ExposureGuard · On-prem · BIS CEM

Counterparty risk monitoring,
built for the buy-side mid-market.

A hedge-fund-grade platform for daily counterparty exposure, PFE, VaR, and stress-testing under bilateral OTC derivatives. On-premises. Open methodology. No vendor terminal lock-in.

ForAsset managers & hedge funds, $500M–$5B AUM
MethodologyBIS Current Exposure Method
DeploymentOn-premises CLI
Counterparty Summary — Daily Pack
Counterparty Curr Exp PFE 95% Collateral Net Exp
Goldman Sachs $12.4M $6.8M $8.0M $11.2M
JPM Chase $9.1M $5.2M $10.0M $4.3M
Morgan Stanley $6.7M $3.8M $5.5M $5.0M
Citi $4.2M $2.1M $3.0M $3.3M
Firm-wide $32.4M $17.9M $26.5M $23.8M

Daily counterparty risk in one canonical pack.

ExposureGuard ingests your trade book, ISDAs, CSAs, collateral, and limits, and emits a complete daily risk pack: 13 audit-grade CSVs and 5 distribution-ready Excel workbooks. Every number is reproducible bit-for-bit; every input and output carries a SHA-256 hash.

< 1 sec
Pipeline runtime per 50-trade book
13 + 5
CSV files + Excel reports per run
31
Unit + regression tests across the pipeline
100%
Determinism: same inputs → byte-identical CSVs
“Institutional-grade coverage, mid-market pricing, no vendor terminal dependency. The data layer is yours, the methodology is auditable, and the deployment is yours to control.”

Mid-market buy-side firms run counterparty risk on spreadsheets.

When Archegos Capital Management collapsed in March 2021, prime brokers lost ~$10B in five trading days. The post-mortem was unanimous: counterparty exposure data was siloed, stale, and aggregated by hand. Even sophisticated dealers couldn't see total bilateral exposure to a single family office across desks.

The tools that would have caught it cost $50–150k per user per year and require a dedicated vendor terminal. Below the top decile, an entire market — 5,000+ asset managers and hedge funds in the $500M–$5B AUM band — runs counterparty exposure monitoring on Excel spreadsheets emailed around at 6pm.

They know it's broken. They lack a tool that fits their economics, deployment posture, and operational reality.

Eight risk capabilities, one daily pipeline.

Every module is a pure function of its inputs. Every output reconciles to its source. Auditable end-to-end.

Counterparty Exposure (CE / PFE / EAD)

Net Current Exposure floored at zero per netting set; PFE under BIS CEM with the netting-recognition formula; EAD = NCE + PFE. Per (counterparty, ISDA), then rolled up to a canonical Counterparty Summary.

Collateral & Margin Calls

Haircut-adjusted effective values per asset; per-CSA aggregation; VM Required after threshold; final margin call after MTA suppression and rounding-up.

Risk Decomposition by Factor

PFE split into IR / Credit / FX / Equity / Vol per counterparty and firm-wide. CDS contributions allocate 70/30 Credit/IR per the configurable split; per-factor numbers reconcile to the netting-recognised PFE total.

Parametric VaR (1-day, 95%)

Delta-normal VaR using DV01, CS01, and FX delta, combined through a 3 × 3 daily covariance matrix from configurable factor vols and correlations. Per-counterparty and firm-wide.

Parametric Stress Scenarios

Six configurable shocks: rates ±100bp, USD strengthens 10%, credit spreads widen 50%, counterparty downgrade, combined stress. ΔEAD per (counterparty, scenario) and firm-wide.

Named Historical Replays

2008 Financial Crisis, 2020 COVID, 1994 Bond Massacre, 2022 Rate Shock, plus an editable Custom Stagflation slot. Multi-factor shock vectors calibrated to peak-stress days, applied via linear repricing.

Limits & Breach Monitoring

Per (counterparty, limit_type) utilisation against CURRENT_EXPOSURE / PFE / NOTIONAL / TENOR limits. OK / WARN / BREACH classification with conditional formatting in Excel.

Audit Trail & Determinism

Every input file SHA-256 hashed; every output SHA-256 hashed. Re-running with identical inputs produces byte-identical CSVs. The run manifest is your tamper-evident audit record.

Five Excel workbooks, five audiences.

Each workbook is built for a specific audience and answers a specific question. Branded headers, conditional formatting on limit utilisation, and frozen header rows for usability.

1
Counterparty
Exposure Daily

PMs, Risk Officers

2
Credit
Monitoring Daily

Credit team

3
Margin &
Collateral

Operations desk

4
Stress Test
Pack

Risk Committee, weekly

5
Risk Committee
Pack

Board / monthly

Open, BIS-aligned, audit-friendly.

Every formula is documented, every coefficient is configurable, every result is reproducible. No licensed methodology, no proprietary black box, no vendor lock-in.

CapabilityMethodologyConfigurable
Trade-level add-onBIS CEM factor table (3 buckets × product family)HY override factor; rating-based IG / HY classification
Netting recognitionA_net = 0.4 × A_gross + 0.6 × NGR × A_grossPer-ISDA netting_eligible flag
Collateral haircutEffective = MV × (1 − haircut)Per-asset haircut from CSA JSON or row-level
Margin callsVM = max(net MtM − threshold, 0); MTA suppression; ceil-roundingPer-CSA threshold, MTA, rounding
Parametric VaRz(α) × √(δT Σ δ) × √hAnnual factor vols + 3 explicit correlations
Stress repricingLinear delta: ΔMtM = δ · shock_vectorParametric scenarios in YAML; named historical replays editable
LimitsUtilisation = metric / limit; OK / WARN / BREACH classificationPer-cpty soft warning level (default 80%)

Why ExposureGuard wins in the mid-market.

Open methodology

BIS CEM, hand-calibrated factor vols, configurable correlations. No licensed methodology, no proprietary scoring, no black box. Quants can audit and extend.

On-premises by default

Trade and counterparty data never leaves your network. SaaS multi-tenancy is not on offer — that's a feature, not a limitation, for a buy-side risk product.

Mid-market pricing

Per-firm subscription, not per-seat. Designed for firms outgrowing spreadsheets but not big enough for tier-1 enterprise platforms.

No vendor terminal lock-in

Standalone CLI. No dependency on third-party data terminals. Bring your own market data via the standard CSV interface.

Reproducibility & audit

Every output reconciles to its inputs. SHA-256 manifest per run. Same inputs → byte-identical outputs. Compliance teams love it; regulators accept it.

Asset-manager workflow fit

Drops into the existing daily Risk Committee email. Outputs in the format risk teams already circulate. No retraining of human users required.

CSV in, CSV out. Fits how risk teams already work.

Inputs

Seven CSV files: trades, counterparties, netting, csa, collateral, limits, market_data. Each row Pydantic-validated for type and referential integrity. Errors aggregated into a single consolidated report; no silent skips.

Outputs

13 audit-grade CSVs (one per pipeline stage's output) plus 5 distribution-ready Excel workbooks. CSVs land in outputs/csv/<as_of>/<run_id>/; Excel parallels at outputs/excel/....

Deployment

Python 3.12, single CLI command. Runs on any laptop or batch server. No database required for v1, but the data model maps 1:1 to Postgres schema. Docker packaging optional. Trade data never leaves your environment.

Audit trail

Every run produces run_manifest.csv with SHA-256 hashes of all inputs and all outputs. If a regulator asks “what produced this number?” you can prove it bit-for-bit.

See ExposureGuard against your book.

We'll run the pipeline against a sample of your trade book and walk you through every number in the daily pack. 30 minutes. Your data, your environment.