--- title: "Governance Means More Than an Audit Trail | Next Matter" description: "Almost every workflow and orchestration platform logs what happened. Very few enforce who was allowed to make it happen, before it happens. That difference is what governance actually means in regulated financial operations." lang: en json-ld: | [ { "@context": "https://schema.org", "@graph": [ { "@type": "Organization", "@id": "https://nextmatter.com/#organization", "name": "Next Matter", "legalName": "Daizy NM Limited", "url": "https://nextmatter.com", "logo": "https://nextmatter.com/__l5e/assets-v1/aab354c2-e169-46fe-8e9b-0e78438471d3/nextmatter-logo.svg", "description": "Next Matter is the orchestration platform for regulated financial operations - purpose-built for asset managers, fund administrators, and wealth and wealthtech firms, not a generic workflow tool - combining AI agents, your existing systems and human approvals with governance and a complete audit trail.", "sameAs": [ "https://www.linkedin.com/company/nextmatter", "https://www.daizy.com" ] }, { "@type": "WebSite", "@id": "https://nextmatter.com/#website", "url": "https://nextmatter.com", "name": "Next Matter", "publisher": { "@id": "https://nextmatter.com/#organization" }, "inLanguage": "en" } ] }, { "@context": "https://schema.org", "@type": "Article", "headline": "Governance Means More Than an Audit Trail", "author": { "@type": "Person", "name": "Jonty Hurwitz", "jobTitle": "Founder" }, "publisher": { "@id": "https://nextmatter.com/#organization" }, "datePublished": "2026-08-28", "mainEntityOfPage": "https://nextmatter.com/opinions/governance-means-more-than-an-audit-trail", "inLanguage": "en" }, { "@context": "https://schema.org", "@graph": [ { "@type": "BreadcrumbList", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "Home", "item": "https://nextmatter.com" }, { "@type": "ListItem", "position": 2, "name": "Opinions", "item": "https://nextmatter.com/opinions" }, { "@type": "ListItem", "position": 3, "name": "Governance Means More Than an Audit Trail", "item": "https://nextmatter.com/opinions/governance-means-more-than-an-audit-trail" } ] } ] } ] --- [![Next Matter Logo](/__l5e/assets-v1/aab354c2-e169-46fe-8e9b-0e78438471d3/nextmatter-logo.svg)](/) - [Solutions](/solutions) [ grid\_view Solutions Overview Personas, capabilities, and proof ](/solutions)[ smart\_toy AI Orchestration Coordinate agents across your stack ](/solutions/ai-orchestration)[ library\_books Workflow Library Remix production-ready workflows ](/remix) Case Studies [ ![Ocorian](https://cdn.prod.website-files.com/69a7f71677d8045f0f2d982a/69a7f71677d8045f0f2da4e8_Ocorian_trustbar.svg) Ocorian 1,800 Employees • Fund Administrator ](/case-studies/ocorian)[ ![Trade Republic](https://cdn.prod.website-files.com/69a7f71677d8045f0f2d982a/69a7f71677d8045f0f2da4e9_traderpublic_trustbar.svg) Trade Republic 10M Customers • Online Trading Platform ](/case-studies/trade-republic)[ ![b2Venture](/__l5e/assets-v1/40232f5e-b66d-45f6-8d04-8be40304d172/b2venture-logo.png) b2Venture $800mn AUM • Venture Capital Firm ](/case-studies/b2venture)[ ![Swan](/__l5e/assets-v1/ef4919d4-3042-430f-b1a2-10b7da14c889/swan-logo.webp#lh=1500x401) Swan BaaS leader • Embedded Banking Platform ](/case-studies/swan) - [Platform](/platform) [ hub Platform Overview Built for Fund Operations ](/platform)[ build Workflow Builder Build long-running orchestrations ](/workflow-builder)[ smart\_toy AI & Automation Agents, models and guardrails ](/ai-and-automation)[ extension Integrations Core Ledger & Ecosystem Connectivity ](/integrations)[ verified\_user Governance & Audit Approvals and a full audit trail ](/governance-and-audit)[ shield Security SOC 2, ISO 27001, data residency ](/security) - Resources [ forum Ask a Technical Question Chat with the docs AI assistant ](https://help.nextmatter.com/docs/integrate-across-tools?assistant)[ campaign Opinions Perspectives from our team ](/opinions) [Sign in](https://app.nextmatter.com/login) [Apply](/book-a-demo) [Home](/) chevron\_right [Opinions](/opinions) chevron\_right Governance means more than an audit trail Opinion · Governance # Governance means more than an audit trail "We have a full audit trail" is one of the most repeated claims in orchestration software, and one of the least informative. Logging what happened is not the same thing as governing what is allowed to happen. volume\_up Listen to this piece [menu\_book Start reading](#article) ![Jonty Hurwitz](https://cdn.prod.website-files.com/69a7f71677d8045f0f2d982a/69b9321a07c5323a0c817c07_Jonty.png) Written by Jonty Hurwitz Founder Read time 7 min Published Aug 2026 A lmost every piece of enterprise software logs something. A CRM records field changes. An accounting system records entries. Every serious workflow or orchestration engine records each run, each step, each retry, each payload. "We have an audit trail" is therefore true of nearly everyone, which is precisely why it tells a buyer in regulated financial operations almost nothing. The claim survives because it sounds like a control. It is not a control. It is a recording device. A log answers "what happened". Governance answers "who was allowed to make it happen, and was that enforced before it did". 