Strictly Confidential  ·  Access Restricted
Thomas K Matecki
Engagement Proposal

This document contains commercially sensitive and financially material information prepared exclusively for MSS Investments Holding. Please enter the access code to proceed.

Incorrect access code. Please try again.

Access codes are issued directly by Thomas K Matecki.
Unauthorised access is strictly prohibited.

Strategic Engagement Proposal  ·  Swiss Payments Platform  ·  June 2026
Technical Due Diligence Proposal · Phase Zero · £27,500 Fixed Fee

From architectural promise
to commercial reality.

A structured proposal from Thomas K Matecki — former CTO of Zilch (B+ unicorn) — setting out an independent assessment of the Swiss Payments platform and three mandate frameworks to take it to commercial viability, institutional credibility, and sustainable revenue.

An independent technical due diligence proposal from Thomas K Matecki — former CTO of Zilch ($2B+ unicorn) — covering a structured 14-day on-site assessment of the Swiss Payments platform, with full scope, deliverables, and a fixed fee of £27,500. Equivalent in rigour to PwC or Deloitte. Uniquely qualified in operator depth.

Submitted by
Thomas K Matecki
Entities
NICO Capital Ltd & Nexa9
Submitted to
MSS Investments Holding
Date
June 2026
Classification
Strictly Confidential
Strategic Context

An honest assessment — and a serious offer.

The platform, the execution gap, and why it matters to MSS.

Following the technical review of 22 June 2026, this proposal offers something more valuable than encouragement: a clear-eyed assessment of where the platform stands, and a structured path to close the gap — at pace, and to an institutional standard that MSS Investments Holding can stand behind.

Swiss Payments occupies a strategically significant position within the MSS portfolio — a multi-tenant fintech infrastructure platform at the intersection of regulated fiat payments, digital asset custody, and B2B financial services. MSS's mandate to deploy capital with conviction toward the platforms of future economies is well-served by this investment thesis. The execution, however, presents a material risk to that thesis if not addressed with appropriate expertise and urgency.

Swiss Payments has genuine architectural depth. The multi-tenant database architecture built from the database layer up, Fireblocks institutional custody, double-entry ledger, real-time compliance monitoring framework — these are not trivial constructions. The engineering team has done serious work. The gap is not in the technology. It is in the leadership layer above it.

"The platform is not broken. It is unfinished. In regulated finance, the distance between unfinished and live is not measured in features — it is measured in liability, regulatory exposure, and the confidence of the clients you are trying to win."
— Thomas K Matecki, post-review assessment, 22 June 2026
The Weight of What Is Being Built

Knowledge Without Experience Is the Most Expensive Mistake in Fintech.

The BaaS and multi-tenant fintech infrastructure sector carries a well-documented graveyard of platforms that had strong technology and insufficient experienced leadership. Understanding this history is not pessimism — it is the prerequisite for not repeating it.

Every platform in the table below had sound architectural foundations. Every one had a team that believed it was close to launch. Every one failed for reasons that experienced product and compliance leadership would have caught early — and cheaply. The pattern is so consistent it constitutes a law of the sector: engineering capability without operator experience is not a risk factor. It is a predictive indicator of failure.

PlatformOutcome Root Cause Direct Parallel to Swiss Payments Today
Synapse Collapsed 2024
00M+ frozen
Engineering-led. Compliance treated as a feature. No experienced compliance operator in leadership. Believed the technology was the product. Swiss Payments compliance module is a case-management UI. No SAR workflow, no automated TM rules, no risk scoring. Identical failure mode — pre-collapse.
Railsr (Railsbank) Administration
CVA 2022
Strong architecture, no commercial discipline. Scaled headcount and infrastructure without commensurate revenue traction or operational governance. 35 FTE. 2 product managers. No CPO. No live revenue. Engineering is ahead of every other business function by 18 months.
Wirecard Fraud / Collapse
€1.9B missing
Regulatory opacity exploited. Licensing described in vague, unverifiable terms. Compliance governance was theatre, not substance. "Many licences" was the direct response to a question about FINMA and EMI status. Licensing opacity at this stage is not a minor gap — it is a structural red flag.
Pockit / Anna Money Near-failure
Expensive pivot
Launched into regulated environment before compliance infrastructure was genuinely ready. FCA scrutiny post-launch consumed fundraising runway. Mid-July go-live target cannot be achieved as currently structured. Premature launch into a regulated environment is recoverable — but the cost of remediation post-launch is 5–10× the cost of getting it right before.
Nium Thriving
B+ valuation
Brought experienced compliance and product leadership in early. Licensing clarity was treated as a commercial asset, not an administrative burden. The path Swiss Payments can take — with the right leadership in place, now.

