Skip to content

Business software, built and run by one team

Multi-tenant platforms, finance-correct ERP back-offices and AI with guardrails — planned in writing, shipped in small tested steps, and run in production by the people who wrote them.

Who it is for For Gulf companies that need a finance-correct ERP with VAT and e-invoicing, founders who want a costed, phased plan before they build, and organisations commissioning a custom platform.

S-01 Build · Host · Watch
Statement of work
Services and data AI Data
Hosting
Health monitoring
Scoped from a statement of work AI built into the system Kept running once it is live
  1. Scoped from a statement of work
  2. AI built into the system
  3. Kept running once it is live
Schematic — not a screenshot

01What you get

From the written plan to the system in production

Open a row to see what is inside it. Our own products are named; custom work is described in general terms, because client work stays confidential.

  1. D-01

    Custom multi-tenant platform

    A platform that is safe to put customer data and money through from day one, and grows module by module without a rewrite.

    What is inside
    • Tenant isolation that is deny-by-default and fails closed when no tenant is resolved
    • Multi-factor sign-in, single sign-on (OIDC), short-lived tokens and personal API tokens
    • Role-based permissions, an organisation tree and branch scoping
    • A hash-chained audit log with an integrity check, and secrets encrypted at rest
    • A versioned REST API, webhooks, real-time notifications and approval workflows
    • Retry-safe payments, concurrency protection and gapless document numbering
    Formats:
    • Web app
    • REST API
    • Containers
    Languages:
    • English
    • Arabic
  2. D-02

    ERP and finance back-office — ColorsX74 ERP

    A finance-correct operating system for a Gulf SME or group: license the modules you need, and add anything industry-specific as a module instead of changing the core.

    Status: In production as a paid beta.

    What is inside
    • Chart of accounts, journal entries that refuse to post unbalanced, receivables and payables
    • Bank reconciliation, VAT returns, multi-currency and financial statements
    • Perpetual inventory costing, sales, purchasing and contracts
    • Signed add-on modules: point of sale, rental, HR, projects, CRM, consolidation and industry add-ons
    • Drafts never consume a legal document number
    • Cash-flow forecast, profitability and reorder suggestions
    • Catalogue and product data set up for go-live
    Formats:
    • Web portal
    • Desktop and POS
    • Bilingual PDF
    • CSV export
    Languages:
    • English
    • Arabic
    • French
    • Spanish
  3. D-03

    Gulf e-invoicing modules — KSA and UAE

    Mandatory e-invoicing done at the ledger level, not bolted on: numbering and hash chains stay gapless, which is exactly what the tax authority and auditors check.

    Status: Tested against sandbox environments; not yet live. Going live is done with you, on your own credentials.

    What is inside
    • KSA Phase 2: UBL 2.1 XML for standard and simplified invoices and credit notes
    • Invoice hash, a per-device counter and a previous-invoice hash chain that stay correct under parallel sales
    • Digital signing, certificate onboarding with expiry alerts, and clearance and reporting flows with retry
    • QR codes, and a bilingual printable invoice with the signed XML embedded
    • UAE: mapping to PINT AE, an offline conformance pre-check and pluggable provider adapters
    • Sandbox by default, an explicit step to arm production, and generation only when an invoice is issued
    Formats:
    • Signed XML
    • PDF with XML
    • ZIP and CSV archive
    Languages:
    • English
    • Arabic
  4. D-04

    AI copilot with guardrails

    AI that saves staff time without taking unapproved action or leaking data — auditable, and switched on or off per company.

    What is inside
    • A tool-calling assistant inside the business application, with skills that read and skills that act
    • Anything that posts to the ledger, sends something out or runs on its own shows a confirmation card first
    • Customer data reaches a cloud AI model only after the company switches consent on; local models are exempt
    • Queries limited to whitelisted entities, fields and operators — never free SQL — and scoped to the tenant
    • Flags anomalies such as overdue balances, likely duplicate bills and unusual journal entries
    • Reads and drafts quotations, letters and contracts
    • Open to outside AI agents as an MCP server, acting only with the signed-in user’s permissions
    Formats:
    • Chat interface
    • MCP endpoint
    • Local or cloud models
    Languages:
    • English
    • Arabic
  5. D-05

    AI store builder — ColorsX74 Commerce

    A bilingual shop generated from a short brief, ready for search engines, then edited without code — on a data model ready to sync with the ERP.

    Status: Runs in a preview environment; not yet in production.

    What is inside
    • From a short brief, AI generates a theme, pages, Arabic and English copy and a starter catalogue
    • Every AI output checked against a schema and saved as a draft
    • A section editor with drag-and-drop, undo and redo, autosave and device preview
    • Draft and published versions kept apart, with publish history and restore
    • Storefronts with a sitemap, share tags, structured product data and language alternates
    • Cart, checkout, cash on delivery, VAT-inclusive or exclusive pricing, and real refunds
    • Custom domains with automatic certificates
    Formats:
    • Storefront
    • Web admin
    Languages:
    • English
    • Arabic
  6. D-06

    Fail-closed automation

    Automation where a mistake costs money: it fails closed, a person can always override it, and its isolation is proven by tests.

