Skip to content
A&HConsulting Group
Services

Advisory through delivery, under one accountable firm.

Six practice areas covering the full life of a system: deciding what to build, building it, integrating it with everything else, hosting it securely, and keeping it running afterwards.

Practice areas
Six, delivered by one team
Engagement models
Fixed scope, dedicated team, or retainer
Typical duration
4 weeks to 12 months
Intellectual property
Transfers to the client in full
01

Custom Software Development

Bespoke platforms, internal tools, and customer facing products engineered to your operational reality rather than to a template.

Full detail

Capabilities

Product and platform engineering

Web applications, internal operations platforms, customer portals, and APIs built on TypeScript, .NET, Python, and Java.

Legacy modernisation

Incremental replacement of ageing systems using the strangler fig pattern, so the business keeps running throughout the transition.

Data and reporting layers

Warehouses, pipelines, and reporting surfaces that give leadership a single, reconciled view of the business.

Workflow automation

Removal of manual handoffs across finance, operations, and compliance functions, with full audit trails.

02

IT Consulting & Technology Advisory

Independent assessment of your technology estate, with a costed roadmap your board can act on and your auditors can follow.

Full detail

Capabilities

Technology due diligence

Preinvestment and preacquisition reviews of codebases, architecture, licensing exposure, and engineering practice.

Architecture review

Assessment against scalability, resilience, and maintainability criteria, with a remediation plan sequenced by business impact.

Vendor and spend rationalisation

Contract and licence review that identifies duplication, overprovisioning, and renegotiation opportunities.

Operating model design

Team structure, role definitions, governance forums, and delivery process appropriate to your stage and sector.

03

System Integration

Connecting ERP, CRM, finance, and bespoke systems so data moves once, reliably, and with a verifiable audit trail.

Full detail

Capabilities

Enterprise application integration

SAP, Microsoft Dynamics, Oracle, NetSuite, Salesforce, and HubSpot connected to bespoke and third party systems.

API design and governance

Versioned, documented, contract tested APIs with authentication, rate limiting, and consumer onboarding.

Event driven architecture

Message brokers and event streams that decouple systems and absorb load without data loss.

Data migration

Profiling, cleansing, mapping, and rehearsed cutover with rollback plans and reconciliation evidence.

04

Cloud Solutions

Migration, architecture, and cost governance across AWS, Azure, and Google Cloud, built for data residency and audit requirements.

Full detail

Capabilities

Migration planning and execution

Workload assessment, dependency mapping, and phased migration with measured rollback points.

Landing zone and platform engineering

Account structure, network topology, identity, and guardrails provisioned through Terraform.

Cost governance

Tagging standards, budget alerts, rightsizing, and committed use planning with monthly reporting to finance.

Resilience engineering

Multizone design, backup and restore testing, and documented recovery time and recovery point objectives.

05

Cybersecurity

Security assessment, hardening, and incident readiness mapped to the controls your clients, insurers, and regulators ask about.

Full detail

Capabilities

Security posture assessment

Gap analysis against ISO/IEC 27001 Annex A, NIST CSF, and CIS Controls, scored by likelihood and impact.

Application security

Threat modelling, secure code review, dependency and secret scanning, and remediation alongside your engineers.

Identity and access management

Single sign on, multifactor enforcement, privileged access control, and quarterly access recertification.

Incident readiness

Response playbooks, logging and detection coverage, and tabletop exercises with the leadership team.

06

Software Maintenance & Support

Contracted support with defined response targets, proactive patching, and a named engineering team that knows your system.

Full detail

Capabilities

Application support

Triage, diagnosis, and resolution against agreed priority levels, with root cause analysis on major incidents.

Proactive maintenance

Dependency upgrades, security patching, certificate renewal, and capacity review on a published schedule.

Monitoring and on call

Uptime, error rate, and performance monitoring with escalation paths and optional extended hours cover.

Continuous improvement

A managed enhancement backlog with a committed allocation of engineering capacity each month.

Engagement models

Three ways to appoint us.

The right model depends on how well defined the problem is. We will tell you which one fits rather than defaulting to whichever is most profitable for us.

Fixed scope phase

Best when: Requirements are understood and the outcome is well defined

  • Agreed price and schedule
  • Written acceptance criteria per milestone
  • Formal change control on variations
  • Suited to discovery, assessments, and defined builds

Dedicated team

Best when: Scope will evolve, or you need sustained capacity alongside your own team

  • Named consultants at a monthly rate
  • Two week increments with demonstrations
  • Reprioritisation without renegotiation
  • Suited to multiquarter programmes

Retainer

Best when: Ongoing advisory, support, or security oversight

  • Committed capacity each month
  • Defined response targets
  • Monthly service review
  • Annual term, renewable
Delivery process

The same five phases, every engagement.

How we work
  1. 01

    Discovery

    2 to 4 weeks

    • Stakeholder interviews across business and technical functions
    • Architecture, codebase, and vendor contract review
    • Constraint mapping: regulatory, budgetary, and operational
  2. 02

    Design

    2 to 5 weeks

    • Solution and data architecture with documented decisions
    • Security and data protection design review
    • Delivery plan with milestones and acceptance criteria
  3. 03

    Build

    Two week increments

    • Peer reviewed development with automated test coverage
    • Continuous integration with security and dependency scanning
    • Fortnightly demonstration and written progress report
  4. 04

    Transition

    2 to 4 weeks

    • Rehearsed cutover with a documented rollback procedure
    • Documentation, runbooks, and infrastructure as code handover
    • Training for client engineering and operations staff
  5. 05

    Support

    Ongoing, by agreement

    • Monitored ticket queue with defined priority levels
    • Scheduled patching, dependency upgrades, and capacity review
    • Monthly service report covering incidents and improvements

Not sure which practice area your problem sits in? That is a normal starting point, and most are not cleanly one thing.

Talk it through with a consultant
Next step

Let's establish whether we are the right firm for the problem.

Tell us what you are trying to achieve and we will tell you plainly whether we can help, what it would take, and roughly what it would cost. If the answer is that you do not need us, we will say so.

Book a consultationEmail us

What to expect

  • Initial consultation at no cost
  • Mutual NDA signed before discovery
  • Written findings you own outright

Enquiries are answered by a consultant, not a call centre. We typically respond within one business day.