We partnered with an EU-based AI start-up to deliver a cloud-native, GDPR-compliant meeting intelligence platform that transforms voice data into structured outputs such as summaries and transcripts. The system was designed from the ground up with strong security and data protection principles, enabling secure and efficient processing of audio data while supporting cost-efficient scalability. To validate our implementation, a leading independent security firm conducted a comprehensive penetration test across application, API, and cloud infrastructure layers.

 Some architectural and implementation details have been intentionally generalised or omitted due to security and confidentiality considerations.

Build secure foundations aligned with GDPR and enterprise security expectations

Design encrypted boundaries and strong identity controls from day one

Enable safe handling of sensitive user-generated voice content

Pass an independent third-party penetration test before enterprise onboarding

Maintain strong security posture without relying on expensive vendor tooling

Processing large-scale voice data and converting it into structured, user-linked information

Protecting sensitive content under strict European privacy regulations

Securing APIs used for transcription and content analysis workflows

Ensuring data and access separation between different customer teams

Key Problems

From the start, the system followed a "Secure by Design, Efficient by Default" approach:

Leveraged open-source components and built-in cloud-native controls

Applied encryption across service boundaries

Practised least-privilege access and secure defaults

Included threat modelling during the architecture phase

The infrastructure was built using Azure Virtual Machines, Function Apps, managed Postgres databases, and Azure Storage, integrated via secure cloud-native patterns. Front-ends were implemented using web and mobile clients.

A third-party security firm conducted a comprehensive assessment, which included:

 – external attack simulations without prior code access

 – in-depth code and configuration review

 – validation of infrastructure setup against best practices

Backend APIs developed using a combination of open technologies, including Node.js and Python, exposed securely via Azure API Gateway

Azure infrastructure components including VMs, Function Apps, Web Apps, managed databases, Azure Storage, and network resources

Vulnerability testing based on OWASP Top 10:

Injection, Insecure Design, Security Misconfiguration

Vulnerable Components, Identification Failures, SSRF, and others

Attempted escalation to system, database, or OS access

Misconfiguration checks based on Microsoft Secure Score and CIS Benchmarks

Our Approach

Lack of HSTS headers, which could increase the chance of insecure connections in specific edge cases

Presence of plaintext credentials in a development repository, which have since been removed

We remediated the identified low-risk issues based on the recommendations provided. These updates were applied internally.

Findings and Remediation

All critical and high-severity issues were resolved within two weeks

Platform passed internal security review and GDPR audit

Enabled rollout to enterprise pilot customers with confidence

Helped establish a formal vulnerability management processPassed third-party penetration test with 

Authentication, access control, and encryption validated as robust

Azure environment aligned with Microsoft and CIS best practices

Enabled enterprise rollout with security confidence

Delivered a secure system while avoiding recurring costs of commercial vendor tools

By embedding security from the architecture phase and leveraging open standards and cloud-native controls, we delivered a production-ready, secure platform. Independent validation confirmed its resilience and demonstrated that strong security can coexist with cost efficiency.

Outcome

A comprehensive platform that encompasses an entire ecosystem for delivering and managing offerings, providing end users with a seamless experience when booking Health & Wellness treatments in the comfort of their own home.

Admin CMS: Backend platform (CMS) for admin users to manage treatments, therapist bookings, and customer data.

User App: Frontend mobile app for customers to choose treatment bookings for themselves or anyone else.

Therapist App: Frontend mobile app for therapists who provides treatment services to manage their schedule & bookings as per customer needs.


Ensuring the app’s mobile client and the CMS-based admin interface stay in sync.




Ensuring the app works seamlessly across both iOS and Android platform.




Developing a seamless experience for users booking treatments for multiple people at once.




Implementing secure payment gateways for credit and debit card.




Integrating location-based services to ensure users can book treatments within their specific serviceable areas.




Ensuring that the app reflects real-time data on bookings, services, and user actions.


By developing the app using React Native, we ensured that the app would work on both iOS and Android devices, while ensuring a consistent user experience across platforms.




We implemented REST APIs to enable real-time synchronization of data between the mobile app, backend, and CMS. This ensures that any changes made (e.g., booking status, profile updates) are instantly reflected in the app.




The app uses industry-standard encryption protocols to handle sensitive information.




The app leverages GPS to offer users available treatments within their location, improving the booking experience based on proximity.

How We Solved It

This project redefines note-taking by combining traditional note creation with cutting-edge generative AI. Users can create notes, listen to transcription audio, and engage in conversations with their notes to extract insights or ideas. Generate documents and other materials effortlessly, making your notes more powerful and interactive than ever.


Record audio notes and automatically transcribe them into text with high accuracy.

Convert written notes into natural-sounding speech, with adjustable playback speed, pause, and rewind.

