Energy & utilities

Energy & utilities. Customers notice you twice: when the bill arrives and when the power goes out.

Electricity distributors and generators, gas distributors, fuel retailers and water utilities, where millions of customers need a bill they understand, an outage update they can trust and a connection on time. We build customer and field journeys, consented data and the communication that holds when the grid is under strain.

The number we move
Contacts resolved without a call
Where we work in energy & utilities
  • Electricity distribution
  • Power generation
  • City gas distribution
  • Fuel retail
  • Water utilities
Rules mapped
8 rules · 6 areas
Disciplines that lead
TechnologyProduct
Frameworks we build to
DPDP Act 2023 — Digital Personal Data Protection Act, 2023CERT-In Directions 2022 — Cyber incident reporting directionsISO/IEC 27001:2022 — Information security management systemsPCI DSS v4.0.1 — Payment Card Industry Data Security StandardWCAG 2.2 AA — Web Content Accessibility Guidelines
Electricity pylons and power lines stretch towards a low sun on the horizon at dusk
Energy & utilitiesThe network is invisible until it fails.

Where the rules biteMap of all forty-one industries

  • Claims Advertising & claims: Sometimes shapes the work
  • Regulator Sector regulator: Shapes most of the work
  • Payments Payments: Often shapes the work
  • Data Personal data: Often shapes the work
  • Security Security & incidents: Shapes most of the work
  • Access Accessibility: Often shapes the work
  • AI AI governance: Sometimes shapes the work

What is shifting

Rights with deadlines, meters with data, customers with panels.

Consumer rights now come with timelines, smart meters turn bills into data and rooftop solar makes customers producers. Each shift names what it demands, with a fact you can check.

A house with its roof covered in solar panels under a pale sky
Customers are becoming producers.
  1. Consumer rights now come with timelines.

    It demandsConnection, billing and complaint journeys that track every deadline the rules set.

    SignalUnder the 2024 amendment to the Electricity (Rights of Consumers) Rules, a new connection must be given within 3 days in metropolitan areas, 7 in municipal areas and 15 in rural areas.

  2. Smart meters turn bills into data.

    It demandsUsage insight, prepaid balances and alerts customers can act on, with their data protected.

    SignalThe 2023 amendment to the consumer-rights rules introduced time-of-day tariffs, applied as smart meters are installed.

  3. Rooftop solar makes customers producers.

    It demandsProsumer journeys from application to the net-metered bill.

    SignalSince 2024, rooftop systems up to 10 kW need no technical feasibility study, and must be commissioned within 15 days of the installation certificate.

  4. Outages and cyber threats test trust.

    It demandsOutage communication that is fast, accurate and calm on every channel.

    SignalThe CEA’s 2026 power-sector cyber regulations require incidents to be reported within six hours, from 1 April 2027.

The rulebook

Every connection has a clock, every incident a deadline.

The consumer-rights rules, state supply codes, the power-sector and national cyber rules, green claims and the data law, read for a utility. Your regulatory and security teams keep sign-off.

Frameworks we build to

  • DPDP Act 2023 — Digital Personal Data Protection Act, 2023
  • CERT-In Directions 2022 — Cyber incident reporting directions
  • ISO/IEC 27001:2022 — Information security management systems
  • PCI DSS v4.0.1 — Payment Card Industry Data Security Standard
  • WCAG 2.2 AA — Web Content Accessibility Guidelines

Frameworks we design and build to — not a claim of certification.

Advertising & claims

Sometimes shapes the work

  1. Central Consumer Protection Authority

    CCPA greenwashing guidelines, 2024

    Green tariffs, renewable claims and net-zero targets must be specific and backed by evidence; aspirational claims need an actionable plan.

    We designEvery green claim names what it covers and links to its evidence or plan.

    CCPA · Guidelines for Prevention and Regulation of Greenwashing or Misleading Environmental Claims, 15 October 2024 Official text: CCPA greenwashing guidelines, 2024

Sector regulator

Shapes most of the work

  1. Ministry of Power

    Electricity (Rights of Consumers) Rules, 2020

    Rights to timely connection, accurate metering and billing, reliable supply, compensation for failures and a 24×7 call centre; the 2024 amendment cut connection times to 3, 7 and 15 days and sped up rooftop solar.

    We designEvery request carries its deadline, and customers see where it stands.

