01Product engineering
Taking an idea to a shipped, supported product — the same way we build our own.
- Discovery & MVPScope the smallest version that proves the business case, then build it properly.
- Architecture that scalesDesigned for the second and third year, not just the launch.
- Design systems & UXConsistent, accessible interfaces that hold up as the product grows.
- Release & ownershipCI/CD, monitoring and documentation so your team can own it.
Flutter · React · Next.js · NestJS · PostgreSQL · Redis
02SaaS platforms
Multi-tenant, subscription-ready platforms built cloud-native from the first commit.
- Multi-tenancy & billingTenant isolation, plans, metering and subscription lifecycle.
- API-first designClean, versioned APIs your customers and integrations can rely on.
- Security & accessAuthentication, roles, SSO and audit logging built in.
- Scale & cost controlCloud architecture sized to load, with observability from day one.
NestJS · PostgreSQL row-level tenancy · Redis · AWS · Kubernetes · Terraform
03Enterprise applications
Business systems across every surface your people use — browser, phone, desktop and kiosk.
- Web applicationsDashboards, portals and internal tools on modern frontend stacks.
- Mobile appsCross-platform iOS and Android apps with offline-first sync and secure access.
- Desktop & kioskWindows and self-service kiosk applications for counters, shop floors and field use.
- ERP, CRM, HR & payrollAttendance, payroll, CRM and learning modules, integrated with your existing systems.
React · Flutter · React Native · native Android · Windows / .NET · Node.js
04Devices, kiosks & OT integration
Hardware procured, software written, systems commissioned and supported — one team across the OT and IT divide.
- Embedded & firmwareMicrocontroller-based devices, sensors and instrumentation interfacing.
- Kiosks & terminalsSelf-service kiosks, token and queue displays, scanners and rugged handhelds.
- SCADA & telemetrySupervisory control, process monitoring and industrial data integration.
- Commissioning & supportInstallation, calibration and ongoing on-site support.
Arduino · RS-232 / ASTM · BLE · biometric SDKs · Android Enterprise · PLC integration
05Quality assurance & test automation
Automated, repeatable evidence that a system does what it claims.
- Test strategyRisk-based coverage plans for functional, regression and acceptance testing.
- Test automationPlaywright and TypeScript suites integrated into CI/CD pipelines.
- Performance & loadJMeter-based load testing, database optimisation and caching strategy.
- Release confidenceQuality gates and reporting that make go/no-go decisions legible.
Playwright · TypeScript · JMeter · CI/CD
06Security & regulatory compliance
Assessment and validation to the standard the regulator or auditor requires.
More on compliance →
- Security testingOWASP-based vulnerability assessment and penetration testing.
- API securitySecurity review of payment-facing and partner-facing APIs, to PCI DSS.
- Regulated validationFDA 21 CFR Part 11, HIPAA and GxP validation and documentation.
- OT & ICS securityIEC 62443 risk assessment, zoning and SCADA protection for industrial systems.
- Audit readinessTraceability, audit trails and evidence packs that pass review.
OWASP · Burp Suite · PCI DSS · HIPAA · 21 CFR Part 11 · GxP · IEC 62443
07Cloud, DevOps & resilience
Infrastructure that is reproducible, observable and built to recover.
- Cloud migrationMove workloads to AWS with minimal disruption and measured availability targets.
- Infrastructure as codeTerraform and Kubernetes for environments you can rebuild on demand.
- CI/CD & releasePipelines that make deployment routine and rollbacks safe.
- Reliability & recoveryMonitoring, alerting, backup and recovery designed and tested.
AWS · Kubernetes · Terraform · Docker
08AI, governance & analytics
Intelligence in the workflow — with the controls that let a regulator, auditor or operator trust it.
More on AI →
- AI governanceCompliance gates and guardrails so no model output reaches a person or a record unreviewed. Details →
- AI-native deliveryCode auditing, sprint risk scoring and AI-assisted requirement validation in the lifecycle. Details →
- LLM integrationsAssistants, retrieval, transcription and summarisation, with human review for sensitive workflows.
- Analytics & SalesforceExplainable reporting and data pipelines; Sales Cloud and Service Cloud with Apex and Lightning.
Claude & Azure OpenAI · LangGraph · Python · pgvector · SonarQube · Power BI · Salesforce