Software for workwhere mistakes are expensive.
PentaLab is a software lab. We build KrabyFlow, a portfolio tracker for people who invest their own money, and NNSFlow, screening software for compliance teams at banks. Same habits in both: rules you can read, figures you can trace, and code engineers can maintain ten years from now.
Built for
- Investors across Europe
- Swiss financial institutions
- On-premise or hosted in the EU
NNSFlow
Negative news & sanctions screening
Evidence-locked screening for compliance teams. On-premise, FINMA-aligned, auditor-ready out of the box.
KrabyFlow
Portfolio tracker with a monthly buy plan
Stocks, funds, crypto, savings, property and loans in one place. Say what you can invest this month and it works out what to buy.
What we build
Two products, the same habits.
We ship our own software. One for compliance teams who will be audited on its output, one for people who want to know exactly why the app tells them to buy what it does. Both show their working.
NNSFlow
Negative news & sanctions screening
Compliance teams use NNSFlow to screen individuals and companies against sanctions and negative news, with an evidence-locked record of every decision. Available on-premise for Swiss financial institutions.
KrabyFlow
Portfolio tracker with a monthly buy plan
Net worth, holdings, dividends after tax and risk, for investors in Europe. Give each holding a target and KrabyFlow turns each month’s budget into a buy plan, with every score showing the figures behind it. Free plan, no bank logins.
Built for the audit
For banks, the artifacts ship with the install.
A procurement reviewer should not have to ask. NNSFlow comes with the documentation, runbooks, and evidence a security and compliance review expects to see — on day one, in the customer tarball.
Auditor Pack
Controls register, key lifecycle, SoD matrix, FINMA / nFADP / GDPR / ISO 27001 / SOC 2 crosswalk.
DR Runbook
Eight disaster-recovery scenarios with an annual drill schedule. Bank captures dry-run records as SOC 2 evidence.
Pen-Test Report
Adversarial threat scenarios run live against the system, with reproducible commands and verdicts.
HSM Simulation Guide
Three-tier rehearsal program before any witnessed change window. Failure modes drilled deliberately.
How we work
Four principles, no exceptions.
The same principles run through every product and every engagement.
Your data stays yours
NNSFlow deploys inside the institution’s own infrastructure. KrabyFlow never asks for a bank or broker login, runs on servers in the EU, and exports everything as one file.
Compliance by design
Audit trails, retention rules, and deletion that really deletes are part of the data model from day one — not patched on after the first regulator visit.
Evidence over claims
Every decision the software makes can be traced: a screening result to its source and hash, a buy-plan score to the figures it came from. Reviewable years later.
Built to last ten years
Boring stack. No chasing trends. Code a different engineer can pick up and a regulator can still understand long after the original team has moved on.
Services
Custom work, on the same foundations.
Beyond our products, we partner with institutions that need software they can stake their license on. A small number of engagements per year.
Custom dashboards
Internal tools and analytics dashboards for risk, compliance, and operations teams. Built fast, designed for the people who actually use them.
On-premise deployment
We help institutions deploy and operate compliance software inside their own data center — from hardware sizing to disaster-recovery playbooks.
Custom software
End-to-end builds for regulated workflows that don’t exist off the shelf. Same audit-first standards we hold our products to.
Who’s behind this
Antoine Bedaton, founder
Systems engineer at Eurocontrol, building software for European air-traffic infrastructure. PentaLab is where I build software for industries with the same level of operational seriousness — finance and compliance first.
I started PentaLab because regulated industries deserve tools designed by people who take audit, reliability, and security as seriously as the regulators do. KrabyFlow started as the tool I used for my own portfolio, and became a product once friends asked for it.
Building somethingthat has to be right?
We’re selective about the work we take on, and quick to say when we’re not the right fit. Tell us what you’re working on.