedYesterday
OPTION A
Managed subscription
Use eligible modules in the Compliance Shield environment, with security, data separation and access controls set out in your agreement.
Early accessOPTION B
Your environment
Selected tools and workflows deployed in your own Microsoft 365 or other approved technology environment. Your data stays in your tenant.
Available nowOPTION C
Co-managed
We provide technology support and agreed compliance services while your organisation keeps oversight and decision rights.
Available nowStatus labels: Available now means delivered today as a project or service. Prototype means working build, demonstrable on request. Pilot / early access means offered to selected organisations by agreement. Concept means planned and shown for illustration only.
SOLUTION 05 · OPTIONALPilot
Add intelligence where it creates value.
AI can speed up the routine parts of compliance work: reading documents, checking requests against policy, spotting risk indicators and drafting summaries. We build it into defined workflows with clear limits, so it supports your professionals instead of replacing their judgement.
AI assists. Professionals decide.
Governance remains in control.
- Policy and procedure assistance
- Request categorisation
- Risk indicator identification
- Initial assessment recommendations
- Document and evidence review
- Third-party due diligence support
- Monitoring support
- Management report drafting
Human review
Data protection
Audit trails
Access controls
Explainable outputs
Approval boundaries
AI-enabled. Human-governed.Illustration
IN
Sponsorship request receivedMedical congress, EUR 25,000, organiser in a higher-risk market
AI
Checked against the applicable policyCompares request, contract draft and budget with the sponsorship rules2 risk indicators flagged
AI
Assessment summary preparedLists gaps, cites the policy clauses relied on, recommends questions to ask
YOU
Compliance officer reviews and decidesApproves, rejects or requests changes. The decision and reasons are recorded under their name.
AI never makes final compliance decisions. It can be switched off per workflow, and its use depends on your data, governance and licensing requirements.
Why Compliance Shield
More than software. More than a report.
Unlike traditional consultants
We leave working controls behind
Recommendations become running processes, workflows and evidence trails your team can operate after the engagement ends.
Unlike software vendors
We start from your risks, not a licence
Technology is chosen to fit your risks, controls and existing systems. Automate one process or connect several, with no platform lock-in required.
Unlike generalist firms
Practitioner-led, audit-ready
Designed by a qualified auditor, fraud examiner and compliance professional, so controls are built the way regulators and auditors will test them.
Expertise, technology and managed support, combined in the mix your organisation actually needs.
Also available
Specialist support around the core programme
Internal controls assuranceRisk and control matrices, design and operating effectiveness testing, co-sourced internal audit.
Third-party risk managementRisk segmentation, due diligence, distributor and channel-partner audits, contract audit rights.
Fraud risk & investigations supportFraud risk assessments, allegation triage, investigation plans and root-cause remediation.
Ethics & compliance trainingCase-based anti-bribery, fraud awareness, speak-up and third-party training, delivered as workshops or e-learning.
AI governance assessmentsReview how your organisation uses AI against governance, risk and control expectations.
Compliance dashboardsManagement and board reporting built on the data you already hold.
Healthcare & medtechHCP interactions, distributors, tenders, industry codes
Life sciencesGrants, events, third parties, promotional controls
Public sector & healthRisk frameworks, procurement, conflicts of interest
Financial servicesConduct risk, AML/CFT controls, control testing
Industrial & distributionAgents, procure-to-pay, rebates, fraud
TechnologyThird-party risk, revenue controls, governance
About
Led by a practitioner, built for scrutiny.
Compliance Shield is led by Hassan Metwally, a risk and assurance professional with more than 15 years across internal audit, controls assurance, anti-corruption compliance and investigations, most recently as a regional compliance manager in the diagnostics and medical device sector.
That mix shapes how we work. Risks are assessed the way a board needs to see them, controls are designed the way an auditor will test them, and procedures are written so the business can follow them without slowing down.
Based in Auckland, New Zealand, we work with organisations across the Americas, EMEA, Africa and Asia-Pacific.
Confidential by default
Risk-based approach
Documented decisions
Responsible AI
CPACertified Public Accountant
CIACertified Internal Auditor
CFECertified Fraud Examiner
CCEP-ICertified Compliance & Ethics Professional, International
MScMaster's in anti-corruption compliance
Contact
Tell us where you want to start.
A process to automate, a programme to assess, extra capacity, or a platform demo. Send a short note and we'll reply with suggested times for an initial discussion.
LocationAuckland, New Zealand · working across time zones
Response timeWithin two business days
ConfidentialityEnquiries are handled in confidence and used only to respond to you.