Justice Health NSW
Nine-year continuous CMS partnership with Justice Health and Forensic Mental Health Network — hosting, upgrades, and accessibility for an audience that often faces real digital barriers.
1 Jan 2017
Managed hosting
We host and manage the software we build, plus existing workloads our clients want stabilised. UK data sovereignty, 24/7 monitoring, Cyber Essentials certified. We've been running Plone, Python and Postgres in production for AU and UK governments for 18 years; the patterns are settled.
What we run
AWS for production workloads (UK and AU regions). Fly.io for scale-to-zero AI and chatbot workloads. Some Azure and Google Cloud for clients who already have spend commitments there. We support multi-region and dedicated single-tenant deployments where data classification requires it.
Cyber Essentials and accreditations
We hold UK Cyber Essentials certification across the hosting business. ISO 27001 and SOC 2 controls are mapped in our operational handbook. Government clients sit behind hardened reverse proxies with WAF rules tuned to their threat profile. Penetration tests run annually or before major releases — whichever comes sooner.
What "managed" means in practice
- OS, runtime and dependency patching against published CVEs, with regression runs before production rollout.
- Backups, retention schedules and quarterly restore exercises. We test the restores; backups that haven't been restored aren't backups.
- Uptime and latency monitoring with on-call rotation. Incidents acknowledged within agreed SLA windows.
- Capacity reviews quarterly. We size up before you notice, not after.
- Quarterly hosting reports covering uptime, incidents, deferred work, security posture and capacity outlook.
Who we host for
NSW Crime Commission since 2017. Justice Health NSW since 2017. LECC since 2017. Marine Stewardship Council. UK National Archives. A long list of UK and Australian local councils. The hosting business has run since 2007.
How to engage
Most clients start with a hosting review (free, ~half-day) covering current state, risk surface, cost profile and migration options. After that we either take over an existing environment in place, or rebuild into one we run.
Related work
NSW Independent Transport Safety Regulator
Plone CMS public platform for the NSW rail safety regulator — dynamic interactive rail map, enterprise search, WCAG-compliant publishing — through to the regulator's structural decommissioning in 2017.
1 Jan 2014