The 30-second pitch (memorize verbatim):

"Most banks suffer from what we call cryptographic invisibility — no real map of where their old encryption is hiding, while DORA and NIS2 now demand exactly that map. Kvantis is a sovereign, EU-based audit firm: in two to four weeks we deliver the cryptographic inventory, a risk-ranked migration roadmap, and a signed evidence pack a supervisor will actually accept. We turn a three-year unknown into a four-week document."

Pause after 'cryptographic invisibility'. End on 'four-week document', never on a feature.

The 10-minute executive skeleton: (1) the threat, calibrated — what breaks, what survives, HNDL sourced to agencies, 2 min. (2) The law, article-precise — one sentence per anchor, 2 min. (3) THE DEMO — inventory → CBOM → risk waves → and the moment everything pivots on: verifying the signed evidence pack offline, live — 3 min. (4) Safety of the method — read-only, on-your-infrastructure, hybrid, zero-downtime — 1.5 min. (5) The offer — fixed tiers, findings guarantee, scoping-call ask — 1.5 min.

Key factTune the lead by audience: CISO → inventory pain and the supervisor's letter. CFO/board → personal liability + fines + insurance/procurement costs. Architect → what survives, hybrid doctrine, invite the hard questions. Norwegian prospect → NSM and Finanstilsynet before Brussels.