
Clients
Companies and organisations seeking to improve their strategic position and operate efficiently in global markets.
IDefend
IIInfluence
IIIExpand
IVSustain
11In-house units
The small Big Four
Integrity and compliance, regulatory defence, intelligence, security, digital risk, crisis and in-house artificial intelligence. Eleven areas, forty-four services, a single point of contact.

The model
The strength and method of the large international firms, with the agility and closeness of a boutique. We turn complexity into opportunity and strategy into results.
A documented method, a second review and every statement traced to its source document. The standard does not drop because the engagement is small.
One conversation and we start. No committee, no escalation, and the same person from beginning to end.
Yes, yes with conditions, or no. A strategy is measured by what it lets you do, not by how many pages it runs to.
Positioning
E&D opera en la intersección de cinco disciplinas que la mayoría de las firmas abordan por separado. De ahí salen soluciones integradas para industria y para sector público, no piezas sueltas que alguien tiene que coser después.
Anticipating the scenario before the decision window closes.
People, assets and operations, in any jurisdiction.
Plataformas propias, Zetarys y Qubria, que resisten la auditoría y sostienen el negocio.
Built in-house, governed and certifiable.
Cryptographic readiness for the post-quantum horizon.
Stakeholders

Companies and organisations seeking to improve their strategic position and operate efficiently in global markets.

Collaboration on projects that demand a robust diplomatic and legal approach.

Un entorno donde el criterio propio cuenta y la formación continua forma parte del encargo.

Access to the firm's full range of services and to the detail of the investment, together with the governing bodies that underpin it.

Contribución a un entorno económico donde la decisión se toma con la información comprobada.
Why it matters
Usted responde de terceros que nunca ha visto. El proveedor de su proveedor. El agente en un mercado difícil. El intermediario que nadie recuerda haber contratado.
Cuando estalla, no estalla en nombre de ellos.
The question is not whether you knew. It is whether you can prove you checked.
What is at stake
Statutory maximums. They are not a prediction or advice on any specific case.
Configurator
Before you sign
Service 02.1
Who is behind it, what their record is and whether you should engage. With an explicit written recommendation.
Exposición relativa
Durante la relación
Service 02.2
Toda la cartera ordenada por criticidad, con cláusulas, revisiones periódicas y alerta continua.
Exposición relativa
Ya ha ocurrido
Servicio 10.3
Qué pasó, quién intervino y cuándo se supo. Con evidencia preservada y cadena de custodia desde el minuto uno.
Exposición relativa
Frente a la autoridad
Servicio 03.1
Preparamos la documentación, le acompañamos en la actuación y redactamos lo que hay que presentar en plazo.
Exposición relativa
Antes de adquirir
Servicio 03.3
Qué se lleva usted con la sociedad que adquiere: contingencias, contratos, litigios y pasivos ocultos.
Exposición relativa
Sujeto obligado
Service 02.4
Manual, análisis de riesgo y examen experto externo, en condiciones de resistir una actuación del supervisor.
Exposición relativa
Personas fuera de casa
Servicio 07.2
Visados, relocation, doble imposición y acompañamiento familiar, con equipo operativo propio activable en plazo breve.
Exposición relativa
Tecnología y datos
Servicio 09.1
Dónde está respecto del Esquema Nacional de Seguridad y qué falta para certificar en su categoría.
Exposición relativa
Responsabilidad del consejo
Servicio 01.4
Deberes del administrador, delegación de facultades y reparto de responsabilidad, documentados antes de que alguien pregunte.
Exposición relativa
Voy a desplegar IA
Service 04.4
Clasificación por nivel de riesgo de cada sistema, inventario y expediente de conformidad ante cliente o supervisor.
Exposición relativa
La norma se está escribiendo
Servicio 05.1
Interlocución institucional con registro, huella normativa y argumentario, en España y ante las instituciones europeas.
Exposición relativa
Voy a entrar en un país nuevo
Servicio 06.1
Estabilidad, seguridad jurídica, socio local y riesgo operativo del destino, con matriz de decisión.
Exposición relativa
Instalaciones y perímetro
Servicio 08.1
Riesgos, medidas por fases y presupuesto en un solo documento, con la cobertura legal que exige la norma.
Exposición relativa
Concurso clasificado
Service 09.5
Certificación del producto en el catálogo del Centro Criptológico y habilitación de la empresa y de las personas.
Exposición relativa
What we do
44 servicios en 11 áreas. 41 tienen ficha propia; las tres unidades de la casa se presentan aparte.
No area open

