org.tech / Company One principal. Ontario, Canada

The honest version of who you would be buying from, written before you have to ask.

A small senior practice with a factory.

org.tech is one person, maybe two. That is a fact about the company, not an apology for it. The work that would normally need a team is done by a versioned product and a deployment factory, which means the person who answers your question is the person who wrote the thing you are asking about. What we will never do is describe a team we do not have.

Not a giant, not a garage.

COMPANY · WHAT WE ARE

Most firms in this market are either large enough that you will never meet the people who build your system, or small enough that what they sell is hours. org.tech is neither, and the difference is not scale. It is that the repeatable part of the work has been turned into a product and a factory, so the scarce part, which is judgment, is what you actually buy.

Everything below is a statement about the company. Everything the product does, and does not do, has its own page with the limits printed next to the claims.

Stated plainly
Limits printed too
Never a team we lack
A

One principal, a small bench.

A founder-led practice: one principal, with contractors brought in against a specific deliverable. You are talking to the person who designed the platform, deployed it, and will be the one on the call when something is wrong. There is no account manager between you and that person, and no bench of juniors to keep busy.

SizeSaid plainly
B

Not an automation shop.

What we deploy is a single-tenant platform with a mandatory content policy enforced by cloud identity policy, per-person metering settled against the provider's own record, an isolated runtime for business applications, and a controls matrix mapping 17 technical rows to SOC 2 and ISO/IEC 27001 criteria. That is engineering depth, and it is the reason a two-person firm can answer a security review.

C

Not a large integrator.

No programme, no discovery phase measured in quarters, no procurement theatre. The prices are published, the first step is bounded, and each stage releases on evidence from the one before it. If the honest answer is that governed AI does not earn its place with you yet, you get that answer in writing and you keep the deliverable.

D

A product company that also operates.

org.tech is a managed service provider for private AI. We provision it, run it, maintain it and build capability on top, and you own it. The distinction matters commercially: a consultancy sells the hours, a product company sells the thing that removes them, and only one of those gets cheaper for you over time.

Small works because the machine does the repeatable part.

SCALE · THE FACTORY
Discipline, not headcount

A deployment is a release, not a build.

The reason a practice this size can operate production systems in separate cloud accounts is that no deployment is assembled by hand. Each one is a tagged release of one product, layered with your parameters, built by a factory that refuses to proceed when its own preconditions are not met.

  • 01
    It refuses before it deploys. A tag that is not on the mainline is refused. A dirty checkout is refused. The version is stamped into health endpoints so what is running can be read rather than remembered.
  • 02
    The diagram is checked against reality. Every deploy emits a discovered architecture model, reconciled against the drawn one, so the picture in your evidence pack is not a drawing somebody updated by hand.
  • 03
    The tests defend the governance. Among roughly 2,700 automated cases are ones that fail the build if a governance deny is weakened. The control cannot be quietly relaxed by a change that looked harmless.
  • 04
    The person you talk to built it. That is the part a larger firm cannot copy, and the part we would lose first if we grew carelessly.
factory · deploy preconditions
REFUSING
deploy --client <deployment> --tag v0.32.1
[factory] fetch, then verify
Tag is on the mainline✓ ancestor confirmed
Working tree clean✓ materialized worktree
Front-end bundle matches release✓ name pinned
Tag not on mainline✕ refused
Dirty tree, no override✕ refused
Architecture model emittedreconciled with drawing
version stamped · ledger appended
Illustrative outputone deployment at a time
The factory·Every deployment from a tagged release and a clean checkout
72releases
Tagged · in 52 days
2,700tests
Automated cases · ~170 files
17
Control rows · mapped to SOC 2 and ISO/IEC 27001
104models
Generated catalogue · 18 labs
What those numbers are, and are not

They are evidence of engineering discipline, not of headcount and not of adoption. A tag is a release, not a feature, and a test count says how carefully the thing is defended, not how many organizations use it. Each of the four is read from a record: the release ledger, the test suite, the controls matrix and the generated catalogue.

Why the company is shaped this way.

ORIGIN · TWO LESSONS

org.tech came out of roughly twenty years in software development leadership and three concentrated years building AI automation. Over those three years the same two lessons kept repeating, and between them they explain every structural decision on this site: why the foundation is sold before the application, and why the work is a product rather than a programme of bespoke labour.

01

The application was never the real blocker.

Organizations wanted AI and could not move past three things: security, ownership and governance. The interesting demo was never what stopped them. What stopped them was that nobody could answer where the data went, who owned the environment, and how anyone would evidence it afterwards.

So the trusted foundation has to come before anything consequential is built on it. That is why the first thing we deploy is a governed environment in an account you own, and why the assessment maps your data flows before anyone discusses a capability.

Lesson oneThe boundary
02

The scarce value moved up the stack.

Teams spent heavily on bespoke retrieval pipelines and model-specific systems, and managed services simplified or replaced that work within months. The engineering was real and it was obsolete almost immediately, because the layer it occupied kept being absorbed by the platforms underneath it.

