01
Discovery · 1 week
A scoped outcome, a written plan and a firm estimate. You know what you are paying for before anything starts.
- Written one-page brief
- Success metrics
- Risk register
Process & pricing
How we work and what it costs.
Every engagement runs through five stages, with a written gate between each. Scope is approved before build starts, the price is fixed once scope is agreed, and every stage ends in a tangible artefact. At each gate you know what you are paying for and what the stage hands over.
02
Architecture · 3-5 days
The blueprint sets the stack and how the build will be verified, and the stage ends at a decision gate you control.
- Technical specification
- Architecture diagram
- Fixed-price quote
03
Build · 2-week sprints
Build runs in two-week increments, every change passes tests and review before it merges, and the team demonstrates the working increment every Friday.
- Working increments
- Automated tests
- Weekly demos
04
Harden · 3-5 days
Security, performance and reliability checks run before launch, and the results arrive as a written report.
- Test & security report
- Monitoring dashboards
- Runbooks
05
Handover · ongoing
Code, infrastructure and documentation become yours. Full IP transfer, no lock-in.
- Deployed product
- Documentation
- Source & infra ownership
✓
Aftercare
Thirty days of post-launch support is included with every engagement.
- SLA response
- Security patches
- Continuous improvements
Inside every sprint
Engineers own the work. Gates hold the price.
The fixed price holds because the process removes variance before the sprint starts. A named lead answers for the result.
- ✓Specs and scaffolds are validated by a senior engineer before the sprint starts.
- ✓Every change passes review, tests and the CI gate before it merges.
- ✓Documentation is kept against the live codebase and verified at handover.
- ✓You talk to the engineers who own the delivery. Scope, price and production access sit with those same named engineers.
Engagement models
Three ways to work with us
Indicative pricing in AUD and CAD. Final figures are fixed after discovery, never a moving target.
Paid discovery
A fixed-fee scoping review of your project. You leave with a spec, a plan and a firm estimate, no obligation to proceed.
A$4,900 / C$4,500
One week, fixed.
- Brief, spec & sprint plan
- Fixed-price build quote
- Credited if you proceed
Project build
Fixed scope, fixed price per sprint. You approve before we build; a demo every Friday.
from A$24,000 / C$22,000
Per 2-week sprint.
- Senior full-stack team
- Weekly demos & staging
- Tests, docs, handover
Team extension
Named senior engineers embedded in your team and your process, senior capacity without the cost of hiring.
A$12,000 / C$11,000
Per senior engineer / month.
- Your process & tools
- AU/CA time-zone overlap
- Monthly, cancel anytime
All amounts are in Australian dollars and include GST where applicable.
Standards & compliance
Managed like it matters, because it does.
Epcotec operates on a documented management system, the same body of public policies and operating procedures our clients can read for themselves. That system is deliberately aligned with recognised international standards: we are on a certification path and we will say so plainly. We hold no certificates yet, and we do not claim any. What we can show today is the discipline the standards ask for, applied to real work.
◆
Management system alignment
Our platform and delivery are governed by a management system aligned with ISO/IEC 27001:2022 (information security), ISO 9001:2015 (quality) and ISO/IEC 42001:2023. Certification of the system is in progress; the standards themselves already shape how we scope, review and deliver.
✓
Security uplift, underway
We are implementing the Australian Signals Directorate's Essential Eight mitigation strategies, working toward Maturity Level 2 (ML1 baseline October 2026). Multi-factor authentication and privileged access controls are already in operation, and our Essential Eight self-assessment evidence is available to clients under NDA. We also maintain a SOC 2 readiness program; a Type I or Type II report can be commissioned on client request.
A certification roadmap and control disclosures are available on request. The policies behind all of this are public: read the Quality Policy, the Privacy Policy, the Code of Conduct and the rest of the framework on the policies page; the full security and compliance posture has its own page.
References to standards describe alignment. Certification is claimed only where an accredited certificate is published on this page.
How the product reaches you
Delivery you can watch.
Every engagement moves through the same pipeline. Scope is approved before build, staging goes live in week one, a demo runs every Friday, and a review gate sits on every merge. The same pipeline holds whether the engagement is a two-week fix or a multi-year program. Progress is measured against the statement of work, stage by stage. Each release carries its own tests, approvals and audit trail.
What a client sees
- Fixed-scope SOW, reviewed against the Quality Policy
- Staging environment from week one, demos every Friday
- Named engineers own every merge and every release
- Security and privacy controls applied by default, per policy
What runs underneath
- Documented management system, aligned with ISO 9001, 27001 and 42001
- Change control with a versioned audit trail on every project
- Essential Eight: ML1 baseline October 2026, working toward Level 2
- Definition of Done in writing: tests, documentation and runbooks complete before handover
Start with discovery.
Paid discovery is a fixed A$4,900. You leave with a written brief, success metrics and a fixed-price plan you can take to anyone, including your board. There is no obligation to proceed.
Book discovery →