The founder leaves. Can the institution still decide?

On 7 August 2024, Singapore's DBS Group announced that Tan Su Shan would succeed Piyush Gupta as chief executive upon his retirement on 28 March 2025, after fifteen years at the helm. Look at the mechanics behind that announcement, and you see why institutional investors barely blinked. Tan had spent more than a decade rotating through the bank's core profit engines, wealth, consumer and institutional banking, before a formal deputy-CEO transition window. Even when DBS suffered painful digital outages in 2023, prompting the Monetary Authority of Singapore to impose a six-month pause on non-essential IT changes and raise the bank's operational-risk capital multiplier, the board, the technology risk committee and the succession machinery held firm, because institutional authority lived in documented systems rather than one person's pocket.

Contrast that with the reality inside dozens of founder-led banks, microfinance institutions, SACCOs and fintechs across East and West Africa, a cohort now reaching the age where handover is arithmetic rather than hypothesis. On paper, the institution has a board charter, a credit committee and an organogram. In practice, the organisation runs on the founder's personal WhatsApp, memory and informal nod. When that founder steps down, falls ill or is nudged aside by private-equity investors or central bank tenure rules, the successor inherits a corner office and immediate operational paralysis, because nobody left in the building knows why the biggest corporate borrower has an unrecorded fee waiver, or who holds the authority to tell the core-banking vendor to release an emergency patch on a Saturday night.

Mapping the shadow approval queue behind the formal organogram.

In a founder-centric institution, two governance systems run side by side: the formal one in the board manual for central bank examiners, and the real one inside the founder's personal relationships.

Trace where decisions actually happen in an ordinary week. A Tier-1 institutional depositor threatens to pull KSh500 million unless its fixed-deposit rate is bumped by 150 basis points; instead of going through the asset and liability committee, the depositor calls the founder's personal mobile, gets a verbal promise over lunch, and treasury processes the ticket on CEO instruction. A long-standing wholesale merchant breaches its overdraft covenant; the credit file contains no updated management accounts, yet collections stay frozen because the founder knows the family and vouched for the account five years ago. A critical cloud vendor demands upfront payment or threatens to throttle API access; the contract sits in an old email thread, and only the founder holds the rapport with the vendor's managing director to negotiate a 30-day grace period.

When a new chief executive walks in on Monday and tries to govern through the written delegation schedule, those undocumented exceptions detonate one by one. Worse, when the departing founder stays on the board as a non-executive director or major shareholder, staff and marquee clients bypass the new CEO and keep routing decisions through the former boss's back porch, leaving the incoming executive legally accountable to the regulator for a balance sheet they do not control.

Transferring the evidence without creating a privacy breach.

Turning personal memory into institutional memory requires separating legitimate relationship context from unlawful gossip. A founder often carries vital commercial intelligence in their head: that a coastal distributor's cash flow dips every May before the tourism high season, or why a legacy core-banking module has a manual reconciliation patch bolted onto its general ledger.

Trying to solve the handover by dumping ten years of the founder's personal emails and WhatsApp messages into a generative AI knowledge base, so the successor can query past decisions, creates two immediate disasters. Ingesting unredacted personal chats and informal borrower disclosures without a specific lawful purpose violates data-minimisation and storage-limitation rules under the Data Protection Act, 2019. And a generative model asked to explain why an unrecorded credit exception was granted in 2022 will weave fragmented emails into a confident, fabricated commercial rationale that never existed.

Technology tools behave very differently during a transition. Running a simple query across the core banking system for every fee waiver, credit override, and manual journal entry approved under the founder's user ID over the past 24 months exposes key-person dependencies in an afternoon at zero software cost. A statistical pricing scan can flag high-value accounts showing abnormal rates relative to their risk band. Generative indexing should be restricted to formal, signed credit-committee minutes and policy manuals. And any automated treasury or vendor-payment script tied to the founder's hardcoded API credentials must be re-keyed immediately, so that revoking their email login on departure day neither breaks live settlement pipes nor leaves an ex-executive with write-access to the ledger.

Six months before any handover, a disciplined board will establish a structured decision and exception register, conduct paired handover audits on the top 50 deposit, credit and vendor relationships, and document every informal side-letter inside the official file, converting valid commercial agreements into formal contracts and setting a hard expiry date on undocumented favours.

Running the two-week communication-blackout drill.

Boards routinely confuse a succession announcement with a succession test. Waiting until the founder has handed back their security pass to discover that nobody else holds the root administrator credentials for the cloud console, or the relationship with the liquidity provider, is a failure of fiduciary duty. The institutions that outlast their founders share one habit: they deliberately hire senior executives with stronger technical credentials than the boss, give them real authority, and reward them for challenging the centre while the founder is still in the room.

Before signing off any C-suite succession timeline in 2027, the board nominations and governance chair, supported by the chief risk officer, chief financial officer and company secretary, should run an unannounced 14-day founder blackout drill while the founder is still in office: cut off all operational escalations to the founder for two weeks and inject three synthetic crises, a major depositor rate demand, a core vendor outage and a disputed credit override, while internal audit tracks every missing system permission and stalled decision. At the first board meeting ninety days after the formal handover, require the new CEO to table a single list naming every decision or client call that still had to be routed back to the former leader. Until that list hits zero, only the nameplate on the door has changed.