Operations engineering

We build the system your business actually runs on.

We build custom operational software for businesses whose work doesn't fit the off-the-shelf tools — then run the servers, the network and the AI underneath it. One firm that writes the software and owns the infrastructure, so there is nobody to hand the problem to.

Same team writes the feature and owns the 3 a.m. page.

Measured from our flagship deployment — 12 locations, 75+ staff, in production daily
61Modules live
1,562API endpoints
416Data tables
3.8MRows reconciled
5 moZero to production
What we do

Three disciplines. They only work together.

Software vendors hand you a login and wish you luck. IT firms keep the lights on but can't change the product. Doing both is what makes the third one possible at all.

Build

Software shaped to your operation

Your business already has a shape — how commissions actually get paid, how a shift actually gets covered. Off-the-shelf software makes you bend to its shape. We build to yours, and we don't charge you to configure your way back to where you started.

  • Reconciliation and finance workflows
  • Hiring, scheduling, time and attendance
  • Internal team chat, built in — not another subscription
  • Reporting that matches how you measure
  • Web and native mobile, one system
Run

We own the metal

Servers, network, identity, backups, monitoring, uptime. Restores we actually rehearse rather than hope about. Your data lives where you decide it lives — your building, our rack, or your cloud account.

  • Server and network build-out
  • Single sign-on and granular access control
  • Automated backup and disaster recovery
  • On-premise, colocated, or your cloud
Think

AI that stays in the building

Models running on hardware we control. Your payroll, your margins and your people data never become someone else's training set, and no meter runs per question.

  • Private inference on dedicated GPUs
  • Assistants grounded in your own documents
  • Anomaly and exception detection
  • Fixed cost, not per-token billing
What we build

Most of it doesn't come in a box.

Every engagement starts with a process somebody is doing by hand. The examples under each heading are real work we've delivered and now operate — not a capability list we assembled for a website.

Money that has to reconcile

When two systems disagree about what you're owed, someone is checking it in a spreadsheet. That someone is expensive and occasionally wrong.

Delivered
  • Matching engine reconciling vendor statements against point-of-sale
  • Chargeback tracking with reason codes and dispute workflow
  • Daily cash and bank deposit reconciliation
  • Commission plans with tiers, gates and bonus levers

Data trapped in someone else's portal

Vendors love a web login and hate an API. If the numbers you need are behind a screen, we get them out on a schedule.

Delivered
  • Robotic browser automation against portals with no API
  • Scheduled extraction landing straight into your warehouse
  • Import pipelines that quarantine bad rows instead of dropping them
  • Reporting rebuilt on top of data you finally control

People, shifts and payroll inputs

The admin that eats managers' evenings — and the part where a mistake shows up in somebody's pay.

Delivered
  • Hiring pipeline from application through to day one
  • Scheduling with coverage rules and budgeted hours
  • Time and attendance with exception flagging
  • Scorecards and performance review workflow

Infrastructure to run it on

Software is only half the job. We design and build the thing it runs on, then keep it running.

Delivered
  • Virtualisation clusters with live migration
  • Firewalls, VLAN segmentation, site-to-site VPN
  • Managed switching and wireless across sites
  • Hardware specified, built, racked and handed over

AI that stays in your building

Useful on your own data, without that data becoming somebody's training set or a per-question meter.

Delivered
  • Private inference on GPUs we own and operate
  • Assistants grounded in your own documents and numbers
  • Anomaly and exception detection over live operations
  • Fixed monthly cost rather than per-token billing

The awkward one-offs

The request that every vendor says is out of scope. Usually the one that actually matters to you.

Delivered
  • Native mobile apps on stable and beta channels
  • Single sign-on and permissions down to the button
  • Quoting and pricing tools with your real rules in them
  • Internal chat, ticketing and training, in the same system
Proof of work

One deployment. Five months. Sixty-one modules.