Family I
When someone is coming after you, or might.
01.1
Legal strategy before the dispute, with an eye on how it ends.
01.2
Which contracts, powers of attorney and structures expose you today without your knowing.
01.3
Corporate transactions, restructuring and international taxation.
01.4
Directors' duties, delegation of powers and board liability.
02.1
Who is behind the company you are about to sign with.
02.2
Your whole portfolio ranked by criticality and monitored.
02.3
The system that prevents the offence. Or the investigation if it has already happened.
02.4
An obliged entity, ready to withstand the financial intelligence unit.
03.1
We prepare, attend and draft what has to be filed.
03.2
Which ones, from when, and what has to be done. Without duplicating effort.
03.3
What comes with the company you are acquiring.
03.4
Verified before you appoint them, not after you sign.

Family II
On the rule and on the machine that will apply it.
04.1
They automate your actual process, with your data and your rules.
04.2
An end-to-end product, designed to pass audit.
04.3
Governance, traceability and evidence for your AI.
04.4
The risk classification of each system and what it requires of you.
05.1
Congress, Senate, ministries, regional governments and city councils.
05.2
The Commission, Parliament and Council, and the Spanish competition, securities, data protection and central bank authorities.
05.3
The Spanish and EU official journals and regional gazettes, with alerts and position papers.
05.4
Sector alliances, position lines, media training and institutional crisis.

Family III
Going abroad knowing where you are stepping and with whom.
06.1
Stability, legal certainty and operational risk of the destination.
06.2
Whether your transaction is caught. And how to avoid indirect circumvention.
06.3
With time to prepare, not to react.
06.4
Who the fund, the sponsor or the operator really is.
07.1
Criminal, tax and employment protection for the board, the company and the expatriate.
07.2
Visas, relocation, double taxation and family support.
07.3
Physical protection, medical evacuation, kidnap and ransom.
07.4
Regulatory foresight, ESG in mobility and certified training.

Family IV
That it holds up. And if it does not, that it can be proven.
08.1
Risks, phased measures and budget. In a single document.
08.2
Design and review, with the legal cover the rules require.
08.3
Data centres, energy, civil works and major urban developments.
08.4
Whether what was installed is what was contracted. And what it is really worth.
09.1
Where you stand and what is missing to certify at your category.
09.2
Governance, ICT suppliers and evidence. With the board covered.
09.3
Processing, transfers and classification of your AI systems.
09.4
What to do, who to notify and within what deadline.
09.5
Your product in the National Cryptologic Centre catalogue, and your company and your people cleared to work on classified projects.
10.1
Committee, decision, communication and continuity. Rehearsed beforehand.
10.2
Response to threats against executives and high-risk travel.
10.3
What happened, who was involved and when it became known.
10.4
Electronic evidence with chain of custody.

