Initia Risk Partners with COPA GRC to Support Regulated Football Clubs

We're pleased to announce that Initia Risk is the technology partner behind COPA GRC - the football governance, risk and compliance proposition built for clubs that now have to operate inside an independent licensing regime.

This is an implementation and referral partnership. COPA runs the engagement. Initia is the system the club actually operates. Both firms introduce the other where a prospect needs advisory work, tooling, or both. You can see the public partner profile on our COPA GRC partner page.

What COPA GRC Is

COPA is The GRC Group's football proposition, founded by Rishi Gajree. It is built for professional clubs that already do a lot of governance work in fragments - finance, legal, the board, supporter liaison, matchday operations - and now need that work joined up enough to stand up to independent supervision.

The immediate entry point is Independent Football Regulator (IFR) readiness. The enduring need is stronger operating capability: clear ownership, repeatable routines, evidence that can be retrieved without a scramble, and a board that can see the position before it becomes a regulatory problem.

COPA's own framing is useful: clubs are not banks. Sporting uncertainty, ownership structures, supporter relationships and huge differences in scale all have to shape the model. Importing a financial-services compliance pack into a League Two club would fail for the same reason a generic enterprise GRC rollout fails in a 200-person firm - it ignores how the organisation actually runs.

That is close to how Initia thinks about proportionate GRC. The platform exists for organisations that have outgrown spreadsheets and do not need a tier-1 enterprise suite. Football clubs in the new regime sit in that same gap.

Why Football Needs This Now

The Football Governance Act 2025 created the Independent Football Regulator and a statutory licensing regime covering the top five tiers of English men's football: the Premier League, Championship, League One, League Two and the National League Premier Division.

A licence is only the beginning. Clubs then have to maintain the capability to meet ongoing obligations across connected areas:

• Licensing and governance - applications, declarations, licence conditions, the Club Governance Code, board decision rights and public reporting.
• Financial resilience - forward plans, cash and funding, scenarios, and action when the position changes.
• Owners, directors and senior executives - suitability, influence, appointments and the evidence trail behind them.
• Supporters and heritage - meaningful engagement, decision trails, and duties that affect club identity and the home ground.
• Evidence and regulatory response - knowing where information sits, who can retrieve it, and how the club answers without a last-minute reconstruction.

That is a GRC problem, even if football does not use the acronym yet. Who owns each requirement? Where is the evidence? Can the board see the material issues? Can the club show how a decision was made? Those are the same questions regulated firms in financial services have been answering for years - and the same questions a risk platform is built to hold. See how to create real risk ownership and board-ready risk reporting.

How the Two Firms Support Each Other

COPA's public position is that it connects design, technology, implementation and specialist support around one club operating model - not another disconnected advisory layer. Initia is the technology in that stack. On COPA's own site, the digital operating platform is described as enabled through Initia Risk.

The split of work is deliberate:

• COPA designs and delivers. Leadership briefing, diagnostic, club blueprint, football GRC framework, implementation, and the ongoing Core or Managed support that keeps the model current. The club relationship sits with COPA.
• Initia is the operating system. Owners, workflows, evidence, actions and reporting live in the platform from the first engagement, so the model COPA builds is the model the club actually runs.
• Elliot Poublan sits on the COPA squad for digital GRC and technology - platform enablement, workflows, evidence and digital visibility - so the product and the football operating model are designed together, not bolted on after the report is written.
• Referrals run both ways. COPA introduces Initia where a club or other organisation needs tooling beyond the football engagement. Initia introduces COPA where a prospect needs football-specific advisory and implementation rather than software alone.

That is the pattern: COPA holds the club relationship, runs the work, and uses Initia as the system underneath. The product job is to make the framework usable by the people who actually own the risks.

What Clubs Get

Clubs do not need another compliance overlay. They need arrangements that fit how the club already works, with technology that makes ownership and evidence visible without creating a second job for already stretched people.

In practice, a COPA engagement that runs on Initia means:

• A club-specific operating model - not a generic control pack copied from another industry.
• Clear owners for licensing, governance, financial resilience, ODSE, supporter and heritage duties.
• Evidence, actions and reporting in one environment, so an IFR information request is a retrieval task rather than a reconstruction project.
• Leadership oversight that comes from the live model, not a pack rebuilt for each board meeting.

COPA is explicit that the club remains accountable. Initia does not replace leadership judgement, and COPA does not replace the club's decisions, approvals or submissions. Technology supports the operating model. It does not become the operating model.

COPA is independent and is not endorsed by the Independent Football Regulator. Clubs retain responsibility for their regulatory obligations. That boundary matters, and we are happy to keep it visible.

What This Means for Initia

Initia was built for regulated organisations that need proportionate GRC - first-line teams who will actually complete the work, and a second line that can challenge rather than chase. Football clubs entering statutory licensing look a lot like the mid-market firms we already serve: lean resource, real consequences, and no appetite for an enterprise rollout.

The partnership gives us a specialist route into a newly regulated sector without pretending Initia is a football consultancy. COPA brings the football governance, legal, finance, supporter and implementation expertise. Initia brings the platform. That is how we want partnerships to work: each firm doing the job it is actually good at.

If you want the detail on COPA's operating model, start with copagrc.co.uk. If you want to see the Initia side of the partnership, book a conversation or read the partner profile at Initia Risk partners.