Our flagship system runs a 12-location retail chain end to end — every dollar reconciled, every shift scheduled, every hire tracked, every exception surfaced with a reason attached. It began as a commission checker and became the company's operating system. This is the reconciliation console, the piece that started it.

Commission Reconciliation — period close 94.0% matched
Units reconciled 11,625
12 locations
Auto-matched 10,922
no human touched them
Needs review 703
each with a reason
Variance found $44,180
itemized, recoverable
Match rate — trailing 5 periods 94.0%
88.1%89.9%91.2%92.7%94.0%
LocationIdentifier ExpectedPaid VarianceStatus
Riverside356938•••441207$182.00$182.00$0.00Matched
Northgate013277•••889014$245.00$110.00−$135.00Underpaid
Lakeview990412•••330558$96.50$96.49−$0.01Auto-cleared
Southpoint447203•••117760$310.00−$310.00Not yet paid
Riverside228841•••604399$0.00$74.00+$74.00Tracking gap
Westfield771034•••928115$158.00$158.00$0.00Matched

Representative view, sample data. Identifiers partially masked, as they are in the product.

Inside the platform

What your team actually opens.

Three screens rebuilt from the running system — same layout, same components, same theme your staff would see. Every name, figure and date below is invented.

Dashboard $ Scorecards PIP Tracker At Risk Store View Mass Review Store Dash Roster

Dana Whitfield

Sales Specialist August 2026 Live 1-on-1 Fix Data What If Print
Q3 Comp August 2026 · LIVE · 4 of 31 days · Estimate only
Gross profit$7,613.67
MTD
Projected$59,005.94
31-day trend
Your payout23.00%
20.00% base + 3.00% bonus
GPPC$116.88
Unlock ✓
Conversion26.30%
Unlock ✓
Effective hourly$63.33/hr
17.77 hrs + 9.88 OT
KPI Performance 3/4 Hit
🔓 Gate cleared — bonus levers are unlocked.
ConversionPERSONALGATE
26.30 %
Target: 18.00% HIT
146.14%attainment
Protection+1.00%
75.00 %
Target: 58.00% HIT
129.31%attainment
Pull Thru+1.00%
23.08 %
Target: 20.00% HIT
115.40%attainment
Perks Take Rate
0.06 rate
Target: 0.77
7.79%attainment
Your Numbers
Gross Profit (MTD)
$7,613.67
Traffic
35
Hours
17.77
Overtime
9.88
Conversion %
26.30
CX Grade
B
💲 Estimated Earnings
Commission $1,294.88 68.03% of max
Gross payout$1,751.14
Hourly cost$456.26
Total take-home$1,751.14
25.00%$1,447.16$1,903.42
24.00%$1,371.02$1,827.28
23.00%$1,294.88$1,751.14
22.00%$1,218.75$1,675.01
21.00%$1,142.61$1,598.87
Commission = (GP × %) − Hourly. You always earn at least your hourly rate.
Schedule Builder Rankings Availability Team Shifts Configuration
Today Aug 4 – 10, 2026 GridBy StoreList All Stores (12) ⌄ Sync Teams
Employees48
Total shifts233
Total hours1910h
Time off5
NORTHGATE5 employees148h total
Employee TUE4WED5THU6 FRI7SAT8SUN9MON10 HRS
Angel Duarte 11:00a–7:00p8h 8:30a–5:30p9h 17.0
Daniel Okonkwo 8:30a–4:00p7.5h 8:30a–4:00p7.5h 8:30a–4:00p7.5h 8:30a–4:00p7.5h 9:30a–5:00p7.5h 8:30a–5:00p8.5h 46.0
Marcel Fontaine 11:00a–7:00p8h 10:00a–7:00p9h 10:00a–7:00p9h 10:00a–7:00p9h 10:00a–7:00p9h 10:00a–7:00p9h 53.0
Tania Brooks 11:00a–7:00p8h 11:00a–7:00p8h 11:00a–7:00p8h 24.0
Daily total 324h326h325h 325h325h18h 218h 148

