For consultancies, NGOs and government contractors

I build the tools that take the busywork out of compliance.

Checkers, trackers, assessments and reports, built for your rules and your clients. Fixed price, live in weeks, and every fact traced to its source.

Book a free 30-minute call What would it save you?

Three products of my own, live today
Fixed prices in USD
One went from idea to launch in about a day
Reply within one working day

Sound familiar?

The work that eats your week, and the tool that ends it

If your organisation lives with rules, evidence and deadlines, some of this will be familiar.

Checking the same documents by hand

A checker that reads the document and lists what's missing, each item linked to the rule it comes from.

Chasing certificates and evidence

A tracker that holds every certificate and expiry date, and emails reminders before anything lapses.

Rewriting the same report every week

A form or spreadsheet that becomes a clean, branded PDF report in seconds.

Visitors who leave without enquiring

A short self-assessment on your website that gives them a useful result and sends you a qualified lead.

Quick estimate

What would a tool be worth to you?

Pick one repetitive task and use your own numbers.

240

hours a year back

USD 14,400

of time a year

A USD 3,500 Blueprint and Build would pay for itself in about 12 weeks.

Talk it through, free

Your numbers × 48 working weeks. An estimate to start a conversation, not a promise.

Proof, not promises

Four gaps I found, and what I built to fill them

The proof is in the product. Each one is live: try it for yourself, and see exactly how it works.

For Government contractors

TenderAxiom

The problem: Bids get rejected for a missed requirement or a claim the company can't back up.

What I built: Free tools that turn a tender into a compliance checklist and flag what changed between versions, plus a USD 149 check that tests every claim in a proposal against the company's own records.

How it works: Two independent checks. An AI model proposes each claim and the record it relies on, while a separate rule-based sweep, with no AI, pulls every amount, percentage, date, standard and named organisation out of the proposal and matches it to the records. A claim passes only if a single record supports every detail, so facts stitched together from two records are caught, and expired certificates are flagged.

Imports new US federal opportunities every day and publishes them as plain-English pages, automatically.

Try the free tools → How I built it

For People living near data centres

DutyNode

The problem: Noise limits measured in dBA miss the low-frequency hum residents actually complain about.

What I built: A free noise checker based on World Health Organization and UK Government methods, a tracker of data-centre noise lawsuits with sources, and a USD 39 evidence report.

How it works: A quick screen compares the C-weighted and A-weighted levels against the 10, 15 and 20 dB thresholds in the WHO guidelines (1999) and the UK Government's DEFRA review (2003). A full screen checks one-third-octave readings from 10 to 160 Hz, band by band, against the University of Salford's NANR45 reference curve. Every result cites its source and is labelled as a screen, not a ruling.

Went from idea to live product, with payments and email, in about a day.

Run a noise check → How I built it

For Local NGOs

Aidfolio

The problem: Local NGOs must pass demanding donor assessments, and are often funded at overhead rates that don't cover their real costs.

What I built: Free tools: a readiness check for partner assessments, a true-overhead calculator with a negotiation brief, and a risk-sharing planner.

How it works: The readiness questions are mapped to the three assessments local NGOs most often face: the HACT micro-assessment, the UN PSEA partner assessment and the Charter for Change due-diligence passport. The risk-sharing planner follows the eight risk categories and seven stages of the Risk Sharing Framework (2023).

Free and open source. It runs entirely in the browser and works offline, so nothing anyone types is uploaded.

Try Aidfolio → How I built it

For Boards, operators and private clients

Confidential Risk Consulting

The problem: After an incident, the question is what you can prove you did, and most records can't answer it.

What I built: Reviews that test whether an organisation's safety and security records would stand up, using ISO 31000 and my own Lr Model.

How it works: The Lr Model adds a Documentation Coefficient to an ISO 31000 risk assessment. It measures the liability that remains when a control exists but can't be proven on paper, so the gap can be closed before an incident rather than argued over after it.

The method is published free, as a research paper anyone can read.

Visit CRC → How I built it

How it works

Three steps, fixed prices, no surprises

Step 1

Blueprint

USD 500 · 1 week

We work out exactly what the tool must do
Written plan and a clickable prototype
A fixed quote for the build
The fee is credited in full if you go ahead

Step 2

Build

from USD 3,000 · 2–3 weeks

A live, tested tool on your own domain
Payments, email and reports where needed
A plain-English handover; you own what you pay for

Step 3

Care

from USD 150 / month

Hosting, monitoring and security updates
Fixes and small changes
Cancel any time

The Blueprint promise: if it doesn't give you a clear, buildable plan, I'll refund it in full.

Founding clients: 3 of 3 places left. My first three Build clients get 30% off in return for permission to publish the project as a case study, with a short quote from you.

Also available: analyst and due-diligence contracts

Remote research, partner and company due diligence, and compliance reviews, for short or longer contracts, worldwide. Tell me what you need.

How I work

What you can count on

Every fact sourced. If a tool states a rule, a threshold or a figure, it says where it came from.
Fixed price, agreed up front. The Blueprint ends with a quote that doesn't move.
Tested before it goes live. Automated checks on every build, and you see them pass.
Plain English. No jargon in the tool, the handover or my emails.
Quick replies. Within one working day, wherever you are.

What I don't do

When I'll send you elsewhere

I'm not a lawyer, an accountant or an acoustician. I don't give legal advice or act as an expert witness. I build the tools and do the research, and when you need a licensed professional, I'll say so and help you find one.

About

Hello, I'm Richard

I started out as a Medic in the New Zealand Defence Force, including international peace-keeping and monitoring missions. I went on to aviation and maritime security with the New Zealand government and private sector.

Every one of those jobs taught me the same lesson: when something goes wrong, what matters is what you can prove you did. I wrote a research paper on exactly that, the Lr Model, on how organisations can show they took reasonable care. Today I put the same thinking into software, and I build the tools I wish those organisations had had.

I'm the Principal Analyst of Confidential Risk Consulting. I'm based in Auckland, New Zealand, and work with clients anywhere, remotely.

Connect on LinkedIn · Read my research paper (free)

Questions

Good to know

Why work with one person rather than an agency?

You deal with the person who builds your tool, from the first call to the handover. The price is fixed, you own what you pay for, and if the Blueprint doesn't give you a clear plan, you get your money back.

Do you use AI?

Yes, AI tools help me build faster. Every tool is tested, every fact is checked against its source by me, and nothing goes live until the tests pass.

Who owns the tool?

You do: the code, the content and the domain. If you'd rather I host and look after it, that's the Care plan, and you can take it elsewhere at any time.

Can you work in my time zone?

Yes. I work remotely with clients worldwide and schedule calls at a time that suits you.

How do I pay?

By card through Stripe, in USD. The Blueprint is paid up front; Builds are paid half at the start and half on handover.

What if my problem isn't a software problem?

Then I'll tell you on the call, and point you to what would help instead. The call is free and there's no obligation.

Get in touch

Book a free 30-minute call

Tell me a little about the problem. No obligation, and no sales pitch.

You send a few lines about the task or the problem.
I reply within one working day with times for a call, or an honest answer if I'm not the right person.
On the call we work out whether a tool would pay for itself, and what it would cost.

Prefer email? richard@confidentialriskconsulting.com