Shape Tier — £10,000/month

A dedicated AWS payments architect
embedded in your team.

For mission-critical payment workloads, regulatory deadlines, and strategic delivery. Everything in Sync, plus a senior architect who owns the technical roadmap alongside you.

Everything in Sync, plus your architect

Dedicated AWS Architect
PCI-DSS Gap Analysis
IaC Generator (Architect Reviewed)
Agent Payment Flow Simulator
Infrastructure Cost Modeller
Security Controls Matrix
Bi-weekly Architecture Reviews
Architecture Decision Records
Failure Playbook Generator
Acquirer Readiness
Direct Slack / Teams Access

Who Shape is for

Teams that need a senior architect, not just tooling.

Heads of Payments & CTOs

You're accountable for payment infrastructure at a scale-up or mid-market firm. You need a trusted architect who knows payments, not just cloud — and who can translate technical risk into business language.

Banks Scaling Digital Payments

You're modernising a payment stack that was built over a decade. You need architectural direction, not just tooling — someone who can work with your team and hold the design.

Fintechs Under Regulatory Pressure

You have a DORA deadline, an FCA application, or a Visa/Mastercard certification in flight. You need an architect who has been through this before and can accelerate your delivery.

Series B+ Companies Scaling Infrastructure

You've grown faster than your architecture. Payment flows that worked at £1M volume are straining at £100M. You need an architect embedded in your team before you hit the next wall.

Teams Preparing for Audits or Certification

PCI-DSS QSA audit, FCA visit, or scheme certification. You need an architect who can own the technical evidence and respond to questions — not a junior consultant reading from a checklist.

The situations Shape is built for

We have a critical payment architecture decision to make and no senior technical resource to own it.
Our compliance team is preparing for a PCI-DSS QSA audit but our engineers are too busy building.
We've been through two failed IaC initiatives. We need someone senior enough to make it stick.
Our Head of Engineering left. We need continuity on the payment infrastructure until we hire.
We're applying for FCA authorisation and need an architecture that can pass technical scrutiny.

How your architect responds to each one

Your dedicated architect owns the technical decision and produces the ADRs, IaC, and architecture docs.
Bi-weekly reviews keep compliance work on track. The architect prepares evidence and attends QSA sessions.
IaC is generated with architect review and embedded in your workflow — not handed over as a one-off.
Embedded continuity — your architect knows your stack, your team, and your delivery timeline.
The architect owns the technical narrative for your FCA application and responds to regulator questions.

Your dedicated Payments Infrastructure Architect

Not a generalist cloud consultant. Your architect is a certified AWS Solutions Architect specialising in payment infrastructure — PCI-DSS, scheme certification, agentic payment flows, AWS payment rails, and FCA-regulated environments. They work alongside your team on a retainer, know your stack, and are available directly over Slack or Teams.

  • Bi-weekly advisory calls (60 min)
  • Hands-on architecture reviews
  • IaC generation with architect review
  • Threat modelling sessions
  • DORA / FCA incident reporting readiness
  • Payment scheme compliance advisory
  • Custom integration scoping & delivery oversight
  • Direct Slack / Teams access to your architect
  • SLA guarantees
  • Architecture decision records (ADRs)
  • Monthly architecture health reports
  • Priority email support (same business day)
Based on FCA DORA implementation timeline & PCI-DSS QSA industry data

DORA (Digital Operational Resilience Act) became applicable to EU financial entities and their ICT third-party service providers in January 2025, requiring firms to maintain ICT risk management frameworks, conduct threat-led penetration testing, and document third-party dependency mapping — with direct board accountability. The FCA's own CP23/30 consultation on operational resilience sets impact tolerances that require architectural evidence, not just policy statements. Simultaneously, high engineering turnover in fintech is well documented — meaning most payment engineering teams will face a senior technical vacancy during a critical compliance window. An embedded architect bridges that gap without the 3–6 month cost and delay of a permanent hire.

Sources: DORA Regulation (EU) 2022/2554 · FCA CP23/30 Operational Resilience · PCI SSC QSA qualification requirements
£10,000
/month base + £49/user/month + £249/account/month

3-month minimum commitment. Cancel with 30 days written notice after that. Includes everything in Sync plus your dedicated architect.

Not sure yet? Start with Sync at £5,000/month or try Scope Mode at £999/month