    G.S.R. 818(E), 31 December 2020 · amendments of 2023 and February 2024 Official text: Electricity (Rights of Consumers) Rules, 2020

  2. State Electricity Regulatory Commissions

    State supply codes and standards of performance

    Each state commission sets the supply code, the standards of performance and the compensation a distributor pays when it misses them.

    We designJourneys and messages follow the commission’s own timelines and compensation rules, state by state.

    Electricity Act, 2003 · SERC supply-code and standards-of-performance regulations

Payments

Often shapes the work

  1. PCI Security Standards Council

    PCI DSS v4.0.1

    Card-data security for bill payment, including the controls on scripts running on payment pages.

    We designBill-payment pages ship with a script inventory and change detection.

    PCI SSC · PCI DSS v4.0.1 Official text: PCI DSS v4.0.1

Personal data

Often shapes the work

  1. Ministry of Electronics and IT

    DPDP Act, 2023 and DPDP Rules, 2025

    Consumption data from smart meters is personal data: used for supply and billing, and for anything else only with consent.

    We designUsage insight and offers built on meter data ask for consent per purpose, and access is logged.

    DPDP Act, 2023 · DPDP Rules, 2025 (core obligations from 13 May 2027) Official text: DPDP Act, 2023 and DPDP Rules, 2025

Security & incidents

Shapes most of the work

  1. Central Electricity Authority

    CEA (Cyber Security in Power Sector) Regulations, 2026

    Covered power-sector entities report cyber incidents within six hours — sabotage of critical systems within 24 hours — appoint a CISO and coordinate with CSIRT-Power and CERT-In; mandatory from 1 April 2027.

    We designCustomer platforms are segmented from operational technology, logged and covered by the incident runbook.

    CEA · Cyber Security in Power Sector Regulations, published 31 July 2026

  2. Indian Computer Emergency Response Team

    CERT-In Directions, 2022

    Report cyber incidents within six hours of noticing them, and keep logs of every ICT system for a rolling 180 days, within India.

    We designLogging and incident runbooks are built into customer platforms, not added after launch.

    CERT-In · Directions under section 70B(6), 28 April 2022 Official text: CERT-In Directions, 2022

Accessibility

Often shapes the work

  1. W3C

    WCAG 2.2 AA

    Bills, apps and outage pages usable by every customer, including those using assistive technology.

    We designBills are designed as accessible documents, with the amount and due date as text.

    W3C · WCAG 2.2 Official text: WCAG 2.2 AA

Compiled 3 October 2026. Our reading of typical programmes, not legal advice. Rules change; your counsel confirms how each one applies to you.

Challenges

Bills people understand, and outages they hear about first.

What customers need from a utility on an ordinary day and in a storm — and what it takes when field, billing and contact centres each see a different picture.

Your customers

  1. A bill I understand

    Tariffs, slabs, time-of-day rates and arrears explained on the bill and in the app.

  2. Know when it is back

    Outage updates with honest restoration times.

  3. Connections on time

    New connections and load changes tracked against their deadline.

A control room with rows of dials, switches and gauges on a long console
The control room knows first; customers should know next.

Your operation

  1. Field and office out of step

    Crews, contact centres and billing see different versions of the truth.

  2. Millions of contacts at once

    Storms and outages bring every customer to the phone together.

  3. Critical infrastructure security

    Customer systems connect to operational technology that must never be exposed.

What we build

Six disciplines, weighted for energy & utilities.

A typical programme here draws on each discipline in this mix. Every line names what it builds for the industry and links to the capability that does the work.

Leads Core Supports Share of a typical programme, by role · illustrative
  1. Customer portals and apps integrated with billing, metering and field systems, secure by design.

  2. Connection, billing, outage and rooftop-solar journeys designed with customers and field teams.

  3. 03

    AI Design

    Core

    Assistants that explain bills and outages from live system data.

  4. Consented customer data and messaging for bills, outages and new programmes.

  5. 05

    Brand Design

    Supports

    A public-service brand that reads as calm and clear in a crisis.

  6. Campaigns for energy saving, safety and new programmes such as rooftop solar.

Programmes

Where we usually start, and what follows.

Each programme is a real engagement shape: a package, a typical length and the number it moves. Lengths are typical, never promised — the first conversation sets yours.

The way in

Customer-contact and rights audit

We rank why customers call, and check connection, billing and complaint journeys against the deadlines in the rules.