11
Three in-house units under a single management: the team that deploys, the platform that carries the operation and the division working at the technology frontier.
11.1
Global Mobility 360° is the operational unit of Economía y Diplomacia for international mobility and business continuity. Where other consultancies subcontract in each jurisdiction, it operates with its own cell: a permanent operational team, deployable in under four hours, anywhere in the world.
11.2
Qubria is the business management platform developed by Economía y Diplomacia: fifty-six integrated modules bringing documents, people, finance, sales, operations, legal and compliance together in a single system, in real time and with every access logged.
11.3
ZETARYS is the frontier projects division of Economía y Diplomacia, dedicated to artificial intelligence and quantum computing. It designs, builds and hardens platforms, bespoke software and auditable systems, with a focus on platform engineering, cybersecurity and readiness for ENS and ISO/IEC 27001.
How we work
It makes no difference whether it is 24 hours or three months. The depth changes, not the order.
Qué decisión depende de esto. Y qué no vamos a hacer.
Registries, lists, courts and local press. Every item stamped with its source.
A name on a list is not a finding. It is a hypothesis that has to be confirmed.
A traffic-light matrix and a clear recommendation: yes, yes with conditions, or no.
A signed report and a session with the decision-maker. If anyone challenges it, every line has its document.
Why us
If it is not evidenced, it is not in the report.
Your information, under the most demanding standard the State applies.
We verify on the ground and in the original language.
The same person at the first meeting and at the last.
Without contacting them, without asking them for anything and without leaving a trace.
| Norma | Qué exige | Estado | Service |
|---|---|---|---|
| AMLRReg. (EU) 2024/1624 | Harmonised due diligence and evidenced beneficial owner. | Escalonado | 02.4Anti-money laundering |
| CSDDDDirective (EU) 2024/1760 | You must monitor the impact of your business partners. | En transposición | 02.2Supplier control |
| DORAReg. (EU) 2022/2554 | Your ICT supplier, registered and under the mandatory clause. | En vigor | 09.2NIS2 and DORA |
| NIS2Directive (EU) 2022/2555 | A secure supply chain, with the board accountable. | En vigor | 09.2NIS2 and DORA |
| CriminalArt. 31 bis Criminal Code | Without an effective compliance model, there is no exemption from liability. | Vigente | 02.3Anti-fraud and anti-bribery |
| WhistleblowerAct 2/2023 | Mandatory internal channel and protection against retaliation. | Vigente | 02.3Anti-fraud and anti-bribery |
| Money launderingAct 10/2010 | Manual, risk assessment and external expert review. | Vigente | 02.4Anti-money laundering |
| SanctionsRegs. 833 and 269/2014 | You are also liable for indirect circumvention through third countries. | Actualización continua | 06.2Sanctions and export control |
| DataGDPR and the Spanish Data Protection Act | Governs how you handle the counterparty's information. | Vigente | 09.3Data and artificial intelligence |
| AI ActEU Artificial Intelligence Act | Risk-level classification, system inventory and conformity file. | En vigor por fases | 04.4EU Artificial Intelligence Act |
| TransparencyTransparency register | Registration, legislative footprint and traceability of institutional engagement. | En vigor | 05.3Monitoring and analysis |
| MobilityISO 31030 · travel | Duty of care to the posted employee and response protocol. | En vigor | 07.3Operations and security |
| CPSTIC · Facility clearanceClassified projects | Product certification and clearance of the company and its people. | Requisito de concurso | 09.5CCN certification and security clearances |
| EvidenceElectronic evidence | Chain of custody and admissibility of digital evidence. | En vigor | 10.4Digital evidence |
Sectors
They trust us
International notaries, public universities, heritage hospitality, institutional forums and multilateral bodies. Different worlds with the same demand: verifiable judgement and discretion.
Notarial profession
Asociación notarial internacional
Institutional · global reach
Hospitality
Cadena hotelera de patrimonio
The whole chain · assets and operations
Forums
Foro institucional de certeza jurídica
Institutional forum
Academia
Universidad pública española
Research and teaching
Multilateral
Organismos internacionales
Advisory work for multilateral institutions
References are identified by field rather than by name, in application of the duty of confidentiality. The identity of each entity and the scope of the engagement are evidenced in writing, where appropriate, under a specific confidentiality agreement.
Cases
One situation per family, with the starting position, what was done and the verifiable outcome. Identifying details are omitted under the duty of confidentiality; the scope of each engagement is evidenced under a specific agreement.

11
líneas de defensa
Family I · Defend
Pleading filed within time with the qualified majority of the share capital evidenced in favour of the challenged action. Proceedings ongoing.
Ver el encargoIndustrial company · Spain · mid-sized workforce
Situation
Two directors charged with alleged breach of fiduciary duty and document falsification, with a six-figure monetary claim and risk of attachment over the company.
Action taken
Documentary reconstruction of the corporate intent evidenced before a notary, analysis of the validity of the challenged resolutions and a defence pleading with eleven independent lines of argument.

