A SENIOR TECHNICAL READ, FROM A WORKING CTO

Co-founder & CTO, Togethrust. I find what breaks before investors do.

I build a regulated French fintech full-time. Alongside it: one 360° tech audit per quarter, for pre-seed to Series A founders.

• One 360° tech audit per quarter
• 15 hours, fixed scope, hard-capped
• Any software company, deepest in regulated fintech

"Deployment time reduced from 2 weeks to 3 days" · Technology Company

Khaled Souf
50+ Projects
delivered
5 Countries
worked in
18+ Years in
engineering

Trusted by teams at

BNP Paribas Crédit Agricole EDF Société Générale Decathlon CanadaCANADA Desjardins StemmerLife invygo Lightspeed

One audit per quarter

The practice is deliberately small and designed to stay that way. Staying close to founders and their technical problems is what makes me better at Togethrust.

Flagship

360° Tech Audit

One per quarter • 15 hours over 3 weeks

A fixed-scope review of your architecture, security and compliance posture, delivery process, engineering team, and infrastructure costs. Fixed scope, hard time-cap, no scope creep.

What you get

  • Scored written report
  • Prioritized 90-day roadmap
  • 90-minute restitution session
Explore the 360° Audit →
By the session

CTO Advisory Sessions

Paid • Booked one at a time

Bring one hard technical decision: an architecture call, a regulatory constraint, a hiring or team-structure question. We work it through in a single session. Starts with a short fit call.

What you get

  • One decision, worked end to end
  • Written summary afterwards
  • No retainer, no minimum
Check we're a fit →
Start here

Free Diagnostic Call

30 minutes • No cost

A no-pitch conversation about where your engineering actually stands. If an audit is not the right answer for you, I will say so.

What you get

  • No pitch, no slides
  • Station F founders prioritized
  • A straight answer on whether an audit fits
Book a free diagnostic call →

Ongoing advisory by invitation, for past audit clients.

Concrete Results

Don't take my word for it. Here are the numbers, across fintech, healthcare, and software at scale.

0%

Cloud cost reduction

Right-sized infrastructure and implemented spot instances for non-critical workloads.

→ Crypto bank, Zurich
0%

Infrastructure cost cut

Migrated the integration platform from MuleSoft to Apache Camel.

→ StemmerLife, France
0%

Product activation, up from 24%

Measured after a full redesign of the application, as co-founder and CTO.

→ Togethrust, Paris

Regulated-Grade Experience, Across Sectors

Co-founder & CTO

Togethrust

Co-founding a regulated fintech platform. Building the tech foundation from scratch: architecture, team, and engineering culture with compliance built in from day one.

France • 2025-Present

Regulated Fintech

Auditor & Cloud Expert

StemmerLife

Cloud audit for France's largest dental and medical products distributor. Migrated the integration platform from MuleSoft to Apache Camel. Infrastructure costs came down 90%.

France • 2025

Medical Distribution

Cloud & Software Architect

Stealth Fintech

Architected cloud infrastructure for a FINMA-regulated crypto platform. Set up CI/CD pipelines, testing strategy, and microservices decomposition.

Zurich • 2023-2024

Regulated Crypto

Interim Head of Engineering

invygo

Led engineering across 4 teams for a car subscription platform. Operations tickets down 20%, tech debt down 30%.

Dubai • Jan-Apr 2025

Mobility

Software Craftsman & Architect

Société Générale

Led technical coaching across multiple feature teams. Introduced TDD/BDD practices and DDD architecture patterns to a major banking platform.

Paris • 2019

Major French Bank

Architecture & Tech Coach

Lightspeed

Coaching sessions on architecture, technical practice and engineering standards, inside the Agile Office "CTO as Service" programme. Domain-Driven Design on payment processing: slicing a legacy monolith into bounded contexts with clear APIs.

Montreal • 2021

Payments

Don't Take My Word For It

"Fantastic at complex projects"

His ability to jump into a complex project that requires taking a software architecture lead and decomposing it is fantastic! He brings a strong technical opinion to the table and supports the team to delivery.

Darragh Grealish

Darragh Grealish

Co-Founder & CTO, 56K.Cloud

Verify on LinkedIn →

"Bet on Khaled"

Khaled is a passionate software developer and craftsman. He delivers high quality work and is always on the search of improvements. If you want things to improve—codebase, team work, team knowledge—you can safely bet on Khaled.

