AdapttoAI
Confidential

Compliance Operations Platform

Proposal · June 2026
Overview

What we're building.

A compliance automation platform that connects your 6 systems, eliminates manual data entry, and gives your team a single place to see the full picture on any counterparty.

Today, the same data is entered by hand across Sumsub, Elliptic, Asana, Fireblocks, Google Drive, and Google Sheets. Every status change, KYC update, and KYT alert requires a manual update in multiple places. There is no central view.

The Solution

Three layers. One platform.

Layer 1 Both tracks

Automation Layer

Workflows that connect your systems. When something changes in one place, the others update automatically. Track A covers the 4 core data synchronisation workflows. Track B adds Fireblocks activation and full Slack bi-directional integration.

Layer 2 Both tracks

Unified Dashboard

Search any counterparty. See current status across all systems in a cards view. Track B adds a full chronological timeline: every action, alert, review, and decision logged in one place. The dashboard reads from your existing systems — it does not become a new database.

Layer 3 Track B only

Slack Integration

Outbound: onboarding completions, status changes, and alerts posted to your topic channels. Inbound: discussions in Slack that require follow-up automatically create Asana tasks or trigger investigations. No context switching required.

Scope

Two tracks. Same outcome, different scope.

Track A is the core platform: 4 workflows, status cards dashboard, no Slack. Track B is the full build: all 6 workflows, timeline dashboard, full Slack, and data export.

Track A
Core
€25,000 impl · €1,000/mo from M4
  • 4 core automation workflows
  • Status cards dashboard
  • Google SSO authentication
  • Audit log
  • Design phase (shared)
  • Timeline view
  • Slack integration
  • Fireblocks workflow
  • CSV / JSON export
Track B
Full
€41,000 impl · €1,350/mo from M6
  • All 6 automation workflows
  • Status cards + timeline dashboard
  • Google SSO authentication
  • Audit log
  • Design phase (shared)
  • Slack outbound notifications
  • Slack inbound → Asana task creation
  • Fireblocks approval → activation workflow
  • CSV / JSON export

Not included in either track: multi-role RBAC, mobile app, integrations outside the 6 listed systems, Slack messages surfaced inside the dashboard (pending your internal privacy review — available as a future add-on).

Design Phase — Shared

We design before we build.

The design phase is the same for both tracks: 3 focused sessions over 3–4 weeks. The output is a signed-off technical specification and a privacy spec that covers data flows, retention, and GDPR Art. 28 scope. Build starts only after sign-off.

1

Current state mapping

Walk through each of the 6 workflows as they exist today. We document every system, every manual step, every handoff. This is the source of truth for the build specification.

2

Future state + privacy

Define the target workflows. Jointly map what data flows through AdapttoAI infrastructure during processing, what is persisted and where, and what GDPR Art. 28 obligations apply. Output: a draft privacy spec your team can validate internally.

3

Spec sign-off

Walk through the full technical spec and privacy spec. Align on track choice. Sign off. Build begins.

3–4 hours per session. Total time investment from your team: approximately 10–14 hours.

Investment

Pricing.

Track A — Core
4 workflows + status dashboard
Month 1 — Design phase€5,000
Month 2 — Build€7,000
Month 3 — Build€7,000
Month 4 — Build + go-live€6,000
Total impl €25,000
Monthly from Month 4 €1,000 / mo
Track B — Full
All 6 workflows + full dashboard + Slack
Month 1 — Design phase€5,000
Month 2 — Build€9,000
Month 3 — Build€9,000
Month 4 — Build€9,000
Month 5 — Build + go-live€9,000
Total impl €41,000
Monthly from Month 6 €1,350 / mo

Monthly subscription starts the month after the system goes live (Month 4 for Track A, Month 6 for Track B). No subscription fee during the build phase.

Privacy & Data

How we handle your data.

Wincent operates in a regulated environment. We treat data handling as a first-class design decision, not an afterthought. Here is our current position and what the design phase will confirm.

