Portfolio

Delivery records, by capability.

Every record pairs the requirement the client brought with the engineering that delivered it. Organised by the six services we offer.

Note: We have shipped from twenty to fifty engagements a year across our history, and about a hundred today; the records below are condensed from delivered systems. Client names are withheld under confidentiality agreements and sector descriptors are indicative. References are available on request, subject to our clients' consent.

The full chronological record, 2011 to today, lives on the delivery history page.

AI & LLM integration

4 delivery records

Grounded RAG assistant for a government agency

What the client needed. An agency needed an assistant answering over 40,000 policy and operational documents with citation-grade accuracy, hosted inside a PROTECTED-level boundary with no data leaving the tenancy.

How we delivered it. We deployed an on-tenancy retrieval stack: pgvector with hybrid BM25-plus-embedding search, OIDC-scoped retrieval so answers inherit document permissions, and a citation layer linking every claim to its source paragraph. A golden-set evaluation harness ran groundedness and refusal checks in CI, blocking releases below threshold. P95 answer latency was 2.1 s, groundedness 0.94 at launch, and the security review closed with zero data-egress findings.

Copilot enterprise connectors at 1.2M objects

What the client needed. An enterprise rolling out Microsoft Copilot needed its document stores, CRM and intranet connected with correct permissions and freshness.

How we delivered it. We built connector services that mapped source ACLs onto the index so answers inherited user permissions, incremental sync with delta detection instead of full rescans, and pre-index validation that quarantined malformed or stale content. A governance note documented exactly what was indexed, how retention worked and how deletions propagated. 1.2 million objects indexed; the compliance review passed without a single data-handling question.

Permissioned agentic operations platform

What the client needed. A scale-up wanted agents acting across its CRM, tickets and documents under strict controls.

How we delivered it. We delivered an agent framework with per-tool permission grants, human-in-the-loop approval for sensitive actions, typed tool contracts and full audit logs of every call. Task decomposition into bounded tool sequences made failures reproducible, and a sandbox simulation suite caught regressions before deployment. Eleven workflows were automated, with cost tracked per workflow.

Evaluation harness that gates AI releases

What the client needed. A product team needed AI quality measured, not felt, before every release.

How we delivered it. We built a golden-dataset evaluation suite scoring correctness, groundedness, tool-call accuracy and cost per run, wired into CI so a failing evaluation blocked the merge. Per-change quality reports and tracing across the agent loop showed exactly where a run diverged. It became the team’s default gate for shipping any model, prompt or retrieval change.

Full-stack product & app build

4 delivery records

Merchant payments portal

What the client needed. A payments company needed a merchant portal for onboarding, reporting and payouts that could not become a PCI liability.

How we delivered it. We built a React portal over a typed Node/Python API layer, isolated from the core payments system behind a service mesh. Authentication used OIDC with role-based permissions, and every financial action was idempotent and audited. Cardholder data never entered our scope, keeping the portal in SAQ-A territory. Delivery ran in two-week increments with staging from week one; handover included a permissions matrix, integration tests and runbooks.

National clinical registry modernisation

What the client needed. A university-led programme needed a national clinical registry (entry, validation, reporting, multi-clinic access) modernised.

How we delivered it. We re-architected the registry around a validated data model with role-based access for clinics, investigators and administrators. Point-of-entry validation caught errors where they were cheapest to fix, and the legacy migration shipped with a reconciliation report the client signed line by line. Audit logging and minimal-access principles applied throughout. Fourteen clinics onboarded in the first wave.

Timed-entry ticketing for a visitor attraction

What the client needed. A visitor attraction needed ticketing, memberships, timed entry and on-site sales unified before a peak season.

How we delivered it. We delivered catalogue, availability, booking and payments services behind one customer-facing application. Timed-entry capacity was modelled as inventory with reservations, so peak days physically cannot oversell. An admin console put pricing and capacity rules in non-technical hands. We load-tested to eight times average demand with a rehearsed rollback plan: opening weekend sold out with zero oversell incidents.

Embedded senior capacity for a SaaS team

What the client needed. A growing SaaS wanted a polished admin and analytics area plus senior capacity inside its existing process.

How we delivered it. We embedded into their sprints and shipped user management, billing views, feature flags and an analytics dashboard while matching their conventions and CI. Tests and documentation landed alongside every feature, so the client’s own velocity improved. The code reviewed as native to their repository; the handover needed no translation layer.

Cloud, DevOps & platform rescue

4 delivery records

Browser-test CI/CD farm

What the client needed. A browser-focused product ran thousands of UI tests that took over an hour and cost a fortune.

How we delivered it. We designed the pipeline around ephemeral parallel runners on autoscaling instances, with cached browser binaries and dependencies. Flaky tests were quarantined and reported rather than silently retried, and a canary stage caught regressions before full rollout. Feedback fell from 68 minutes to under 6, and the pay-per-run model cut test infrastructure spend by a third.

