We're pleased to announce that Initia Risk is the technology partner behind COPA GRC - the football governance, risk and compliance proposition built for clubs that now have to operate inside an independent licensing regime.
In short
COPA GRC helps professional football clubs build a proportionate GRC operating model. Initia Risk is the digital platform that makes that model usable day to day: ownership, workflows, evidence, actions and reporting in one place.
- COPA delivers - football-specific design, implementation and ongoing support. It holds the club relationship.
- Initia provides - the platform underneath, so the model does not live in spreadsheets and inboxes.
- Why now - the Independent Football Regulator is changing what clubs have to evidence, not just what they have to intend.
This is an implementation and referral partnership. COPA runs the engagement. Initia is the system the club actually operates. Both firms introduce the other where a prospect needs advisory work, tooling, or both.
What COPA GRC Is
COPA is The GRC Group's football proposition, founded by Rishi Gajree. It is built for professional clubs that already do a lot of governance work in fragments - finance, legal, the board, supporter liaison, matchday operations - and now need that work joined up enough to stand up to independent supervision.
The immediate entry point is Independent Football Regulator (IFR) readiness. The enduring need is stronger operating capability: clear ownership, repeatable routines, evidence that can be retrieved without a scramble, and a board that can see the position before it becomes a regulatory problem.
COPA's own framing is useful: clubs are not banks. Sporting uncertainty, ownership structures, supporter relationships and huge differences in scale all have to shape the model. Importing a financial-services compliance pack into a League Two club would fail for the same reason a generic enterprise GRC rollout fails in a 200-person firm - it ignores how the organisation actually runs.
That is close to how Initia thinks about proportionate GRC. The platform exists for organisations that have outgrown spreadsheets and do not need a tier-1 enterprise suite. Football clubs in the new regime sit in that same gap.
Why Football Needs This Now
The Football Governance Act 2025 created the Independent Football Regulator and a statutory licensing regime covering the top five tiers of English men's football: the Premier League, Championship, League One, League Two and the National League Premier Division.
A licence is only the beginning. Clubs then have to maintain the capability to meet ongoing obligations across connected areas:
- Licensing and governance - applications, declarations, licence conditions, the Club Governance Code, board decision rights and public reporting.
- Financial resilience - forward plans, cash and funding, scenarios, and action when the position changes.
- Owners, directors and senior executives - suitability, influence, appointments and the evidence trail behind them.
- Supporters and heritage - meaningful engagement, decision trails, and duties that affect club identity and the home ground.
- Evidence and regulatory response - knowing where information sits, who can retrieve it, and how the club answers without a last-minute reconstruction.
That is a GRC problem, even if football does not use the acronym yet. Who owns each requirement? Where is the evidence? Can the board see the material issues? Can the club show how a decision was made? Those are the same questions regulated firms in financial services have been answering for years - and the same questions a risk platform is built to hold. See how to create real risk ownership and board-ready risk reporting.
How the Two Firms Support Each Other
COPA's public position is that it connects design, technology, implementation and specialist support around one club operating model - not another disconnected advisory layer. Initia is the technology in that stack. On COPA's own site, the digital operating platform is described as enabled through Initia Risk.
The split of work is deliberate:
- COPA designs and delivers. Leadership briefing, diagnostic, club blueprint, football GRC framework, implementation, and the ongoing Core or Managed support that keeps the model current. The club relationship sits with COPA.
- Initia is the operating system. Owners, workflows, evidence, actions and reporting live in the platform from the first engagement, so the model COPA builds is the model the club actually runs.
- Elliot Poublan sits on the COPA squad for digital GRC and technology - platform enablement, workflows, evidence and digital visibility - so the product and the football operating model are designed together, not bolted on after the report is written.
- Referrals run both ways. COPA introduces Initia where a club or other organisation needs tooling beyond the football engagement. Initia introduces COPA where a prospect needs football-specific advisory and implementation rather than software alone.
That is the same pattern as our other implementation partnerships: the specialist firm holds the client, runs the work, and uses Initia as the system underneath. Halo Risk does it as a white-labelled managed service in financial services. COPA does it as a named football GRC proposition. The product job is the same in both cases - make the framework usable by the people who actually own the risks.
What Clubs Get
Clubs do not need another compliance overlay. They need arrangements that fit how the club already works, with technology that makes ownership and evidence visible without creating a second job for already stretched people.
In practice, a COPA engagement that runs on Initia means:
- A club-specific operating model - not a generic control pack copied from another industry.
- Clear owners for licensing, governance, financial resilience, ODSE, supporter and heritage duties.
- Evidence, actions and reporting in one environment, so an IFR information request is a retrieval task rather than a reconstruction project.
- Leadership oversight that comes from the live model, not a pack rebuilt for each board meeting.
COPA is explicit that the club remains accountable. Initia does not replace leadership judgement, and COPA does not replace the club's decisions, approvals or submissions. Technology supports the operating model. It does not become the operating model.
COPA is independent and is not endorsed by the Independent Football Regulator. Clubs retain responsibility for their regulatory obligations. That boundary matters, and we are happy to keep it visible.
What This Means for Initia
Initia was built for regulated organisations that need proportionate GRC - first-line teams who will actually complete the work, and a second line that can challenge rather than chase. Football clubs entering statutory licensing look a lot like the mid-market firms we already serve: lean resource, real consequences, and no appetite for an enterprise rollout.
The partnership gives us a specialist route into a newly regulated sector without pretending Initia is a football consultancy. COPA brings the football governance, legal, finance, supporter and implementation expertise. Initia brings the platform. That is how we want partnerships to work: each firm doing the job it is actually good at.
If you want the detail on COPA's operating model, start with copagrc.co.uk. If you want to see the Initia side of the partnership, book a conversation.