Transformation Roadmap and Strategic Recommendations
Prioritised use cases, a phased roadmap to end Q4 2026, directional investment, and sourcing options for Stage 2
1Executive summary
Deliverable 1 found the gaps and Deliverable 2 set the design: an owned data core, an automated ingestion layer, and specialist tools kept swappable around it. This deliverable turns that design into a plan. It ranks the work by where value, external risk, manual effort and labour cost all point together, sizes it backwards from the hard constraint that Stage 2 must complete before the end of Q4 2026, and lays out how the Group can source it.
The sequence is built to land value early and protect the deadline. The quick wins, AI drafting and an onboarding ingestion pilot, run first and do not depend on any core system going live. The owned data core and the data conversion that feeds it come next, because they gate everything downstream. Onboarding, the heaviest and highest-risk workstream, is the first full proof of the core, and the rest of the priority cluster follows. Everything is grounded in the figures the function heads gave during discovery, not in modelled estimates.
- Onboarding leads, on the evidence. The compliance team spends about 70% of the day on onboarding and periodic reviews, and told us automated onboarding with OCR would address roughly 90% of the team's work. That is the strongest observed case in the Group, and it validates the gap report's ranking.
- The data core gates the deadline. The single client and entity identifier and the golden record are the precondition for onboarding, reporting and compliance workflow. If the conversion slips, Q4 slips. It is the critical path.
- The value is in the labour base. The Group's annual payroll is about AED 36.5m, roughly USD 9.9m, and the priority cluster holds about 72% of it. That is where return is measured, not against the roughly USD 111k of annual licences.
- Hybrid sourcing is the realistic base case. The internal systems team is six people and sits under Finance. It can own bounded work, not the core build against this timeline, so the recommended model has CrossVal build and operate the core while the internal team owns reporting and configuration.
First, the direction change in Deliverable 2, an owned data core rather than a platform migration, needs the sponsor and the Group Systems lead to ratify it before the roadmap is committed. Second, onboarding has no owner today, its work is spread across four teams, so the roadmap includes an ownership decision, not just a build. Both are called out in Section 7.
2How to read this report
2.1 How the work was prioritised
The ranking uses four dimensions. Value and external risk are the scores from the gap report's matrix. Manual effort is an evidence-based read on the same one-to-five scale, grounded in the discovery figures rather than measured, so it is calibratable with the function heads. Labour cost and headcount are hard figures from the April payroll file. Where all four point the same way, the work ranks highest. Dependency then reorders within that: anything that reads the master data waits for the data core.
The figures cited against each use case in Section 3 are the ones the function heads gave during the discovery meetings. They are observed statements of current volume and effort, not CrossVal savings claims.
2.2 The closure paths and the four sourcing paths, carried forward
The closure-path tags from the gap report still apply: configure what exists (C), integrate what exists (I), remediate the data (D), build new capability (N). The four sourcing paths from the proposal also carry: commercial software (A), AI tools (B), CrossVal-built and operated (C), internal build (D). Section 3 tags each use case, Section 6 sets the sourcing model.
3Prioritised use cases
The prioritisation map below places every function on all four dimensions at once: manual effort across the horizontal, external risk up the vertical, monthly labour cost as the size of the bubble, and value as the depth of colour. The seven use cases that carry the transformation are the numbered items clustered in the upper right, where effort, risk and cost concentrate together. The lettered, dashed functions sit lower and lighter, and are the deferrals.
Key. 1 Onboarding and KYC · 2 Regulatory compliance and monitoring (2a outsourced service, 2b internal) · 3 Annual accounting and tax · 4 Corporate secretarial and renewals · 5 Audit · 6 Master data and reporting · 7 Invoicing and finance operations. Deferred: a Fiduciary and private banking · b Systems, IT and security · c Corporate structuring · d Lead management and CRM · e HR and recruitment · f Marketing.