24 h
plazo de incidente
Family II · Influence
Documentary set issued and accepted. Certification audit scheduled within the following year.
Ver el encargoTechnology supplier · healthcare · Spain
Situation
Supplier of AI-enabled systems to a healthcare client, with no system inventory or risk classification, and a contractual obligation to evidence conformity.
Action taken
System inventory, risk-level classification, formal appointment of a security officer, incident protocol with 24- and 72-hour deadlines, and a one-way documentary trail to the client.

III
nivel de verificación
Family III · Expand
A recommendation to contract subject to conditions, with three exit clauses and an audit regime. The deal was signed on the proposed terms.
Ver el encargoInfrastructure group · operation in sub-Saharan Africa
Situation
Award conditional on a local partner proposed by the counterparty, with no verifiable information on its beneficial ownership or its exposure to sanctions lists.
Action taken
Level III verification with a local source on the ground, press in the original language, reconstruction of the corporate structure up to the parent and screening against the European and United States sanctions regimes.

10+
plantas periciadas
Family IV · Sustain
Reports issued for each site arguing full impairment of the value of the service, grounded in the absence of legally valid certification.
Ver el encargoIndustrial multinational · Spain
Situation
Security systems installed at more than a dozen plants with no certified installation record, a maintenance contract in force and no evidence of the service actually provided.
Action taken
A technical and legal expert report for each site, a photographic annex with chain of custody by digital hash, an economic valuation and a liability analysis in the civil, administrative and criminal spheres.
Anonymised cases. Sector, size and jurisdiction are given only where they do not allow identification. The figures come from the case file and are not a forecast of outcome for any other matter.
Analysis
Four readings on what is already in force or will be before the year is out. No forecasts: published rule, firm deadline and demonstrable consequence.

The directive places approval and oversight of risk-management measures on the board, with personal liability for non-compliance. Delegating to the head of IT no longer discharges it.

The obligation arises from placing on the market, not from use. Anyone without their systems inventoried and classified by risk level will not be able to evidence conformity to a client who does require it by contract.

The obligation reaches established business partners, not just direct suppliers. Mid-sized companies are pulled in contractually long before they cross the threshold themselves.

