How We Build
This is for the technical people in your organization who want to understand what’s under the hood before signing off. No sales language. Just architecture, security, cost, and what you own when we’re done.
What We Build
We build systems that automate operational workflows — the kind of work where requests arrive through multiple channels (phone, email, text, web), need to be triaged, routed, tracked, and acted on by your team, with customers kept informed throughout.
These are structured pipelines that model your actual business process as durable infrastructure. Every request that enters the system produces a structured record, gets scored for completeness, triggers the right notifications, and progresses through your workflow with a full audit trail.
The systems are custom to your operations. Your question flow, your triage logic, your notification preferences, your CRM field mapping. We capture how your team already works and deploy it as infrastructure that runs continuously.
Architecture
Cloud primitives, not platforms
We build directly on cloud managed services — the same infrastructure that runs Netflix, Airbnb, and most of the Fortune 500. We don’t use intermediary platforms (Vercel, Heroku, Zapier, n8n) between your system and the cloud provider.
Every platform layer between you and the infrastructure is a dependency you don’t control, a cost markup you don’t need, and a portability trap. Cloud primitives have decade-long stability guarantees, per-use pricing at fractions of a cent, and no vendor lock beyond the cloud provider itself.
AI coding tools have collapsed the complexity gap that justified these platforms. What used to take a team of specialists months is now an afternoon of composing well-understood primitives.
The pieces
| Component | What it does |
|---|---|
| State machine (Step Functions) | Models your business process. Durable, auditable, guaranteed execution. A request enters and progresses through defined states with wait conditions, timeouts, and escalations. |
| AI reasoning (Bedrock) | Handles the judgment parts: parsing unstructured input, classifying issues, drafting messages. Versioned, constrained, continuously evaluated. |
| Event routing (EventBridge) | Routes inbound signals (emails, texts, voicemails) to the right pipeline. Schedules timed events. |
| Functions (Lambda) | Individual pipeline steps. Stateless, isolated, replaceable. |
| Web application (App Runner) | Dashboard and customer-facing forms. Docker container with a URL. |
| Database (RDS PostgreSQL) | Structured data. Industry standard, fully managed. |
| File storage (S3) | Photos, audio files, documents. Encrypted, versioned. |
| Infrastructure code (OpenTofu) | Every resource declared in code. Reproducible, versionable, auditable. |
How workflow orchestration works
The core of every system is a state machine that models your workflow:
Inbound request
→ Classify (is this a service request?)
→ Extract fields (parse the input against your question flow)
→ Score completeness (does it have everything needed?)
→ Match customer (CRM lookup)
→ [If urgent] → Notify immediately + start escalation timer
→ [If incomplete] → Wait for human review → Resume when gaps filled
→ Sync to CRM
→ Send customer confirmation
→ Done
Durable. A request that enters at 2am Saturday completes Monday morning when your team reviews it. No polling, no cron jobs.
Auditable. Every state transition is recorded with timestamp, input, output, and duration. You can pull up any request and see exactly what happened at every step.
Resumable. Human-in-the-loop steps pause the workflow until your team acts. The workflow resumes exactly where it left off.
Escalating. Parallel branches enforce time limits. “If no one acts on this within 2 hours, send an escalation alert.” This is infrastructure configuration, not application code.
How AI reasoning works
AI handles the parts that require judgment — parsing a voicemail, determining urgency from an email, drafting a confirmation in your team’s voice. Each AI capability is a discrete, versioned agent with:
- Defined responsibilities — “extract customer name, issue type, and urgency from this transcript”
- Explicit constraints — “never promise a scheduling date,” “never fabricate a field value”
- Controlled knowledge — your customer data, your templates, your terminology
- Continuous evaluation — measured against real interactions for correctness, safety, and accuracy
AI agents don’t make workflow decisions. They produce structured output that the state machine routes deterministically. The AI extracts; scoring logic decides if the request is complete. The AI drafts a message; your team approves it before it sends.
Security
Account isolation
Every customer system runs in its own cloud account. Your system shares nothing with any other customer.
- Blast radius zero. An issue in one system cannot affect another.
- Clean permission boundary. Access is account-scoped. Cross-customer access is architecturally impossible.
