Enterprise
Built to pass review, and to keep running.
Four products and a studio for custom builds, delivered the way enterprise teams buy software: written scope, fixed terms, one accountable owner, and documentation with every release.
Systems we run
Live numbers from products the studio built and operates. Each figure names its source and the date it was read.
kill and damage events parsed from match telemetry
PUBG.ARMY · liveproducts price-checked across 22 retailers, every day
Canasta · dailyAI models routed inside a single subscription
Zero · bb84.devsecurity tools orchestrated by one agent system
EkoStrike- ¹PUBG.ARMY, live counter, read October 10, 2026.
- ²Canasta CR, daily price check across 22 retailers, read October 10, 2026.
- ³Zero at bb84.dev, model catalog, read October 10, 2026.
- ⁴EkoStrike arsenal manifest, 124 tools, read October 10, 2026.
Built for enterprise
Written scope and fixed terms
Nothing is built before both sides agree, in writing, on what “done” means. Terms are fixed before work starts.
Senior-led, one accountable owner
One operator owns delivery end to end, with a documented backup operator and a documented continuity plan.
Documented and operated
Every build ships with a runbook, a recovery plan, a changelog, and credential escrow, then stays operated into year three and beyond.
Made to pass security review
What the studio does, stated as plainly as what it does not hold. The full list is on the security page.
| Practice | Verified status |
|---|---|
| Authentication & access | Edge authentication for admin surfaces via HTTP Basic Auth at the Vercel edge. Admin surfaces are gated before any content is served. Principle of least privilege across service accounts. |
| Data protection | Data minimization — only required engagement data is collected. Client data never leaves the Supabase project scoped to that engagement. Row-level security policies enforced. Transport via TLS 1.2+ and HTTPS everywhere. |
| Secrets & dependencies | API keys, credentials, and environment secrets are never committed. Secrets provisioned via Vercel; rotated on access-change events. Dependencies pinned to known versions with regular Dependabot audits. |
| Operations | Every engagement ships with runbooks, recovery procedures, and credential escrow. All client communication over encrypted channels. NDA execution for proprietary-data engagements. |
| Formal certifications | We do not currently hold SOC 2 Type II, ISO 27001, or other formal certifications. We operate as a single-operator practice with a documented continuity plan for operational-risk mitigation. |
Two ways to work with us
Products
EKO-I, EKO-II Audit, Zero, and Voz + Concierge, two live and two in beta, all operated by the studio. Volume and enterprise terms through sales.
Studio
Custom AI systems, web applications, security reviews, and data platforms, scoped in writing and operated for years.
Use cases by function
Operations
Concierge answers customers on WhatsApp 24/7 and Voz answers the phone line, both from your approved information, with hand-off to a person when it matters.
Security
EKO-II runs the checks a professional security researcher runs and reports in plain language, ranked by what to fix first.
Marketing sites
EKO-I builds and audits a complete bilingual site from a brief or your current URL, then the studio launches and maintains it.
Knowledge work
Zero puts more than 460 models in one app, with the right one picked for every task, on one subscription per team.
Data
Pipelines that stay current, public dashboards and atlases, research studies, and data stories, built by the studio.
Engineering
Agents connected to your real systems, internal tools, and automation of repetitive operations, with written scope first.
Talk to sales
Send a brief or book a 30-minute call. We map the problem and decide together whether it is a product or a custom build.