Regulatory arbitrage as product strategy

Why software markets with the largest opportunity are not those where technology enables something new, but those where regulation has fragmented the customer's experience into ten disconnected tools.

The obvious framing that doesn't work

When discussing "market opportunities" for new software products, the dominant framing is one of technological innovation: find a domain where something has recently become possible — cloud, generative AI, installable PWAs — and build what didn't exist before. It is an attractive story. It is also, in most cases, the wrong one.

The observation governing the operational practice of Costantini & Partners is opposite. The most significant product opportunities do not live where technology enables something new; they live where regulation has fragmented the customer's experience in a way that today makes it rational for the professional to buy three, four, five separate tools to close a single filing. Our opportunity is to recompose that mess.

The case: Sistema Tessera Sanitaria

Consider the Italian self-employed physician. Billing private patient consultations implies, today, at least five distinct filings, each with its own niche provider:

• Issuing the electronic invoice (invoicing software)
• Submission to the Sistema Tessera Sanitaria by the following month (Sogei telematic intermediary)
• AgID-compliant retention for ten years (substitute archive provider)
• Production of reconciliations for the accountant (accounting export)
• GDPR management of the health data handled (privacy consultant)

To cover these five objects, the average physician today pays somewhere between €600 and €1,500 per year, distributed across three or four different providers, none of which talk to each other. The operational consequence is predictable: reconciliation errors, missed deadlines, fines, hours of work lost chasing who does what.

The problem is not technical. Sistema TS has existed since 2015; XML schemas are public; PWAs have been able to generate compliant files for at least five years; at-rest encryption in IndexedDB has been stable since before. The technology for making a single tool that closes all of this has existed for nearly a decade.

Why the arbitrage persists

Three forces keep the fragmentation alive, and understanding these forces is what allows them to be exploited.

The first is structural. Each of the incumbent providers is vertically specialised: the invoicing software only knows invoicing; the archive provider only knows retention; the privacy consultant only knows privacy. Changing proposition would require each to acquire competencies outside their historical domain, with repositioning costs the existing market does not finance.

The second is economic. Current provider revenue derives precisely from separation: if the physician pays €300 to the invoicing vendor, €200 to the archive vendor, €150 to the privacy consultant, each has an interest in keeping their segment separate. The network of commercial partnerships ("I send my clients to you if you send yours to me") reinforces the mechanism.

The third is regulatory. Some of these operators work under specific authorisations (AgID-accredited archive providers, Sogei-authorised telematic intermediaries) that are not trivial to obtain. The barrier to entry is not technical — it is procedural. This reduces the number of credible new entrants and slows commoditisation.

Four identification criteria

From these observations descend the four criteria we apply operationally to identify verticals in which to build product.

Regulatory density. We look for problems where complexity lies in the law: public XSD schemas, deadlines, nominally determined fines, institutional platforms with specific technical characteristics. The harder the matter is legally, the more our legal training translates into a defensible advantage.

Incumbent fragmentation. We look for sectors where the client today pays three or four different providers to cover a single problem. The recomposition of that fragmentation into a single tool is the value.

Client verticality. We look for professional categories where the client's identity is specific: not "SMEs", but "self-employed physician not under SSN convention". The more specific the category, the more marketing-light distribution becomes (peer-to-peer word of mouth, professional orders, communities of practice).

Output durability. We look for products whose value does not evaporate upon delivery. An application the client installs once and uses for ten years has fundamentally different economic characteristics from a consulting engagement that vanishes at project end.

Capital Hospitality, second case

Capital Hospitality applies exactly the same framework to the hospitality sector. An Italian B&B operator has, today, every night, three separate filings: registering the guest on the Italian State Police's Alloggiati Web portal (Art. 109 TULPS), the tax receipt via the fiscal portal or the issuance of correspettivo, and the communication of presences to the Municipality. For the first two, dedicated providers exist. For the third, no serious one. For the combination of the three, no integrated one. The average operator pays €50-150 per month to management software that does part of the job, and then manually inputs the rest. Same fragmentation, same pattern, same opportunity.

The limit of the framework

It is worth saying clearly what this approach does not claim. It does not say that every regulated vertical is an opportunity. It does not say that arbitrage is infinite. It says something more specific: that the time window between the moment regulation fragments the experience and the moment someone builds an integrated tool is surprisingly long in Italy. Typically five to ten years. That window is what gets arbitraged.

When the window closes — when an integrated competitor with patient capital enters — the opportunity normalises. It has already happened in B2B electronic invoicing: from 2019 to today, the market has consolidated towards a few players. For Sistema TS, the window is still open. For Alloggiati Web too. For four or five other verticals we are observing, the same.

Consequences for those who want to build

If the reading proposed is correct, some practical consequences directly follow for those wanting to build product in similar markets.

First, read the legislation before the client. The source of the problem is the legal text; almost always, the first who reads it with technical attention finds opportunities that industry operators do not see because they know it only through summaries.

Second, accept the commercial slowness of a vertical market. It is not LinkedIn, it is not growth hacking, it is not ads. It is direct relationships with professional orders, communities of practice, accounting partners. Slow at start, scalable later.

Third, accept flat annual pricing as a strategic choice, not a limit. The temptation of "dynamic pricing" or "freemium" is almost always wrong in regulated markets: the client wants predictability, not flexibility.

Fourth, build local-first when data is sensitive. The difference on the contractual plane (see the following article) changes the provider's legal profile in ways the market does not yet fully understand.