Infrastructure + security
Cloud infrastructure, DevOps and security for UK teams. Servers that don’t wake anyone up at 3am, and the paperwork your biggest customer asks for before they sign.
Systems that grow with you, not against you
Infrastructure + security is the part nobody thanks you for until it fails. We build cloud setups that hold up under load, and help you prove they’re safe.
Built for what you actually run
Whether you’re moving off something that’s creaking or getting ready for a compliance review, the aim is the same. Fewer surprises, and someone who picks up the phone when there is one.
Our services include
Cloud infrastructure and automation
Set it up once, properly, and stop firefighting.
We define your servers in code with Terraform, which means rebuilding an environment is a re-run rather than a weekend. Development, staging and production stay identical, so the bugs that only appear in production mostly stop appearing. It also means the setup is written down — not held in one person’s head, which is the usual arrangement and the usual problem.
DevOps
Shipping slowly is a symptom, not the illness.
If releases take weeks and everyone dreads them, the cause is usually the process rather than the people. We measure how your team actually delivers using DORA metrics — how often you ship, how long a change takes, how often it breaks — then fix the slowest part. The point isn’t the dashboard. It’s that the next release is boring.
Security and compliance
The questionnaire that’s holding up your biggest deal.
As a Secureframe partner we’ll get you ready for GDPR, ISO 27001 and SOC 2 Type II. We don’t issue the certificate — we get you to the point where the auditor has nothing to say. That covers your first penetration test, the monitoring that tells you something is wrong before a customer does, and the honest conversation about which of these you genuinely need yet.
Cloud infrastructure and automation
Set it up once, properly, and stop firefighting.
DevOps
Shipping slowly is a symptom, not the illness.
Security and compliance
The questionnaire that’s holding up your biggest deal.
What’s included
Cloud infrastructure, DevOps and security
The setup, the release process and the evidence your customers ask for, all written down rather than remembered.
Cloud
AWS and Google Cloud set up in Terraform
Matching development, staging and production
Migration off ageing hosting
Delivery
Automated testing and deployment
DORA metrics on how your team ships
Monitoring and alerts
Security
ISO 27001, SOC 2 Type II and GDPR readiness
Your first penetration test
Policies and evidence for the auditor
Featured work
Vault, now part of Diligent
Vault lets employees report misconduct privately, and sells to some of the world’s largest employers. We built and ran the platform, encrypted reports on the person’s own phone so even Vault can’t read them, and took it through SOC 2 and ISO 27001.
Read the case studyCertified
SOC 2
And ISO 27001, which we took Vault through
Series A
$8.2M
Led by Gradient Ventures, Google’s AI fund
By Diligent
Acquired
May 2025. Diligent kept us on to keep building it
Contic came into the company and hit the ground running delivering value very early enabling us to hit release deadlines.
Nick Tong
VP of Research & Development
Vault Platform
Ways to work with us
Three ways in, each priced before any work starts.
New products
LaunchPad
Design, build and launch at a fixed price, from £25k to £100k. If the plan isn’t right after Discovery, you get your money back.
See pricingExisting products
Free architectural review
Already built, or built by someone else? We’ll review the code and architecture and tell you, in plain English, what needs doing first.
Talk to usAfter launch
TotalCare
Hosting, app store accounts, third-party services and support for a fixed monthly price, so you can get on with growing.
Read more
What we build with
Secureframe and Databricks partner, with everything defined in Terraform.
AWS
Google Cloud
Terraform
Secureframe
Databricks
Some of our DevOps and infrastructure work
Ymobile
The UK’s first eSIM-only mobile network.
Infrastructure + security
Payments engineering
Making it easy for customers to pay, and for businesses to know they have been paid
Product development
Infrastructure + security
The Home Help Company
Built to take help at home into new areas.
Infrastructure + security
Product development
DevOps and security questions
Do you offer DevOps consultancy?
Yes. We review how your team builds, tests and releases software, measure it with DORA metrics, then automate the slowest parts. We work with UK teams on AWS and Google Cloud, with everything defined in Terraform so it’s written down rather than remembered.
Do you issue SOC 2 or ISO 27001 certificates?
No, an independent auditor does that. As a Secureframe partner, we get you ready: the controls, the policies, the evidence and the infrastructure the auditor checks. We took Vault through both.
Which certification do we need first?
Usually whichever your biggest customer is asking for. SOC 2 is common with US buyers and ISO 27001 with UK and European ones. We’ll tell you honestly if you don’t need either yet.
Do you work with AWS and Google Cloud?
Yes, both. We define everything in Terraform, so environments are repeatable and documented whichever cloud you’re on. For data-heavy work, we’re a Databricks partner.
Can you take over infrastructure someone else set up?
Yes. We start with a review of what’s running and where the risks are, then bring it into code a piece at a time. Nothing gets switched off until its replacement is proven.
Can you help us prepare for the NHS DSPT?
We can help you prepare for the Data Security and Protection Toolkit by building the technical controls it asks about and gathering the evidence. The submission is yours to make, and we don’t hold the certification ourselves.
Do you offer ongoing support?
Yes. TotalCare covers hosting, third-party services and support for a fixed monthly price. If you’d rather run it yourselves, we hand over documentation your team can use.
Got a deal waiting on a security review?
Tell us what you run and what your customers are asking for. We’ll tell you what it takes to get there.
Our newsletter
Occasional emails about what we’re building and what we’ve learned the hard way
You may unsubscribe from these communications at any time. For information please review our privacy policy.