Revenue

Recon · Filing & Data
◈ ReconPOS vs vendor matching
▤ Filing & DataTracker, search, reports
DashboardUploadReview ReportsChargebacks
Total runs16
Avg match rate87.3%
Total devices38,648
Pending review16
20265 reconciled / 5 months Avg 86.6% · 12,395 devices
Jan
83.3%
2,854−574
Feb
76.5%
1,988−612
Mar ★
89.3%
2,259−271
Apr ★
92.0%
1,782−156
May ★
91.8%
1,744−155
Jun
READY
3,196 POS5,361 VAR

Rebuilt from the product's own layout and theme. All names, dates and figures are invented.

The platform

Sixty-five things somebody asked us for.

This is one client's system after five months — not a product catalogue. Every module below started as a specific request from someone doing the job, and all of it runs in one place instead of across nine subscriptions. Your build would look nothing like this list, because your business isn't theirs.

Money reconciliation · payout · exposure
Commission Recon
Chargebacks
Revenue Recon
Cash Deposits
Deposit Drops
Comp Plans
Comp Plan Wizard
Gross Add Credits
Expense Tracking
Register Overrides
People hire · measure · develop
Hiring Pipeline
Prospects
Roster
Scorecards
Store View
PIP Tracker
Coaching
Mass Review
Promotion Review
Glidepath
HR
Training
Time coverage · attendance · appointments
Schedules
Auto Scheduler
Time & Attendance
Clock In
Appointments
Checklist History
Floor the daily operating rhythm
Daily Procedures
Opening
Closing
End of Day
End of Month
Store Forms
Conference Forms
Store Tools
Stock & Orders
Inventory
Selling quote · price · convert
Quote Builder
Device Catalog
Plan Management
Promotions
Perks & Add-ons
Protection
Discounts
Call Tracking
Customers
Knowing what happened, and what to do
Insights
KPI Dashboard
Leaderboard
Contests
Reports
Move the Needle
System Usage
Data Health
Data Import
Working the connective tissue
Team Chat
AI Assistant
Support Tickets
Ideas
Contacts
Notifications
Project Map
Settings
Security Roles
Production
Beta channel

Native apps, two channels

Staff install it from a link and it behaves like a real app, because it is one. Your team runs the stable channel; your managers can run beta and see what's coming next. Both install side by side on the same phone.

Infrastructure

We don't just write it. We keep it running.

The team that ships the features owns the servers, the network and the pager. That is unusual, and it is the reason problems get fixed here instead of forwarded to a vendor.

Compute

Virtualization & VM builds

Multi-node clusters with live migration, so a failed host moves workloads instead of taking the day off. We size, build and hand over the virtual machines and containers your systems run in.

Data

PostgreSQL, tuned

Dedicated database hosts, nightly dumps, point-in-time recovery, and restores we rehearse on a schedule.

Access

Your identity, your rules

Microsoft Entra or Google sign-in, enforced multi-factor, passkeys, and identity checked at the edge before a request reaches the server. Permissions go down to the individual button.

AI

Private GPU inference

Dedicated GPUs running open models, with vector search across your own documents. Nothing leaves the network.

Automation

Robotic data capture

When a vendor has no API, we drive their portal on a schedule and land the data in your warehouse anyway.

Network

Firewall & segmentation

Enterprise firewall, managed switching and wireless, VLANs separating management, business systems and devices, site-to-site VPN between locations.

Delivery

Atomic deploys

Multi-phase deploy with build verification and automatic rollback. A bad release never reaches your staff.

Hardware

Specified and built

We spec the machines, build them, rack them and install the stack — whether that's a single on-site server or a full cluster. You can own the hardware outright.

Continuity

Backup and recovery

Scheduled backups, off-box copies, and restores rehearsed on a schedule rather than assumed. Documented runbooks so recovery isn't tribal knowledge.