01 · A claim that proves nothing ## Everyone logs. That is the problem with the claim. Comprehensive logging is a solved engineering problem, and general-purpose orchestration engines are genuinely good at it. They will tell you which step ran, when, with which inputs, under which version, and what it returned. That is valuable operational telemetry. But telemetry is descriptive. It records the world as it turned out. It has no opinion on whether the action should have been permitted, and no mechanism to stop it. If a step executes at 02:14 without the approval it required, a complete audit trail records exactly that: an unauthorised action, faithfully preserved, with a timestamp. An auditor reading that log now has excellent evidence of a control failure. That is not the outcome anybody bought the platform for. 02 · Logged vs governed ## The same action, in two systems Take a concrete case: a capital call notice going out to limited partners, and the NAV figure that supports it being finalised. Same fund, same team, same calendar pressure. Two different platforms underneath. Logged The analyst finalises the NAV and triggers the notice. The platform records the run: inputs, calculation, the outbound send, the timestamp, the user ID. Approval happened by convention - a message, a nod in a stand-up, a reviewer who was on leave and whose sign-off was picked up by the person who prepared the figure. Somewhere later, a reconciliation shows the figure was wrong. The log tells you precisely when the wrong number went to investors, and that nothing prevented it. Result: perfect evidence of an uncontrolled process. Governed The same analyst finalises the NAV. The platform will not release the figure or issue the notice: the step is defined as requiring a checker who is not the maker. Self-approval is blocked structurally, not discouraged. Delegation and out-of-hours cover are named in advance, so the control does not quietly dissolve at 18:00 on a quarter end. A discrepancy raises an exception that routes to a named owner with the case attached, before anything reaches an investor. Result: the wrong thing could not proceed, and the record proves the control operated. The two platforms produce logs of comparable richness. Only one of them produces a different outcome. 03 · Why regulators care ## "What happened" is the easy question Auditors, depositaries and supervisors have always asked what happened. Increasingly they ask something harder: show that the process was designed so the wrong thing could not have happened. Demonstrate the separation of duties. Demonstrate that the control was operating on the day, not merely documented in a policy. A log cannot answer that. It is, by construction, a description of outcomes, and a system that can be driven around its own controls will faithfully log the drive-around. Design effectiveness and operating effectiveness are different tests, and only enforcement evidences the first. The honest test Ask your platform to let one person prepare and approve the same NAV release. If it lets them and simply records it, you have logging. If it refuses, you have governance. 04 · Structural, not configured ## Governance you have to build yourself is governance you have to maintain forever Any sufficiently flexible orchestration engine can be made to enforce approvals. Teams do it: a role table, a conditional branch, a guard on the transition, a scheduled check for self-approval. It works, on the workflows where somebody remembered to add it, until the person who built it moves on and the next workflow ships without it. That is the real distinction. Governance assembled on top of a general-purpose engine is a feature of a particular workflow. Governance built into the platform is a property of every workflow, including the one an operations team builds next Tuesday afternoon without asking anyone. 1 Maker-checker is a property of the step Four-eyes approval is switched on at a step, with separate roles enforced and self-approval blocked by the platform. Not a policy, not a convention, not a branch someone has to remember to add. 2 Exceptions are part of the process, not outside it A break routes to a named owner with the case, inputs and history attached, and the resolution is part of the same record. Exceptions handled in an inbox are exceptions nobody can evidence. 3 The audit trail is a by-product, not a project Every automated action, AI-agent step and human decision timestamped and attributed as it happens, held against the case, investor and fund. Evidence you assemble afterwards is a reconstruction, and reviewers treat it as one. 4 The default applies to workflows nobody reviewed The test of a governed platform is not the flagship process the compliance team signed off. It is the twentieth workflow, built by an ops lead under deadline, which inherits the same controls because it cannot do otherwise. This also determines what AI can safely do. An agent inside a governed workflow can extract, reconcile, classify and draft, because the consequential step still cannot proceed without a named human. An agent inside a logged workflow can act, and you will have an excellent record of it. 05 · Proof at scale ## What a structural default looks like in production Proof point · Ocorian, Trade Republic, b2venture and Swan 300+ fund specialists More than 300 fund specialists at Ocorian run global fund and investor operations on Next Matter, with