Our infrastructure role

The platform connects your existing systems. Personal data flows through our infrastructure during workflow execution (routing, transformation, triggering). Our goal is a minimal data footprint: we do not replicate your client database, and nothing is persisted beyond what is operationally necessary for the workflow to function.

What the design phase resolves

Session 2 produces a privacy spec: exactly what data fields pass through our infrastructure, for how long, and under what conditions. Until that mapping is done, we will not make commitments we cannot verify.

Sub-processor status

Where personal data passes through our infrastructure during processing, AdapttoAI acts as a data processor (Art. 28 GDPR). We sign a Data Processing Agreement as part of the contract. The DPA scope is defined by the design-phase privacy spec.

Your team's input

The privacy spec requires your DPO or legal team to review and validate the data flow mapping before we sign off on scope. We structure Session 2 so that review can happen internally between sessions, without blocking the timeline.

Next Steps

How to move forward.

Feedback on this proposal. If yes:

  1. Sign NDA. We request any additional system documentation needed to confirm technical feasibility within 24 hours.
  2. Sign contract (including GDPR Art. 28 DPA).
  3. Start. :)
Appendix A

The problem.

The operational context behind this engagement.

6
Systems with no central case manager
5+ hrs
Daily manual update time per operator
~40
Concurrent onboarding processes at any time

80–90% of onboarding is manual. The same client data is entered by hand across Sumsub, Google Sheets, Elliptic, Asana, Fireblocks, and Google Drive — with no single source of truth. Every status change requires updating multiple systems. Errors compound. Reviews are delayed.

The team has already mapped what the automation should look like. The problem is not a lack of process clarity — it is the absence of an implementation layer to connect the systems that already hold the data.

Appendix B

Features explained.

What each component does and which track it belongs to.

Workflow 1
KYC completion → Asana + Sheets
When Sumsub marks a counterparty as KYC complete, the platform automatically creates or updates the corresponding Asana task and logs the status change in Google Sheets. No manual update needed.
Both tracks
Workflow 2
KYT alert → Asana investigation
When Elliptic flags a transaction, an Asana investigation task is created automatically with the alert details pre-populated. The team is notified; nothing falls through the cracks.
Both tracks
Workflow 3
Document upload → Drive filing
Documents uploaded in Sumsub during onboarding are automatically filed to the correct Google Drive folder structure. Folder creation, naming, and access are handled by the workflow.
Both tracks
Workflow 4
Cross-system status sync
Status changes across Sumsub, Elliptic, and Asana are kept in sync. When a case moves to a new stage in one system, the corresponding records in the others update automatically. Google Sheets remains the consolidated log.
Both tracks
Workflow 5
Asana approval → Fireblocks activation
When a compliance review is marked approved in Asana, the workflow triggers the corresponding Fireblocks onboarding or activation step. Removes a high-risk manual handoff in the final step of onboarding.
Track B only
Workflow 6
Slack bi-directional
Outbound: onboarding completions, KYT alerts, and status changes are posted to your Slack topic channels. Inbound: discussions in Slack tagged for follow-up automatically create Asana tasks or trigger investigation workflows — without leaving Slack.
Track B only
Status cards dashboard
Search any counterparty by name or ID. See their current status across all connected systems displayed as a set of cards: Sumsub KYC status, Elliptic screening status, open Asana tasks, Fireblocks state, latest document date. One screen. No tab switching.
Both tracks
Timeline dashboard
The full chronological history of every action, alert, review, and decision for a counterparty, aggregated across all systems in one feed. Available in Track B. Designed for audit reviews and escalation support.
Track B only
Google SSO
Authentication via your existing Google Workspace account. No new credentials to manage. Access is scoped to the Compliance team. Single-tier in the initial build (multi-role RBAC is a future add-on).
Both tracks
Audit log
Every action taken inside the platform — searches, exports, workflow triggers — is logged with timestamp and user identity. The log is read-only and append-only. Exportable on request.
Both tracks
CSV / JSON export
Export counterparty status snapshots or audit log ranges in CSV or JSON format. Designed for periodic compliance reporting and external audit requests.
Track B only