Audit

Everything is logged

Every write records who, what, when, and the value before and after. "Who changed this?" takes seconds to answer.

Access & security

Locked down to whatever level you need.

Single sign-on is the floor, not the ceiling. Because we run the network as well as the software, we can put controls in front of your systems that a normal software vendor cannot reach. Three things we can state as fact rather than aspiration: no public inbound ports at all, 383 distinct permissions enforced across 1,430 checks, and every single write audited with its before and after value.

Who gets in

Identity

Use the identity system you already pay for. We support the major ones and don't lock you to any.

  • Microsoft Entra or Google Workspace sign-in
  • Okta and other SAML providers
  • Enforced multi-factor — no opt-out per user
  • Passkeys and hardware keys, which phishing can't defeat
  • One-time email codes for contractors without accounts
How they reach it

The network

Identity is checked at the edge, before a request ever reaches the server running your data.

  • No public origin — the server has no open inbound ports at all
  • Restrict by country, network or office IP
  • Managed-device checks — company laptops only, if you want
  • Client certificates for administrator access
  • Firewall, bot filtering and rate limiting in front of everything
What they can do

Inside the system

Getting in is not the same as getting everything. Permissions go down to the individual button.

  • Role-based permissions, per feature and per action
  • Re-authentication before sensitive changes like pay
  • Session limits and forced sign-out
  • Every write audited — who, what, when, before and after
  • Store managers see their store; nobody sees more than their role allows
Measured in the running system — not a policy document
0Open inbound ports
383Distinct permissions
1,430Permission checks
100%Writes audited
6Role tiers
The math

What this work is worth.

A custom build has to earn its keep against something. Here is the stack a 50-person multi-location operation typically rents to cover the same ground. Published list prices at 50 seats. The money matters — but the reason clients move is that none of these nine systems know the others exist, so the joins between them stay manual forever.

What you rent todayReplaced byTypical monthly
Commission / incentive platformCommission Recon, Comp Plans$3,750
AI assistant seatsPrivate inference$1,500
Business intelligence seatsInsights, KPI Dashboard, Reports$700
CPQ / quoting toolQuote Builder$500
Team messagingTeam Chat$440
Applicant trackingHiring Pipeline, Prospects$400
Scheduling & time clockSchedules, Time & Attendance$350
Learning managementTraining$300
Help desk / ticketingSupport Tickets$275
Nine vendors, nine contracts, zero integrationOne system, built for you$8,215

Published per-seat list pricing at 50 seats, mid-tier plans, August 2026. Your mix will differ.

How we work

You'll know what it costs before we write anything.

No discovery retainer, no six-week paid scoping exercise. We look at the problem, tell you honestly whether it's worth building, and quote a fixed price for the first piece.

First

Show us the workaround

The spreadsheet, the shared inbox, the process only one person understands. We ask what it costs you in hours and mistakes.

A conversation. No charge.
Then

A straight answer

Sometimes the honest answer is that software won't fix it, or that a tool you already pay for will. We'll say so. When it is worth building, you get a fixed price and a date.

Within a week.
Build

One piece, working

We build the smallest thing that solves the actual problem and put it in front of the people doing the job. You judge it on whether their day got easier.

Two to six weeks, typically.
Then keep going

We run it, and it grows

Hosting, backups, monitoring and support are ours. New modules arrive as the business needs them, not as a version upgrade you have to buy.

Monthly, cancel with notice.
How this works

Three ways in.

Most clients start with one painful process, watch it get fixed, and expand from there. That's the honest path — nobody should buy an operating system on day one.

Start here

Fix one process

Pick the thing costing you money or weekends. We build exactly that, deploy it, and you judge us on it.

  • Scoped build, fixed price
  • Live in weeks, not quarters
  • Runs on your infrastructure or ours
  • Your data stays yours, exportable any time
Most clients

Your platform, managed

A dedicated instance configured to your operation, hosted and maintained by us, with new modules as the business needs them.

