A field report on the machinery that turns British financial regulation into quarterly colours — and the operator who, after twenty years inside it, decided every number should be anchored to its rule and its source.
There is a question the British financial system spends an estimated £2.5 to £4 billion a year answering, and the money has never yet bought a full answer. The question — can the numbers this industry reports about itself be trusted? — sounds technical; nothing about it is. Regulators use those numbers, in the words of the operator this transmission concerns, “to make micro and macro-economic decisions which impact the daily lives of individuals.” Mortgage pricing, capital buffers, whether a product is quietly failing the customers it was sold to: all of it steered by figures that arrive weeks late, filed in formats built for submission, not comprehension — and then, mostly, never read again.
Inside the firms, the machinery producing those figures is a monument to accretion. Each wave of regulation since the crash landed as its own programme — its own team, its own interpretation, its own spreadsheet — so that compliance is fragmented by default, with no single version of the truth. End-to-end reporting cycles can run three months, which means insight arrives after the risk, not before it. At board level the edifice compresses into a quarterly deck of colours, and the thread from any colour back through metric, model and source system exists mainly in the memory of whoever built the tab. When a number is challenged, the response is not a query. It is archaeology.
This series documents one particular figure: the operator who spends decades accumulating judgment inside an industry and then, instead of retiring it into consultancy, encodes it into a system. In our last transmission, a decade of plant-floor discipline became a compliance firm that guarantees its outcome. Today’s filing — the eleventh — comes from higher up the stack: the machinery of regulation itself. A career spent delivering regulatory change inside Lloyds, Barclays and HSBC, and governing a national payments programme, has been distilled into a platform whose founding observation is that the industry’s trust problem was never really a reporting problem. It is an anchoring problem.
Asha — first names are policy here; they can introduce themselves properly — has spent more than twenty years in business transformation across financial services, and the CV reads like a guided tour of every room in the machine. At Lloyds Banking Group in the post-crisis years they ran integration across Group Operations, then built a Global Payments programme team — roughly fifty at its peak — to govern change for a new commercial banking offering. By the end of 2013 they were Programme Director for regulatory commitments across the entire LBG estate, UK and international: a new business operation established from scratch and “the development of a new compliance and risk framework,” delivered against what they describe, with a programme director’s economy, as “significantly demanding regulatory timelines.”
Then the tour continued. At Barclays, as Regulatory Change Director, they led retail banking tax compliance — complex change wrapped around “a significant client data due diligence and outreach programme,” aimed at the right result “for our customers and the regulators” — a phrase worth reading twice for who it puts on the same side. At HSBC they shaped a portfolio of change to optimise international cross-border payments: ISO 20022, APIs. And at Pay.UK, the body behind Britain’s retail payment systems, they served as Head of NPA Programme Governance and Deputy Director on the New Payments Architecture — the national programme to renew the infrastructure underneath everyone’s transfers — building the methodology, the standards, and “a risk control environment to inform Board level focus.”
Track the vocabulary across those two decades — risk frameworks, control environments, board-level focus — and a pattern emerges that the job titles never name. Every programme ended the same way: change delivered, team dispersed, and the reporting obligation left behind made permanent. Programmes end; obligations do not. Twenty years of building temporary machines to satisfy permanent demands is an education in exactly one gap — and in June 2020 Asha took the helm at Profylr, the company built to close it.
Profylr’s core move is easiest to see in the language Asha used before the category had a name: “anchoring cell level reporting requirements to data models and critically, to data sources.” Every cell in a regulatory return exists because a rule demands it and a source system feeds it — but in most firms both threads are severed the moment the return is filed, which is why nobody can answer for the number later. Profylr — the framework underneath carries the registered name Information Genetics® — makes those threads permanent and inspectable. Anchor the cell to the rule above it and the source below it, and trust stops being a quarterly performance and becomes a property of the structure.
The move has grown into a platform, and a category Profylr is naming as it goes: Enterprise Regulatory Intelligence — “a single, connected view of their full regulatory obligation portfolio” for regulated firms; four domains, one platform. Conduct Intelligence is live today, carrying the full Consumer Duty framework — “Configured by the firm. Scored by Profylr.” — alongside complaints, vulnerability and product governance; Resilience stands beside it, Statistical and Financial Crime follow. The site’s furniture gives the philosophy away: every module ends with a named “Regulation anchor” — FCA PS22/9, FG21/1, the PROD sourcebook — cited the way an engineering drawing cites its standard. Each metric answers to a rule it can name.
