coMakeIT - Xebia Logo

Case Studies

coMakeIT helps a RegTech startup

build a cloud-native GRC platform

Cloud native GRC platform – RegTech

Cloud native GRC platform – RegTech

Download pdf version of the e-book

Regtech about

coMakeIT helped a startup from the Benelux region build a domain-agnostic, RegTech solution with smart assessments, inspections, and audits. comakeIT helped the startup fulfil its ambitious goal of building a customizable GRC (Governance, Risk, and Compliance) platform with flexible and independently deployable components.

Regtech challenges

The startup was led by a smart entrepreneur who provided the product vision, but lacked the support of a technology and engineering team which led to the following challenges:

  • Difficulty in translating product vision into implementable software specifications
  • Lack of design expertise and engineering talent to build a cloud-native platform
  • No experience/exposure to sophisticated technologies and software engineering practices
  • Time pressure for a quick go-to-market and conserve limited resources


Regtech solution

The ambitious founder of the startup approached with just one, broad use case, coMakeIT provided an end-to-end solution that encompassed:

  • Full suite of product engineering services ranging from architecture, technology choice, UX design, development, CI/CD/CT, and DevOps
  • Defined a detailed roadmap for product buildout and quickly developed a MVP for market validation
  • Put together an agile product team to work exclusively on an iterative product buildout to deliver bi-weekly updates
  • Setup an end-to-end dev street with workflow, QA automation, and cloud deployment

Regtech business impact

  • Disrupted the RegTech market with a domain-agnostic, cloud-native GRC solution
  • Successfully setup a high-quality, dedicated dev engine to deliver continuous product updates
  • Delivered an MVP within 3 months and a product 1.0 within 8 months for use by a leading insurance business
  • Quickly gained traction in the European markets across diverse domains
  • Mitigated technology, engineering, and execution risks