Skip to content
◆ Custom software · data · AI

We build the systems businesses and agencies run on.

Q Services AI designs, builds and operates complete business systems — database, API, web, mobile and AI layer. We don't pitch software. Our own platform runs live in production on infrastructure we deploy and verify every day.

30 years IT & business  ·  Public & private sector
“Making the Hard Look Easy”
Verified verify, never assert

In production today

The record

One platform, built from an empty database

Most studios show you screenshots. Here is a system we built and operate, described the way an engineer would ask about it: a phone app that works with no signal, a back office, a customer portal, an AI layer, and one database of record behind all of it.

84database migrations, checksum-recorded
47API route modules
60back-office screens
22API test suites in CI
28AI tools exposed over MCP
3apps: mobile, web, portal

Production request path

Every hop is deliberate, and every layer is ours to operate.

Phone / browser→ HTTPS→ Caddy · TLS→ private Docker network→ nginx→ 4 × Node.js (PM2)→ PgBouncer pool→ Managed PostgreSQL 18
Tier 1
Development

Native database and full toolchain; the only place production images are built.

Tier 2
Test

Containerised PostgreSQL, a full app deploy, and the nightly restore-and-compare check.

Tier 3
Production

Managed database and hardened droplets in a private VPC. Only the reverse proxy is reachable from the internet.

What we solved

We make the hard stuff look easy.

These are the problems that sink custom software projects — offline data, tenancy, money, geography, governed AI access. Each one runs in production today, so your build starts from working code instead of a blank page.

Offline-first field app

Technicians work where there is no signal. The phone app keeps its own SQLite database and an outbox, then reconciles with the server when the network returns.

  • Row versions and device-generated ids so a record created offline is never duplicated
  • Soft deletes and a change sequence, so each device pulls only what changed
  • Transactions serialised on-device; a background task syncs without blocking the screen
  • A GPS fix captured on completion, queued for upload, never blocking the save
SQLiteReact NativeWorkManager

Multi-tenant security, proven

Every row belongs to an organisation and every query filters on it. Permissions come from the database, not the token.

  • Role hierarchy with per-user overrides; nobody can grant themselves privilege
  • User, role and permissions re-read on every request, so a locked account is cut off immediately
  • Refresh tokens rotated on use and stored only as hashes; mobile tokens in hardware-backed storage
  • Field staff never see customer contact details — stripped server-side, not hidden in the UI
JWTRBACKeystore

Custom billing systems & accounting integrations

Billing written for how the business actually charges, wired into the accounting system it already runs on.

  • Per-organisation rules: monthly, prorated or flat, labor by category, mileage rates, configurable taxability
  • Threshold logic decides what rolls into the recurring invoice and what bills separately
  • Duplicate protection in application code and enforced again by a unique index in the database
  • Generate, preview, batch-send, export — with accounting-ready output and idempotent payment push to third-party ledgers
QuickBooksOAuth 2.0ERP

Mapping & third-party GIS integrations

Addresses, territories and routes handled as real geography — resolved, optimised and drawn where people can use them.

  • Geocoding of service addresses and crew home bases, resolved once and reused
  • Server-side waypoint optimisation, saved as a per-date override an operator can override again
  • Interactive maps in the back office and inside the field app; drag work between days and crews
  • Turn-by-turn handed off to the device's own navigation app
Google RoutesGeocodingMaps JS

Customer portal and payments

Customers see their own service history and pay their own invoices. Money moves to the client's account, not ours.

  • Invite-based accounts with their own authentication, separate from staff logins
  • Service history, readings and documented visits, per property or per asset
  • Card payments through a hosted card form on the client's own connected account
  • A verified webhook marks the invoice paid — never the browser
StripeWebhooksReact

An AI layer over live data

The same data, exposed to AI assistants as governed tools — read and write, under the caller's own permissions.

  • Tools published over the Model Context Protocol with typed input schemas
  • Per-user keys exchanged for that user's token, so the API enforces the same roles
  • Every tool call audit-logged; writes explicitly enabled, email deliberately disabled
  • Practical use today: ask a question in plain language, get it from production data
MCPTypeScriptZod
The craft

Two halves of the same job

Writing the code is half of it. The other half is proving the exact thing you wrote is the thing now serving traffic.

pipeline.ts — q-services-ai
// ingest → model → decision, in one pipeline
export async function run(source) {
const data = await ingest(source);
const model = buildInsights(data, {
realtime: true, ai: "assisted"
});
return model.ship(); // prod-ready
}

What we build. Scattered data in, a model that answers the question, a decision your team can act on — one path, no spreadsheet in the middle.

deploy-api.sh — production
# nothing ships unless the server proves the commit
$ deploy-api.sh --expect 3a110c8
image commit ...... 3a110c8 match
container ......... api-prod
previous kept as .. -prev (rollback)
$ curl /health
db ok · pool 3/10 · commit 3a110c8

How it lands. The deploy refuses to swap containers unless the commit inside the image matches what was asked for, and the live health endpoint confirms it afterwards.

How it stays up

Operational discipline, not good intentions

The difference between software that works and software you can depend on is what happens after the code is written.

Commit-verified deploys

The deploy script reads the commit inside the image and refuses to swap containers if it doesn't match. The previous container is kept for instant rollback, and /health reports the exact commit serving traffic.

Backups that are restored

Every night production is dumped, restored into a scratch database and row-count compared. An untested backup isn't a backup. Encrypted copies go off-site on a 30-day retention.

Tenancy proven by test

A test harness discovers every endpoint and fails the build if any lacks a tenant-scoping rule — proof, on every push, that one organisation cannot read another's data.

Gates before merge

Migrations run against a throwaway database, the test suite runs, the web build must pass with zero warnings, mobile type-checks, and a secret scanner inspects every commit.