GitOps reliability for a payments platform

What the client needed. A payments platform wanted deploys declarative, auditable and reversible.

How we delivered it. Infrastructure and application configuration moved to GitOps with a single-pull-request path to production, review gates and automatic rollback on failed health checks. Golden-signal dashboards and on-call runbooks were tied to alert thresholds. Mean time to recovery fell from four hours to 22 minutes, and every change became auditable in Git.

Multi-tenant Kubernetes for data and ML teams

What the client needed. A platform team needed one Kubernetes foundation for data pipelines, analytics and ML serving.

How we delivered it. We provisioned a multi-tenant cluster with namespaces, resource quotas and network policies, standardised Python workload packaging so teams deploy with one command, and added horizontal autoscaling, persistent pipeline storage and a security-patched base-image pipeline. Nine teams onboarded; infrastructure stopped being the bottleneck.

Cloud cost and reliability audit

What the client needed. A company with a climbing bill and recurring incidents wanted a diagnosis and a fix plan, not another report.

How we delivered it. We audited usage, architecture and the deploy process, ranked findings by cost and risk, removed idle and oversized resources, right-sized databases and fixed the top reliability failure modes around deploys and missing alerts. A finance-readable cost dashboard and an engineering backlog shipped with it. The audit paid for itself in the first billing cycle, with a 34% run-rate reduction.

Data & MLOps

4 delivery records

Governed analytics engineering

What the client needed. A media organisation needed metrics everyone trusts, without weekly hand-stitched data.

How we delivered it. We built a dbt transformation layer on a warehouse with tested, documented models and a naming convention the whole organisation could follow. Data-quality and freshness tests ran in CI, so a broken source failed loudly instead of silently polluting reports. One governed definition per metric; dashboards people stopped double-checking in spreadsheets. 140 metrics certified.

Real-time event platform

What the client needed. A product company wanted live features and analytics on high-volume event streams.

How we delivered it. We designed streaming ingestion with schema validation at the edge, idempotent processing, and explicit late- and duplicate-event handling, landing into a warehouse zone with full replay. Sub-second feature data with the warehouse consistent, monitored on lag and error rates rather than hope.

Document intelligence at 2.4M pages

What the client needed. An organisation needed structured data extracted from large document volumes for search, records and workflow automation.

How we delivered it. We built ingestion with OCR where required, classification and entity extraction combining rule-based checks with LLM extraction, and a human review step only below confidence thresholds. Lineage and audit trails showed where every extracted value came from, which was the compliance team’s condition for sign-off.

Market data pipeline with exactly-once semantics

What the client needed. A trading-adjacent platform needed market data with strict correctness under low latency.

How we delivered it. We delivered ingestion with exactly-once semantics, per-symbol in-order processing, validation against reference data, and detection of sequence gaps and latency spikes, with replay for backfills. Correctness over cleverness: the client trusts the numbers, which was the whole point.

Security & compliance engineering

4 delivery records

Detection and response engineering

What the client needed. A security team wanted faster, more defensible incident response.

How we delivered it. We built detection rules over their existing telemetry, automated the noisy majority of triage, and turned runbooks into executable playbooks with owners and timelines. An evidence pipeline captured what was done, when and by whom. Time-to-detect and time-to-respond both fell by more than half, and post-incident reviews became audit-ready by default.

AppSec embedded in delivery

What the client needed. A fast-shipping product team needed security that did not slow releases.

How we delivered it. We introduced threat-model checklists per feature, wired SAST and dependency scanning into CI, and manually reviewed the highest-risk paths: authentication, payments and file handling. Findings were ranked by exploitability so the team fixed what mattered first. Security stopped being a bottleneck because it caught real issues.

CIAM for a customer platform

What the client needed. A customer-facing platform needed modern identity as a resilient service, not per-app auth.

How we delivered it. We designed a CIAM service around OAuth/OIDC with social and enterprise federation, fine-grained roles and tenant isolation. Token lifecycle, session revocation and consent management were handled centrally, and the login path was load-tested at twelve times baseline traffic. Product teams now inherit a single secure identity layer.

GRC evidence system

What the client needed. A company preparing for audits needed controls documented and evidence defensible.

How we delivered it. We mapped existing controls to the relevant frameworks, identified gaps, and built a lightweight evidence system collecting and versioning the proof behind each control. Plain-language control descriptions let auditors and engineers agree on what a control means. Audit preparation became a continuously updated process instead of a pre-audit scramble.

Systems integration & modernisation

4 delivery records

EDRMS migration and integration

What the client needed. An organisation replacing its records system needed migration, integration and record-keeping compliance.

