Software Factory
The custom software your business always assumed it couldn't afford. AI agents do the building, I direct them, review everything and hold the security gates, and you get bespoke systems in days and weeks rather than quarters, running under constant watch for as long as you keep them. It is the system that built everything on the Labs page, and it can build for you.
What is Software Factory-as-a-Service?
Software Factory-as-a-Service means custom business software built by AI agents working to a written specification, directed and reviewed by a human engineer, then run under continuous monitoring, weekly security testing and nightly audits. You get bespoke systems in days and weeks, at a small-team price, without hiring a development team.
Start with the thing you gave up wanting.
Every business has one: the system you priced up years ago, winced at, and learned to live without. That is the right first conversation. Some shapes it usually takes:
A portal that fills itself.
Client onboarding that reads what you already hold, asks only what is missing, and lands clean data in your CRM and your documents. No more re-keying, no more chasing PDFs.
A back office that runs overnight.
Reconciliation, follow-up chasing, report packs, renewals: recurring work done on a schedule, every step logged, exceptions escalated to a human instead of everything.
An assistant that knows your documents.
A chatbot grounded in your own policies and procedures that answers with citations, refuses to guess, and can speak as well as type. Your expertise, on duty at all hours.
Forms that fill themselves.
A client record and a template in, a completed draft out, with every answer traced back to its source so a human can review in minutes instead of typing for an hour.
The tool your customers search for.
A genuinely useful free calculator or checker in your niche that earns attention, answers real questions, and quietly introduces your paid service to the right people.
One page that answers "what's going on?"
Every system, job, deadline and cost in your operation on a single live dashboard, so the state of the business is something you look at, not something you reconstruct.
These are starting points, not a menu. If you can describe the process and the outcome, a specification can be written for it; and if a specification can be written, the factory can build it, connect it to what you already run, and keep it running.
You are looking at its work.
These are not mock-ups or concepts. Each is a real system the factory specified, built, security-gated and shipped, and most are live right now:
Keystone: a client fact-find platform for a financial advice firm, replacing a spreadsheet-based process with a clean web app that pre-fills from CRM data and call transcripts. Live as a gated demo.
Dispatch: an editorial content platform running real client content operations every day, monitoring sources, drafting articles and newsletters, publishing on approval. It writes this site's Journal.
Autonomo Pilot: a live tax tool for freelancers in Spain, with production sign-in and encrypted data, at autonomo-pilot.com.- A voice chatbot platform: answers only from an organisation's own documents, cites its sources, speaks the local dialect, and never stores audio. It went from idea to a live demo with a public marketing site in one working day, and now serves a client venture abroad.
- Free public tools: a Spain mortgage calculator and other complete, no-strings utilities, shipped as finished products rather than experiments.
- Atlas and the monitoring stack: the factory's own control room, registering every system and auditing the whole estate nightly. Built by the factory, for the factory.
The full showcase, with live links, is on the Labs page. For a concrete picture of the day-to-day, read what one month inside the factory looks like.
From knowledge to a running factory.
A factory is set up for your business, not dropped on it: it starts by understanding how you work, is secured before a single business fact enters it, and then builds fast. The record so far includes a voice chatbot platform from idea to live demo in one working day, and a client content operation live on the day it was commissioned. The honest sequence:
- First, always
Knowledge gathering
What your business does, how it works, the language and taxonomy of your industry, your processes, your systems and third parties. The factory only builds well for a business it genuinely understands.
- Before any data
Secure set-up
Your factory is stood up, on your cloud or mine, with security as its first state: access control, encryption, secrets discipline, encrypted backups and monitoring all live before a single business fact is loaded in.
- Into a hardened factory
Your knowledge loaded
The glossary, processes and red lines from step one go in. Your constraints are written into everything the factory generates, and verified in its output, not remembered.
- Days
First build: brief & specification
We pick the smallest system that honestly fixes a real pain, and agree it in plain writing. The specification is the contract; if the build and the spec disagree, the spec wins.
- Days, not months
Agents build, I review, the gate decides
You are clicking through something real while a traditional project schedules its kickoff. Nothing becomes publicly reachable until its own security check passes and monitoring is attached.
- Always
Under watch, compounding
Weekly security testing, nightly audits, measured costs, your live dashboard. Every new system reuses the knowledge and standards already in place, so the second build is faster than the first.
