hyslopweb.co.uk

HyslopWeb · Scotland

I build multi-tenant software that holds regulated records, and I run it in production.

Ten years of AWS infrastructure in regulated financial services, and a care-home platform I designed, built and now operate. The audit trail is part of the data model, because somebody always asks for it later.

Work with me See what I have built

Things you can check

10 yearsNucleus Financial, a regulated UK financial services platform
Team of 6Developers and infrastructure engineers I manage
In productionCareSpace holds real care-home resident records
Since 2016Building on AWS, infrastructure as code throughout
CareSpace architecture Care staff, the family portal and administrators all reach the platform through CloudFront and Cognito, where multi-factor authentication is required. Requests then reach the application, which enforces a role-based access gate of eight roles at route level. Behind that sit per-tenant isolated Postgres storage, S3 document storage, BNF drug data for EMAR, and a Bedrock assistant. Every read and write is written to an audit trail, per tenant and per user. Care staff Family portal Managers, admin CloudFront Cognito MFA required Application, API RBAC gate 8 roles, enforced at route level Postgres · per-tenant isolation S3 · documents, evidence BNF drug data · EMAR Bedrock · assistant Audit trail every read and every write, per tenant, per user
CareSpace — multi-tenant care-home platform. Designed, built and operated by me.

Work

Systems in production, not case studies written after the fact. Where a client is not named it is because I have not asked their permission yet, and I will ask before I do.

  • CareSpace

    Multi-tenant care-home platform. In production, holding real resident records.

    Residents and care plans, pressure-injury tracking, DoLS and MCA decisions, CQC and RIDDOR reporting, EMAR backed by BNF drug data, a family portal, and role-based access enforced per tenant. I designed it, built it, and I run it.

    • Python
    • AWS
    • Postgres
    • Bedrock
    • Multi-tenant
    • RBAC

  • OmberCHM

    Django care-home application. Live, and still maintained.

    CareSpace's predecessor, and the reason the domain knowledge behind it was not a first attempt. You can load it in a browser without asking me for anything.

    • Python
    • Django
    • Postgres
    • AWS

  • Technical lead, a UK wealth-management SaaS

    On contract. Architecture, delivery and release process.

    An adviser platform with a distributed codebase and no single technical owner across it. References available on request, subject to the client's agreement.

    • Python
    • AWS
    • Release process

  • ChatRedact

    PII redaction for LLM chat. In production support.

    Identifiers are detected and stripped at the boundary, before the message leaves, so the model never receives them. A message that cannot be redacted does not get sent.

    • Python
    • AWS
    • LLM APIs

  • o365mcp and FreeAgentMCP

    Two MCP servers I wrote because I needed them.

    I use both every day. That is a better test than anything I could write about them here.

    • Python
    • Microsoft Graph
    • FreeAgent API
    • MCP

  • Caddyshack for Android

    Kotlin port of an iOS golf app, delivered through Skillsat Ltd.

    In Play Store preparation. Included because most of what I do is backend and infrastructure, and this is not that.

    • Kotlin
    • Android

Work with me

HyslopWeb is my sole-trader practice, registered with HMRC. It is one person, and that person is me. I work evenings and weekends, which is why everything below has a fixed scope, a fixed price and a written deliverable rather than a slot in your calendar. Prices are on this page so you do not have to sit through a call to find out whether you can afford me.

Diagnostic call

£350

60 minutes, plus written notes

Bring the architecture, the AWS bill, the compliance question or the thing that keeps breaking.

  • An evening or weekend slot you pick
  • Written notes: what I would do and in what order
  • Fee comes off a review or build booked within 30 days

Ask about this

AWS architecture and cost review

£2,400

Fixed fee, report within 15 working days

Read-only access to the account, the infrastructure code and the deployment process.

  • What breaks first, and why
  • What is costing more than it needs to
  • What I would change next quarter, in priority order

Ask about this

Multi-tenant foundation

From £6,500

Fixed scope, agreed before we start

The base of a product that somebody will one day inspect.

  • Tenant isolation and role-based access
  • Audit logging designed into the data model
  • Deployment pipeline with a rollback that works
  • Source ownership and handover documented

Ask about this

  • No mock dataIf the data is not there, the screen says so. It does not fill in something plausible.
  • Reversible firstNew behaviour goes out behind a flag. Schema changes add a column and leave the old one alone. A bad release comes back out without taking data with it.
  • Failing test firstA test that reproduces the bug before the fix, then the output showing it passes.
  • Loud failuresIf a pipeline should fail, it fails. Nothing is quietly swallowed and reported as success.

Background

Ronnie Hyslop

I am Infrastructure Solutions Architect at Nucleus Financial, a regulated UK financial services platform, where I manage a team of six developers and infrastructure engineers. Ten years there, the last six of them in this role, having come up through support and infrastructure engineering.

In financial services you have to be able to show what a system did months later, to someone outside the team. Care records are the same, which is most of why the second half of this page exists.

I am a director of Skillsat Ltd, and I work as contract technical lead for a UK wealth-management SaaS. HyslopWeb is my own practice. Everything on this site that is not the day job happens in evenings and at weekends, and I would rather say that plainly than have you find out at week three.

Based in Scotland, working remotely across the UK.

Contact

Email is the way in. Tell me what the system does, what is going wrong, and when you need it by. If it is not something I can do, or not something I can do in the time you have, I will say so in the first reply.