The situation
A fintech venture building a trading app. The hard constraints here are not about features. They are about correctness, auditability and the audit trail a regulator can walk through end to end. Get them wrong and you do not have a bug. You have an incident.
What we did
Engineers embedded in the client's engineering team, placed on the parts of the platform where financial correctness is the point.
Each engineer screened for the habits financial data demands: encryption, idempotency, access control, auditable decisions.
Work landed where getting it wrong is an incident:
An immutable, append only transaction ledger. Every state change is an event. Balances are derived; nothing is updated in place.
Double entry invariants enforced at the data layer, so an unbalanced transaction cannot be written.
Idempotency throughout. A retried order never applies twice.
Encryption at rest and in transit with proper key management. Authentication and session handling built against real threat models, not defaults.
Authorisation scoped by role, with full audit logging of who saw and changed what.
Integrations with market data and settlement providers built to degrade safely rather than failing a trade mid session.
Automated reconciliation jobs flagging drift rather than silently diverging.
The shape of it
Two to three engineers over three to six months, embedded in the client's engineering team through build, launch and into ongoing support.
The outcome
Platform engineering capacity added where correctness and auditability are not optional, with the audit trail a trading product requires.