%20-%20C.png)
Synthetic Institutions and Data
Compliance materials that can be published
Every claim OpusDatum makes about its real-world work runs into the same wall: the real work is confidential. A findings letter that names a client cannot be shown. A redacted one shows nothing worth checking.
OpusDatum's answer is to build synthetic institutions: fictional firms, invented in full. Their policies, procedures, customers and transactional data can be published, cited clause by clause and clicked through, without any potential for data loss or confidentiality breaches.
Synthetic, not redacted
Redaction is the usual compromise, and it fails in both directions. It leaves enough of a client's shape on the page to be a risk, and it strips enough of the substance to be uncheckable; the reader is asked to trust whatever the black bars cover.
A synthetic institution inverts that bargain. Everything client-side is invented, derived from scenarios seen in practice, and says so plainly. It claims to be nothing it is not. The one element of a published specimen that is not synthetic is the regulatory analysis itself: obligations and risks quoted verbatim from the OpusDatum Risk obligations register, extracted clause by clause from the Official Journal text of the regulation it covers.
Three fictitious companies
OpusDatum maintains three cleared names for synthetic information.
Each name was searched against company registers, trade mark records and the open web before adoption, precisely so that no real firm is implicated by the fiction. No synthetic institution operates, provides services, holds an authorisation or has customers. The websites: mittenda.com, nummaris.com and signanda.com are OpusDatum notice pages, and any other site or correspondence presenting itself under these names is unconnected to OpusDatum.
What it takes to build a firm that holds up
A synthetic institution is more than a name. The firm exists as a single written definition: what the firm is, what its platforms do, and what may never be stated about it. Its document estate carries the furniture of the real thing: document control lines, owners and approvers by role, version histories with housekeeping noise, contents lists for sections that are never shown.
The histories agree on one timeline, with the crypto-asset authorisation arriving and the governing documents for the new rail landing in the weeks after, as they would in practice.
​
Compliance practitioners read policy for a living and recognise an invented document quickly; the estate is written, and repeatedly reviewed, for exactly that reader.
Built to be diagnosed
The documents is not a model framework. It carries deliberate deficiencies, seeded precisely, with every surrounding clause written sound, so the documents support exactly the findings the specimens show and no accidental others.
That is what the fiction is for: it lets a findings letter show what a finding looks like, how it derives from an obligation, and what closes it, on documents any reader can open. For the same reason the published documents are excerpts, visibly elided and marked not for adoption; a complete synthetic policy would circulate as a free template with a designed gap inside it.
The same craft, to order
The discipline and quality that we create for our clients, when applied to synthetic institution becomes valuable in its own right for:
-
Firms evaluating compliance tooling need corpora that behave like their own documents and carry no personal data.
-
Training programmes need policies that fail in instructive ways.
-
Test environments need data that exercises every branch of a control.
​
OpusDatum builds synthetic firms, document estates and datasets to order. They are designed to be realistic, yet flaws can be added in a controlled way.