Vincent Demeester

Vincent Demeester

Sr. Principal Engineer, Red Hat

Verify on LinkedIn →

Khaled Souf

Togethrust, and how I got here

I'm a fractional CTO based in Paris, working with fintech and software companies across Europe: 18+ years of engineering across 5 countries, a regulated banking background in trading systems and core banking, and clients including BNP Paribas, Société Générale, Crédit Agricole, Desjardins and EDF.

I'm CTO and one of three co-founders of Togethrust in Paris, a French-regulated fintech (IFP/ORIAS, ACPR-supervised). We digitize tontines (savings circles) for Francophone African diaspora communities. Togethrust has been through the HEC Paris Incubator, Station F, Founder Institute and Blue Factory, ESCP's incubator. That is my full-time work.

Alongside it I run a small fractional CTO practice: a 15-hour, fixed-scope tech audit for pre-seed to Series A founders, one per quarter. Deliberately small, and designed to stay that way.

I grew up in Kébili, in Tunisia's Saharan south. My first computer came in 1992, at 7: an Amstrad, 8MHz, no hard drive, two 3.5" floppy drives. In 1996 Tunisia placed one internet-connected computer per region, and I spent my allowance buying time on Kébili's. When the CNIPE, the national children's computing center, opened there, I was one of the first kids in.

I represented Kébili at every national kids' competition and won other olympiads later. In 1999, at 14, I competed on Tunisia's first national TV channel, on a show called The World of the Internet: Kébili against Tozeur, a speed-navigation team event, then a live 1-vs-1 website-building duel. FrontPage era, before anyone had heard of Google. I beat an 18-year-old. The prize was my first trip to France.

I came home, became an engineer (ENICarthage, 2007), and moved to France in 2010, to the country that first trip had shown me. Since then: 18+ years on banking systems at BNP Paribas, Société Générale, Crédit Agricole and Desjardins, across France, Switzerland, Canada, the UAE and Tunisia. I co-founded SOCRATES Canada, and co-organized Software Crafters Montréal and Romandie Software Crafters. I build for communities like the one I come from.

GDPR Compliance Banking APIs Regulatory Architecture Domain-Driven Design
🇫🇷 France 🇨🇭 Switzerland 🇨🇦 Canada 🇦🇪 UAE 🇹🇳 Tunisia

How It Works

What does the 360° audit cover?

Five areas in one pass: architecture and scalability, security and compliance posture, delivery process and CI/CD, engineering team and organization, and infrastructure costs. Reviewing them together is what makes the findings connect. Full detail here.

Why only one audit per quarter?

Because Togethrust is my full-time work, and the audit only has value if a senior person actually does it. The cap is what keeps the depth honest. The practice is deliberately small and designed to stay that way.

Remote or on-site?

Primarily remote, with an on-site visit when the restitution session warrants it. Based in Paris, I can easily reach London, Brussels, Geneva, Lyon or Zurich.

What's the difference vs. a consultant?

I run engineering for a regulated fintech every day, so I read your stack the way an operator does, not the way a report writer does. The audit is scoped, capped, and closed on delivery. No open-ended engagement follows it.

Do you only work with fintech?

No. The five areas apply to any software company. The work outside fintech spans mobility (invygo), dental and medical distribution (StemmerLife), healthtech (Kry) and retail (Decathlon Canada). My background just goes deepest at the regulated end: 18+ years on banking systems, ACPR supervision, compliance, KYC and financial transactions at scale. If your product carries those constraints, that depth is yours.

What languages do you work in?

Fluent in French, English, and Arabic. I've led teams across France, Switzerland, Canada, UAE, and Tunisia. Comfortable with multicultural, distributed teams.

Do you use AI in the audit?

Yes, and I am deliberate about where. AI-assisted tooling lets me read more of your codebase than a manual review of the same 15 hours would reach, so the findings rest on what is actually there rather than on a sample. The judgment, the scoring and the 90-day roadmap are mine. I build this way at Togethrust too, which is why I can review AI features the way I run them: with cost governance and human-in-the-loop gates.

Need a senior read on your engineering?

One 360° tech audit per quarter. 15 hours, fixed scope, a scored report and a 90-day roadmap.

Free diagnostic call first • Regulated-grade engineering background

Tell me about your company →

Or connect directly on LinkedIn