The weight of what Swiss Payments is building demands to be stated plainly. This is not a web application. It is a regulated financial infrastructure platform handling fiat balances, digital asset custody, cross-border payment rails, and AML obligations across multiple jurisdictions. The liability exposure — to MSS Investments as the capital provider, to Swiss Payments as the operator, and to every tenant that onboards — is material and real.

A generalist consultant cannot bridge this gap. A software agency working to a spec cannot bridge this gap. What is required is an operator who has personally navigated every one of these dimensions at unicorn scale, under regulatory scrutiny, with real capital at risk. That is precisely what this proposal offers — and it is why the fees and terms are structured as they are.

Platform Findings — June 2026

What the review found — and this is only the surface.

Material Deficiencies — Severity Classification for Investment Committee.

The findings below were identified during a time-constrained initial review in which the team did not have access to a demo account, had limited time with the platform, and could not ask all relevant questions. These eight deficiencies should be understood as the visible tip of the iceberg — the issues identifiable from the outside. The full picture will only emerge during the structured 14-day on-site due diligence programme.

Important context on the scope of this assessment: The initial technical review was conducted without sandbox or demo account access, without sufficient time to interrogate the full product backlog, and without the opportunity to speak with all key technical and commercial stakeholders. What is presented below represents observable symptoms — the surface-level indicators that point toward deeper structural gaps. A full diagnosis requires direct, hands-on access. The on-site due diligence programme (Phase Zero) exists precisely for this reason, and the findings it surfaces may be materially more significant than those presented here.

Engineering Practices — Observed & Recommended

Engineering discipline within the Swiss Payments team appears to follow broadly accepted practices — code structure, version control, and general process are present. However, the current approach lacks the velocity structure required to support a platform of this ambition at the pace the market demands. Specifically: teams are not yet split into focused, concurrent squads working overlapping backlog items in parallel. This single structural change — dividing the engineering organisation into dedicated product, compliance, infrastructure, and QA streams operating simultaneously against a properly prioritised backlog — would materially unlock delivery capacity, accelerate QA cycles, and most importantly, replace the current fictional go-live dates with real, evidence-based ETAs that the business can plan and communicate against. This is not a criticism of the engineers — it is a product and delivery leadership gap that is entirely addressable.

🔴 Critical
Demo from localhost — no production environment

Served from localhost:3000. No staging/production parity. Any published go-live date is commercially fictitious until resolved.

🔴 Critical
Currencycloud: 100% error rate — integration DOWN

Core payment rail completely inoperative. No active incident response at time of review. Mission-critical failure requiring immediate escalation.

🔴 Critical
No card issuer or programme manager selected

Realistic procurement-to-live: 90–180 days minimum. Mid-July card issuance go-live is not achievable under any current trajectory. The team does not appear to understand this timeline.

🔴 Critical
Compliance module is a case-management UI

No SAR filing workflow. No automated transaction monitoring rules. No risk-scoring engine. This is a regulatory liability in any AML-obligated jurisdiction.

🟡 Significant
KYB entirely manual — no automated workflow

Full manual operator intervention required. Unscalable at any meaningful volume; creates compounding compliance exposure with every tenant onboarded.

🟡 Significant
B2C2 trading integration: 5.06% error rate

Would fail standard operational due diligence from any regulated tenant or institutional counterparty. Commercially unacceptable in its current state.

🟡 Significant
35 FTE, 2 product managers, no CPO

Engineering-led without product governance or commercial function. The organisation is optimised for build velocity, not for revenue, compliance, or client success.

🟡 Significant
Licensing: "many licences" is not an answer

No specifics on FINMA, EMI, or SRO scope provided when asked directly. Untenable for tenant due diligence, investor data rooms, or any regulatory conversation.

Phase Zero — Non-Negotiable

14 Days On-Site in Dubai. The Only Credible Starting Point.

No engagement of this magnitude — financial, operational, and reputational — is entered into without direct, in-person verification. Before any mandate commences and before any roadmap is finalised, Thomas K Matecki will conduct a structured 14-day on-site due diligence programme in Dubai, working directly and intensively alongside the Swiss Payments leadership, engineering, compliance, and banking partner teams.

On-Site Due Diligence Programme · Dubai
14 Days. Every Dimension. Verified First-Hand.