What did not get absorbed was judgment: what to build, which components fit, where inference does not belong, and how the result becomes a business capability. That is what a small senior practice can sell honestly, and it is the opposite of billing for the pipeline everyone will stop needing.

As implementation becomes easier, judgment becomes more valuable.The lesson the company is built on

Three rules, each with a test.

PRACTICE · THREE RULES
  1. 01Every claim

    Keep the claim exact

    Exact claims beat broad claims. Region, model, retention, networking and provider behaviour get specified, and a control is described at the tier it belongs to rather than in general. This is why the site says "available on Standard and Strict" where a competitor would say "enterprise-grade security", and why it says we hold no third-party attestation on the same page as the compliance work.

    The discipline is not modesty. A claim that cannot be pointed at is a claim your security reviewer will eventually test, and the cost of failing that test is the whole relationship.

    Test
    Can we point at the mechanism that makes this sentence true?
    Decides: whoever writes the claim
  2. 02Every number

    Separate measured from target

    A working target stated as a result is the most common lie in this industry, and it is usually accidental. We say "working target" when something is one, we say "an estimate" when it is one, and where nothing has been measured we publish nothing at all rather than a plausible figure.

    Test
    Is this a measurement, an estimate or a target, and does the page say which?
    Decides: the person publishing it
  3. 03Every intervention

    Enablement before intervention

    The instinct of a technical founder is to solve an implementation problem by becoming the implementer. The rule corrects it: improve the scaffold, the documentation, the validator or the support path first, and step in as the builder only when the issue belongs to the platform or crosses a security or governance boundary.

    It is also what makes the practice survivable. Every time judgment is encoded into tooling instead of being applied by hand, the company depends a little less on one person being available.

    Test
    Can the platform fix this for everyone before a person fixes it for one client?
    Decides: org.tech, and it is recorded either way

Three names, and the one that is yours.

STRUCTURE · WHO IS WHO
org{•}tech / company / structureCompany · practice · product · your account
The company
Mind Model AI Inc.Business process automation practice, Ontario, Canada
The practice
org.techManaged service provider for private AI. Provisions, runs, maintains, extends
The product
orgOSSingle-tenant governed AI environment, deployed from a tagged release
Yours
Your deploymentOne organization, one cloud account you own and are billed for
The solid zone is the only one you pay a cloud provider for, and it is the only one that survives us. org.tech is the brand you buy from and the practice that operates the deployment; Mind Model AI Inc. is the company that signs the agreement and issues the invoice; orgOS is the product that lands in your account. The three are not interchangeable, and this site tries never to use one where it means another.
Two products, deliberately separate

orgOS is the platform. The operational knowledge gateway is a second, sibling product for organizations whose people already use an AI assistant and whose real problem is governed access to their own documents. They solve different problems and their claims never get mixed. If you are unsure which one fits, the decision page is written to talk you out of the wrong one.

Written down, in one place.

HONESTY · WHERE THE LIMITS ARE

The product's limits are maintained as a page of their own rather than left for a reviewer to discover: what we do not claim sets out what orgOS does and does not do, and compliance alignment carries the attestation position and the controls matrix with its verdict per row. The one limit that belongs on a page about the company is its size, and continuity states what bounds it and what a successor would need.

The questions about us.

QUESTIONS · COMPANY
01How small is small, exactly?

One principal, with contractors engaged against a specific deliverable. Not a department, not an agency roster, not "our engineers". The principal designed the platform and deploys it, so the person answering a question about it is the person who wrote the part you are asking about.

02Should a serious organization buy infrastructure from a firm this size?

Only with the exit open, which is why the whole commercial model is built around it. The platform runs in a cloud account you own and are billed for, the deliverables include infrastructure as code and runbooks, and the monthly fee buys our service rather than access to your own environment. Continuity is the page that answers this properly, including the part where the answer is uncomfortable.

03What happens when you are busy?

Capacity is added when committed work requires it, rather than to look larger during a sales process, and the repeatable part of a deployment is carried by the factory rather than by available hours. The scarce input is senior attention, and pricing it as if it were unlimited is how small firms fail their clients.

04Do you build on more than one cloud?

No. The platform is deeply built on one cloud provider, and moving it to another would be a rebuild rather than a migration. We say that plainly because "cloud agnostic" is a claim buyers test. What is genuinely composable is the model: switching which model serves a workload is configuration inside the same governed route. Composable AI states both halves.

The claim this page exists to make

It's not a black box. You can see how it's set up, and that's exactly what lets you answer for it.

Including the parts about us. A company this size can only be bought safely if the buyer can see all of it, so this page is written to be checked rather than believed.

  • 01
    The size is stated. One principal, a small bench, no invented team.
  • 02
    The evidence is mechanical. Tagged releases, tests that fail on a weakened deny, a diagram checked against what deployed.
  • 03
    The limits are published. One page for what the product does not claim, one for the compliance position, one for continuity.
⎯⎯ Book the strategic assessment ⎯⎯

Your private AI, inside your control ·

A bounded $2,500 engagement with the person who built the platform, ending in a written plan you keep either way.