Indi GupteProfileBriefDashboardMeet page

Risiq GmbH: the factory infographic

grcGermanyat Web Summit: startup (growth)our decision: meet, priority 2

Risk and regulatory advice for banks, with a platform for ESG and risk reporting.

1

What the company does

Risiq GmbHAdvises banks onrisk andregulationRibeca: risk andESG reportingBanks meetregulators'demands

In normal terms

Helps banks meet regulatory requirements and build risk management; advisory plus Ribeca, a SaaS platform for integrated ESG and risk management and reporting.

Risiq helps banks build risk management and meet regulatory requirements, with the Ribeca platform for integrated reporting.

In lay terms

Risiq helps banks keep their risk homework in order for the regulators.

2

The risks it faces, especially from AI agents

Agents inregulatedbanksA new riskcategoryEvidence overpromisesAgent risks forRisiq GmbH

In normal terms

  • Agents in regulated banks. Banks adopting AI agents must show regulators how each is controlled.
  • A new risk category. Agent risk does not fit neatly into existing risk registers.
  • Evidence over promises. Regulators want evidence, not policy statements.

In lay terms

  • Agents in regulated banks. The regulator will ask the bank: what are your robots allowed to do?
  • A new risk category. There is no box on the form for 'AI assistant'.
  • Evidence over promises. 'We have rules' is not enough; show they work.
3

How RiskMandate helps

Reachwhat it can touchMandatewhat it may dothe Gap
  1. Reachwhat it can actually access or affectEvery agent in the bank and what it touches.
  2. Mandatewhat the business authorisedWhat the bank authorised.
  3. Gapthe difference: the riskThe risk to register.
  4. Barrierswhat really stands in the wayControls with evidence for the regulator.
  5. Provenancewho owns it, who reviewed it, which versionOwner and reviewer: accountability.

In normal terms

RiskMandate gives agent risk a place in the risk register: one evidenced record per agent that a GRC adviser like Risiq can report on. A buyer and a partner for agent-policy evidence in banking.

In lay terms

RiskMandate adds the 'AI assistant' box to the bank's risk forms, and fills it in properly.

A first line for the conversation: Your banks will need to report agent risk to regulators. We give each agent an evidenced record.

Sources and method

The facts in grey (what it does) are from the company map, which cites:

  • websummit.com, read 2026-11-01: LIS26 appearance page: name, country, industry, website
  • websummit.com, read 2026-11-01: listed on the 2026 featured startups list with its elevator pitch (the "what" field)

The risks and how RiskMandate helps are our analysis, written by dev@web-summit.indi on 3 November 2026 from those facts and RiskMandate's model as this site explains it (Reach, Mandate, Gap; an Agent Behaviour Policy in practice). They are not the company's own statements and name no incident. A person reviews each before it is used.

All the factory's companies

For an agent: this page is https://web-summit.sgit.ai/people/indi/factory/risiq/index.html (markdown: https://web-summit.sgit.ai/people/indi/factory/risiq/index.md). Site index for agents: https://web-summit.sgit.ai/llms.txt. Source: https://github.com/SGit-AI/SGit-AI__Website__Web-Summit (release branch dev). Identity of the agent that runs this site: https://web-summit.sgit.ai/agent/index.html.