Software built to the standard that patient data demands
When a Shopify store is not the answer, or you need the tool behind the store, we design and build it. The same discipline we apply to a platform holding medical records goes into every portal, booking system and internal tool we ship.
- GDPR by design
- UK hosted
- Tested before every release
CallidusOS
A clinic management platform built by our team for UK aesthetic clinics. Appointments, patient records, consent forms, payments through Stripe, and an AI assistant for reminders and rebooking. UK hosted, GDPR throughout, live with paying clinics, set up in a day.
Read the case studyThe tools a growing business ends up needing
Usually it starts with a spreadsheet that has become a liability, or an off-the-shelf product that almost fits. We build the thing that actually fits.
Client and customer portals
Log in, see your orders, documents, hours or bookings. The front door your customers keep coming back through.
Booking and management platforms
Appointments, records, payments and consent in one place, like CallidusOS. Built for businesses that hold sensitive data.
Back-office tools
Stock, quoting, job tracking, reporting. The unglamorous software that removes a person's worst Monday morning task.
Trade and wholesale ordering
Price lists, accounts, approvals and ordering that connects to your Shopify store or your accounts package.
Integrations and middleware
Making systems talk: Shopify to Xero, EPOS to stock, CRM to email. Reliable, logged, and alerting when something breaks.
MVPs for founders
A first version built properly enough to take money and survive success, without over-engineering what is still a hypothesis.
What "compliance-grade" means in practice
These are the practices a platform holding patient records has to have. We apply them to everything, because your order data and your customers' details deserve the same care.
- GDPR by designData minimisation, consent capture, subject access and deletion handled in the product, and a data processing agreement available for every engagement.
- UK data hostingHosted on Google Firebase in London (the europe-west2 region), so your data stays in the UK, with backups tested rather than assumed.
- Security built inEncryption in transit and at rest, role-based access, audit trails for sensitive actions, and secrets kept out of code.
- Tested before every releaseUnit, integration and end-to-end tests run through continuous integration and gate every deployment. Nothing reaches your users because someone "thought it was fine".
- Modern, boring technologyReact and TypeScript on Google Cloud and Firebase. Proven, documented, and hireable, so you are never locked to us.
- Payments done properlyStripe handles the cards. We never store card data, and we never will.
- AI where it earns its placeAssistants that save real time, such as reminders and rebooking, with sensitive data never used to train third-party models.
- You own itThe code and the data are yours, with documentation and a proper handover. Stay with us because you want to, not because you have to.
Fixed-scope phases, plain English, no surprises
Discovery, scoped and priced
A short, fixed-fee discovery that ends in a written specification and a fixed quote for the first phase. If we are not the right fit, you keep the specification.
Build in phases you can use
Each phase ships something real. You see working software every couple of weeks, not a reveal at the end.
Launch, then stay close
A care plan with tracked hours covers improvements, monitoring and the small things, with replies within the hour.
Day rate and care plan details are on the pricing page. Every software project starts with a fixed written quote.
Need software that handles sensitive data properly?
Tell us what the spreadsheet or the off-the-shelf product is failing to do. You will get a straight answer about whether bespoke software is the right call, and a fixed quote if it is.