What we do

Software services, end to end

From a napkin sketch to a deployed system your team relies on — we design, build, host and maintain it.

Custom Software

Bespoke web and internal applications built around how your business actually works — designed from requirements gathered on site, not off-the-shelf compromises.

Web appsAPIsPortals

Business Intelligence

Data models, KPI reporting and dashboards leaders trust — built by someone who spent two decades making enterprise financial reporting reconcile.

ModelingETLReporting

AI & Automation

Practical AI wired into real workflows and governed by your own permissions — assistants with live access to your data, not a chatbot bolted on the side.

MCPLLMsAgents

Web & Mobile Apps

Responsive back-office software and native field apps that keep working when the signal drops, then reconcile cleanly when it returns.

ReactReact NativeOffline

Data & Integration

Connect the systems you already run. Migrations, pipelines, accounting and payment integrations that end double-entry for good.

PipelinesSyncREST

Hosting & Operations

Containers, TLS, reverse proxying, connection pooling, verified deploys and verified backups. We operate what we build.

DockerCI/CDBackups
Where it comes from

Thirty years of systems that had to balance

The platform above is recent work. The judgment behind it comes from two decades inside federal contracting, accounting and grant systems, where the reporting has to reconcile and the audit is real.

Government contracting

Multi-company accounting and financial configuration in enterprise ERP environments, plus the reporting each line of service needed.

Grants & awards

Record management and analytics for a federal credit program administering $1.5B in funding, with business rules enforced in the data layer.

Business intelligence

Enterprise BI frameworks, portals and role-based report security; data models and KPI reporting built for executive decisions.

Infrastructure & data

Server, virtualization and database environments built from the metal up, including ETL and parsing of unstructured data across several database engines.

Public sector
Built for the way agencies buy and audit

Federal contracting and accounting environments, grant and award administration, program reporting and performance metrics. We have worked inside systems where every figure has to trace back to a source and survive review.

Private sector
Built for operators who need it working Monday

Field operations, billing, ERP and accounting integration, executive reporting. Multi-company configurations, hosted environments and end-user rollouts — delivered in increments you can use as they land.

Full-stack, one accountable team

Infrastructure, database, API, web, mobile and AI are handled by the same group, so nothing falls into a gap between vendors.

Scaled to the engagement

We staff delivery around the scope — engineering, data and project management — and hold the same gates whether it is one system or a portfolio.

We operate what we build

Hosting, monitoring, verified deploys, verified backups, rollout and end-user training. Delivery does not end at handover.

Nearly 30 years across information technology and business, twenty of them delivering as a government contractor — strategic project-based planning, project management, software development and data analysis, covering requirements gathering, development, system rollouts, end-user training, customer service, staffing and overall project management.

Expertise
  • Twenty-five years of business analysis, demonstrated across reporting tools including BI platforms, SQL and internally developed enterprise toolsets built to measure KPIs, metrics and performance reporting requirements.
  • We collaborate with business partners to develop a deep understanding of business methodologies, solution design, analytics definitions, business process and issues resolution.
  • We translate analytic data and insights into actionable recommendations, using visualization tools, presentations and other means to communicate clear and concise conclusions.
  • We combine advanced technology with knowledge of corporate finance, operational strategy and other strategic business principles to solve complex business issues — taking complex data and returning clear conclusions in analytics and reporting solutions.
  • Twenty years of software development: SDLC and Agile; object-oriented programming; web, application and framework development; business intelligence and reporting; ERP systems; financial modeling and architecture; data analysis and modeling; configuration; patch management; upgrades; end-user support; testing; training; implementation; networking and virtualization.
Strengths
Analytical

A strong analytical foundation in originating and calculating relevant metrics, and the ability to translate data into actionable recommendations that gauge business performance. Deep experience in predictive and advanced analytics; critical thinking to identify and resolve problems in a timely manner, gather and analyze information skillfully, and develop alternative solutions.

Communication

Strong oral, written, listening and presentation skills. The ability to influence decision-makers through fact-based analysis and persuasive communication.

Planning / Organizing

Experienced in prioritizing and planning work activities, managing scope and additional resource requirements, setting goals and objectives, and organizing and scheduling tasks into realistic action plans.

Project Management

Established and competent in project management and results-oriented process administration, goal and objective achievement.

Technical

Designing, developing and implementing technological solutions from physical infrastructure through the database and application layers, and up to business process requirements and strategy.

Enterprise proficiencies
Cognos BIFramework ManagerDeltek Costpoint ERPOracle DBMSPL/SQLMS SQL ServerSSISSSRSSSAST-SQLIBM DB2.NET / C#VMwareCitrixWindows ServerLinuxAWS
Current platform stack
PostgreSQL 18PgBouncerNode.jsExpressTypeScriptReact 19React Native / ExpoSQLiteTailwindDockerCaddynginxPM2Ubuntu 24.04DigitalOceanTailscaleGitHub ActionsJestPlaywrightPythonStripeQuickBooks APIGoogle Maps PlatformResendMCPClaude
How we work

A pragmatic path to production

No 80-page specs that die in a drawer. We scope tightly, build in the open, and ship working software fast.

01 / Discover

Understand the work

Requirements gathered from the people doing the job, before a line of code — the real problem, not the assumed one.

02 / Design

Blueprint & prototype

A clickable prototype and a tight scope, so you see it before you buy the build.

03 / Build

Ship in increments

Working software every cycle, deployed where you can use it — not a big-bang reveal at the end.

04 / Run

Operate & evolve

Hosting, monitoring, backups, rollout and end-user training. We stay on and grow the system as the business changes.

Let's build

Have a system worth building?

Tell us about the problem you're trying to solve — public sector or private. We'll tell you honestly whether, and how, software can fix it.