    Status: Paper and shadow mode only, no real money — an engineering showcase, not an investment product.

    What is inside
    • Shown in our own CX74 Trading Engine: one codebase, three modes — test on history, simulate, live
    • A risk manager that can veto every signal and sets position size itself
    • No position without a protective order, and its own records reconciled on start-up
    • Missing data triggers a halt that holds until a person resumes it, with a written reason
    • A read-only console that holds no credentials and cannot place orders — enforced by an automated test
    • Settings split into adjustable values, guard rails and locked rules
    Formats:
    • Services
    • Web console
    • Containers
  7. D-07

    Development plan and roadmap

    Before a build starts, a founder or board sees the full cost, order and risks, with clean stop-or-pivot points.

    What is inside
    • Purpose, scope and guiding principles, and which users get web or mobile, and when
    • System architecture with request-flow examples
    • A technology table with the reason for each choice and the alternatives rejected
    • A step-by-step plan for the riskiest feature: prove it, add human review, then scale
    • Two staffing options: a full team, or a lean AI-assisted build with human checkpoints
    • A phased roadmap with a measurable exit gate per phase, effort and cost ranges, and a risk register
    • Privacy-law requirements as build tasks: data residency, encryption, consent, audit and retention
    Formats:
    • Word
    • PDF
    Languages:
    • English
    • Arabic
  8. D-08

    Phased statement of work

    Payment follows working, tested software rather than hours, and every phase has a clear acceptance gate.

    What is inside
    • Objectives and phased scope: the core platform, tenancy, roles and hosting first, then operations, then dashboards, mobile and APIs
    • Technical governance: repositories, code review, release management and documented changes
    • The owner’s right to appoint an independent reviewer
    • Formal sign-off before each phase, with payment tied to acceptance
    • Change-request handling and intellectual-property terms
    Formats:
    • Word
    Languages:
    • Arabic
    • English
  9. D-09

    Hosting, operations and continuous delivery

    One team builds, ships and runs the system, so the people who wrote it also answer for backups, uptime and patches.

    What is inside
    • Each system in its own containerised stack, with separate development and production
    • Certificates issued and renewed automatically; traffic reaches only services that pass their health checks
    • Additive database migrations, a backup before every release and a health check after it
    • Nightly backups, with restores rehearsed on real backups
    • Uptime probes, rate limits on sign-in, strict transport security, and secrets kept out of the code
    • Nothing ships until the full test gate is green
    • Or deployment into your own cloud, if you prefer
    Formats:
    • Container stacks
    • CI workflows
    • Runbooks
  10. D-10

    Documentation sites and product decks

    Users and admins get self-service help that matches what they are actually running.

    What is inside
    • Bilingual documentation sites: overview, finance, operations, AI automation, admin security and troubleshooting
    • The production site describes only features that are live; a separate site tracks what is coming
    • An AI skill reference generated from the code, so it cannot fall out of date
    • Product presentation decks with workflow diagrams
    Formats:
    • Static site
    • Slides
    • Diagrams
    Languages:
    • English
    • Arabic
02How it runs

Planned in writing, shipped behind a green gate

The same six steps for a new platform or a new module. Each one leaves something you can read, test or sign.

  1. Plan before code

    A written definition, the decisions locked with their reasons, the architecture, and phases that each carry a measurable definition of done.

    Development plan
  2. Agree the phases

    A phased statement of work: formal sign-off before each phase, and payment tied to acceptance.

    Statement of work
  3. Build behind a green gate

    An increment is done only when the full test suite, run against a real database, and the real-browser tests all pass.

    Tested increment
  4. Try to break it

    Independent reviewers attack every significant change. A finding counts only when it is demonstrated, and each fix gets its own regression test.

    Regression tests
  5. Ship with safety rails

    Back up first, apply additive migrations, then check production health after the switch.

    Health-checked release
  6. Run it, and keep the docs true

    Backups with rehearsed restores and uptime checks; help sites updated in the same change as the code.

    Runbooks and help sites
03What sets the work apart

Proof you can check, not promises

What we can show your technical reviewer on the first call.

  • We run our own software in production

    A paid-beta ERP with a large automated test suite — not a slide about what we could build.

  • Gulf compliance at the ledger level

    A gapless counter and hash chain, and documents generated when issued, never on a draft. Sandbox-tested, and we say so.

  • AI with guardrails in the code

    Confirmation before actions, a per-company consent switch, whitelisted queries instead of free SQL, and outside agents limited to the user’s own permissions.