Those seven are set out below, ranked by the four-dimension test and then reordered by dependency. Each rationale is grounded in what the function heads observed during discovery.
| # | Use case | Why it ranks here (observed in discovery) | Path |
|---|---|---|---|
| 1 | Onboarding and KYC | About 70% of the compliance day goes to onboarding and periodic reviews. The team said automated onboarding with OCR would address roughly 90% of its work. Roughly 20 to 30 cases a month, each fanning out per underlying entity. The team asked directly for one unique ID per company, director and shareholder, which is the golden record. Periodic reviews are, in their words, onboarding without the client delays, so the same build serves both. | NCI |
| 2 | Regulatory compliance and monitoring | The compliance monitoring programme runs on a manual twelve-tab spreadsheet rebuilt annually. Regulatory returns carry about 300 questions each across three supervisory authorities whose answers cannot be reused, taking 35 to 40% of the team's effort when due, with a high cost of error. This splits into a billable outsourced service (20 staff) and internal sign-off (7). | NC |
| 3 | Annual accounting and tax | Annual accounting is run by hand in Excel, not Xero, at about 8 hours per client across roughly 300 accounts, and the team's own goal is to halve that to 4 hours to cut price and grow volume. Tax filed about 400 returns last year, targeting 500 to 600, with current systems unable to generate FTA-compliant VAT or CT returns, so numbers are keyed into the portal by hand. The opinion itself stays with the professional. | NAI |
| 4 | Corporate secretarial and renewals | Board minutes run to at least 5 to 6 pages each across 400 to 500 active clients annually, drafted by hand from templates, creating a standing backlog. Compliance calendars are built manually with no automated deadline calculation. Renewals run to 1,200 to 1,600 filings a year at 6 to 7 emails per client, with files duplicated in Viewpoint just to hold the reminder logic. | NC |
| 5 | Audit | About 350 engagements a year. Working papers and reports are drafted from templates by hand, described by the team as the clearest case for AI drafting in the Group. Inflo stays as the audit tool and draws client and entity data from the record rather than re-keying it. | IB |
| 6 | Master data and reporting | Cross-entity reporting is the biggest finance time sink, spent mapping master-file IDs, client names and UBOs by hand and reconciling name mismatches, consuming senior time. The Group wants one client master carrying revenue, risk, ownership and entity, feeding dashboards and regulatory reporting. This is the owned record itself, so it gates the reporting on top. | DN |
| 7 | Invoicing and finance operations | About 284 M/HQ and 220 Rethink and RAA invoices a month across two systems, with any Group cash view assembled by hand. The AR provision workflow is a defined monthly sequence. This closes through configuration and integration alone, which makes it an easy early win. | CI |
Fiduciary and private banking, corporate structuring, HR and recruitment, and marketing remain deferrals. They score lower on value and risk, and the discovery figures confirm it: HR's pain is real (a full payroll-file rollback for any single change) but low external risk, and structuring's manual load is concentrated in proposals, already part-templated. Systems is the enabler rather than a target. None is ignored, but none earns a place in the Stage 2 priority sequence.
4The phased roadmap to end Q4 2026
The roadmap is sized backwards from the end-of-Q4-2026 backstop, across roughly six months from the start of Stage 2. It is deliberately staggered so that value lands before the core is complete, and so that the gating item, the data core, has room to run without blocking the quick wins.