  • Your own isolated deployment
  • Hosting, backups and monitoring included
  • Branded native apps for your staff
  • Ongoing development, monthly
Full stack

Systems and IT

We take the entire technical footprint — servers, network, identity, backups, AI — and run it, with custom software on top.

  • Infrastructure design and build
  • Network, firewall, wireless, sign-on
  • Private AI hosting
  • One number to call
Straight answers

The questions people actually ask.

Who owns the software and the data?
Those are two different things, and we treat them differently. Your data is yours outright — every record, exportable at any time in open formats, no fee and no notice required. The software is subscription-licensed for as long as you're with us. You're not buying a frozen copy; you're paying for a system that keeps running, keeps getting new modules, and keeps having someone accountable for it at 3 a.m. If you leave, you take your data and we help you move it.
How much data will this actually use?
Less than people expect, and we can be specific because we measure it. A live 12-location operation with 76 staff sits at 6.5 GB — roughly 550 MB per location, or about 1.7 GB per location per year of history. That is a rounding error to store, which is why we never price on data volume or charge per gigabyte. The one thing that genuinely grows is scanned documents and photos, so if you image everything we'll size for it up front rather than surprise you later.
What happens if we stop paying?
You will never be locked out by surprise. Warnings arrive well ahead of anything changing, and there's a grace period after that — nobody discovers a billing problem mid-shift on a Saturday. And if you ever do move on, we don't make you fight for your data. We send you a complete export automatically, in open formats, without you having to ask — then keep a copy safe and downloadable for a full year in case you need it again. Your data is yours the entire way through. The subscription pays for the software, the hosting and the people behind it. Never for custody of your own records.
Can it run in our cloud instead of yours?
Yes. The platform is standard containers and PostgreSQL with no proprietary cloud dependencies, so it runs in your data center, your AWS or Azure account, or our racks — your choice, and reversible later. The only piece that benefits from our hardware is private AI inference, which can also fall back to a hosted model provider if you'd rather not run GPUs.
We already have systems that work. Why change?
Don't change those. The value isn't replacing what works — it's the seams between them, where people retype data, reconcile by hand, or find out about a problem a week late. We start at a seam. If your existing tools have APIs, we integrate rather than replace.
How long does it take?
A single scoped process is typically live in two to six weeks. A full platform deployment configured to your operation runs one to three months depending on how many of your workflows are genuinely unusual. Our flagship system reached 61 production modules in five months.
What happens if you get hit by a bus?
Fair question, and it matters more with a small firm than a large one, so we answer it in the contract rather than in conversation. Your data is exportable at any moment, so you are never holding a hostage situation. Infrastructure is defined in writing with documented runbooks, and the platform is standard containers and PostgreSQL — no proprietary runtime only we can operate. For larger agreements we place the source in third-party escrow, released to you automatically if we cease trading or fail to meet the service commitments we signed. You get continuity without either of us pretending a one-time purchase covers ongoing work.
How do people sign in? Is it just Microsoft?
Microsoft Entra is the default because most of our clients already have it, but it is not the only option. We support Google Workspace sign-in, and identity can be enforced at the network edge so a request is authenticated before it ever reaches the server. On top of that: mandatory multi-factor, phishing-resistant passkeys, device compliance rules, session limits, and re-authentication before sensitive actions like changing pay. Most of that is policy we configure with you rather than software you buy.
Is our data used to train AI models?
No. When inference runs on our hardware, nothing is transmitted to a third party at all. If you opt for a hosted model provider instead, we use enterprise endpoints with training disabled, and we'll show you the configuration.
Get started

Show us the spreadsheet.

Every system we've built started as somebody's workaround — a spreadsheet, a shared inbox, a process only one person understood. Send us yours and we'll tell you honestly whether it's worth building and what it would take.

Or email [email protected] directly.