  • Safety proven by tests

    The ledger refuses unbalanced entries, the automation console provably cannot reach the order path, and halts cannot be skipped.

  • Built and run under one roof

    Development and production environments, backups with restore drills, uptime checks and automatic certificates.

  • Plans that give real choices

    A full-team and a lean AI-assisted option, each with its own cost and time ranges and exit gates, with regulatory decisions flagged early.

04What it looks like

The documents you sign off on

Sample structures of three deliverables — drawn as shapes, with the sections each one really has. No client material.

  • Development plan

    Specimen
    1. Architecture and request flow
    2. Technology choices and reasons
    3. Phased roadmap with exit gates
    4. Risk register
    Sample structure — no client material Detail withheld
  • Phased statement of work

    Specimen
    1. Core platform, tenancy, roles, hosting
    2. Operational features
    3. Dashboards, mobile and APIs
    4. Production readiness
    5. User acceptance testing
    Sample structure — no client material
  • E-invoice register

    Specimen
    1. Invoice
    2. Issued
    3. Signed XML
    4. Hash chain
    5. Cleared or reported
    Sample structure — no client material
05In both languages

Two full editions, not a translation pass

The development plan is delivered as a complete English edition and a complete Arabic one, each written and laid out in its own direction.

  • Development plan English

    Specimen
    1. Purpose and scope
    2. System architecture
    3. Phased roadmap
    4. Risk register
    Sample structure — no client material Detail withheld
  • خطة التطوير Arabic

    نموذج
    1. الغاية والنطاق
    2. بنية النظام
    3. خارطة الطريق المرحلية
    4. سجل المخاطر
    هيكل نموذجي، دون أي مواد لعملاء تفاصيل محجوبة
07Questions decision-makers ask

Before you commit

Straight answers to what a board or a technical reviewer asks first.

Do you sell products or build custom software?

Both. We build and run our own ERP and e-commerce platforms, and a client can deploy them and extend them with modules. We also build custom platforms from a phased plan and a statement of work.

What do we get before development starts?

A development plan and roadmap: architecture, technology choices, phased scope with exit gates, team options, cost and time ranges, and a risk register. Then a phased statement of work in which payment is tied to accepted, working software.

Do you support KSA and UAE e-invoicing?

We have built e-invoicing modules to the KSA Phase 2 and UAE PINT AE specifications and tested them against sandbox environments. Going live is done together with you, using your own credentials.

How do you make sure what you ship works?

Every increment must pass the full automated test suite and real-browser tests before it ships. Significant changes also go through an adversarial review, and each confirmed issue gets its own regression test.

Can you host and run the system for us?

Yes: separate development and production environments, automatic certificates, health checks, nightly backups with rehearsed restores, and monitoring. We can also deploy into your own cloud.

How is AI kept safe with our data?

Customer data goes to a cloud AI model only after your company switches consent on; local models are also an option. The AI takes an action only after an explicit confirmation, and it cannot do anything the user could not do by hand.

Does it work properly in Arabic?

Yes. Every interface string is added in Arabic and English in the same change, and layouts use direction-neutral CSS, so right-to-left is there from the first commit rather than added at the end.

Who owns what you build for us, and who sees it?

Ownership is set out in the intellectual-property terms of the statement of work, before the build starts. Client work stays confidential: we do not publish client documents or name clients without their permission.

08Scope and confidentiality

Who it is for, and in what form

  • Gulf SMEs and mid-size groups that need a finance-correct ERP with VAT and national e-invoicing
  • Multi-branch retailers and operators that need point of sale, inventory and consolidated accounts
  • Founders and investors planning a SaaS product or a marketplace, who want a costed, phased build plan before committing money
  • Organisations commissioning a custom multi-tenant platform under a phased statement of work
  • Merchants who want a bilingual online store generated quickly and edited without code
  • Companies that want an AI assistant inside their business software, without exposing their data
  • Operators in specialised industries that need a domain module on a standard ERP core

Arabic and English in every interface and document, with right-to-left layout from the first commit. The ERP interface also runs in French and Spanish.

Web applications and APIs, desktop and point-of-sale clients, Word and PDF plans, container stacks and runbooks.

Client work stays confidential. We do not publish client documents or name clients without their permission.

Start the conversation

Tell us what the system has to do

Your email or WhatsApp opens with a message that already names this service. Answer what you can — a few lines are enough to start.

Which service is it about?
Your message S-01
To
colorsx74@hotmail.com
Subject
Enquiry: Software & platforms (S-01)
Message
Hello ColorsX74, We would like to talk about Software & platforms (S-01). A few details: - What the system has to do: - Who will use it: - What runs today, and what has to keep working: - Timing: From the page: https://colorsx74.com/services/software

Your email app or WhatsApp opens with this message filled in. Nothing is sent until you press send, and you can change anything first.