Platform delivery
We design a regulated platform, build it and take it into production. That has included exchange custody, banking integrations, a CRM and investor reporting, and our work is in use at Australian financial institutions.
Engineering studio · Sydney
Engineering partner for regulated financial businesses.
IO Corp Pty Ltd is an engineering studio based in Sydney. We design, build and run regulated software for banks, exchanges and family offices, in Australia and overseas.
- Custody design passed an external pen test
-
Principal engineering at NanoPlatform - Deployed on AWS in the region you need
What we build
01 / 05 · Interfaces
Web and iPhone apps, portals and APIs.
The screens and APIs that customers, investors and staff use. They enforce the same permissions as the systems behind them.
- Web
- iPhone
- Partner APIs
02 / 05 · Product
Workflows, CRM, payments and reporting.
The systems the business runs on day to day: customers, payments, documents and the workflows between them, modelled on the client's own processes.
- Workflows
- CRM
- Reporting
03 / 05 · Controls
Access control and audit trails.
Roles, tenant isolation, field-level permissions and a log of every change. We build these in the first sprint and review them before any external test.
- RBAC
- Tenancy
- Audit trail
04 / 05 · Data
Encrypted, append-only records.
Data is encrypted at rest and audit records are append-only. Statements and documents are read and checked as they arrive, and everything is stored in the region your obligations require.
- Encryption
- Append-only audit logs
- Data residency
05 / 05 · Infrastructure
AWS, in the region you need.
KMS-managed keys, isolated signing, backups and monitoring, in Sydney for Australian clients and in other AWS regions for work overseas. We hand it over with runbooks, or keep running it ourselves.
- AWS
- KMS
- Monitoring
All five layers
All five, built by one team.
The same engineers work on every layer, so the screens, the permissions and the infrastructure are designed together.
- 01 Interfaces
- 02 Product
- 03 Controls
- 04 Data
- 05 Infrastructure
01 / 05 · Interfaces
Web and iPhone apps, portals and APIs.
The screens and APIs that customers, investors and staff use. They enforce the same permissions as the systems behind them.
02 / 05 · Product
Workflows, CRM, payments and reporting.
The systems the business runs on day to day: customers, payments, documents and the workflows between them, modelled on the client's own processes.
03 / 05 · Controls
Access control and audit trails.
Roles, tenant isolation, field-level permissions and a log of every change. We build these in the first sprint and review them before any external test.
04 / 05 · Data
Encrypted, append-only records.
Data is encrypted at rest and audit records are append-only. Statements and documents are read and checked as they arrive, and everything is stored in the region your obligations require.
05 / 05 · Infrastructure
AWS, in the region you need.
KMS-managed keys, isolated signing, backups and monitoring, in Sydney for Australian clients and in other AWS regions for work overseas. We hand it over with runbooks, or keep running it ourselves.
All five layers
All five, built by one team.
The same engineers work on every layer, so the screens, the permissions and the infrastructure are designed together.
- 01Interfaces
- 02Product
- 03Controls
- 04Data
- 05Infrastructure
What we build
The five layers of a regulated platform.
- 01 · Interfaces
Web and iPhone apps, portals and APIs.
The screens and APIs that customers, investors and staff use. They enforce the same permissions as the systems behind them.
- 02 · Product
Workflows, CRM, payments and reporting.
The systems the business runs on day to day: customers, payments, documents and the workflows between them, modelled on the client's own processes.
- 03 · Controls
Access control and audit trails.
Roles, tenant isolation, field-level permissions and a log of every change. We build these in the first sprint and review them before any external test.
- 04 · Data
Encrypted, append-only records.
Data is encrypted at rest and audit records are append-only. Statements and documents are read and checked as they arrive, and everything is stored in the region your obligations require.
- 05 · Infrastructure
AWS, in the region you need.
KMS-managed keys, isolated signing, backups and monitoring, in Sydney for Australian clients and in other AWS regions for work overseas. We hand it over with runbooks, or keep running it ourselves.
- NanoPlatform Principal engineering
-
bynoon Delivery partner -
Wealth MS Our product -
Unearth-D Partner -
Ahead Partner -
Renilton Family office -
Memorialise Engagement -
IPSI Advisory -
Let's Play Engagement -
TurboDRF Open source -
SpaceNamer Open source
Most of our work is software for banks, exchanges and family offices, where it holds client money and has to satisfy a regulator. We design and build it, and for some clients we run it after launch.
What we do
Three kinds of engagement.
All contracted through IO Corp Pty Ltd, either at a fixed scope or a day rate.
Compliance & security
Security and compliance design for regulated systems, including custody, key management, role-based access and audit trails. Our custody work has passed an external penetration test on a live system holding customer funds.
