
Most compliance gaps aren’t hidden in the rules. They’re hidden in the space between what the policy says and what people actually do — the WhatsApp message to a client, the recording that didn’t happen, the member list nobody’s reviewed in three years. Stripy Fish Networks is an independent IT security and compliance consultancy, working with UK organisations since 2003. We help firms find and close those gaps — particularly around FCA SYSC 10A communications recording, UK GDPR, and information security. We also build practical tools. Varde (varde.uk) is our free compliance self-assessment: plain-English questions, a RAG-rated report, and guided help to fix what it finds.