This is not a site visit or a stakeholder tour. It is a working deployment — Thomas embedded within the team, with full access to systems, people, documentation, and partners. The output is a verified, independently-produced assessment of every dimension of the platform that becomes the definitive basis for the mandate scope, remediation priorities, and the 90-day execution plan. No assumptions. No remote inference. Only what has been seen, tested, and verified in person.

Week 1 · Days 1–3
Technical Architecture Deep Dive

Full codebase review. Database architecture. All integration audits — Fireblocks, Currencycloud, B2C2, Kraken, Wise, Bvnk, Modulr. CI/CD pipeline. Security posture. Infrastructure topology. Localhost-to-production gap assessment.

Week 1 · Days 4–5
Compliance & Risk Framework

AML/CFT framework documentation review. KYC/KYB workflow walk-through. SAR procedures assessment. Transaction monitoring rules. PEP screening. Sanctions compliance posture. Regulatory licensing documentation.

Week 1 · Days 6–7
Banking & Partner Relationships

Sumsub KYC integration review. Fireblocks custody configuration. Kraken Pro trading setup. Banking rail health check and error rate triage. Partner contract review. Settlement flow verification.

Week 2 · Days 8–11
Commercial & Regulatory Assessment

Licensing documentation deep review. Banking partner agreements. Tenant pipeline and commercial model. Go-to-market strategy evaluation. Competitive positioning. Revenue model stress-test.

Week 2 · Days 12–13
Organisational & Delivery Assessment

Leadership interviews. Team capability mapping. Product roadmap review. Sprint and delivery process. Org structure assessment. Reporting lines. Gap analysis against required capabilities for commercial scale.

Week 2 · Day 14
Board-Ready Output & Debrief

Verified findings report delivered. Prioritised remediation plan. Revised go-live date with full rationale. 90-day mandate execution plan. Investment Committee briefing pack. Mandate scope confirmed and signed.

Logistics: All travel, accommodation, and ground transportation costs for the 14-day programme are covered by Swiss Payments / MSS Investments Holding as part of the engagement. These costs are entirely separate from and in addition to the mandate engagement fee. Thomas K Matecki will coordinate logistics arrangements directly with the relevant contacts upon mandate confirmation.

Competitive Landscape

The market Swiss Payments is entering — and the cost of misjudging it.

The BaaS and multi-tenant fintech infrastructure market has consolidated around a small number of well-capitalised, compliance-credible platforms — and buried the rest. Position is determined by licensing clarity, compliance depth, and developer experience, in that order.

PlatformStatusPositioningLesson for Swiss Payments
SynapseCollapsed 202400M+ funds frozen. Engineering-led, compliance deprioritised.Compliance is not a feature. It is the product.
RailsrAdministrationStrong architecture, insufficient commercial discipline and capital management.Architectural quality without revenue discipline is a slow collapse.
NiumLive · B+ valuedGlobal licensing, genuine enterprise clients, disciplined expansion.Licensing breadth and enterprise sales form the defensible commercial moat.
CurrencycloudAcquired by VisaSWIFT/SEPA rails. Acquired for infrastructure value.Infrastructure exits at premium — only when compliance is unimpeachable.
ModulrLive · UK EMISME/payroll positioning. Focused ICP, disciplined growth.Narrow ICP with deep execution beats broad ambition with shallow governance.
SolarisbankLive · GermanyFull banking licence, B2B, deep regulatory credibility.Licensing clarity is a commercial asset of the first order.
SwanLive · France EMIDeveloper-first white-label. Elegant API. European positioning.Developer experience is a durable differentiator at the tenant acquisition stage.
The Proposed Partner

Thomas K Matecki — The credential is the track record.

Two decades building, scaling, and commercialising regulated financial products — including the technology platform that took Zilch from concept to a B+ unicorn with 3,000,000+ customers. This is directly applicable experience, not sector adjacency.

The Investment Committee should note that the proposed engagement is not a consultancy arrangement in the conventional sense. It is an operational partnership with a founder-operator who has personally delivered at the scale, under the regulatory conditions, and across the technical dimensions that Swiss Payments is attempting to reach.

