Built
Software built by the practice. Two of these exist because the work needed them.
SafeShare
Open sourceSelf-hosted secure file sharing. Simple, auditable, and under your control.
Most secure-sharing products ask you to trust someone else's server, someone else's retention policy, and someone else's definition of an audit log. SafeShare doesn't. You run it, you hold the keys, and every access is recorded somewhere you can actually read.
Three assumptions shape the design: the transport is hostile, the audit trail should be boring to read, and the tool should never require more trust than the operator is willing to give it.
MercScope
In-house toolMercScope is the assessment platform the practice runs its engagements on: structured scoring, evidence, and reporting in one place. It's one engine with industry packs, so the same method carries beyond IT security.
The assessment isn't the hard part. The hard part is spreadsheet reconciliation, a screenshot folder nobody can navigate, and a report rebuilt by hand every quarter because the evidence lives in six places. MercScope keeps the control catalog, the evidence, and the output in one system, so the report is a view of the data rather than a document someone reassembles.
Built for the practice's own work, and kept in-house.
Industry packs:
- IT and security: 18 frameworks, including NIST SP 800-53 Rev. 5, NIST CSF 2.0, CMMC 2.0, ISO/IEC 27001:2022, CIS Controls v8, the HIPAA Security Rule, and SOC 2.
- 3PL and distribution: launch readiness for a new warehouse operation, whether a 3PL is starting it or a shipper is moving into one.
- Healthcare practice: HIPAA and the other federal rules a small outpatient practice carries, plus what it takes to run well.
- Physical security: a site survey walked from the perimeter in, with a photo behind every gap, for offices, warehouses, clinics, shops and plants.
- HR compliance: hiring, pay and hours, records, leave and the rest of how a US employer handles its people, checked against the federal laws that apply at its size.
More industries will follow.
La Mesa
Available on Google Play and the App StoreDominican dominoes, played right. Real patio rules, ranked matches, AI opponents worth beating, and the tools to actually get better.
Most dominoes apps use a generic international ruleset nobody at a Dominican table would recognize. La Mesa plays the game the way it's actually played — capicúa, the pass rules, partner conventions, the scoring that starts arguments. Built in Spanish and English from the first commit.