Stay Ahead of Regulators, Not Behind Them
Protecting organizations against FCPA risk, federal penalties, and regulatory enforcement with compliance programs built to withstand real scrutiny.
Modern Regulatory Environments Demand Proactive Compliance
The businesses that avoid enforcement actions are the ones that built their compliance program before they needed it.
We audit internal policies, establish anti-bribery protocols under the Foreign Corrupt Practices Act (FCPA), and align business practices with federal requirements — for companies operating domestically and internationally. When an issue does surface, we also conduct internal investigations and manage the firm's response to regulators.
Compliance Services We Provide
From building a program from scratch to responding when a regulator comes calling.
FCPA & Anti-Bribery Compliance
Anti-bribery policies, third-party due diligence protocols, and training scaled to your international footprint.
FAR/DFARS Compliance Audits
Federal Acquisition Regulation compliance reviews for government contractors and their subcontractors.
Whistleblower & Ethics Programs
Internal reporting channels and anti-retaliation policies that give employees a real way to raise concerns.
Internal Investigations
Independent internal investigations when a complaint, audit finding, or regulator inquiry needs a fast, credible response.
Compliance Program Design
Policies, training, and monitoring built to match your actual risk profile — not a one-size-fits-all template.
Business Visa & Immigration Counsel
Executive and employee immigration counsel (H-1B, L-1, O-1) for companies with international hiring needs.
Building a Program That Holds Up
A clear path from audit to an active, working compliance program.
Risk Assessment & Audit
We review your current policies, business operations, and regulatory exposure to identify the highest-priority gaps.
Policy Design & Training
We draft or update policies and help roll out training so the program is actually understood, not just written.
Monitoring & Response
We help you monitor compliance going forward and are available to respond quickly if an issue or inquiry arises.
Not Sure Where Your Compliance Gaps Are?
A compliance audit now is far less costly than an enforcement action later.
Questions About Regulatory Compliance?
Get clear answers to the questions we hear most often.
What is the FCPA and who does it apply to?
The Foreign Corrupt Practices Act (FCPA) prohibits U.S. companies and individuals from bribing foreign officials to obtain or retain business, and it also imposes accounting and internal control requirements. It applies broadly to U.S. companies operating internationally, and in some cases to foreign companies with a U.S. connection, including through third-party agents and distributors acting on their behalf.
What triggers a corporate internal investigation?
Common triggers include a whistleblower complaint, an anomaly discovered during a routine audit, a regulator's inquiry or subpoena, or red flags surfaced during M&A due diligence. How quickly and thoroughly you respond to the initial trigger often affects how a regulator views the company's compliance culture later.
Do small businesses need a compliance program?
Yes, if you operate in a regulated industry, contract with the federal government, or do business internationally, a compliance program scaled to your size still matters — regulators generally evaluate whether a program is reasonably designed for your risk profile, not whether it matches a large corporation's. A basic, well-documented program is far better than none at all.
What is FAR/DFARS compliance and who does it affect?
The Federal Acquisition Regulation (FAR) and Defense Federal Acquisition Regulation Supplement (DFARS) set the rules that govern how companies contract with the federal government, covering everything from cost accounting to cybersecurity requirements. Any business holding or bidding on federal contracts, and often their subcontractors, needs to comply with the applicable provisions.
What should a whistleblower policy include?
An effective policy provides a clear, confidential reporting channel, prohibits retaliation against employees who report in good faith, defines how complaints are investigated, and is actually communicated to employees rather than left in a drawer. A policy that exists only on paper offers little protection if a real complaint surfaces.
What are the penalties for FCPA violations?
Penalties can include substantial civil and criminal fines for the company, disgorgement of profits, and in serious cases, criminal liability for individuals involved, including prison time. Beyond the direct penalties, an FCPA enforcement action often carries significant reputational and business consequences, including debarment from federal contracting.
How often should compliance policies be reviewed?
At minimum, an annual review is standard practice, but policies should also be revisited whenever the business enters a new market, changes its risk profile, or after any internal investigation surfaces a gap. Regulators generally view a compliance program that never updates as a sign it isn't actually being used.