NICO Capital

NICO Capital Ltd

Neobank ecosystem · nico.money
Caribbean & Dominican Republic market
£10M seed raise — active 2026
Co. No. 16839544 · England & Wales

Nexa9

Nexa9

Full-service technology & software house
London, United Kingdom · nexa9.co
Fintech delivery · Senior engineering
Ready to deploy immediately

Zilch

Zilch Technology (Former)

B+ unicorn valuation
Scaled 100K → 3M+ customers
Former Chief Technology Officer
UK's leading BNPL fintech platform

Zilch
Former CTO — Zilch Technology (B+ Unicorn, 3,000,000+ Customers)

Architected and scaled the complete technology platform across the full growth arc from concept to unicorn valuation and beyond. Direct, hands-on experience with card programme procurement and deployment, AML/KYC compliance engineering, real-time payment rail integration (SWIFT, SEPA, Faster Payments), Fireblocks institutional custody at scale, high-availability infrastructure under FCA scrutiny, and multiple institutional fundraising rounds. This is not relevant prior experience — it is an exact prior-art precedent for what Swiss Payments is attempting to build.

NICO
CEO & Co-Founder — NICO Capital Ltd (Registered England & Wales, Co. No. 16839544)

Building Nico Money (nico.money), Nico Pay, and Nico Bank — a multi-product neobank ecosystem targeting the Caribbean and Dominican Republic: 11M+ population, 0B+ annual remittance inflows, zero dominant neobank incumbent. Currently in active £10M seed capital raise. NICO Capital is a prospective anchor tenant of Swiss Payments infrastructure from day one of any engagement — generating contracted monthly recurring revenue and providing Swiss Payments with its first named, institutionally credible white-label client. Thomas controls both sides of this relationship.

Nexa9
Founder — Nexa9 · Full-Service Technology & Software House (nexa9.co)

London-based engineering and product studio with deep fintech delivery capability. Ready to deploy immediately: senior full-stack engineers, fintech product designers, QA engineers, compliance module developers, and technical architects. Nexa9 operates as an extension of Thomas's mandate — not as a separate vendor. Deliverables are owned end-to-end. This eliminates the coordination overhead that characterises multi-vendor engagements and ensures complete accountability for outcomes, not just outputs.

Technical Due Diligence — Scope & Investment

What You Are Getting. What It Costs. Why It Is Exceptional Value.

The Phase Zero on-site programme described above is a full institutional-grade technical due diligence engagement — equivalent in rigour to what PwC Deals, Deloitte Financial Advisory, or KPMG Transaction Services would deploy on a regulated fintech asset of this complexity. The difference is who is doing it, and what that is worth.

£

Market Rate Benchmarking · What PwC or Deloitte Would Charge

A Big 4 firm conducting equivalent technical, regulatory, and operational due diligence on a regulated fintech platform would charge between £65,000 and £120,000 for the same scope — often more.

PwC Deals / FS Advisory
£75,000–£120,000
4–6 week engagement. Senior Manager + team. High brand overhead. Generic fintech frameworks applied by consultants who have not built or scaled a regulated platform.
Deloitte TAS / Tech DD
£65,000–£95,000
Comparable scope and rigour. Strong process discipline, comprehensive deliverables. Rate cards reflect partner overhead and firm infrastructure, not operator depth.
Thomas K Matecki + Nexa9
£27,500 fixed
Same rigour. Deeper operator insight. No firm overhead. Led by a founder who has personally built, scaled, and exited this exact type of platform — with Nexa9 senior engineers embedded throughout.

The rate differential is not a reflection of scope reduction — it is a reflection of the absence of Big 4 brand overhead, junior team padding, and the inefficiencies inherent in deploying a large firm on a focused engagement. What MSS Investments receives at £27,500 is a named, accountable senior operator — not a team of analysts working to a partner's checklist.

A former unicorn CTO conducting a hands-on technical due diligence on a fintech platform at this price point is not a market rate. It is a strategic opportunity that exists precisely because Thomas K Matecki has a direct interest in the outcome — as a potential transformation partner, and as the founder of NICO Capital, a prospective anchor tenant of the very platform being assessed.

Full Scope of Work — 14 Days On-Site, Dubai

Every workstream below is executed by Thomas K Matecki personally, supported by Nexa9 senior engineers where depth of technical coverage demands it. All findings are documented to a standard suitable for Investment Committee presentation and board-level decision making.

