Cloud & APIs
Cloud infrastructure and APIs, set up in your own account
Cloud infrastructure and APIs in your own AWS, Azure or Google Cloud account: separate testing and production environments, releases you can repeat and roll back, monitoring, locked-down access and tested backups. APIs are designed before they are built, then versioned and documented. Serverless is used where it fits.
- Typical timeline
- Scoped per projectAlongside a build or on its own
- How it’s quoted
- IndividuallyAfter a 30-minute call
- Who edits it
- Your teamThrough the runbooks and access we hand over
- Stack
- AWS, Azure or Google CloudSetup kept in version control, serverless where it fits
In your name Accounts and repositories, from day one Yours The code and documentation, under the signed agreement
On this page
Is it the right call?
When it’s the right call
- Releases are done by hand, and nobody is quite sure what runs where
- Your software needs a proper home in your own cloud account, not a contractor’s
- Your own apps or partners need an API they can depend on
- An existing setup works but has no backups, monitoring or written runbooks
When it isn’t
- A marketing site with no custom back end We’d suggest: The hosting built into your website platform
- Round-the-clock operations staff with guaranteed response times We’d suggest: A dedicated managed-operations provider
Sound like you? The first step is a 30-minute scoping call with the engineer who would lead the work.Request a scoping call
Two ways to start small
- Fixed scope, usually 2–3 weeks
Discovery sprint
Research into your users, systems and constraints, the architecture decisions written down, and a written plan and quote, yours to take to any team.
Start with a discovery sprint What the written plan covers - Scoped and quoted on its own
Already running a setup nobody fully understands?
Modernization audit
The code, dependencies, data, hosting and releases reviewed, the risks ranked in a written report, and a step-by-step plan. Nothing beyond the audit is committed until you decide to go further.
Start with an audit What the audit report contains See a sample report
Standard equipment
What we usually hand over on a project like this. Your proposal lists exactly what’s included.
- AWS
- Azure
- Google Cloud
- AWS Lambda
- Cloud Functions
- Firebase
- PostgreSQL
Cloud environments
Separate testing and production environments in your AWS, Azure or Google Cloud account, with the setup kept in version control.
Repeatable releases
An automated release process that runs the quality gates, deploys the same way every time and rolls back in one step.
Monitoring and alerts
Error tracking, uptime checks and alerts designed to tell your team about a problem early, ideally before customers notice.
Access and backups
Access limited to what each person needs, secrets kept out of code, and backups tested by restoring them.
APIs and integrations
APIs designed, versioned and documented, and integrations that log every sync and alert when one fails.
Runbooks
Plain-language guides for releases, rollbacks, access changes and incidents.
What we set up
Software is only as dependable as the place it runs. We set up that place in your own cloud account, so it is billed to you, owned by you and never held hostage by a contractor. A typical setup has separate environments for testing and production, so changes are tried somewhere safe before customers see them. Releases are automated: every change passes the same tests and checks, deploys the same way each time, and can be rolled back in one step if something goes wrong. Monitoring and alerts watch errors, response times and uptime, and are designed to tell your team about a problem early, ideally before customers notice. Access is limited to what each person and service needs, secrets stay out of the code, and backups are tested by actually restoring them.
All of it is kept in version control as code and written down. Nothing depends on one person remembering how a server was configured.
AWS, Azure or Google Cloud
We work on all three. The right choice is usually the one your organization already uses, because accounts, billing, security reviews and skills are already in place. When you are starting fresh, we compare the providers for your workload, the managed services you need and the team that will run it, and recommend one in writing, with the reasoning and the trade-offs you are accepting.
APIs your systems can rely on
Sometimes the API is the product. We design APIs before building them, agree the shape with the people who will use them, and document them so a partner’s developer can integrate without a meeting. They are versioned, so they can change without breaking the apps already relying on them, and covered by automated tests like the rest of the code. We also build integrations with the APIs you already depend on, such as payments, CRMs or inventory systems, with logging and alerts when a sync fails, so problems are visible rather than silent.
Serverless when it fits
Serverless functions, such as AWS Lambda or Google Cloud Functions, and managed back ends such as Firebase suit work that is event-driven or uneven: webhooks, scheduled jobs, file processing and traffic that spikes. Steady, long-running workloads are often simpler and cheaper on a conventional application server or containers. The back end is chosen for each project, not from habit, and the decision is recorded with the point at which it should be revisited.
Moving or taking over an existing setup
Projects often start with infrastructure that works but that nobody fully understands. We begin by documenting what is actually running and what it costs, then fix the riskiest gaps first, such as missing backups, shared passwords or releases done by hand. The rest moves to a repeatable, documented setup in steps, planned to keep the system online. Software that has to leave a single server, or move from one provider to another, moves the same way. A runtime past its end of support is often one of those gaps: .NET 8 and .NET 9 stop getting security updates on 10 November 2026 (moving to .NET 10).
On its own or under a build
Cloud work can sit underneath a custom web app or SaaS platform we are building, sit alongside the modernization of an older system, or stand on its own for software that deserves a proper home. Either way, it is held to the same standard as the application code.
More in Custom software
SaaS platforms
Multi-tenant products with billing, roles and onboarding, designed so the second hundred customers cost less than the first.
Modernization
Existing .NET, PHP and JavaScript systems made safe to change again, one release at a time, planned to keep the system in use.
Questions about cloud and APIs
Whose account does the infrastructure live in?
The infrastructure lives in your own AWS, Azure or Google Cloud account from the first day of the project, and the code and configuration we write for it are yours under the signed agreement. We work through access you grant, limited to what the work needs; you can remove it at any time, and the setup keeps running without us.
Can you move our application to the cloud, or between providers?
Yes, whether it runs on a single server today or with another provider. We build the new environments in your own account alongside the old ones and move services across in planned steps, each with a tested way back. The old setup is switched off only once the new one has run cleanly, so there is no big-bang cut-over.
Who looks after the infrastructure once it is set up?
Your own team can run it, or we can. Every setup is handed over with runbooks, so your engineers can take it on; if you’d rather not, ongoing engineering covers monitoring, upgrades and fixes, with a review of the setup every month.
Every build, any stack
One standard.
Performance
A performance budget is set before launch and enforced on every change.
Accessibility
Built to WCAG 2.2 AA and tested against it, with automated checks and manual keyboard and screen-reader passes on client builds.
Security
Least-privilege access, secrets kept out of code, dependencies monitored and security headers configured.
Handover
Accounts and repositories in your name from day one. The code and documentation are yours under the signed agreement, written so another team could take over.
Start a project
Tell us what runs where.
Even “we’re not sure” is a fine place to start. We reply within one business day, with questions or a time to talk.
Pittsburgh, PA · Since 2015 · First step: a 30-minute call