4.1 The phases
| Phase | What it delivers | Why here |
|---|---|---|
| Quick wins Jul to Aug | AI drafting live via Claude and Co-pilot on board minutes, working papers, compliance summaries and proposals, on today's data. Onboarding and accounting run as experiments on a few select clients. | Independent of the core, so value lands in weeks and the first experience of the tools is a helpful one. This is also the delivery-risk hedge. |
| Data coding and conversion Aug to Sep | The owned record, the single client and entity identifier, and the conversion pipeline for the client and entity master. Legacy data standardised and resolved on load. | Everything that reads the master data depends on it. This is the critical path, so it starts as early as the direction is ratified. |
| Onboarding and accounting billing begins Sep to Oct | Onboarding runs end to end through KYC360 intake and the ingestion layer into the record, with the entity fan-out resolved once, and onboarding and accounting move from experiment to live billing. The annual accounting build runs in parallel. | This starts the second phase of the build but continues the quick-wins push, carrying the select-client experiments into live billing. Onboarding is the heaviest workstream and the first full proof of the core; annual accounting is a build because no tool covers it. |
| Compliance, corp sec, audit, finance Oct to Nov | Compliance calendars and monitoring as workflow off the record, corp-sec and renewals workflow with AI drafting, Inflo drawing from the record, Xero and finance integrated, reporting off the record. | These run on the record once it is live, so they follow the core rather than waiting on a platform. |
| Hardening and handover Nov to Dec | Integration hardening, remaining spokes, adoption and training rollout, and handover into the steady-state operating model. | Adoption was flagged as a real risk in the gap report, so it is a named phase, not an afterthought, and it closes before the backstop. |
Six months to stand up an owned core, convert the data, and land the priority cluster is compressed. The plan protects the deadline three ways: the quick wins deliver value regardless of the core, the build can be descoped to the priority cluster if needed, and the phases are staggered rather than sequential. But the compression is real, and the data conversion is the item most likely to move the end date. Section 7 treats it as the critical path.
5Return: the labour base, not the licence line
The return on this programme is not a software saving. The existing licences are roughly USD 111k a year, and reducing them is not where the value is. The value is in the labour base and how much of it the architecture gives back.
5.1 Where the value sits
Group payroll is about AED 36.5m a year, roughly USD 9.9m. The priority cluster, the functions in Section 3, holds about 72% of it. So the roadmap is pointed directly at where the labour cost concentrates. The return is measured as capacity given back in those functions and, in one case, as revenue.
5.2 Three ways the return shows up
- Capacity unlock, in the team's own terms. The compliance team put automated onboarding at roughly 90% of its work. The accounting team set its own goal of moving annual accounts from 8 hours to 4. These are the Group's observed figures, not our projections, and they describe capacity returned to higher-value work rather than headcount removed.
- Revenue leverage, in the outsourced compliance line. The 20-strong outsourced compliance service is billable. Automating its onboarding and monitoring lets each officer carry more client mandates, which is capacity converted into revenue rather than cost. This is the clearest fit to the revenue-per-professional question the sponsor set.
- Growth absorbed without linear hiring. The Group runs about 1,200 entities with heavy inter-entity servicing, where roughly 75% of Rethink's CT revenue comes from M/HQ upsell. Removing the duplicate entry across that servicing chain is what lets the Group grow entities and clients without adding staff in proportion.
5.3 How the levers become margin
Read together, the three levers point at operating margin, the sponsor's own frame of revenue per professional. Margin moves on two sides at once. On the cost side, the priority cluster's roughly 72% share of payroll does more work per dirham once duplicate entry and manual reconciliation come out, so the labour cost of servicing a given book of entities falls. On the revenue side, the billable outsourced compliance line converts freed officer time into additional client mandates, and the drafting and onboarding capacity lets the fee-earning teams take on more work without hiring in proportion.
The inter-entity servicing model is what makes this a margin story rather than a one-off saving. Because a single client is serviced and billed across M/HQ, Rethink and RAA, each duplicate removed compounds along the servicing chain instead of saving once. That is the operating leverage: revenue can grow against a payroll base that grows more slowly, and the gap between the two is margin. The same 1,200-entity book, serviced with less labour and carrying more billable work on the same base, lifts the margin the Group earns on its people, which is the return the licence line was never going to move.
We deliberately do not put a single savings percentage on this. The proposal committed to a plan built on observed data, and the honest position is that the capacity levers above are real and measured, while the conversion of that capacity into a specific financial return is a Group decision about redeployment and pricing, not a CrossVal estimate.