Workstream 1 · Days 1–3
Technical Architecture & Codebase Review
  • End-to-end codebase and architecture review with the engineering lead
  • Database design, multi-tenancy model, and data integrity assessment
  • Infrastructure, deployment pipeline, and environment configuration review
  • Security controls, authentication, and key management assessment
  • API surface, external-facing interfaces, and integration layer review
  • Gap analysis between current state and institutional production readiness
Deliverable: Technical Architecture Report with Red / Amber / Green ratings per component
Workstream 2 · Days 4–5
Compliance Engine & Regulatory Risk
  • AML/CFT framework review — policies, procedures, and implementation reality vs. stated position
  • Compliance module assessment against what a production-grade engine requires
  • KYC and KYB workflow depth and automation review
  • Transaction monitoring: rule coverage, alert management, and escalation paths
  • Sanctions and PEP screening: provider, frequency, and FATF coverage assessment
  • SAR capability: end-to-end documentation of current state and gap to regulatory obligation
Deliverable: Compliance Gap Analysis — regulatory liability matrix with prioritised remediation
Workstream 3 · Days 6–7
Integration Health & Third-Party Dependencies
  • Custody and digital asset integration: configuration, policy controls, and transaction security review
  • Payment rail health check: all live integrations assessed for reliability, error rates, and operational risk
  • Trading integration review: latency, error rates, and settlement mechanics
  • Banking rail stack: redundancy, failover provisions, and substitution options where issues are identified
  • KYC provider integration: configuration depth, webhook reliability, and data compliance
  • Card programme pathway: current state, provider options, and realistic procurement timeline
Deliverable: Integration Health Report — reliability ratings, risk flags, and remediation recommendations
Workstream 4 · Days 8–9
Product, Ledger & Transaction Engine
  • Ledger architecture: chart of accounts structure, posting rules, and template engine review
  • Ledger integrity: audit trail, daily reconciliation processes, and compliance reporting capability
  • Settlement and clearing: cross-tenant flow review, nostro management, and drift monitoring
  • Transaction engine: payment rail configuration, bulk processing, and scheduled worker assessment
  • Multi-currency wallet: fiat and crypto account management and balance reconciliation
  • Fee engine: calculation logic, accrual posting, and tenant-level configuration review
Deliverable: Product & Ledger Assessment — transaction integrity report and identified risks
Workstream 5 · Days 10–11
Licensing, Regulatory Position & Commercial Model
  • Full licensing documentation review — all referenced licences verified against scope, jurisdiction, and permitted activities
  • Regulatory status assessment across relevant jurisdictions
  • Banking partner agreement review: key commercial terms, obligations, and risk provisions
  • Tenant commercial model validation: pricing structure, revenue model, and unit economics
  • Onboarding process review: current workflow, automation gaps, and compliance risk at scale
  • Card programme pathway: options assessed, realistic procurement timeline established
Deliverable: Regulatory & Commercial Assessment — licensing clarity document and commercial model review
Workstream 6 · Days 12–13
Engineering Organisation & Delivery Capability
  • Leadership and team interviews across technical, product, and commercial functions
  • Delivery process review: sprint structure, release management, and incident response
  • Engineering organisation assessment: current structure vs. optimal parallel-squad model for the platform's ambition
  • Product management maturity: backlog discipline, roadmap credibility, and stakeholder alignment
  • QA and testing coverage review against production readiness requirements
  • Go-live date credibility: current target assessed against verified delivery capacity — a realistic, evidence-based date produced as a named output
Deliverable: Org & Delivery Assessment — capability map, structural recommendations, and credible go-live date
Day 14 · Final Deliverable
The Board-Ready Due Diligence Report
Executive Summary
Headline findings. Red / Amber / Green ratings across all six workstreams. Top 5 risks ranked by severity and commercial impact. Recommended immediate actions.
Detailed Findings Report
Full workstream documentation. Evidence-based findings. Data room index. Appendices with integration health data, architecture diagrams, and compliance gap matrix.
90-Day Remediation Plan
Prioritised action plan. Revised, credible go-live date. Resource and cost implications for each remediation item. Investment Committee briefing pack ready for distribution.
Fixed Fee · All-Inclusive · No Surprises
£27,500
14 days on-site Dubai · All six workstreams · Full deliverable package
Fixed fee, no day-rate escalation
Staged payment: 40% on engagement confirmation, 60% on report delivery
Travel, accommodation & logistics covered separately by MSS / Swiss Payments
Scope changes by written agreement only
Full NDA · Report ownership transferred to MSS Investments on completion

The fee covers Thomas K Matecki's personal time and intellectual engagement across all 14 days, supported by Nexa9 senior engineering resource for technical workstreams. At a Big 4 equivalent day rate of £2,500–£3,500 for a Director-level operator with this profile, 14 days alone would cost £35,000–£49,000 in professional fees — before junior team support, firm overhead, or deliverable production. £27,500 is not a discounted service. It is an aligned interest.

Thomas K Matecki

Direct contact — available for an introductory call at short notice

Phone / WhatsApp
NICO Capital