A SENIOR TECHNICAL READ, FROM A WORKING CTO

Co-founder & CTO, Togethrust. I find what breaks before investors do.

I hold the CTO seat at an ACPR-supervised French fintech, full-time. Alongside it: one 360° tech audit per quarter, for pre-seed to Series A founders.

• One 360° tech audit per quarter
• 15 hours, fixed scope, hard-capped
• Any software company, deepest in regulated fintech

"Deployment time reduced from 2 weeks to 3 days" · Technology Company

Khaled Souf
50+ Projects
delivered
5 Countries
worked in
18+ Years in
engineering

Trusted by teams at

BNP Paribas Crédit Agricole EDF Société Générale Decathlon CanadaCANADA Desjardins StemmerLife invygo Lightspeed

Is this you?

01

A dev shop just quoted you, and you cannot tell whether the estimate is real.

02

Every feature ships slower than the last, and nobody can tell you why.

03

Your CTO just said "we need to rewrite everything", and you want a second read.

04

A round is six months out and you have no technical story for an investor.

05

Your CTO left, and nobody senior has looked at the stack since.

And if none of that is you: this is not a cheaper dev shop, it is not someone to finish a no-code MVP, and it is not useful before there is code to read. The diagnostic call will say so rather than sell you an audit.

The Investor-Grade Read

Four movements, same order every time: the money, the round, the regulator, then down into the stack.

Read

Access on day one. The code, the configuration, and the people who own them.

Expose

The findings that carry real risk, ordered by how much.

Sequence

A 90-day roadmap, split 30/60/90, ordered by risk and effort.

Hand over

Written to be forwarded, walked through once, then closed.

One audit per quarter

Deliberately small, and designed to stay that way. Staying close to founders' technical problems is what makes me better at Togethrust.

Flagship

360° Tech Audit

One per quarter • 15 hours over 3 weeks

A review of your architecture, security and compliance posture, delivery process, engineering team, and infrastructure costs. Hard time-cap, no scope creep.

What you get

  • Scored written report
  • Prioritized 90-day roadmap
  • 90-minute restitution session
Explore the 360° Audit →
By the session

CTO Advisory Sessions

Paid • Booked one at a time

Bring one hard technical decision: an architecture call, a regulatory constraint, a hiring question. We work it through in a single session.

What you get

  • One decision, worked end to end
  • Written summary afterwards
  • No retainer, no minimum
Check we're a fit →
Start here

Free Diagnostic Call

30 minutes • No cost

A no-pitch conversation about where your engineering stands. If an audit is not the right answer, I will say so.

What you get

  • No pitch, no slides
  • Station F founders prioritized
  • A straight answer on whether an audit fits
Book a free diagnostic call →

You hire me, not a firm: no bench, no account manager, nobody junior sent in my place. Every engagement is designed to close, not to renew.

Ongoing advisory by invitation, for past audit clients.

Concrete Results

The numbers, across fintech, healthcare, and software at scale.

35%

Cloud cost reduction

Right-sized infrastructure, spot instances for non-critical workloads.

→ Crypto bank, Zurich
90%

Infrastructure cost cut

Migrated the integration platform from MuleSoft to Apache Camel.

→ StemmerLife, France
96%

Product activation, up from 24%

Measured after a full product redesign, as co-founder and CTO.

→ Togethrust, Paris

Regulated-Grade Experience, Across Sectors

Co-founder & CTO

Togethrust

Tech foundation from scratch, compliance from day one. Activation 24% to 96%.

France • 2025-Present

Regulated Fintech

Auditor & Cloud Expert

StemmerLife

Cloud audit for France's largest dental and medical distributor. Infrastructure costs down 90%.

France • 2025

Medical Distribution

Cloud & Software Architect

Stealth Fintech

Cloud infrastructure for a FINMA-regulated crypto platform. Cloud costs down 35%.

Zurich • 2023-2024

Regulated Crypto

Interim Head of Engineering

invygo

Engineering across 4 teams, car subscription platform. Ops tickets down 20%, tech debt down 30%.

Dubai • Jan-Apr 2025

Mobility

Software Craftsman & Architect

Société Générale

TDD/BDD and DDD patterns across feature teams, major banking platform.

