Paperwork as Product: Belfast's Quiet Play for the Compliance Market
Photo: business documents compliance paperwork office desk laptop, via newsbusinesstime.com
Compliance is rarely the story a fintech founder wants to tell. It is slow, unglamorous and expensive, and in most pitch decks it appears only as a line item to be minimised. In Belfast, a small but growing group of founders is arguing the reverse: that the province's awkward regulatory geography is a rare and sellable asset.
The argument runs roughly like this. A firm operating in Northern Ireland sits inside the UK's supervisory perimeter while remaining exposed to EU rulebooks through cross-border trade, the Windsor Framework and the practical reality of a land border. That means two sets of reporting expectations, two interpretations of what counts as adequate customer due diligence, and two different views on how far a firm must go to evidence that its systems work. Most financial businesses treat this as friction. A regtech business treats it as a specification.
Two rulebooks, one build
The mechanics are well rehearsed. UK firms answer to the Financial Conduct Authority and, where relevant, the Prudential Regulation Authority. Northern Ireland firms trading into the Republic of Ireland, or serving customers who hold euro accounts, encounter the EU's own architecture: the Anti-Money Laundering Directives, the emerging AI Act obligations, the Digital Operational Resilience Act and a stream of technical standards that arrive with their own reporting templates.
The interesting question is not whether this is burdensome — it plainly is — but whether the burden is portable. A compliance workflow built to satisfy the stricter of two regimes, and to produce evidence in a format that satisfies both, is a workflow that can be sold to firms in London, Dublin, Edinburgh or Amsterdam. That is the commercial thesis quietly circulating in Belfast's co-working spaces.
Several teams are working on variations of it. One line of attack is customer due diligence and ongoing monitoring, where the pain of reconciling two beneficial-ownership standards is acute and the software is largely rules-based. Another is regulatory change management: the unglamorous business of tracking which rule has moved, which policy document it touches, and which committee needs to sign off before the deadline. A third is audit evidence — the automated capture of decisions so that a supervisor's request can be answered in hours rather than weeks.
Why Belfast, and why now
The cluster argument is not new. Belfast has spent a decade building a financial services back office for global banks, and that has left a residue of people who understand control frameworks, testing and remediation at a granular level. Queen's University and Ulster University continue to push graduates into law, data science and computer science. Catalyst Inc and the wider startup infrastructure have become reasonably good at early-stage support.
What has changed is the buyer. Mid-tier firms — the building societies, the payment institutions, the mortgage administrators and the growing number of small banks — are now expected to evidence more, more often, with fewer people. Enterprise compliance software was priced for the top of the market. There is genuine white space beneath it.
There is also a reputational dividend waiting to be collected. Northern Ireland's fintech brand is currently built on payments, on cyber security and on a slightly romantic story about cross-border ingenuity. Compliance is a harder sell to a politician but an easier sell to a chief risk officer.
The counter-arguments
Three objections deserve airtime.
The first is market size. A cluster of ten or fifteen small firms selling compliance tooling does not transform a regional economy, and the exit routes for regtech businesses are narrower than for consumer fintech. Acquirers exist, but they are few and price-sensitive.
The second is that regulation is not a stable product specification. Rules change, sometimes quickly, and a small team can be left maintaining a codebase against a moving target with no pricing power. The firms that survive this tend to own a data asset — a rule library, a mapping of obligations to controls — rather than a single workflow.
The third is talent competition. The same compliance analysts who make good product managers are the ones the banks need to keep their own houses in order, and banks pay reliably.
What would make the difference
If the region is serious about this niche, the levers are unremarkable but specific. Procurement is the obvious one: public bodies and the devolved administration could open doors to small compliance vendors rather than defaulting to the large incumbents, giving young firms a reference customer that travels.
A shared regulatory intelligence resource — a maintained, machine-readable map of divergences between UK and EU obligations — would be a genuine piece of cluster infrastructure, not unlike the shared testing environments other jurisdictions have built.
And there is a marketing point that Belfast has not yet made well. The province is one of very few places in Europe where a compliance product can be designed against two regimes simultaneously by people who live under both. That is a claim worth making in a sales meeting in Frankfurt.
None of this guarantees a cluster. Regulatory arbitrage has a habit of evaporating, and complexity is only an advantage while customers are willing to pay to have it reduced. But the framing is a useful corrective to the default Northern Ireland story, in which dual regulation appears only as a cost. For a small number of Belfast teams, it is starting to look like inventory.