Package
Sprint · Fixed fee
Typical length
2–3 weeks
It sets
Contacts resolved without a call, as a baseline
  • Product experience audit
  • Technical & code audit

What it hands over

  • An intent map of what can resolve without a call
  • A deadline register for connections, complaints and compensation
  • An outage-communication plan
Start here
  1. 02Milestone · 4–9 months

    Customer app and portal

    Bills, payments, connections, outages and rooftop solar in one app, integrated with the systems behind them.

    MovesContacts resolved without a call

    Services: End-to-end UX & UI design · Web or mobile app · System integration

    Enquire about Customer app and portal
  2. 03Project · 8–12 weeks

    Outage and bill communication

    Templates, channels and triggers for outage notices and bill explanations, fed by live system data.

    MovesOutage notices sent before the first complaint

    Services: Email, SMS & WhatsApp set-up · Lifecycle journey build · UX writing & content design

    Enquire about Outage and bill communication
  3. 04Project · 6–10 weeks

    Security and compliance readiness

    Customer-facing systems tested, segmented and documented for the six-hour reporting clocks.

    MovesFindings closed before go-live

    Services: Compliance readiness · Penetration test (VAPT)

    Enquire about Security and compliance readiness

How success is measured

The number we moveContacts resolved without a call

  • Contacts resolved without a call
  • Connections released within the deadline
  • Outage notices sent before the first complaint
  • Share of bills paid digitally

AI, under the rules

Where AI does the work, and what keeps it safe.

Every use case runs inside a guardrail, with a person approving what matters and a log a supervisor could read.

Use case 01

Bill explainer

Measured byBill-related calls per thousand customers

Tested forOWASP LLM09 · Misinformation

agent / bill-explainer Guarded
  1. TaskExplains a customer’s bill — slabs, time-of-day charges, arrears — from the billing record.
  2. GuardrailEvery number comes from the billing record; disputes go to a person.
  3. HumanThe billing team handles every dispute.
  4. LogQuestions and the bill lines explained.

Ships only with its evaluation set, its guardrail and an owner

Use case 02

Outage assistant

Measured byOutage calls per affected customer

Tested forOWASP LLM01 · Prompt injection

agent / outage-assistant Guarded
  1. TaskTells customers whether their area is affected and the restoration estimate from the outage system.
  2. GuardrailNever guesses a restoration time; safety reports such as fallen lines go straight to the emergency desk.
  3. HumanControl-room staff own every estimate.
  4. LogQueries and the estimates shown.

Ships only with its evaluation set, its guardrail and an owner

Use case 03

Field-note updates

Measured byTime from fix to customer update

Tested forOWASP LLM05 · Improper output handling

agent / field-note-updates Guarded
  1. TaskTurns crew notes into plain-language customer updates.
  2. GuardrailNo customer message is sent without approval.
  3. HumanThe shift supervisor approves each update.
  4. LogNotes, drafts and approvals.

Ships only with its evaluation set, its guardrail and an owner

Work and insights

The work, anonymised until clients approve.

Projects in this industry are published once a client approves the write-up. Until then, here is what we have written on the rules that apply.

A typical programme · composite

An electricity distributor gave customers outage updates and connection tracking in one app, fed by field-crew status, so customers see the same picture the control room does.

Anonymised and illustrative: the shape a programme takes, never a named client.

Related reading

Nothing published on energy & utilities yet. Ask us what we are seeing in the industry.

Ask us

Questions

What customer, operations and security leads ask us first.

Something else on your mind? Ask us directly

Q.01Do you work with public utilities?

Yes: distributors, generators and city utilities, public and private, alongside fuel and gas retailers.

Q.02Can you connect our app to billing and metering?

Yes, through the integration layer or APIs of your billing, metering and field systems — without exposing operational technology.

Q.03How do you handle smart-meter data?

As personal data under the DPDP Act: used for supply and billing, consent for anything beyond that, minimum data and access logged.

Q.04Can AI predict outages?

That is grid engineering. We build the customer side: telling people quickly and accurately what the grid already knows.

Let’s build what happens next.

Tell us what you’re building. We’ll answer straight.

Book a discovery call

Three ways to start

  1. 01About 2 minutes

    A quick question

    You get A reply from a lead, not a sales queue

  2. 02About 8 minutesMost useful

    A project brief

    You get Options and a first scope after one call

  3. 03About 15 minutes

    A formal RFQ or RFP

    You get Receipt confirmed and a named bid lead

Every engagement starts with a written scope and a quote agreed before work begins. How each package is priced