How we delivered it. We mapped legacy metadata to the new model, built a migration pipeline with validation and audit trails, and integrated the records system with the applications that create documents. Retention and disposal rules were enforced in the new workflow. A reconciliation report let the client verify nothing was lost across 2.1 million records.

ERP overlay application

What the client needed. An enterprise wanted modern workflows on top of its ERP without destabilising the core.

How we delivered it. We built a full-stack application talking to the ERP through its APIs, with custom logic kept outside the core so upgrades stay safe. Event-driven sync provided real-time data, and an approval workflow matched the client’s processes. The ERP remains the system of record; users finally got the experience the native interface never had.

Integration middleware with typed contracts

What the client needed. An organisation with several back-office systems needed reliable data movement between them.

How we delivered it. We designed integration services with typed contracts, message queues and dead-letter handling so no message is silently lost, added contract tests between systems, and monitored queue depth and error rates. The tangle of point-to-point scripts was retired into one documented integration layer.

Strangler-pattern legacy modernisation

What the client needed. A business-critical legacy application was hard to change and risky to deploy.

How we delivered it. Characterisation tests pinned existing behaviour before anything changed. New services took over features incrementally behind a routing layer, with parallel-run verification at every step. The client received a modern, testable codebase gradually, each step shippable and reversible: no multi-month freeze, no cliff.

Applied R&D

4 delivery records

Optically-steered discharge beamline

What the client needed. A research group needed a reconfigurable, low-power way to define and steer discharge paths in air without repositioning hardware.

How we delivered it. We built a beamline with vortex and Airy beam shaping and SLM/MEMS steering, trapping absorbing microparticles to seed a low-threshold channel. Control software let the team redraw the discharge path in real time, with closed-loop feedback holding the channel against drift. The bench system turns arbitrary 3D paths into guided discharges, documented with safety interlocks.

Absorber-particle engineering for guided breakdown

What the client needed. A team wanted to understand how particle material and absorption tune the discharge threshold.

How we delivered it. We screened graphene, metal and dielectric microparticles, characterising absorption, heating and threshold reduction, and integrated the findings into a selection guide and an automated sweep harness. Metal particles with sharp tips added field concentration; graphene maximised density reduction. The work produced a reproducible dataset and a particle-replenishment design.

Steerable corona for static-charge dissipation

What the client needed. An aviation programme needed controlled, low-current static bleed from composite surfaces without metal wicks.

How we delivered it. We developed a steerable corona system using a guided, diffuse discharge to release charge at a chosen point, prioritising a safe corona regime over arc formation. The threshold was validated at altitude-equivalent pressure, and control logic with interlocks was delivered. The system provides a non-destructive, reconfigurable dissipation path.

Localised plasma-assisted thin-film deposition

What the client needed. A materials team wanted thin films deposited on selected regions of a 3D part without masking or vacuum.

How we delivered it. We built a localised plasma brush guiding a low-power discharge to a target point, enabling on-demand deposition and surface modification along programmed paths. Deposition rate and uniformity were characterised, and control software delivered. The approach removed masking and vacuum chambers for selected coatings.

Voice & telephony

4 delivery records

Reservation line for a restaurant group

What the client needed. A multi-location restaurant group wanted 24/7 phone intake for reservations, hours and menu questions, with VIP and private-event requests routed to staff.

How we delivered it. We deployed an AI receptionist with a per-location knowledge base and a structured booking flow (name, party size, date and time, confirmation). Price and private-event questions routed to a manager, callers transferred to staff by SIP REFER, and every call recorded with consent, transcribed and emailed to the venue team.

Medical clinic intake and appointment line

What the client needed. A clinic needed appointment booking, opening-hours answers and intake triage with clinical questions handed to staff.

How we delivered it. We delivered an appointment and intake flow with hard guardrails against medical advice. Clinical matters transferred to staff; the system captured name, contact and reason per booking. Recording disclosure and data retention were configured to the clinic’s privacy obligations.

Hotel after-hours call handling

What the client needed. A boutique hotel needed reliable after-hours answering for availability, directions, amenities and callbacks.

How we delivered it. We configured a 24/7 receptionist answering from a hotel-specific knowledge base, capturing callback details and transferring to the front desk in opening hours. Multilingual handling covered English, Spanish and French callers, with a labelled transcript and recording for the duty manager on every call.

Legal firm lead qualification line

What the client needed. A law firm wanted inbound callers screened and qualified before a lawyer callback.

How we delivered it. We built a qualification flow capturing practice area, name, contact and a short summary, with a hard rule against legal advice. Qualified leads were scheduled for callback and the transcript emailed to the intake team, cutting time spent on unqualified calls.

Have a similar problem?

Tell us what you need shipped. You get a straight answer within one business day.

Start a project →Get an estimate