Technology due diligence

The technology matters when it affects control, risk, and handover.

We assess the system you have before discussing replacement.

Django
Ruby on Rails
Laravel
Go
Express.js
MongoDB

Every tool must earn its place in the system.

Proven and widely used

We do not select a tool because it is fashionable. We check production maturity, support, operating cost, and fit for the system.

One language across the stack

For a clean-slate build, TypeScript across the application can catch many interface and data-shape errors before release.

Important decisions are written down

We keep infrastructure, release, and decision records proportionate to the system so another person can understand the setup.

Plan for handover

We prefer practical export, backup, and ownership paths. Critical logic does not go into no-code tools when testing or migration is unclear, and material lock-in is recorded before approval.

Constrain AI actions

AI gets defined data, a failure path, relevant logs, and human approval for sensitive actions.

Reference defaults for a clean-slate build.

Languages

Defaults for a new build, not a takeover requirement.

TypeScript
Node.js
Bun

Frontend

Small, reliable, predictable tools.

React 19
Next.js / TanStack Start
Tailwind CSS
shadcn/ui

Data

Relational data you can back up and move.

PostgreSQL
Redis

Infrastructure

Client-controlled accounts are preferred and agreed.

AWS
Cloudflare
Terraform
Docker

Quality & monitoring

Release checks and operating visibility.

Playwright
Vitest
Biome / ESLint
Datadog / Grafana

Real-time, when needed

Only when live updates are part of the product.

Convex
Elixir / Phoenix

AI controls for a defined business workflow.

Assist

AI prepares defined work for staff to review.

LLM summaries & draftsOCR document extractionSemantic searchRAG over your documentsSupport reply draftsWorkflow assistantsReport summaries

Approve

Sensitive actions keep an agreed human approval point.

Human approval flowsSensitive actions wait for a personScoped data access

Audit

Relevant inputs, outputs, and approvals are recorded where required.

Audit logs for AI actionsAPI keys under agreed account controlExplainable outcomes