TechnologyFlagship industry
For software, platform and IT-services companies.
We plan your positioning and build the website, a demo buyers can run themselves and an assistant that answers from your documentation. Procurement gets its security and privacy evidence up front.
Where the rules biteMap of all forty-one industries
What is shifting
Committees research through assistants, peers and your documentation, and procurement asks its questions first. Each shift names what it demands, with a fact you can check.
What it requiresPositioning that sets the product apart in a crowded category.
EvidenceAI assistants now summarise vendors, reviews and documentation on request.
What it requiresA site and product experience that answer the questions sales keeps repeating.
EvidenceSOC 2 reports and ISO/IEC 27001 certificates are standard asks in enterprise security reviews.
What it requiresAI features that are evaluated, governed and safe to demo.
EvidenceEU AI Act transparency duties for AI that talks to people apply from 2 August 2026.
What it requiresExport and exit paths designed into the product from the start.
EvidenceThe EU Data Act’s switching rules have applied since 12 September 2025.
The rulebook
The security attestations, AI rules and data duties enterprise buyers ask about, read for a typical software programme. Your counsel and auditors keep sign-off; we build the evidence they will look for.
Frameworks we build to
We design and build to these frameworks; this is not a claim of certification.
Shapes most of the work
European Union · Government of India
Data-processing terms, consent and cross-border transfer for customer data.
We designProcessing records and sub-processor lists are kept up to date alongside the product.
Regulation (EU) 2016/679 · DPDP Act, 2023
European Union
Cloud and SaaS customers may switch providers on at most two months’ notice with their data exportable; switching charges end on 12 January 2027.
We designExport and exit paths are designed into the product and documented in the contract.
Regulation (EU) 2023/2854, applicable from 12 September 2025 Official text: EU Data Act switching rules
Shapes most of the work
AICPA · ISO/IEC
The security evidence buyers ask for. We support your audit; reports and certificates come from independent auditors.
We designControls and their evidence are built into delivery, so your auditor can find them.
AICPA Trust Services Criteria · ISO/IEC 27001:2022
Indian Computer Emergency Response Team
Service providers in India report cyber incidents within six hours and keep ICT logs for 180 days.
We designLogging and incident runbooks are delivered with the platform.
CERT-In · Directions of 28 April 2022 Official text: CERT-In Directions, 2022
Shapes most of the work
European Union
Prohibited practices since February 2025; transparency for AI that talks to people from 2 August 2026; high-risk obligations moved to December 2027 by the 2026 Digital Omnibus.
We designAssistants say they are AI, and each feature’s risk class is documented.
Regulation (EU) 2024/1689, as amended by the 2026 Digital Omnibus Official text: EU AI Act
OWASP GenAI Security Project
Prompt injection (LLM01), sensitive information disclosure (LLM02), excessive agency (LLM06) and the other risks we test assistants against.
We designEvery assistant is red-teamed against the list before release.
OWASP Top 10 for LLM Applications, 2025 edition Official text: OWASP Top 10 for LLM Applications
ISO/IEC
An AI management system standard: policy, risk and impact assessment and controls across the AI lifecycle.
We designAI features are released with the records an AI management system expects.
ISO/IEC 42001:2023 Official text: ISO/IEC 42001
Compiled 2 October 2026. Our reading of typical programmes, not legal advice. Rules change; your counsel confirms how each one applies to you.
Challenges
What buying committees expect to find for themselves, and what it takes your teams to keep product, site and sales telling one story.
Buyers expect pricing logic, security posture and integrations to be public.
Buyers want to try the product, and the AI in it, on their own questions.
Security, privacy and accessibility questionnaires decide the shortlist.
What we build
Product, brand and AI design lead a B2B programme; platform, CRM and content support them. Every line links to the capability that does the work.
Positioning, category narrative and a brand system for product and marketing.
Assistants that answer from your documents, with tests, checks and a hand-off to people.
