Juniper Square

The Clearwater shape. GPX is a fund operating system carrying fund accounting, general ledgers, payments, the investor portal and compliance workflows, built over more than a decade, and stripping the models leaves all of it working for 2,300 firms. The inference line is real and recent rather than decorative, with an oversight agent and an investor relations system that would not exist without models, but it sits on top of a ledger. Note for the record that the services half of the business, fund administration over more than 300 billion dollars, is people rather than models, which reinforces the placement.

Better specified than most, and two properties do the work. Permission inheritance is named and placed: models acting on behalf of a user can reach only the data that user is entitled to, under the same authorisation model as the user facing software, and that inheritance is stated to travel outward through the protocol interface as well.

And the current scope is stated as a limit rather than a capability, with the vendor saying plainly that its present systems do not access sensitive client data and that any future system which does will apply least privilege. The oversight product itself sits before a human by design, catching errors in an administrator package before it leaves the chief financial officer's desk.

Held off A because no approval gate is described for any action the agent takes, nothing states what happens when one of the checks fails, and the headless interface is read only today with writes on the roadmap, which is an absence of capability rather than a control over it.

Held at C on a distinction worth stating plainly, because the material here is easy to mistake for model risk disclosure. What is published is security control over models: prompts hardened against attack, third party model vendors bound by contract, and the data protection controls around the models tested annually inside the attestation scope. Those are good controls and they are not model risk management.

Nothing published gives an accuracy or error rate, a validation approach, a benchmark, a monitoring regime or a drift policy for any model. The closest thing to substantive transparency is the oversight agent's library of more than 150 named accuracy and consistency checks, which a customer can inspect and extend with their own, and that tells a validator what the system tests for without telling them how often it is right.

A named client with a named role quoted, the chief financial officer of an investment partners firm reporting greater assurance and audit readiness on the oversight agent, plus very large operational scale figures across entities, investors, positions and capital. The quantified claim, roughly 80 percent off financial statement review time, is the vendor's own and is not attached to the named client, which is the standing shape this axis keeps finding.

One provenance detail cuts in the vendor's favour and is worth recording: the oversight agent was built first for its own administration team overseeing more than 300 billion dollars before being sold externally, so the vendor was its own first customer at real scale, which is a stronger form of evidence than a pilot.

The pooled corpus question is answered in the negative and with a mechanism: contractual agreements with the external model vendors preclude them from using any of this vendor's data to train their underlying models, and vendor security reviews are performed before engaging any supplier with embedded model functionality. Access is bounded by inheritance, since a model acting for a user reaches only what that user may reach.

Data shared with models is stated to fall under the same controls as any other customer data, and those controls sit inside the annually tested attestation scope, which ties the claim to an audit rather than leaving it as a promise. The vendor also states the current limit honestly, that its present systems do not touch sensitive client data. Held off A against the reference bar: data sources are not enumerated, no retention or deletion terms specific to model use are given, and nothing states whether prompts are isolated between tenants.

A published privacy position with real components rather than a policy link alone: compliance stated against both the European regulation and the Californian statute, a published privacy policy, encryption specified at rest and in transit, two factor authentication across staff and investor users, an authorisation model that governs what any given user or agent can reach, and alerting on changes to sensitive investor records.

A dedicated page answers legal and privacy questions about the artificial intelligence line specifically, which very few vendors here maintain at all. Held off A: no sub processor list, no data processing addendum and no residency statement were located.

Strong and precisely stated. Annual assessments under both service organisation control reporting standards, the first and the second, each at type 2, against the criteria of the national accountancy body, plus routine independent penetration testing, encryption at 256 bits at rest and transport layer security in transit, two factor authentication for both staff and portal investors, an enforced password policy, and an audit log that alerts on changes to sensitive investor information.

Holding the first of those two reports is the uncommon and correct choice for a business whose output lands in audited fund accounts, and this is only the second vendor in the index to do it. Held off A on the reference bar: no standing trust portal, no downloadable reports and no bridge letter covering the gap between audit periods.

No licence, no supervised test of the product and no programme enrolment. Worth noting that fund administration in this market is largely unlicensed as an activity, so the absence reflects the category rather than a choice by this vendor, and the closest thing to external discipline it carries is the audit attestation recorded on the security row.

Nothing published on fairness testing, performance variation or governance of model outputs. The consumer protection exposure is among the lowest in this index, since the work is fund accounting review, investor reporting and fundraising workflow rather than any decision about an individual's access to credit or a financial service. What remains is narrower but real: an investor relations system that surfaces which limited partners to prioritise is ranking people and institutions, and nothing describes what drives that ranking.

No published allocation of responsibility and no route for any affected party. The question is unusually pointed here because of what the product claims to be. The oversight agent is sold as a control, explicitly to reduce fiduciary risk and to prevent restatements, auditor rework and difficult conversations with investors.

If it runs its checks and misses an error that later forces a restatement, nothing published says where responsibility sits between the general partner who bought the control, the administrator who produced the figures and the vendor whose agent passed them. Selling a control creates exactly this exposure, and this index has not yet found a vendor that addresses it.

Genuinely disclosed and a clear step above the silence that is normal here. The vendor states that its models come from third party suppliers rather than being built in house, names a hosting platform and names a model vendor by way of example, states that those suppliers are bound by contractual controls including a bar on training over its data, and states that suppliers are security reviewed before engagement.

Held off A on a distinction this axis should carry forward, illustrated inside this same session by a vendor that reached A: the difference between exemplifying and enumerating. Phrases like providers such as one named cloud, and vendors for example one named model company, tell a buyer the shape of the supply chain. They do not tell that buyer which model serves which feature, at what version, or whether the list is complete.

Earned twice over, in both directions, and the outward half is the more interesting. Inward, this vendor is not integrating with the system of record, it is the system of record: fund accounting, the general ledger, payments and the investor portal all run here, and the oversight agent additionally ingests deliverables from any rival administrator with no integration and no data onboarding, working from whatever file that administrator produced.

Outward, the headless interface exposes every platform capability across fundraising, investor relations, fund accounting, ledgers, payments and compliance to any client speaking the interoperability protocol, with three major assistants named specifically, and the vendor states that the same data, the same permissions and the same audit trail travel with it.

The toolset is described as purpose built for how the finance, investor relations and compliance functions actually work rather than a one to one wrapper over every interface endpoint, which is a meaningful design claim.

The cloud provider is named and redundancy across data centres and availability zones is described for uptime purposes, which is more than silence. Nothing published on region, residency, tenancy or where a given firm's data sits at rest, which is a real gap for a platform holding the books and investor records of funds raised across multiple jurisdictions. Banked check: a residency statement is the single most likely thing to move this, and vendors of this size usually publish one for European investors.

No price, tier or unit published. The commercial structure is stated more clearly than most, with the oversight agent described as purchasable inside the platform today and available as an add on to firms that use a different administrator, so a buyer knows how it is sold without knowing what it costs. Structure without a number does not move this grade.

Deep in one segment rather than broad across several. The buyer is the private markets general partner, addressed at 2,300 firms worldwide, with real depth in the roles served inside each: fundraising and investor relations teams, chief financial officers and controllers, compliance, and the limited partners on the other side of the portal at 750,000 accounts. Scale is genuinely large at 45,000 entities and 1 trillion dollars in active capital.

Held at B because this is fund operations for private capital and nothing else, with no banking, insurance, payments or public markets footprint, which is the standard placement for a vendor that is dominant in a single lane.