protocol

How we ship.

Six phases, one accountable team. The same protocol we've run since 2010 on AI platforms, financial systems and clinical software — tuned for speed without skipping the parts that keep regulated products safe.

Phases
06
Sprint length
2 wks
Time to kickoff
≤ 10 days
Support
SLA
DISCOVERY

Discovery & Strategy

1–2 weeks

Before a line of code we map the business: users, market, competitors, regulatory surface and the metric that defines success. You leave this phase with a scoped backlog, a technical direction and a realistic budget — not a sales deck.

  • Stakeholder and user interviews
  • Product and feature scope with priorities
  • Technical feasibility and risk register
  • Architecture direction and stack decision
  • Compliance surface (HIPAA, PCI DSS, GDPR)
  • Roadmap, timeline and budget envelope
ARCHITECTURE

Architecture & Design

2–4 weeks

We design the system and the interface in parallel. Data models, integration contracts and infrastructure are decided up front so the build phase never stalls on an unanswered question, and UX flows are validated as clickable prototypes.

  • Data model and API contracts
  • Infrastructure and environment plan
  • Security model and access control design
  • Wireframes and UI system in Figma
  • Clickable prototype for key flows
  • Sprint plan with delivery milestones
BUILD

Full-Cycle Development

Two-week sprints

One in-house team handles engineering, UX, DevOps and QA. You get a working increment every sprint, a shared board you can read at any hour, and a direct line to the people writing the code — no account-manager telephone game.

  • Two-week sprints with demo at each close
  • Trunk-based workflow with code review
  • CI/CD pipelines and preview environments
  • Automated tests on critical paths
  • Weekly written status and burn report
  • Scope adjustments made in the open
ASSURANCE

QA, Security & Compliance

Continuous

Quality is not a phase at the end. Regression suites, performance budgets, accessibility checks and security review run alongside the build, with regulated projects carrying an audit trail from day one.

  • Functional, regression and load testing
  • Accessibility (WCAG) verification
  • Dependency and vulnerability scanning
  • Penetration test coordination
  • Audit documentation and traceability
  • Go/no-go release checklist
LAUNCH

Launch & Handover

1–2 weeks

We ship behind feature flags, watch the telemetry, and stay on call through the first traffic. Your team receives documentation and walkthroughs so nothing about the system is a black box.

  • Staged rollout with feature flags
  • Monitoring, logging and alerting live
  • App store and marketplace submission
  • Runbooks and architecture documentation
  • Team training and knowledge transfer
  • Post-launch stabilisation window
SUPPORT

Ongoing Support & Growth

Retainer

We don't disappear at launch. Bug fixes, performance work, security patching, dependency upgrades and new feature cycles keep the platform healthy — and the roadmap moving — for years.

  • SLA-backed response and fix windows
  • Uptime, performance and cost monitoring
  • Security patching and version upgrades
  • Quarterly roadmap and analytics review
  • Continuous feature and SEO iteration
  • Team scaling up or down as needed
operating principles

Rules we don't bend.

Senior-only teams

No junior padding. Every person on your project has shipped production systems in regulated industries.

Radical transparency

Shared boards, written weekly reports and direct access to engineers. You always know where the build stands.

Fixed scope, flexible detail

We commit to outcomes and timelines, and stay flexible on the detail as real user feedback arrives.

Built to be handed over

Clean architecture, documentation and tests, so your in-house team can own the codebase whenever you want.

Compliance from day one

HIPAA, HL7/FHIR, PCI DSS and GDPR constraints are designed in, never retrofitted after an audit.

One accountable team

Strategy, design, engineering and support under one roof — no vendor hand-offs, no finger-pointing.

where it applies

Same protocol, every capability.

Ready to start phase 01?

Tell us what you're building. We'll come back with scope, timeline and an honest read on whether we're the right team.