Product UX, onboarding and a design system shared with engineering.
Web platforms, integrations and AI infrastructure.
Lead scoring, routing and account journeys for long buying cycles.
Category content and points of view that AI assistants can cite.
Programmes
The way in gathers the questions buyers put to sales and procurement and shows which ones the site, the product and the documentation already answer. Lengths are typical, never promised.
The way in
We collect the questions buyers put to sales and procurement, then show which ones the site, the product and the documentation already answer.
What you get
02Project · 8–12 weeks
A category story, a messaging hierarchy and a brand system that product and marketing both use.
MeasureQualified pipeline from organic and AI channels
Services: Brand foundation & positioning · Brand narrative & messaging · Logo & identity system
Enquire about Positioning and brand system03Milestone · 3–6 months
A site that answers the technical questions, with an interactive demo buyers can run themselves.
MeasureTrial-to-paid or demo-to-opportunity rate
Services: Website · Vision prototype
Enquire about Product-led site and demo experience04Project · 8–12 weeks
An assistant grounded in your documentation, red-teamed and measured on an evaluation set before it meets a buyer.
MeasureAssistant answer accuracy on the evaluation set
Services: AI knowledge assistant · AI assistant experience design · Brand fidelity evaluation
Enquire about Sales and support assistant05Project · 8–12 weeks
Tokens and components shared by product, site and sales materials, so they stay consistent.
MeasureTime to release a new page or feature
Services: Design system build · Design tokens & theming
Enquire about Design system shared by product and marketingHow success is measured
Main measureQualified pipeline
AI, under the rules
Every assistant is grounded in your documentation, red-teamed against the OWASP list and measured on an evaluation set before it meets a buyer.
Use case 01
Measured byAnswer accuracy on the evaluation set
Tested forOWASP LLM01 · Prompt injection
Goes live only with its evaluation set, automatic checks and a named owner
Use case 02
Measured byDays to return a questionnaire
Tested forOWASP LLM02 · Sensitive information disclosure
Goes live only with its evaluation set, automatic checks and a named owner
Use case 03
Measured byEvaluation pass rate per release
Tested forOWASP LLM06 · Excessive agency
Goes live only with its evaluation set, automatic checks and a named owner
A deliverable, in working code
An enterprise security questionnaire in progress. Mark answers as ready and the tracker recounts what is still open before you can submit. Illustrative items.
Enterprise security questionnaire · in progress
Still open3of 7
What it shows
An illustrative enterprise security review: SSO, the data-processing agreement, data residency and AI data use are answered; the penetration-test summary and sub-processor list are in progress; an accessibility report is still to do. Mark answers as ready and the tracker recounts what is open.
Figures
Every number here is illustrative and shows how the deliverable reads; none is a client result.
Work and insights
B2B projects, anonymised until each client approves the write-up, and what we have written on evaluations and automatic checks.
All work in B2B technologyA typical programme · composite
A software company launched a product experience and an assistant that answers the questions sales kept repeating.
Anonymised and illustrative: the shape a programme takes, never a named client.
Questions
Something else on your mind? Ask us directly
Yes, we prepare the evidence your auditor asks for. We build systems and documentation that support the audit; the report or certificate itself comes from an independent auditor.
Yes. It is evaluated on your buyers’ questions, red-teamed against the OWASP Top 10 for LLM Applications and limited to the tools it needs.
If your product serves people in the EU, parts of it may. We document each feature’s risk class and build the transparency it needs; your counsel confirms the legal position.
Yes. The design system and front-end code are shared with your engineers, and our squads can join your sprints.
Keep exploring
You will speak to a lead who would run the work, and get a straight answer on fit.
01About 2 minutes
You get A reply from a named lead
02About 8 minutesRecommended
You get Options and a first scope after one call
03About 15 minutes
You get Receipt confirmed and a named bid lead
Every engagement starts with a written scope and a quote agreed before work begins. How each package is priced