6Sourcing recommendations
The proposal set out three ways to run the build and the steady state. The choice turns on one hard fact from the payroll and org data: the internal systems team is six people, including the Head of Systems, and it reports up through Group Finance rather than holding an independent seat.
| Model | Shape | Assessment |
|---|---|---|
| CrossVal-led | CrossVal builds and operates the core, ingestion and AI layer, with spokes vendor-managed. | Fastest to the Q4 deadline. Keeps the build context with the builder. Highest external dependency. |
| Internal | The internal systems team builds and runs the core. | Not feasible for the core build against this timeline at six people. Would require significant Stage 2 hiring before the build could start, which the deadline does not allow. |
| Hybrid | CrossVal builds and operates the core, ingestion and AI; the internal team owns bounded reporting and configuration on the record; spokes are vendor-managed. | Recommended. Matches the internal team's real capacity, protects the deadline, and keeps ownership of the data and the reporting with the Group. |
The hybrid model is also the lower-lock-in option, because the Group owns the data throughout, so the operating partner can change without the record moving. Two conditions attach to it. The internal systems team needs a standalone technology seat rather than reporting through Finance, which is an operating-model change for Synthesis B. And if the Group wants to internalise the core over time, Stage 2 should carry an explicit hiring and capability plan for that team, sized so the handover is real rather than nominal.
CrossVal is a build-capable technology firm recommending a model in which CrossVal builds and operates the core. That is disclosed. The internal and hybrid alternatives are laid out with their real constraints so the Group can choose on the evidence, and the recommendation for hybrid rests on the team's observed size, not on CrossVal's interest.
7Dependencies and the critical path
7.1 The critical path
The binding sequence is data remediation, then the owned record and single identifier, then onboarding and everything that reads the master data. The quick wins sit off this path and proceed in parallel. If the data conversion moves, the end date moves, so it is the item to protect above all others.
7.2 The dependencies to clear
| Dependency | Rating | Action |
|---|---|---|
| Direction change ratified by sponsor and Systems lead | High | Decision at the next steering session, before the roadmap is committed. The owned-core direction departs from the original Quantios acceptance criterion. |
| Onboarding owner named | High | Onboarding is spread across four teams with no owner. Name one before the onboarding phase, or the build has no counterpart. |
| Data conversion completes on schedule | High | The critical path. Start early, gate dependent work on the single identifier, descope to the priority cluster if it slips. |
| Access to sources for conversion | Med | Viewpoint SQL, Xero, shared drives, KYC360 and the document stores. Confirm access early, as the gap report flagged access as a live blocker. |
| Internal team capacity for the hybrid split | Med | Six people under Finance. Confirm the standalone seat and any Stage 2 hiring if the Group wants to internalise. |
| Adoption across satisfied Viewpoint users | Med | Lead with quick wins, train by role, treat adoption as a funded phase. |
AAppendix: assumption log
Continues the logs from Deliverables 1 and 2. Numbering restarts for this deliverable.
| # | Assumption |
|---|---|
| 1 | The roadmap assumes Stage 2 begins shortly after Stage 1 delivery and runs roughly six months to the end-of-Q4-2026 backstop. |
| 2 | Use-case priority is set by value, external risk, manual effort and labour cost, reordered by dependency. Value and risk are the gap report's scores, manual effort is an evidence-based read for calibration, cost and headcount are payroll figures. |
| 3 | The volume and effort figures in Section 3 are as stated by the function heads in discovery, and are treated as observed rather than verified independently. |
| 4 | Detailed vendor pricing is a Stage 2 scoping activity and is out of Stage 1 scope. |
| 5 | Return is expressed as capacity unlock and revenue leverage against the observed labour base, not as a savings percentage. |
| 6 | Payroll is read as monthly AED and annualised at twelve months, converted at about 3.67 AED to the dollar. Confirmation of the currency and period is a low-risk open item. |
| 7 | The hybrid sourcing recommendation assumes the internal systems team stays at roughly its current size unless Stage 2 carries an explicit hiring plan. |
| 8 | The direction change from Deliverable 2 is assumed to be ratified before the roadmap is committed. If it is not, the sequence and the cost shape change. |
End of Deliverable 3. This report sequences and sources the work and frames the return. The Stage 2 go decision rests with Group leadership at the end-of-Stage review.