The intelligence layer is where the twenty years show. Thresholds, scoring rules and risk-appetite distances are the firm’s own — “Your firm’s standards, not ours” — and the board view drills “from enterprise to domain to regulation to the data point that changed the colour,” updated as data arrives, not when someone assembles a deck. An AI narrative engine reads the same data and explains it — auditable, traceable, “not a black box” — and it is pointed at the most human failure in the stack: it flags where written commentary and underlying data diverge — the earliest warning a firm will ever get, and until now nobody’s job to notice.
Two details complete the design. Profylr does not file returns — firms keep their filing platforms. “The data was always in your returns. Profylr makes it readable, connected, and actionable,” the Statistical domain’s whole pitch: “Your filed regulatory returns — finally read.” And it is not a dashboard bolted onto the compliance process but the place the process happens — commentary, evidence, sign-off, escalation — every action timestamped and regulator-ready. “The board gets the view. The compliance team gets the platform. Both work from the same data. That is the point.” Onboarding runs two to six weeks — twelve months of history, whatever format exists, no data-remediation purgatory first.
Notice, for the eleventh time in this series, the shape — with a wrinkle. Most operators we document encode a personal craft: an auditor’s rigour, an examiner’s eye. Asha encoded a career’s worth of programme governance — the methodologies, the standards, the risk control environments once built to inform a single board — into standing infrastructure that informs any board, continuously. The judgment in Profylr is knowing, from twenty years inside the machine, exactly where the thread snaps between rule and source — and refusing to let the platform hold a number that cannot show its anchor.
Strip away the sourcebooks and the rules travel to anyone whose numbers must survive hostile scrutiny:
Anchor every number to its rule and its source. A figure that can cite the requirement it serves and the system it came from defends itself. A figure that cannot is an opinion wearing a font.
Read what you file. Your returns are the richest structured data your firm produces and the least examined. If the regulator can learn more about your firm from your filings than your board can, the asymmetry is not the regulator’s problem.
Make the commentary and the data confront each other. Narrative is where drift hides. When the write-up says improving and the numbers say deteriorating, that divergence is not friction to smooth over. It is the cheapest warning signal you own.
One truth, several altitudes. The board should see colours and distances; the operators, every data point — rendered from the same data. The moment a deck version of the truth and an operational version coexist, a firm has begun surprising itself.
Build infrastructure for permanent obligations. Programmes end; obligations do not. Anything you will owe the regulator forever deserves a system, not a heroic quarterly assembly.
What changes, when the anchors hold, is the direction compliance faces. The firm’s own line is the move “from reactive oversight into predictive intelligence,” and the mechanics bear it out: outcomes tracked continuously instead of reconstructed quarterly, warnings surfaced while they are still cheap, board questions answered by pulling a thread rather than convening a working group. One endorsement on the platform page compresses the category into a sentence: “Shocked by how powerful this is. It’s the first solution to tie directly to the regulations.”
There is a longer arc here. The 2008 crash demanded rigour; the industry answered with volume; and volume, it turns out, was never the same substance as trust. For nearly two decades the billions were meant to buy confidence — in numbers that steer decisions reaching into ordinary lives — and bought paperwork instead. The unglamorous truth Profylr is built on is that the answer was in the returns all along. Nobody had wired the question to it.
So: if your firm’s regulatory position lives in two hundred pages and a prayer — if your board’s colours cannot name their sources — the platform that anchors them is at profylr.co.uk, built, in its own words, “for people who live inside regulated environments.” The category had to be named by somebody who had stood in every room of the machine: the banks delivering the rules, the rails carrying the money, the boardrooms receiving the colours. Twenty years of asking the four-billion-pound question earns you the right to answer it — and the answer was never a bigger report. In the firm’s own words: “knowing isn’t enough — you need to see ahead.” That, at last, is an answer worth the question.
— END TRANSMISSION 05Z
We publish roughly once a month. One email when it lands, if you ask for it.
Ask for the one email →