Plain language tour. Three reading layers, senior leads at the top of each. Most of the work is quiet. What reaches you, you should read.
Three layers run in parallel, each with its own sources, classifiers, and team specialism. None of them is the whole picture by itself. The team reads each layer with a different lens, and signals that light up across two layers in the same week are the strongest read short of a confirmed event.
Daily checks against thirty-eight major data broker networks for new entries against your name, your associated emails and phones. Breach surveillance across multiple feeds for fresh dumps. Look-alike domain alerts pulled from certificate transparency logs. SIM-swap and number-porting watch via carrier intelligence. Photo and face surfacing on Cover and above. Email spoofing patterns. ISP-level breach exposure.
Output: every 24 hours, the whole identity surface is re-checked. New exposure surfaces a note. New broker listing queues a removal request automatically.
Bank circulars and supervisory letters across UK, EU, US, Switzerland, Singapore, Hong Kong, UAE. Exchange health monitoring on the major platforms (Binance, Coinbase, Kraken, OKX, Bybit, and others). Custodian quarterly disclosure parsing. Sanctions cross-reference against OFAC, OFSI, EU. Real-estate registry residue watch. Court-record cycle watch where clients have exposure.
Output: when a custodian quietly stress-signals or a corridor closes, we see the read before the press cycle picks it up.
Diplomatic communications volume tracking. Sanctions-pipeline pattern detection from regulatory pre-cycle activity. Banking-corridor disruption signals (capital flows, correspondent banking traffic). War-precursor pattern recognition: activity on military equipment markets, civilian flight rerouting, currency premium movements. None of these are guesses; each is a known statistical leading indicator drawn from open sources.
Output: most of the time, this layer is quiet. When it activates, it is because something material is shaping up.
Four steps from raw signal to a sentence in your inbox. Fast pipeline, human judgement.
Sources update on their own schedules. Some are seconds, some minutes, some hours. The pipeline pulls each source as it updates and feeds it into a triage queue. About 10,000 raw signals across the client base every day.
A first-stage classifier filters at high recall, then a second-stage scorer narrows down what reaches a human. About 35 signals per day reach the team's queue. The rest sit in your file for the morning brief.
A teammate reads each high-priority signal. They decide what to do. Send a real-time note. Add to the morning brief. Hold for more context. Escalate to voice on Standing or Reserve. The judgement call is human; the system supports.
Cover gets same-day notes on the encrypted channel. Standing gets real-time notes for qualifying events plus the morning brief plus the encrypted channel. Standing runs by the second. For critical events, the team escalates by encrypted channel and dedicated teammate. Reserve gets sub-minute response. Voice escalation is paused for now; we will write before activating it.
Most of what protects you stays quiet. The few that surface are the ones worth your attention.
Every reading surface pours into the same pipeline. All sources, all noise, all hours.
Classifiers strip what doesn't match a known pattern. Most of the volume drops here.
Each candidate checked against your file. If it doesn't intersect, it doesn't continue.
The named lead on your file reads each one. Most don't warrant your attention.
Plain language. The signal, what it means, what we're doing about it.
Every signal that reaches a senior read is scored. The score sets what happens next.
No action. Filed against your record for context. Visible to the team only.
Re-read in 24 hours against fresh data. If anything correlates upward, it advances.
Plain-language note on the encrypted channel. What we saw, what it means, what we'd do.
Standing and Reserve: voice or SMS within the hour. Cover: top-of-channel note within the hour.
The score is not a black box. The team can see every input that contributed to it on the file, can override in either direction, and writes the reasoning into the record. Quarterly reviews include a sample of overrides to keep the system honest.
Five distinct ways the work reaches you. Each one has a tier where it activates and a typical cadence.
Operational research, private banking, data analysis. The team's backgrounds shape what we read and how we read it.
Read About The Backgrounds →Three subscriptions and one single review. Read the tiers, or open the application directly. Anonymous engagement supported.