What we do

One studio. The whole job.

Across IT, security, automation and web — so the work is handled end-to-end, and it actually fits together. Every engagement is a fixed-price project on the front, with a care retainer behind it.

01

Identity & Security Flagship

We manage your joiners, movers and leavers in Microsoft 365 — and prove access is right every month. Offboarding is a security control, so we run the lifecycle and the assurance as one.

The pain

  • Leavers' accounts left enabled for weeks — security and compliance exposure
  • Licences never reclaimed — real money wasted every month
  • Movers keep old access on top of new — least-privilege quietly breaks
  • Compliance, cyber-insurance and customer questionnaires you can't answer
  • No audit trail — can't prove who had access, and when

What we deliver

  • Standardised, role-based joiner / mover / leaver processes, automated against Microsoft Graph
  • A baseline audit against Secure Score, the CIS M365 Benchmark and Essential Eight
  • The cheap, high-impact fixes first — MFA gaps, legacy auth, admin sprawl, sharing settings
  • A monthly access-assurance report you can hand to an auditor or insurer

The tech

Microsoft GraphEntra IDLifecycle Workflows Group-based licensingSecure Score APISign-in & audit logs
02

Managed IT & Microsoft 365

Support, patching, licences and care on a retainer — handled before you notice. A named contact, not a queue.

The pain

  • "We have Microsoft, so we're fine" — with no idea of the actual exposure
  • Reactive, ticket-by-ticket IT with no one looking ahead
  • Licences and admin sprawl nobody owns
  • No clear record of what was done, or what it cost

What we deliver

  • Proactive support, patching and licence management on a retainer
  • A named contact who knows your setup — not a faceless queue
  • Posture kept current against recognised baselines
  • A monthly report that shows exactly what we did

The tech

Microsoft 365Entra IDMicrosoft Graph IntuneCloudflarewjk-alerts
03

Automation & Integrations

Kill double-entry and manual toil. AI-enabled process automation, Xero automations, WorkflowMax integrations, and the glue between systems that don't talk — built once, properly, with error handling.

The pain

  • Smart people doing dumb, repetitive work — re-keying, copy-paste, summarising by hand
  • Drowning in documents and email; the information is there, but getting it out is manual
  • Manual invoice coding, debtor chasing, and month-end reconciliation that eats days
  • Job management and Xero don't talk — double entry and mismatched invoices

What we deliver

  • Document intelligence — extract structured data from PDFs and contracts into a system or Xero
  • Ask-your-documents assistants (RAG) over the client's own files, kept private
  • Xero bank-rule and AR-follow-up automation, plus scheduled reporting
  • Bidirectional WorkflowMax ↔ Xero sync — idempotent, with error alerting
  • Human-in-the-loop on anything that goes out the door or changes records

The tech

Anthropic ClaudeXero APIWorkflowMax API Microsoft GraphPower AutomateRAG / vector storeVercel
04

Apps & Modernisation

Turn the business-critical spreadsheet — or the system only one person understands — into a real, auditable application. Documented first, migrated safely, no big-bang cutover.

The pain

  • One workbook is the system of record — version chaos, broken formulas, overwrite conflicts
  • No validation, no audit trail, no access control, no real backups
  • Key-person risk: a critical process only one person understands, and they're leaving
  • Old, unsupported or undocumented systems nobody dares touch

What we deliver

  • Discovery & documentation that de-risks key-person exposure on its own
  • The right-sized replacement — Microsoft Lists / Power Apps or a small web app
  • Strangler-fig migration: new path alongside the old, cut over a slice at a time
  • Validation, audit trail, access control and integration so the double-entry disappears

The tech

Microsoft ListsPower AppsPower Platform SharePointVercel + DBXero integration
05

Websites & SEO

Fast, beautiful sites that get found — on our own Cloudflare / Vercel stack, with a care plan so they stay quick, secure and current.

The pain

  • A slow, dated site that doesn't bring in work
  • No idea what's working — no analytics wired in
  • Built once, then left to rot and quietly break
  • Invisible in local search

What we deliver

  • Fast, edge-served sites built on Cloudflare and Vercel
  • Optimised images and technical + local SEO so you get found
  • Analytics wired in from day one so you can see what's working
  • A care plan that keeps the site quick, secure and current

The tech

Eleventy / 11tyVercelCloudflare GA4Microsoft ClaritySearch Console
06

Smart Home & AI Cameras

Local-first AI security cameras and home automation — person and vehicle detection on-device, no cloud subscription, your footage stays on-site. We run this exact stack ourselves.

The pain

  • Cloud cameras mean per-camera subscriptions and footage held by a third party
  • Motion alerts that fire on every tree and cat — not "a person is here"
  • A drawer of incompatible apps, nothing talks to anything
  • Privacy and data-sovereignty concerns for homes and NZ businesses

What we deliver

  • A local AI NVR with on-device person / vehicle / animal detection — no cloud sub
  • Smart, low-false-positive alerts; searchable footage on your own storage
  • Home Assistant as one local hub for lighting, security, energy and sensors
  • Standards-based devices and secure remote access — no vendor lock-in

The tech

FrigateCoral TPUHome Assistant Zigbee / Z-Wave / MatterCloudflare TunnelRTSP / ONVIF
Start a conversation

Not sure which one you need?

Tell us what's held together by hand or what keeps breaking. We'll point you at the right fix — no jargon, no obligation.