Paris • 2019

Major French Bank

Architecture & Tech Coach

Lightspeed

Architecture and engineering standards in the Agile Office "CTO as Service" programme. DDD on payment processing.

Montreal • 2021

Payments

Don't Take My Word For It

"Fantastic at complex projects"

His ability to jump into a complex project that requires taking a software architecture lead and decomposing it is fantastic! He brings a strong technical opinion to the table and supports the team to delivery.

Darragh Grealish

Darragh Grealish

Co-Founder & CTO, 56K.Cloud

Verify on LinkedIn →

"Bet on Khaled"

Khaled is a passionate software developer and craftsman. He delivers high quality work and is always on the search of improvements. If you want things to improve—codebase, team work, team knowledge—you can safely bet on Khaled.

Vincent Demeester

Vincent Demeester

Sr. Principal Engineer, Red Hat

Verify on LinkedIn →

Khaled Souf

Togethrust, and how I got here

I'm CTO and one of three co-founders of Togethrust in Paris, a French-regulated fintech (IFP/ORIAS, ACPR-supervised). We digitize tontines (savings circles) for Francophone African diaspora communities. Togethrust has been through the HEC Paris Incubator, Station F, Founder Institute and Blue Factory, ESCP's incubator. That is my full-time work.

Alongside it I run a small fractional CTO practice: a 15-hour, fixed-scope tech audit for pre-seed to Series A founders, one per quarter.

I grew up in Kébili, in Tunisia's Saharan south. My first computer came in 1992, at 7: an Amstrad, 8MHz, no hard drive, two 3.5" floppy drives. In 1996 Tunisia placed one internet-connected computer per region, and I spent my allowance buying time on Kébili's. When the CNIPE, the national children's computing center, opened there, I was one of the first kids in.

I represented Kébili at every national kids' competition. In 1999, at 14, I competed on Tunisia's first national TV channel, on a show called The World of the Internet: Kébili against Tozeur, a speed-navigation team event, then a live 1-vs-1 website-building duel. FrontPage era, before anyone had heard of Google. I beat an 18-year-old. The prize was my first trip to France.

I came home, became an engineer (ENICarthage, 2007), and moved to France in 2010, to the country that first trip had shown me. Since then: 18+ years on banking systems at BNP Paribas, Société Générale, Crédit Agricole and Desjardins, across five countries. I co-founded SOCRATES Canada, and co-organized Software Crafters Montréal and Romandie Software Crafters. I build for communities like the one I come from.

ACPR ORIAS IFP GDPR Compliance Banking APIs Regulatory Architecture Domain-Driven Design
🇫🇷 France 🇨🇭 Switzerland 🇨🇦 Canada 🇦🇪 UAE 🇹🇳 Tunisia

How It Works

What does the 360° audit cover?

Five areas in one pass: architecture and scalability, security and compliance, delivery and CI/CD, engineering team and organization, and infrastructure costs. Reviewing them together is what makes the findings connect. Full detail on the 360° Tech Audit.

Why only one audit per quarter?

Because Togethrust is my full-time work, and the audit only has value if a senior person does it. The cap keeps the depth honest.

What's the difference vs. a consultant?

I run engineering for a regulated fintech every day, so I read your stack as an operator, not a report writer. Scoped, capped, closed on delivery. How the five models compare.

Do you only work with fintech?

No. The five areas apply to any software company. Work outside fintech spans mobility (invygo), dental and medical distribution (StemmerLife), healthtech (Kry) and retail (Decathlon Canada). My background goes deepest at the regulated end: banking systems, ACPR supervision, KYC and financial transactions at scale.

Do you use AI in the audit?

Yes, and deliberately. It lets me read more of your codebase in the same 15 hours, so the findings rest on what is there, not on a sample. The judgment, the scoring and the roadmap are mine.

Need a senior read on your engineering?

One 360° tech audit per quarter. 15 hours, fixed scope, a scored report and a 90-day roadmap.

Free diagnostic call first • Regulated-grade engineering background

Tell me about your company →

Or connect directly on LinkedIn