Engineering insights, architecture deep dives, and lessons learned from building production software.
A transparent breakdown of SOC 2 Type I and Type II costs — FencePencil fees, auditor pass-through, internal time, and where most companies overspend.
A practical comparison of SOC 2 and ISO 27001 for SaaS companies: when each matters, how they overlap, and why doing both costs less than you think.
HIPAA compliance for SaaS companies explained without the jargon. What triggers the requirement, what a BAA is, and how to get compliant without hiring a full-time compliance team.
GRC platforms like Vanta and Drata automate evidence collection, but someone still has to do the work. Here's why a managed service gets you compliant faster and cheaper.
When you already have one compliance framework, the second one is 60–80% cheaper. Here's exactly how stacking SOC 2 and ISO 27001 works and what the numbers look like.
We shipped the first version of the FencePencil platform — client project visibility, admin management, role-based access, and Stripe billing.
A walkthrough of the tools and patterns powering our monorepo: Turborepo, pnpm workspaces, Biome, and how they all fit together.
The thinking behind turning a traditional agency into a productized offering with fixed-scope packages, managed hosting, and compliance add-ons.