On call for 4 client estates· 0 open incidents / Amsterdam · Toronto · Q1 2027 assessments booking now Client login→
Foundry logo Foundry
Q1 2027Three assessment slots left for January→

Infrastructure built to be operated, then handed back

Foundry embeds senior engineers inside your team to design, build and harden the systems your product runs on. We carry the pager for them from week two, and we leave on a date written into the first contract — with your people running it.

RA SO JP Six principals, no pyramid underneath. The engineer on the first call is the engineer on your rota.
On call now PrimaryLars Venter · client ShadowSade Okonkwo · Foundry Pages, 72 h0
Handover date 14 Mar In the contract since day one
38platforms taken to production since 2019
99.98%availability across the estates we run, trailing year
−64%median drop in paging volume, quarter on quarter
31 / 33handovers landed on the date in the contract

Carrying the pager for payments networks, health records, freight and public services — never more than eight clients at once.

What we do

Four disciplines, one bench and one pager

Every engagement draws on the same six principals — engineers who have run these systems in production at three in the morning, not just drawn them on a whiteboard at three in the afternoon.

Platform engineering

A release that is a non-event

Pipelines, environments and service templates your teams choose to use. Canaries promote themselves; rollbacks take one command and under two minutes.

2 days → 40 minmedian lead time, Halvard Pay

Reliability

An error budget product signed

71%budget left · day 19 of 28 One burn on day 18: a certificate rotation. Written up, fixed, not repeated.

Data infrastructure

Pipelines with contracts, and readers

At four of our last six clients, over half the scheduled jobs fed tables nothing had read in ninety days.

On call from week two

The rota hands itself back

We carry primary while we build. Your engineers shadow, then swap, then hold it alone. By week eleven the pager is yours and we are the second line.

Security

No standing admin, anywhere

Engineer access15 min CI deploy role1 h Break-glass4 h · paged

14 → 0standing admin credentials, Pellucid Health

Handovers

31of 33

landed on the date in the first contract. The two that moved slipped nine and sixteen days — both agreed in writing a month ahead.

The assessment

1 in 5

assessments end with us recommending you change nothing — or hire a different firm.

Why we say so→

What you own afterwards

A payments platform, drawn the day we handed it back

Every engagement ends with the system on one sheet: what runs, what it talks to, and who owns each box. This is Halvard Pay's, with the dates each part moved to their team.

DWG HP-0417 · Settlement platform Rev C · 14 Mar 2027 · scale NTS
Callers WebCheckout PartnersPayouts API MobileWallet app
Edge GatewayAuth, limits, idempotency keysClient · wk 12
Services payments-apiCharges refunds-svcRefunds risk-scoreFraud hold
State LedgerDouble-entry, freezes itself Event buspayments.*
Downstream ContinuousReconciliation AnalyticsWarehouse On-callAlerts + runbooks
Client-owned before handover Load-bearing: freezes on imbalance Settlement traffic
23runbooks, each followed once by someone who did not write it
11dashboards, every panel with an owner and a question it answers
17decision records, including the four options we rejected
4failovers rehearsed in daylight before the first one at night

Engagements

Before and after, with the method written next to it

All sector evidence→
Halvard PayPayments · 11 mo

A ledger migration with no reconciliation break

Reconciliation breaks / qtr9 → 0 Settlement delay, p956 h → 38 min

Dual-writing throughout, with a reconciliation job that would halt the cutover on a single cent of drift. It never fired in anger.

Ostrander LogisticsLogistics · 7 mo

A warehouse that stopped losing stock at peak

Manual stock corrections / wk412 → 78 Peak orders / hour9k → 28k

Scanners buffered writes and the database assumed they had not. We event-sourced the stock position and made the warehouse the source of truth.

Arden CivicPublic · 18 mo

A mainframe strangled in public, still running

Traffic on the new service0 → 100% Unplanned downtime / yr31 h → 2 h

Eighteen months moving a citizen-facing service off a system that could not be turned off, with the router as the only place either side could be wrong.

From the people who took the pager back

Fewer pages. Nobody calls us about them.

−85%pages in the first quarter after handover

They left our team stronger than they found it. A year later we still run the platform they built, and we have never once needed to call them about it.
MHMarta HendriksVP Engineering, Ostrander Logistics
The assessment said our rewrite was the wrong project. It cost us six weeks and saved us a year.
DKDario KesselCTO, Quarry Bank
Their principal took primary on-call in week two and wrote every runbook as if she would not be there to explain it. By March she was not, and we did not notice.
LVLars VenterStaff SRE, Halvard Pay

0reconciliation breaks across the cutover

We switched the old ledger off on a Tuesday afternoon. Finance found out from the newsletter.
AOAma OduyaHead of Platform, Halvard Pay
They wrote down the thing our own team had been trying to say for two years, and then they put their name on it.
PNPriya NairOperations Director, Corvid Freight
Our auditor asked who could reach production data. For the first time the answer fitted on one page, and it was true.
TBTheo BrandtCISO, Pellucid Health
No framework of theirs left behind. Just boring software we already knew, set up better than we would have.
JMJana MolnárEngineering Manager, Tamsin Energy

Start with the assessment

Bring us the system nobody wants to touch

Thirty minutes with a principal — not a salesperson — to work out whether we are the right shape of help. If we are not, we will say so and suggest who is.

Next assessment starts

11 JanTwo engineers · 4 weeks1 left 1 FebTwo engineers · 6 weeks2 left 1 MarTwo engineers · 4 weeksTaken