| Owner | Jonny Allum |
| Version | 1.0 · Effective 13/07/2026 · Review quarterly |
| Applies to | The whole business |
1. Approach
Risks are scored likelihood × impact on a 1–5 scale each (the same 5×5 matrix the platform's own X06 module gives customers): 1–6 low, 8–12 medium, 15–19 high, 20–25 critical. The register below is reviewed quarterly and after any incident; each risk names its mitigation and where that control lives. Risk appetite: low for tenant data and money, medium for growth and product bets.
2. Live risk register (13/07/2026)
| # | Risk | L | I | Score | Mitigation |
|---|---|---|---|---|---|
| R1 | Sole-operator incapacity strands paying tenants | 2 | 5 | 10 | POL-07 §4: written-down operations, continuity note, emergency contact |
| R2 | Tenant data breach (esp. care special category) | 2 | 5 | 10 | RLS everywhere, role-gated portals, POL-01 controls, SOP-05 |
| R3 | VM single point of failure (one box runs everything) | 3 | 4 | 12 | Rebuild rehearsal (SOP-06 §4), RTO 1 day accepted and stated; revisit at revenue milestone |
| R4 | Secret leak (repo, prompt, laptop) | 2 | 5 | 10 | SOP-09, clean-remote rule, secret scanning, rotation |
| R5 | Stripe/webhook failure breaks money flow | 2 | 4 | 8 | Signature verification, fail-open plan enforcement, event log reconciliation (SOP-08) |
| R6 | AI action does something a tenant didn't want | 2 | 4 | 8 | Confirm-step on all 59 actions, tenant binding, capability checks (POL-05) |
| R7 | Regulatory drift in verticals (CQC, HMRC rates, food law) | 3 | 3 | 9 | Modules snapshot rulesets per record; annual vertical review; draft-only tax red line |
| R8 | Key supplier price/behaviour shock | 3 | 3 | 9 | Pluggable stores, exportable data, POL-09 annual review |
| R9 | Concentration: revenue dependent on a few tenants/prospects | 4 | 3 | 12 | Self-serve onboarding + pricing tiers broaden the base; founding offer builds cohort |
| R10 | Deploy pipeline is manual SSH — human error at release | 3 | 3 | 9 | SOP-03 checklist, fast-forward-only, smoke tests; automate when VM secrets configured |
| R11 | Agency work crowds out platform work (or vice versa) | 3 | 2 | 6 | SOP-11/SOP-12 scoping discipline; agency engagements feed platform pipeline |
| R12 | Little Jonny's food-safety incident harms both brands | 2 | 4 | 8 | Annex LJ-01 controls; separate branding and insurance |
3. Escalation
Any risk scoring ≥15, or any new risk touching tenant data or money, gets a written mitigation decision within a week — accept (with reason), reduce (with the control named), or avoid (with the feature/vendor dropped).