When operations are a mess, we come in and clean it up. Same for compliance. Then we design and implement AI automation so your team can focus on growth, not on running the machine by hand. Built for EMIs, PIs, MSBs, and PSPs across the EU & UK.
Most fintech failures do not happen because of bad ideas or weak technology. They happen because operations and compliance are bolted on instead of designed.
The license is granted. The policies are filed. On paper, everything works.
Operations are bolted on instead of architected. Payment stacks grow organically until acquirers or regulators say "no".
There is a gap between regulatory approval and operational reality. Novafin exists inside that gap.
We clean up the mess first, manually, with people who have run this before. AI automation comes after, once the structure is right.
Undocumented processes, no clear ownership, manual work outpacing growth. We map what actually happens today and rebuild the structure.
Gaps against DORA, the AI Act, licensing conditions, unresolved audit findings. We close them before a regulator or acquirer finds them.
Once the mess is cleaned up, we design and implement the workflows that keep it clean, so your team runs the business instead of the process.
We do not sell generic consulting hours. We work with leadership teams who understand that operations are a competitive advantage.
Founder & Managing Partner | Ex-General Manager for Solaris Bank
15+ years leading licensed payment entities, PSD2 compliance frameworks, and multi-jurisdiction risk operations. Dumitru has opened EMI and PI licenses across Lithuania, Cyprus, Malta, the UK, and Romania, and builds risk engines for high-throughput PSPs.
Co-host of Fintech Garden (170+ episodes with global payment leaders) and architect of Novafin's AI automation methodology.
Connect on LinkedIn →We integrate payments, compliance, and operations into a single operational model.
Clear current-state operational map identifying bottlenecks and inefficiencies.
Identification of regulatory, acquirer, and scaling risks before they break you.
Payment stack and provider dependency analysis to ensure redundancy and scale.
Bridging the divide between "what exists" and "what must exist to scale".
A prioritized, execution-ready roadmap for cross-border expansion.
We don't just advise. We help you execute the architecture we design.
Fixed-scope architecture and automation engagements designed for regulated entities.
€8,000 · 2 weeks fixed timeline
Complete operational map, payment stack dependency review, DORA/AI Act gap assessment, and 5 ranked automation opportunities with written audit report.
€35,000 · 4–6 weeks fixed build
Automated control mapping, transaction monitoring evidence harness, and examiner-ready compliance pack for regulated payment institutions.
€8,000 / mo · Rolling retainer
Fractional regulatory and operations architect for multi-jurisdiction expansion and acquiring bank selection.
€2,800 / mo · Recurring service
Continuous automated health monitoring, model deprecation watch, and quarterly re-validation report for audit committees.
Novafin's perspective is reinforced through Fintech Garden, where ongoing conversations with operators, executives, and product leaders expose recurring patterns.
We don't invent claims we can't verify. This is a positioning based on actual profile, systems, operations, regulation, and payments expertise.
Your compliance files, transaction logs, and internal audit records stay strictly within designated EU/UK hosting boundaries. Client data is never used to train public AI models.
We provide comprehensive Data Processing Agreements (DPA) and third-party risk documentation structured to satisfy bank vendor onboarding and regulatory examiners under DORA and PSD2/3.
Engagements operate under formal professional indemnity insurance and cyber risk controls tailored specifically for financial institutions and licensed payment operators.
Workflows operate with explicit human-in-the-loop approval checkpoints, deterministic fallback logic, and complete event logging structured for internal compliance and regulatory review.
Engagements are designed to transfer clarity quickly, reduce long-term operational risk, and enable founders to make irreversible decisions with confidence.