Finance Ethics
Menu

A trust center for money

One page on your site that shows how money is governed, with every item dated and kept current.

Start a conversationWhy private companies disclose
Part of
Transparency Consulting
Runs as
4 stages, from inventory the claims to keep it current
You receive
5 deliverables, listed below
Pricing
Quoted after a scoping call

Integrity statements go stale quietly

Software companies publish security trust centers so customers can check their controls without sending yet another questionnaire. Each one lists the controls in place, the reports available, the subprocessors used and the date everything was last checked. Financial integrity has no equivalent. A lender, funder, bank partner or job candidate who wants to know how your organization handles money finds a code of conduct PDF with no date and an email address that may not be monitored.

Where such pages do exist, they decay. The policy was revised but the old version stays online. The ethics contact left last year. The statement that every payment needs two approvers was true until the team shrank. Nobody is assigned to notice.

Engraving of a town clock tower whose face is an open ledger, watched by townspeople, with a magenta flag.
Kept where anyone can check it.

Six things the page publishes

  • Governance contacts

    The people accountable for financial integrity, by role, such as the CFO or treasurer, the audit or finance committee chair and a monitored integrity inbox, each with the date the contact was last confirmed.

  • Published policies

    Code of conduct, conflicts of interest, related-party transactions, anti-bribery, expenses, speak-up and AI use, each with a version number, the body that approved it and the next review date.

  • Speak-up channel

    How to raise a concern, who receives it, the anti-retaliation commitment and, if you choose, report statistics in ranges you set.

  • Controls attestations by management

    Short, specific statements signed by a named officer, such as: changes to vendor bank details are confirmed by a call to a number already on file before any payment is made. Each one is tested before it is published.

  • Last-review dates

    A date beside every item showing when it was last checked, with anything past its review date flagged on the page rather than hidden.

  • Change log

    A dated public record of every change, whether a policy revised, an attestation withdrawn or a contact replaced, each with a one-line reason.

Your page launches in week six

DeliverableWhat it isWhen
Claims inventoryEvery integrity statement you already make publicly, the record that supports it, and a decision to keep, fix or remove itWeek 2
Attestation setDraft control statements for each officer to sign, each linked to the evidence and test that supports itWeek 4
Integrity Center pageAccessible page or subdomain on your own domain, such as example.com/integrity, built to your site's designWeek 6
Monthly upkeepContact checks, policy version updates, review-date flags and change-log entries, applied as changes occurMonthly
Quarterly attestation reviewEach attestation re-tested against current data, with a short memo on what was confirmed, changed or withdrawnQuarterly

Six weeks to launch, then upkeep

  1. Weeks 1 to 2

    Inventory the claims

    We collect every public integrity statement, policy and contact, confirm their owners, and agree which items appear on the page and which stay internal.

  2. Weeks 3 to 4

    Test the attestations

    We test each proposed statement against ledger, bank and access data. A statement that fails is rewritten to what is true or held back until the control is fixed.

  3. Weeks 5 to 6

    Build and approve

    We build the page on your domain, each officer signs their statements, and the board or a committee approves the governance section before launch.

  4. Monthly after launch

    Keep it current

    We apply changes, check contacts and review dates each month, log every change publicly, and re-test every attestation each quarter.

Owners sign their own statements

  • A named officer for each attestation, willing to sign it and to tell us when the underlying process changes
  • Current policies in editable form, with approval dates and the body that approved each one
  • Details of your speak-up channel and, if you will publish statistics, the anonymized log
  • Read-only access to the accounting system, bank portal user listings and payroll reports for testing
  • Access to your website's content system or a DNS record for the subdomain, plus your brand guidelines

Is this the right fit?

A good fit

  • Companies that answer the same integrity questions from customers, lenders or bank partners over and over
  • Fintech and digital-asset businesses whose partners and users want to see how money is controlled
  • Nonprofits that want funders and donors to find governance information without having to ask
  • Organizations already running Continuous Controls Monitoring that want its results to back public statements

Not the right fit

  • Organizations seeking a certification or seal; the page states management's position and is not an audit, review or attest report
  • Teams that cannot name an officer willing to sign each attestation and keep it current

Attestations are short and testable

An attestation on the page should fit in one sentence and be checkable by someone outside the finance team. "We take payment security seriously" fails that test. "Payments over $25,000 are released only after two people approve them in the bank portal" passes, because the bank's own records either support it or they do not. We draft every attestation in that form, test it against your data, and leave out anything we cannot test.