- Auditable. Every API call in the account is logged. You can audit who accessed what, when.
- Transferable. The account transfers to your organization’s governance at any time.
Network isolation
- Application and database run in a private virtual network
- Database is in a private subnet — not accessible from the internet
- All traffic between services is encrypted in transit (TLS)
- Direct database access available only through secure session management (no SSH keys)
Data encryption
- Database: encrypted at rest (AES-256)
- File storage: encrypted at rest, versioned, access-logged
- Secrets: encrypted key management, access-logged, rotatable
- All API communication over HTTPS
AI data handling
- AI inference runs within your cloud account
- Your data does not leave your account for model training
- The AI provider does not store or learn from your inputs
- All model invocations are logged
Reliability
Execution guarantees
The state machine provides exactly-once execution semantics. Every request that enters is guaranteed to complete its workflow or surface an error. There is no “request disappeared” failure mode.
- Retries with configurable backoff on each step
- Explicit error states that trigger alerts — failures are visible, not silent
- Persistent state — workflow state is managed by the cloud provider, not application memory. Restarts don’t affect in-flight workflows.
Uptime
Cloud managed services carry 99.9-99.95% SLAs. Higher availability (multi-region) is available for critical workloads.
Disaster recovery
- Automated daily database backups with point-in-time recovery
- File storage with versioning and optional cross-region replication
- Infrastructure fully reproducible from code — complete rebuild takes minutes
Cost
We build on pay-per-use infrastructure. No platform subscription, no per-seat licensing, no per-execution markup.
Typical monthly infrastructure cost: ~$60-70
The intelligent parts — workflow orchestration, AI reasoning, event routing — cost under $2/month combined at typical small-to-medium volumes. The fixed costs are the database and compute, which scale with instance size, not request volume.
At 10x request volume, the orchestration layer costs ~$5/month. The system scales on the cheap axis.
What you don’t pay for
- No platform subscription
- No per-seat licensing
- No per-workflow fees
- No AI API markup — cloud provider charges model rates directly
- No hosting fees to us — the system runs on your account
What You Own
When the engagement ends, you own everything:
- The cloud account and all infrastructure
- The source code — application, infrastructure-as-code, deployment scripts
- The state machine definitions — your workflow logic, readable and modifiable
- The AI agent configurations — instructions, constraints, knowledge bases
- The data — database, files, logs, execution history
- The documentation — architecture, extension patterns, onboarding
There is no dependency on us for ongoing operation. The system runs on standard cloud services. Any competent engineer — or an AI coding assistant — can read the codebase, understand the architecture, and make changes.
The infrastructure is declared in code. To understand the system, read the files. To change the system, change the files and deploy. AI coding tools understand these patterns natively, and they improve continuously. The system you build today becomes easier to maintain over time.
How We Work
We work in fixed-price, fixed-duration sprints.
Strategy sprint (2-4 weeks): We learn your workflow, identify the high-value automation opportunities, capture the question flows and triage logic your team already uses, design the architecture.
Build sprint (4 weeks): Build and deploy a working system with real data. By the end, requests are flowing through the pipeline and your team is using the dashboard.
Iteration sprints: Each subsequent sprint adds channels, extends the workflow, or adds intelligence. The foundation from the first sprint accelerates everything that follows.
We require minimal time from your team — typically 6-8 hours over a 4-week sprint. One decision-maker, access to real data and workflows, willingness to iterate.
Common Questions
“What if the cloud provider has an outage?” Regional outages are rare (a few hours per year) and the system resumes automatically. For higher availability, multi-region deployment is available at additional cost.
“Can we move to a different cloud later?” The application code is standard and runs anywhere. The infrastructure code would need rewriting for a different provider, but the application, data, and workflow definitions are portable.
“What about compliance (HIPAA, SOC 2, etc.)?” The cloud services carry most major compliance certifications. Your dedicated account inherits them. Application-layer compliance (access controls, audit logging, data retention) is built into the system.
“What happens if you go away?” The system runs on your account with no dependency on our infrastructure. The source code and documentation are yours. Any engineering team or AI assistant can maintain it.
“How do we know the AI is accurate?” Continuous evaluation against real interactions. Your team reviews AI output through the dashboard before it reaches customers. The AI assists; your team decides.