The app supports text summarization and content extraction based on user prompts, enhancing productivity and quick information retrieval.

Efficient search and filtering options to find specific notes quickly.

Developing an AI-powered chat that provides meaningful and contextually accurate responses to user queries related to notes.




Creating an intuitive and seamless user interface that accommodates advanced features while remaining user-friendly for people of all technical skill levels.




Ensuring the app works seamlessly across different platforms (Android, iOS), with features like Apple authentication and Face ID on iOS, while maintaining consistency in user experience.




Ensuring accurate voice-to-text & voice-to-text transcription in real-time with varying accents or without lag or loss of information.


The AI system was powered by a combination of natural language processing (NLP) techniques and machine learning models. We developed specific algorithms to match user queries with relevant note content.




A design-first approach was taken, working closely with user feedback and conducting usability testing to ensure the app’s interface was intuitive, aesthetically pleasing, and easy to navigate.




We used cross-platform development tools (React Native) to ensure that the app provides a consistent user experience across iOS and Android, with special attention to platform-specific features like Apple Face ID.

AI Workspace enables you to create dynamic workspaces where you can upload documents, PDFs, audio, and video files, and interact with them seamlessly through generative AI. Designed to boost productivity and simplify workflows, it's your all-in-one hub for intelligent file management and conversational insights.


Workspace Personalisation: Users can create dynamic, customisable workspaces tailored to their needs. Each workspace allows you to add various data sources like URLs, documents, and cloud folders.

AI Assistance in Workspace: Built-in AI enables users to query about uploaded files and links, generating relevant responses. The AI is trained to offer insights and summaries from user-provided content.

Security and Encryption: End-to-end encryption for all communications between the backend and frontend, ensuring the confidentiality of user data. Each user account is isolated to prevent unauthorised access to other users' data.

AI-Powered Interactions: Similar to a chatbot, users can converse with the integrated AI to get answers, summaries, and insights from their files and data.


Protecting user-uploaded data and ensuring that no one (including the backend team) could access or view another user’s files or chats. Ensuring that all user data remained private, secure, and isolated was crucial without compromising the user experience.




The AI would need to pull relevant insights from a variety of document types and offer coherent responses. Balancing accuracy with speed and relevance likely posed a significant challenge.




Translating a cluttered workspace into a simplified, user-friendly interface was challenging. Making the AI feel like a "slightly forgetful but well-meaning assistant" required continuous iteration to find the balance between usability and functionality.


Security considerations were integral from the start. End-to-end encryption for communication and data transfer was implemented. Additionally, data isolation mechanisms ensured users felt in control of their data.




The development team implemented advanced NLP models and document parsers that could process varied file types. Regular updates and feedback mechanisms helped improve AI accuracy.




Given the app’s focus on simplifying complex workflows, designing an intuitive and easy-to-navigate interface while supporting advanced features like multiple workspaces, dynamic file uploads, and AI-driven conversations required significant UX/UI work.

This project empowers users to craft magical stories for kids, complete with dynamically generated images tailored to the story's summary and the child's profile. Bring tales to life with audio narration options, making story-time more engaging and personalised. A perfect blend of creativity and technology to spark imagination! Key Features:


Storytelling app with audio narration, interactive elements, and user-generated story customization.

Parental controls and subscription-based model.

Multi-language support, offline access, and accessibility features for children with special needs.

Offline access to downloaded stories for uninterrupted usage. 

Feedback mechanism for parents to suggest improvements or request specific story themes.


The primary challenge was creating an app that could captivate young children (3-10 years) while also meeting the needs of parents for privacy, security, and ease of use.




Ensuring the app complied with strict privacy laws like COPPA & GDPR, given the target audience of children and the need for sensitive data handling.




Ensuring that the storytelling experience was engaging and interactive, with features like animations, audio narration, and personalized stories based on user inputs.




Ensuring the app worked smoothly across various iOS and Android devices with different screen sizes, resolutions, and hardware capabilities.


Designed a child-friendly interface with vibrant colors, clear navigation, and engaging animations that would appeal to children while also being simple enough for parents to set up and manage.




Implemented encryption for sensitive user data, limited personal information collection, and ensured clear consent from parents to comply with COPPA and GDPR.




Developed parental controls to manage subscriptions, monitor usage, and provide feedback on the content.




Ensured compatibility across a variety of devices (iOS and Android) and screen sizes, allowing for a seamless user experience.

The ThreatStream mobile app links to the Optic Threat Intelligence Platform, providing access to dashboards, indicators, alerts, and trends.


Innovative design featuring interactive charts, real-time alerts, and trend visualisations.

Compatible with Apple’s fingerprint sensor for secure access.

