Engagements, described without the client.

01 / Insurance — Europe

Insurance Brokerage Platform

Ongoing — product engineering & platform ownership

The system a brokerage runs its business on: policy and contract management, premium and commission calculation, document handling, and the reporting the business is measured by.

• —React and TypeScript frontend, NestJS and Prisma backend against PostgreSQL.
• —Three promoted environments with deployments driven entirely by CI.
• —Premium and commission logic reworked so that the legacy and current formulas coexist without silently repricing historical contracts.

• TypeScript
• React
• NestJS
• Prisma
• PostgreSQL
• AWS

02 / Insurance — Europe

Document Intelligence Pipeline

Design, build, benchmark

Compliance documents arrive as PDFs and were read by hand. The pipeline extracts them into a validated schema so an administrator confirms a pre-filled form instead of reading the file.

• —Schema-constrained extraction — the model cannot return a shape the application will not accept.
• —A benchmark harness samples validated records from production as ground truth and scores per-field accuracy and cost per document across model and prompt variants.
• —Model choice is a measurement, not a preference.

• TypeScript
• Claude API
• Zod
• PostgreSQL
• S3

03 / Insurance — Europe

Activity Classification API

Build & operate

A service that maps declared business activities onto the insurer's taxonomy, so quoting stops depending on which colleague you asked.

• —Python service behind Gunicorn, deployed from the same pipeline as the rest of the platform.
• —Consistent classification across quoting, contract issuance and renewal.

• Python
• Flask
• Gunicorn
• PostgreSQL

04 / Insurance — Europe

Secure Exchange & Private Networking

Design & operate

Partner data exchange and internal access for a business handling regulated personal data, without exposing anything to the open internet.

• —SFTP endpoints for scheduled partner file exchange, with per-partner isolation.
• —Private network access for the team in place of publicly reachable admin surfaces.
• —DNS, SPF, DKIM and DMARC configured and monitored.

• AWS
• SFTP
• WireGuard
• Tailscale
• DNS