Richard K.

I build the systems regulated businesses can't afford to get wrong: law firm platforms, EU AI Act and GDPR compliance, and Clio or Zoho builds where the rules get complicated. Last build: a 65,000-line law firm platform with a 148-outcome rules engine and pixel-perfect form generation, live for an Italian law firm. Most platforms break when payment logic, compliance rules, or user permissions get complex. I build the ones that don't. I lead technology for a legal services company operating across the US, EU and UK. My work sits in regulated domains where "it depends" is the actual business rule. KEY DELIVERABLES Government application platform. Citizenship, residency, applicant category and gender determine which forms generate, which documents are required, which legal wording applies and what the client pays. 148 valid output combinations through a rules engine. Stripe payment lifecycle with HMAC-verified webhooks. AES-256 encrypted document processing where decrypted content never touches disk. Four-tier SLA escalation. A multi-role admin model so each operator sees only what they need. NHS Supply Chain. Owned product and led the web team for the NHS and DHL joint venture. 6 million products. Over 20 distinct user types, from legal and nursing to procurement, warehouse and drivers, each needing a different view of the same catalogue. Migrated off Sitecore. The largest WordPress deployment in the UK. RS Components. Master data and taxonomy at scale. Hundreds of thousands of products imported weekly, with search and filtering across the full catalogue. Law firm client portal. Encrypted messaging, document exchange, self-serve engagement letters and signing. Integrated with Dropbox, Zoho and MS365. Zoho analytics layer. Trend, projection and what-if analysis across 50+ custom fields. Plus a time tracker built inside Zoho and a client intake system bridging WordPress and Zoho. TECHNICAL EXPERTISE Zoho. Zoho One as a build platform, not as an advisor pointing at it. CRM, Books, Desk and Projects. Custom Deluge scripting, JavaScript extensions, cross-module workflows, third-party integrations. WordPress and WooCommerce at scale. WP Multisite, Windows-hosted enterprise deployments, custom Magento builds with separate public, schools and local authority views, custom price books, single-to-bulk pricing. CMS and PIM. Pimcore, Stibo STEP, Agility PIM, Sitecore, Drupal, including custom PIM-to-Magento integrations. Stack. TypeScript, Vue, Node, Supabase, Kubernetes on DigitalOcean, PHP/Laravel, React/Next.js, PostgreSQL, Python, Go. AI. Production integrations on the Anthropic and OpenAI APIs for document ingestion, case summarisation and multilingual document checking. Integrations. MS365 across SharePoint, Teams and Outlook. Dropbox, Zapier, Stripe, Calendly, Bookly. Gravity Forms with pixel-perfect PDF generation. E-signature and engagement letter workflows. AG Grid Enterprise billing running time capture through to invoice. COMPLIANCE AND SECURITY Regulations. GDPR, UK GDPR and CCPA in current production use. Security. Encrypted storage, secure document delivery, audit logging, retention controls, capability-based access. Payments. Webhook lifecycle, idempotency, refunds, disputes, reconciliation, and the tooling your team needs when something fails at 2am. Rules engines. Outcomes that depend on location, category, jurisdiction or history. Legal services, visa workflows, insurance, clinical intake, underwriting. APPROACH Architecture first. I review or blueprint before anything gets built. I don't quote a full build blind. Operational admin. Role-specific dashboards, batch operations, pipeline management, print queues, escalation tooling. Interfaces built for the people living in them all day. Background. Before technology I spent 20 years in healthcare. I qualified as a dispensing optician and worked across clinical practice, practice management and regional operations in multi-site networks. It still shapes how I build. I know what it is to use the system, not just design it. Mindset. I'm happy to be wrong, and if the evidence says my architecture isn't right I'd rather find out early than defend it. And I push. Projects in regulated domains die in the last 20% where the edge cases live. That's usually where I'm most useful. SECTORS Legal, professional services, insurance, healthcare and e-commerce. AVAILABILITY Based in Cyprus. Daily overlap with US, UK and European hours. Message me with what you're building. I'll tell you how I'd architect it, not send a sales deck.