Attestations usually cover:

  • how vendor bank-detail changes are verified before the next payment
  • how many people must approve a payment, and above what amount
  • who can post manual journal entries, and who reviews them
  • how often user access to finance systems is reviewed, and by whom
  • who reviews related-party transactions, and how often the board sees them

Monitoring keeps the attestations honest

An attestation is only as current as its last test. Under the subscription we re-test each one every quarter. If you also run Continuous Controls Monitoring, the weekly or monthly results feed the page directly. When the dual-approval test flags a payment released by one person, the officer who signed that attestation hears about it in the same cycle, decides what to do, and the change log shows the outcome.

The change log does the persuading

A maintained page and a brochure look alike on the day they launch. The difference shows in the change log. Entries such as "Expense policy version 4 approved by the finance committee; receipts are now checked for signs of AI generation" or "Attestation on quarterly access reviews withdrawn pending a new review cycle" show that someone is watching. Entries are never deleted. If an entry is wrong, a later entry corrects it. Our article on expense policies for AI-generated receipts shows the kind of change that earns an entry.

What stays off the page

Nothing about individual speak-up cases, investigations or personnel matters is published. Financial statements appear only if you choose to post them. The page states plainly that Finance Ethics maintains it, that management makes the statements, and that none of it is an audit. If you want to set the page in context once a year, the Financial Integrity Report covers the same ground in depth and records progress against your commitments.

What people ask before hiring us

Who owns the page and its content?

You do. The page sits on your domain, every statement is management's, and the policies are yours. We maintain it under the subscription. If the subscription ends, you keep the page, the source files and the change log, and we remove our access.

Does Finance Ethics certify the statements on the page?

No. We do not perform audits or attest engagements, and the page says so. We test each statement before it is published and again every quarter, and we tell management when one no longer holds. The decision to amend or withdraw it is management's, and the change log records it.

What happens if a control fails after its attestation is published?

The attestation is amended or withdrawn, and the change log records the date and a one-line reason. A gap that is found, logged and fixed shows the page is maintained. A page that never changes gives a reader less reason to believe it.

Can we host it ourselves?

Yes. We can build the page into your existing website and update it through your content system, or host a subdomain for you. Either way the content and the domain remain yours.

Also in Transparency Consulting

Help deciding what to disclose about financial integrity, then building the reports, public pages and questionnaire answers that prove it.

  • Financial Integrity Report

    A voluntary annual report, in plain language and checked against your records, that tells boards, funders and partners how money is governed and what changed this year.

  • Supplier Disclosure Readiness

    A reusable, evidenced answer library for the integrity and sustainability questionnaires large customers send, sized to what those customers can actually require.

Related work and reading

Services

  • Continuous Controls Monitoring

    Automated tests on your ledger, bank and access data every week or month, each exception reviewed by a person and routed to a named owner, run as a subscription after a six-week setup.

  • Transparency Dashboards & Custom Software

    Board and funder dashboards, accounting data pipelines and custom finance tools that tie to the ledger, live in your own accounts and come with the code and documentation.

  • Code of Conduct & Speak-Up Programs

    An eight-to-twelve-week project that redesigns your code of conduct and builds the reporting channel, triage, investigation protocol and anti-retaliation process behind it.

Articles and scenarios

  • Voluntary financial transparency for private companies

    US disclosure mandates on private companies narrowed in 2025 and 2026, but lenders, customers, funders and buyers still ask the same questions. What to publish, in three tiers, and how to keep it credible.

  • Whistleblower hotline setup for smaller companies

    A speak-up channel works when reports reach someone independent of the people named, get triaged within days and never cost the reporter. Under the DOJ pilot, a company's 120-day clock starts with the internal report.

  • A code of ethics employees actually read

    Most codes are written to be signed, not used. Rebuild yours around the decisions employees face, with plain questions, real limits and a named person to ask, and test whether people can find answers in it.

Sectors

Tell us what you are seeing

A first conversation is a scoping call: what worries you, what you need to show, and to whom. You leave it with a view on where to start, whether or not you hire us.

Start a conversation
Writehello@financeethics.com
Call(307) 365-5252
Office7124 Commons Dr, Cheyenne, WY 82009
HoursMonday to Friday, 9:00 to 17:00 Mountain Time