Engineering leadership
A senior engineer from IO Corp works inside your team under contract, as principal or lead engineer on a regulated build, and hands over properly at the end.
How we build
How an engagement runs.
Four stages. The engineers who scope the work are the ones who build it.
01 / 04 · Scope
We agree the scope first.
Before any work starts, a fixed-scope contract with IO Corp Pty Ltd sets out what ships and when, with the plan and milestones attached.
- Fixed-scope contract
- Milestones agreed up front
- Typically three to twelve months
02 / 04 · Build
We build it and ship it.
Senior engineers design the architecture and data model, build the integrations and the application, and release it to production.
- Web, iPhone and partner APIs
- Data models, documents and integrations
- Senior engineers only
03 / 04 · Harden
Security goes in early.
Roles, tenant isolation, field-level permissions and audit trails go in during the first sprint. Before any external test, we review the system for audit readiness.
- RBAC and tenant isolation
- An audit trail on every change
- Custody cleared an external pen test
04 / 04 · Run
We run it or hand it over.
We can keep it running on AWS in whichever region you need, or hand it to your team with runbooks, architecture notes and access.
- AWS, in your region
- Monitoring, backups and deploys
- A handover pack
Built and run by IO Corp
Two platforms we built and still run.
The bynoon CRM, built for a partner, and Wealth MS, our own product. Both run on AWS in Sydney.
Partner of bynoon.ai A CRM for Australian service businesses.
Enquiries, bookings, quotes, invoices and payments in one app, with an AI receptionist that answers the phone. IO Corp is bynoon's official delivery partner. We built the platform and run it on AWS in Sydney.
- Inbox
- AI receptionist
- Bookings
- Quotes & e-sign
- Invoices
- Campaigns
- Automations
A product of IO Corp Reporting for investors in private funds.
Each fund sends its statements to a private email address. Claude on Amazon Bedrock reads them and rule-based checks hold back anything doubtful for review. Investors see values, returns, capital calls and documents in one place.
- Statement intake
- AI extraction
- IRR · TVPI · DPI
- Capital calls
- Documents
- Web + iPhone
Clients
Selected engagements
Some clients aren't named here because of confidentiality agreements.
Australian Solana Crypto Exchange
Engineering for an Australian Solana crypto exchange that operates under a currency exchange licence. IO Corp worked on the custody architecture and the security work ahead of the platform's external audit.
An independent security audit was completed before launch, and the custody architecture passed external review.
CryptoRegulatedSecurityAudited
NanoPlatform
Principal Engineer at NanoPlatform, on contract through IO Corp. NanoPlatform describes itself as "the origination engine for asset lenders".
Engineering leadership since 2023.
Engineering leadershipRegulated
Memorialise
Engineering on Memorialise, a platform for managing a person's estate and personal information. It holds sensitive identity and legacy records.
In progress, working toward launch.
IdentityPrivacySaaS
IPSI
A confidential advisory contract in 2023, helping with developer workflows.
AdvisoryConfidential
Open source
Tools we've released.
Both are MIT-licensed and maintained by Alex Collins. TurboDRF runs underneath our own products.
TurboDRF
Django REST APIs with permissions declared on the model.
Add a mixin and a turbodrf() method to a Django model to get list, detail, create, update and delete endpoints. Permissions cover roles, rows scoped to a tenant, and which fields each role can read or write. Wealth MS and the bynoon CRM both use it for their APIs.
turbodrf.com GitHub PyPI
SpaceNamer
Names for your Mac's Spaces, with SIP left on.
Gives each desktop a name in the menu bar and in Mission Control, and switches between them with ⌃⌥Space. It only needs Accessibility access, so System Integrity Protection stays on and nothing is injected into the Dock.
Read the article GitHub
Partners
Businesses we work with closely.
bynoon We built and run the bynoon CRM.
bynoon is an AI automation agency in Sydney. As its official delivery partner, IO Corp built bynoon's CRM for Australian service businesses and hosts it on AWS in Sydney.
Read the case study
Engineering for the Unearth-D portfolio.
Unearth-D is a network of operators working to grow established Australian businesses. IO Corp does the engineering for the businesses in its portfolio.
About the partnership Ahead Money forecasting built on the Consumer Data Right.
Ahead forecasts Australians' money with tax taken into account, using read-only bank access under the CDR. Alex founded it, and it's where IO Corp does its open-banking work.
getahead.money
Who runs it
Founded and run by Alex Collins.
Alex is Principal Engineer at NanoPlatform, founded Ahead, was technical partner on a regulated Solana crypto exchange, and wrote TurboDRF.
The full CV and engagement history are at alexcollins.io.
Tell us what you're building.
Send the company, the stage you're at and roughly what you need. A specific brief gets a faster reply.