approvals and a complete audit trail applied by default rather than rebuilt per workflow. Trade Republic runs bank-grade client operations at consumer scale, b2venture runs venture operations to roughly 800M EUR AUM, and Swan runs embedded-finance operations on the same pattern. In each, governance is a structural property of the platform, not a claim about its logging. [Read the Ocorian case study](/case-studies/ocorian) Scale is what exposes the difference. One carefully governed workflow proves a team is diligent. Hundreds of workflows carrying the same controls, built by operations people rather than engineers, proves the platform is. Logging tells you what happened. Governance decides what is allowed to happen. Only one of those is a control. For the mechanics, see [governance and audit](/governance-and-audit) and our guide to [building an audit-ready fund operations process](/guides/audit-ready-fund-operations). On this piece [01   A claim that proves nothing](#s1)[02   Logged vs governed](#s2)[03   Why regulators care](#s3)[04   Structural, not configured](#s4)[05   Proof at scale](#s5) Share [share ](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fnextmatter.com%2Fopinions%2Fgovernance-means-more-than-an-audit-trail) [alternate\_email ](https://twitter.com/intent/tweet?url=https%3A%2F%2Fnextmatter.com%2Fopinions%2Fgovernance-means-more-than-an-audit-trail&text=Governance%20means%20more%20than%20an%20audit%20trail) [mail ](mailto:?subject=Governance%20means%20more%20than%20an%20audit%20trail&body=https%3A%2F%2Fnextmatter.com%2Fopinions%2Fgovernance-means-more-than-an-audit-trail) Keep reading ## Test one of your workflows against this Bring a real process - a capital call, a NAV release, an onboarding - and we will show you where enforcement sits, not just where the log does. [Book a demo](/book-a-demo) [More opinions](/opinions) [ Platform Governance and audit Maker-checker approvals, role separation and a timestamped audit trail applied by default. ](/governance-and-audit)[ Guide Building an audit-ready fund operations process What audit-ready means in practice, and how to build governance in rather than layer it on. ](/guides/audit-ready-fund-operations)[ Opinion The compliance excuse What is actually blocking AI in fund operations, and why compliance is usually right. ](/opinions/compliance-excuse)[ Opinion Migration isn't the fix Replacing a legacy workflow platform rarely fixes the bottleneck underneath it. ](/opinions/legacy-platform-trap) ![Next Matter](/__l5e/assets-v1/aab354c2-e169-46fe-8e9b-0e78438471d3/nextmatter-logo.svg) [](https://www.linkedin.com/company/nextmatter) Case studies - [Ocorian](/case-studies/ocorian) - [Trade Republic](/case-studies/trade-republic) - [Swan](/case-studies/swan) - [b2Venture](/case-studies/b2venture) - [All case studies](/case-studies) Solutions - [Solutions overview](/solutions) - [AI Orchestration](/solutions/ai-orchestration) - [Workflow library](/remix) Platform - [Platform overview](/platform) - [Workflow Builder](/workflow-builder) - [AI & Automation](/ai-and-automation) - [Integrations](/integrations) - [Governance & Audit](/governance-and-audit) - [Security](/security) - [System status](https://status.nextmatter.com/) Capabilities - [AI Financial Reporting](/ai-financial-reporting) - [Operational Intelligence](/operational-intelligence) - [Exception Handling](/exception-handling) - [Team Interfaces](/team-interfaces) - [Guest Interfaces](/guest-interfaces) - [Manager Dashboard](/manager-dashboard) - [Builder Toolbox](/builder-toolbox) Company - [About](/about) - [Careers](/careers) - [Opinions](/opinions) - [Answers](/answers) - [Documentation](https://help.nextmatter.com/docs/integrate-across-tools) - [Ask a Technical Question](https://help.nextmatter.com/docs/integrate-across-tools?assistant) Certified Secure [![AICPA SOC 2 for Service Organizations](https://cdn.prod.website-files.com/69a7f71677d8045f0f2d982a/69a7f71677d8045f0f2da55f_logo_SOC2.svg)](https://app.drata.com/trust/d62cb1a1-96df-4741-8058-97ecbc4ff345/) [![GDPR compliant](https://cdn.prod.website-files.com/69a7f71677d8045f0f2d982a/69a7f71677d8045f0f2da561_logo_GDPR.svg)](https://app.drata.com/trust/d62cb1a1-96df-4741-8058-97ecbc4ff345/) [![SOC 2 Type 2 compliant 2025](https://cdn.prod.website-files.com/69a7f71677d8045f0f2d982a/69eb389eff4de1586e1d2f14_Daizy%20SOC%202%20Type%202.png)](https://app.drata.com/trust/d62cb1a1-96df-4741-8058-97ecbc4ff345/) © 2026 Daizy NM Ltd. All rights reserved. A Daizy company [Terms of Service](/terms-of-service) [Privacy Policy](/privacy-policy) [Data Processing Agreement](/data-processing-agreement) Solutions - [Solutions Overview](/solutions) - [AI Orchestration](/solutions/ai-orchestration) - [Workflow Library](/remix) Case Studies - [Ocorian](/case-studies/ocorian) - [Trade Republic](/case-studies/trade-republic) - [b2Venture](/case-studies/b2venture) - [Swan](/case-studies/swan) Platform - [Platform Overview](/platform) - [Workflow Builder](/workflow-builder) - [AI & Automation](/ai-and-automation) - [Integrations](/integrations) - [Governance & Audit](/governance-and-audit) - [Security](/security) Resources - [Ask a Technical Question](https://help.nextmatter.com/docs/integrate-across-tools?assistant) - [Opinions](/opinions) [Sign in](https://app.nextmatter.com/login) [Talk to us](/book-a-demo)