Product certification and clearance of the company and its people are concurrent requirements, not alternatives, and their processing times do not overlap. Starting late is the same as not bidding.
Analyses for information only, referring to the rules in force on the date shown. They do not constitute advice and do not replace examination of the specific case.
The company
Shareholders, partners, talent and commitment. The structure behind the forty-four services.
Where we are
Area 07 · International mobility
| Plaza | Cometido | Hora local | Desde Madrid |
|---|---|---|---|
| MadridSpain | Head office | --:-- | Head office |
| MilanItaly | Europa meridional | --:-- | 1188 km |
| LisbonPortugal | Península y lusofonía | --:-- | 502 km |
| BucharestRomania | Europa oriental | --:-- | 2473 km |
| MiamiUnited States | Puerta de LatAm | --:-- | 7091 km |
| DallasUnited States | Corredor central | --:-- | 7956 km |
| Mexico CityMexico | Norteamérica hispana | --:-- | 9063 km |
| Kuala LumpurMalaysia | Sudeste asiático | --:-- | 11.072 km |
| MonroviaLiberia | África occidental | --:-- | 3858 km |
| MalaboEquatorial Guinea | Golfo de Guinea | --:-- | 4265 km |
Shareholder space
Access to the firm's full range of services and to the detail of the investment, together with the governing bodies that underpin it.
Sovereign body. Notice, documentation and resolutions.
Standing advice to the board on strategic matters.
Technical support on entry, expansion and exit decisions.
Events, private area and a direct channel to the Office of the Chair.
Partner programme
A global community of partners, offers and resources connecting your organisation with what it needs to build and deploy business solutions. Backed by the firm's international service portfolio and its client reach.
Training, support, service and sales on exclusive terms, to accelerate innovation and drive growth.
Access to artificial intelligence services, expert guidance and the core technology needed to build a start-up ready for what comes next. No prior funding required.
Maximum margin retention and account protection through prior registration of the opportunity in Qubria, the firm's own platform.
Build managed response services or offer packaged tools that let the client meet their own need.
Careers
Working in the group is dynamic, with challenges on disruptive projects. Country, city, mountain or coast: you choose where. Success is built on everyone's contribution to the business.
Consulting
Deployment, administration and oversight of identities, governance, storage, compute and virtual networks in a cloud environment, with resource provisioning and tuning.
Engineering
Development, programming and training of the algorithm networks that make up artificial intelligence. Combines software development, programming, data science and data engineering.
Product
A self-directed, solution-oriented profile who works with the consulting practice to solve business problems using advanced technology.
Data
Maximises the value of data assets through visualisation and reporting: profiling, cleansing and transformation, and scalable models with advanced analytics.
Functional
A domain expert who helps deploy the technology solution each organisation needs, resolving complex business situations.
Platform
A developer or infrastructure administrator who brings together people, processes and products to make continuous delivery of value possible.
Architecture
Owns the technical relationship and strategy with the client: leads architecture design, builds proofs of concept and delivers projects.
Cybersecurity
Reduces risk by resolving live attacks quickly, advising on protective improvements and notifying breaches to the parties concerned.
Diversity, equity and inclusion
Our global reach rests on the ability to bring in new perspectives. Fostering an inclusive, collaborative culture is not reputational decoration: it is what makes it possible to combine different knowledge and experience to resolve what the client brings us.
Equal opportunity for development and promotion, pay audits to verify the absence of gaps, and clear mechanisms to report and address cases of discrimination.
Download the policyInclusive workplaces, awareness and training programmes, accessible spaces, diverse recruitment and affinity groups.
Download the policyReasonable workplace adjustments, inclusive hiring with barriers removed from selection, and dedicated development and retention programmes.
Download the policyDocuments published by Economía y Diplomacia, S.A. on its own domain. Each version is identified by date and the history is retained; amendments are published as a new version.
Next step
45 minutes. No cost. We tell you which service applies to you, what you would receive and in what time frame. If it is not worth it for you, we tell you that too.
How to start
The fee is set after the assessment: before the scope is known, any figure would be made up.
Way in 01
45 minutes and a written note. No obligation.
No cost
45 minutes
Way in 02
One counterparty, verified and with a recommendation.
Fixed fee
Per entity · by level
Way in 03
Your portfolio monitored all year round.
Annual retainer
By contracted volume
| Model | When |
|---|---|
| Fixed fee per entity | Counterparty verification, levels I and II |
| Milestone-based project | Suppliers, money laundering, security, digital and procurement |
| Monthly retainer | Continuous monitoring and inspections |
| Time with an agreed cap | Investigation. The only prudent approach |
| Block of hours | Recurring client |
Contact
The first conversation is with the person who will lead the engagement. There is no sales filter in between: framing the matter correctly saves more than any discount.
Questions
A database returns matches. We return conclusions. Ruling out name coincidences and lapsed links is where the value lies, and an algorithm alone does not do that.
02.1 · Counterparty verificationNo. We do not contact them, we do not ask them for documents and we leave no trace. If the engagement required direct approach, you would be told beforehand and it would be agreed in writing.
02.1 · Counterparty verificationThe report says so just as clearly. A clean, traceable file proves to a supervisor, an auditor and a judge that you did what you had to. That is exactly what you are buying.
02.2 · Supplier controlUnder ENS High Category, with confidentiality signed before any exchange and certified destruction on expiry of the agreed period.
09.1 · ENS certificationTen own offices and verification in the original language. Outside those locations, a vetted correspondent, disclosed in the report.
Offices and time zonesLevel I, 24 to 48 hours. Level II, 5 to 8 days. Level III, 15 to 20. It can be compressed, stating what is left out.
Full service indexThat is the most common situation and it is not the worst. What counts then is evidencing when it was known and what was done from that moment on. That can be built, and it is exactly what the authorities look for.
10.3 · Corporate investigation