The framework your systems inherit.
Nothing here is built from a blank page. Every system lands inside a working framework: a secured platform underneath, written standards and playbooks for every capability that repeats, a registry that audits everything nightly, and your systems on top, inheriting all of it from their first minute.
Capabilities applied from playbooks:
- Sign-in & auth
- Security baseline
- Monitoring
- Encrypted backups
- Restore drills
- Cost guards
- Feedback widget
- SEO & AI visibility
- Brand pack
- Content engine
- Legal pages
- Mobile-first UI
A capability your system needs has usually been built before, so it arrives as a tested recipe, not a research project. That is why the second build is faster than the first.
You see what I see.
Every system the factory runs is on a live dashboard: whether it is up, what its scheduled jobs did overnight, what it is spending, and what resources it is using, minute by minute. Alerts are designed to stay silent until something is genuinely wrong, so a message means something. Underneath, a nightly audit checks every system against its own register: specification present, security check passing, backups fresh, nothing quietly drifting.
As a client, that view is yours too. You get a real-time dashboard for your own systems: a standing answer to "is everything OK?" that does not depend on emailing me and waiting. Most software suppliers ask you to trust that things are fine. This one shows you.
Nothing rots quietly. The most expensive software failures are not dramatic crashes; they are systems that decayed for months while everyone assumed someone was watching. The factory's answer is structural: everything is registered, everything is audited nightly, and anything that drifts gets flagged before it becomes your problem.
Standing features, not add-ons.
Every system the factory builds ships with all of this, because the factory itself does not work any other way:
- A written specification first: agreed before any code exists, and authoritative afterwards.
- A security gate before go-live: checked before anything is publicly reachable, re-checked automatically every week.
- Active security testing: protected surfaces regularly probed for unauthorised access, with deeper adversarial passes monthly. When a formal penetration test is required, we commission an independent one; this is the continuous layer underneath.
- Monitoring and quiet alerting from day one: watched around the clock, with your own live dashboard view.
- Encrypted backups with practised restores: recovery is rehearsed on a schedule, not presumed.
- Measured AI costs: every model call priced and guarded, so running costs are known and bounded, not discovered on an invoice.
Your infrastructure or mine.
Every system the factory builds can live in either home, and the discipline travels with it.
Nothing for you to run.
Your system runs on infrastructure I operate, with the monitoring, security checks and encrypted backups on by default from the first minute. The fastest start, and the right choice when you do not want to own servers at all.
Complete control, set up for you.
A cloud server with a trusted provider, in an account you own. I set it up, install the same monitoring, backups and security checks alongside your system, and hand you the keys. You have complete control from day one; I stay involved only as much as you want.
The factory behind the other services.
The Software Factory is the system; the other services are ways of engaging it:
Questions people ask.
Is this AI writing code unsupervised?
No. Agents build against a written specification, every change is reviewed, and security gates sit between the build and the outside world. Your red lines are written into the system that builds, and verified in what comes out, rather than relying on anyone's memory.
What can't it build?
Plenty, and I will say so on the call. Where an off-the-shelf tool honestly fits, you should buy it, and I will tell you which one. Where a system is genuinely safety-critical or sits at the regulated core of your business, it deserves a specialist team, and I will tell you that too. The factory's sweet spot is the custom software around your operations that nobody else will build at a price that makes sense.
Who owns what gets built?
You do. Software is documented in plain English, held in repositories you can be given access to, and built for handover. You can run it, change it, or bring in someone else; the factory earns its keep by being useful, not by locking you in.
What about sensitive or regulated data?
Designed in from the start: encryption in transit and at rest where it matters, data minimisation, GDPR and data-protection duties respected by default, and anything ambiguous flagged to you before it is built rather than guessed at.
What does it cost?
Builds are scoped and priced in writing before work starts, the same way as a Kick-starter. Running costs are measured per system, including what any AI component spends, so the ongoing number is known rather than estimated.
Describe it. I'll tell you if the factory can build it.
Book a free 30-minute call and bring the system you gave up wanting. I will tell you what the specification would cover, how the first version would arrive, and what it would take to run. If a smaller fix would do the job, I will tell you that instead.
Book a discovery callGet the weekly journal
One email a week on AI and automation for financial services firms. No spam, unsubscribe anytime.
Got a question instead?
Get in touch
Send a message straight to my inbox. I'll reply personally.