Includes Multi-Factor Authentication (MFA) for enhanced security.

The current system was confusing and difficult to navigate. The system also made data analysis difficult and challenging to draw meaningful conclusions.




Threat Steam customers heavily rely on the insights that the system provides. However, delivery of that data needed to be more seamless. The system needed to be accessible on widely used mobile devices so that when a threat is uncovered, action can be taken as soon as possible. With the emergence of new technologies such as wearables becoming more mainstream, the system had to be flexible and scalable to accommodate.




The system collects a large amount of data about the network but it was very scattered to be useful and draw meaningful conclusions..


Provides full access to the ThreatStream Optic threat intelligence platform dashboard to display and enable users to take actions with a simple tap of the screen or voice command.




Shows various key performance indicators to assess network health and threats.




Enable security operations centre (SOC) analysts to receive and respond to threat alerts triggered by the Optic platform regardless of where they are. Using the app, anyone wearing an Apple Watch or using an iPhone or iPad, can receive notifications and alerts in real-time, untethering from the displays of their security controls without jeopardizing their ability to see and respond to threats immediately.

Divine Bites is a modern online bakery platform designed to provide a seamless ordering experience for gourmet baked goods. The website allows customers to browse a wide variety of products, customize their orders, and schedule deliveries with ease. Built with a robust backend for admin management, Divine Bites ensures smooth operations from order placement to delivery.

 Backend platform for managing products, pricing, promotions, and orders efficiently.

 User-friendly interface to browse products, customize orders, and complete purchases effortlessly.

 Building a smooth and intuitive ordering process with product customization options.

 Ensuring product availability is accurately reflected on the website.

 Implementing reliable payment gateways to handle online transactions safely.

 Delivering a consistent experience across desktop, tablet, and mobile devices.

 Keeping customer orders, product listings, and inventory in sync between CMS and website.

 Developed a clean, visually appealing interface with an emphasis on easy navigation and product discovery.

 Implemented features allowing customers to personalize cakes and other baked goods with different flavors, sizes, and special notes.

 Integrated PCI-compliant payment gateways to ensure safe transactions.

 Optimized the website to provide a smooth experience on all devices, from desktops to smartphones.

 Built a user-friendly backend to manage products, pricing, promotions, and orders efficiently, reducing manual workload and errors.

TurnControl is a comprehensive property management system designed to streamline operations for property managers, vendors, and their crews. The platform allows users to manage properties, areas, plans, assets, and vendors efficiently, while enabling smooth scheduling and tracking of inspections. Property Managers can identify required actions before new tenants move in, create Purchase Orders (POs), assign tasks to vendors, and monitor progress in real-time. 

 Admin and Property Manager operations for managing properties, plans, areas, assets, inspections, POs, and vendor assignments.

 Mobile application enabling crews to view assigned tasks, manage time, and update task status.

 Login/Sign Up, Property & Asset Management, Plan Management, Rates, Area/Location, Advanced Search, Comments & Threads, Dashboard, Inspections, Purchase Orders (PO) & RFP creation, Reports, and Email/Text integration.

 Login/Sign Up, Dashboard, PO Management, Assign Jobs, RFP & Quotations, Change Order Requests, Employee Management, Push Notifications, and Analytics.

 Login Management, Dashboard, Accept/Reject Jobs, Site Check-In (GPS & timestamp), Update Status, Request Changes, Clock In/Out, and Push Notifications.

 Real-time status updates, activity feeds, and automated notifications ensure smooth coordination across teams.

 Multiple endpoints for tracking performance, task completion, and operational insights.

 Supporting four distinct roles (Admin, Property Manager Admin, Property Manager User, Vendors, and Crew) with role-based access.

 Ensuring inspections and tasks are efficiently scheduled and tracked.

 Creating, assigning, and monitoring POs and RFPs in real-time.

 Delivering a seamless experience for crew members on mobile devices.

 Ensuring progress, comments, and notifications are instantly visible to all stakeholders.

 Developed using React Native to provide an intuitive, interactive, and responsive interface for crews.

 Node.js backend deployed on AWS Lambda for scalability, flexibility, and cost efficiency.

 Implemented fine-grained permissions for Property Managers, Vendors, and Crew members to maintain workflow integrity.

 Real-time updates, push notifications, activity feeds, and email/text integration ensure smooth coordination.

 Built endpoints to monitor task completion, vendor performance, and operational insights in real-time.

Our Recent Work

Real Solutions. Real Impact.

Secure by Design: AI Transcripts Platform

Cocon - Home Massage & Spa

AI Voice Notes

AI Workspace

AI Kids Story

ThreatStream Mobile and Watch App

Divine Bites Website

Turn Control - Web & Mobile App

Please fill out the form and we’ll be in touch with you.