Managed hosting

We host and manage the software we build, plus existing workloads our clients want stabilised. UK data sovereignty, 24/7 monitoring, Cyber Essentials certified. We've been running Plone, Python and Postgres in production for AU and UK governments for 18 years; the patterns are settled.

What we run

AWS for production workloads (UK and AU regions). Fly.io for scale-to-zero AI and chatbot workloads. Some Azure and Google Cloud for clients who already have spend commitments there. We support multi-region and dedicated single-tenant deployments where data classification requires it.

Cyber Essentials and accreditations

We hold UK Cyber Essentials certification across the hosting business. ISO 27001 and SOC 2 controls are mapped in our operational handbook. Government clients sit behind hardened reverse proxies with WAF rules tuned to their threat profile. Penetration tests run annually or before major releases — whichever comes sooner.

What "managed" means in practice

• OS, runtime and dependency patching against published CVEs, with regression runs before production rollout.
• Backups, retention schedules and quarterly restore exercises. We test the restores; backups that haven't been restored aren't backups.
• Uptime and latency monitoring with on-call rotation. Incidents acknowledged within agreed SLA windows.
• Capacity reviews quarterly. We size up before you notice, not after.
• Quarterly hosting reports covering uptime, incidents, deferred work, security posture and capacity outlook.

Who we host for

NSW Crime Commission since 2017. Justice Health NSW since 2017. LECC since 2017. Marine Stewardship Council. UK National Archives. A long list of UK and Australian local councils. The hosting business has run since 2007.

How to engage

Most clients start with a hosting review (free, ~half-day) covering current state, risk surface, cost profile and migration options. After that we either take over an existing environment in place, or rebuild into one we run.

Related work