Product architecture
Data model, tenancy strategy and permission model decided deliberately at the start, because these are the three decisions that are ruinous to change later.
Companies that have solved a hard operational problem internally often have a sellable product hidden inside a spreadsheet. We build the version of it that other people can pay for: authentication, tenancy, billing, roles, admin tooling and the operational surface required to run it.
The gap between 'this works for us' and 'this works for customers' is almost never about features. It is about tenancy, permissions, onboarding, billing, support tooling and the ability to ship a change without breaking someone else's data. Teams underestimate this layer, build the interesting part first, and then find the product cannot be sold.
Data model, tenancy strategy and permission model decided deliberately at the start, because these are the three decisions that are ruinous to change later.
The smallest version that a real customer can use in production and be invoiced for — which is a very different thing from the smallest version that demos well.
Tenant isolation, organisations, teams, invitations and a permission model that survives the first enterprise customer's org chart.
Plans, limits, trials, upgrades and the unglamorous edge cases — failed payments, mid-cycle changes, refunds — handled rather than deferred.
The internal surface your own team needs: impersonation, audit logs, usage views and safe manual overrides. Skipping this is how support ends up in the production database.
Deployment, monitoring, backups, migrations and an on-call story. A product is not launched when it works; it is launched when it can be run.
Who buys it, what they replace with it, and what the first version must do to be worth paying for. Everything else is deliberately postponed.
Data model, tenancy and permissions, plus the explicit list of decisions we are deferring and what it will cost to revisit each one.
Short iterations against a working deployment. You see and use the product throughout rather than at a handover meeting.
Onboarding, support tooling and the feedback loop. What breaks with real customers is never what broke in testing.
Either we keep building with you, or we hand over to your in-house team with documentation and a transition period. Both are normal endings.
Outcomes below are described qualitatively on purpose. We do not publish performance figures we cannot attribute to a named, consenting client.
Sometimes — it depends entirely on how narrow the first version is. What we will not do is agree to a timeline by quietly dropping tenancy, permissions or billing, because those are exactly the parts that make a rebuild necessary six months later. We would rather cut features than cut foundations.
Yes. Ownership of the code and infrastructure transfers to you, and it lives in your repositories and your accounts from day one. We do not build on a proprietary platform that makes leaving us expensive.
Yes, and it is often the best arrangement — we take the parts your team has not built before, they keep the domain knowledge. It needs one clear technical decision-maker on your side; the arrangement fails when architectural authority is split.
Then it should fail cheaply and early, which is what the MVP scope is for. We would rather help you learn that in one short engagement than build eighteen months of platform for a demand that was never tested.
Next service
Corporate sites, product sites and conversion systems built as commercial infrastructure.