Skip to content
Our work

Work that has to hold up under scrutiny.

Engagements for public institutions and regulated organisations. We publish what we can evidence: the scope we were engaged for, how we worked and outcomes only where they are confirmed.

By industry
By capability
Status
  • 4 completed
  • 1 ongoing
SECURITYPRIVACYPERFORMANCEFUNCTIONALINTEGRATIONRECOVERYMBS E-INVOICINGINDEPENDENT ASSURANCE · SIX TEST STREAMS
Fig. · Illustrative diagram, not the client’s system
Featured engagement

Independent assurance testing of the national e-invoicing system

Before a national e-invoicing system carries the country's business-to-business invoices, the revenue authority needs independent evidence that it is secure, protects taxpayer data, performs under load and can be recovered.

Client
NRS (formerly FIRS)
Sector
Public institutions
Engagement
Awarded October 2025
Outcome
Assurance testing completed.
Read the case study
All engagements

Every engagement we can publish.

  1. NRS (formerly FIRS)

    Awarded October 2025

    Independent assurance testing of the national e-invoicing system

    Engaged as independent consultant for assurance testing of the Merchant Buyer Solution (MBS) e-invoicing system: penetration testing and vulnerability assessment, a privacy impact assessment, performance and stress testing, functional and integration testing, and audit-trail and disaster-recovery assurance.

    OutcomeAssurance testing completed.

    Government & public institutionsIdentity & E-invoicingCybersecurity & Data Protection

  2. NRS (formerly FIRS)

    Awarded October 2025 · three-year engagement

    Forensic revenue assurance across banks and fintechs

    Secure API submission of EMTL, withholding tax and VAT transaction data by financial institutions, validated against compliance rules, with reporting, audit and secure storage, bringing banks and fintechs onto the RevAssured platform.

    StatusOngoing.

    Government & public institutionsFinancial servicesDigital Engineering

  3. PTDF

    Identity verification for scholarship applications

    NIN verification and API services supporting scholarship applications, delivered through Verifio, our verification platform, with checks made through a licensed partner.

    OutcomeDeployment completed.

    Government & public institutionsEducation & scholarship administrationIdentity & E-invoicing

  4. Emaar Microfinance Bank

    ISO/IEC 27001 and PCI DSS certification support

    Compliance support for the bank's ISO/IEC 27001 and PCI DSS certification. The bank's digital banking and agency banking payment services were assessed against PCI DSS v4.0.1 and found compliant.

    OutcomeCertified compliant with PCI DSS v4.0.1, August 2026.

    Financial servicesCybersecurity & Data Protection

  5. FERMA

    PRMS Phase II software development

    Software development for Phase II of the PRMS programme.

    OutcomeDeployment completed.

    Government & public institutionsRoad infrastructureDigital Engineering

Have a system that has to hold up?

Tell us what it must do, who will scrutinise it and when it has to be ready.

Request a consultationEmail us