Regulated, production-grade platforms — built from hardware to AI.

Q: Can you sign our NDA, MSA, and POPIA clauses?

Yes. UBQT Solutions is procurement-ready: standard NDA, MSA with IP and liability terms, and POPIA-aligned data processing clauses. B-BBEE Level 1 affidavit on request.

Q: Do you provide ongoing support after launch?

Yes — three shapes: hands-off (your team runs it, paid incident response); co-managed (monthly retainer with SLOs and engineering hours); or embedded (one engineer part-time on your team).

UBQT Solutions is a software engineering and product development team in Cape Town. We design, build and ship the systems that regulated industries actually rely on — pharmacy cold-chain IoT, AI-driven healthcare, pathology lab information systems, and enterprise integration.

Explore our work arrow_forward See engagement models east

Scroll expand_more

Selected Projects

Our Work

We don't just advise — we build. These are some of the recent platforms we've architected and developed.

Aafiya patient app interface showing AI-assisted health triage on a smartphone, with teal and navy medical UI design.

AI/ML FHIR R4 Google Cloud 11 Languages B-BBEE Level 1

Aafiya Health Ecosystem

A Physician supervised AI-assisted health platform, designed to provide primary care to underserved citizens, with a multi-language digital triage system.

check_circle AI triage with mandatory HPCSA-registered physician sign-off — never autonomous diagnosis.
check_circle Accessible via PWA and WhatsApp in all 11 official South African languages.
check_circle FHIR R4 architecture designed for NHI interoperability.

Visit Aafiya open_in_new

IoT AWS Edge Computing Real-time

IoT Concepts & NSIGHTS Platform

An end-to-end IoT ecosystem spanning custom hardware, embedded firmware, cloud infrastructure, and real-time analytics — built for regulated industries where compliance is non-negotiable.

check_circle Full-stack engineering from edge sensors through to cloud dashboards.
check_circle NSIGHTS enviromental monitoring platform processes millions of events with 24/7 compliance reporting for pharmacies, cold chain, and clinical trials.

IoT Concepts open_in_new NSIGHTS open_in_new

IoT Concepts NSIGHTS dashboard showing real-time enviromental monitoring, device connectivity maps, and compliance alerts.

SaaS AI Diagnostics FHIR R4 HIPAA 21 CFR Part 11

PathLab LIS

A cloud-native pathology Laboratory Information System that digitizes the entire specimen lifecycle — from accessioning to AI-assisted diagnosis with cryptographic sign-out.

check_circle AI-assisted diagnostics with auditable timelines — organism detection, ICD-10 suggestions, and microscopy findings on every case record.
check_circle PKI digital signatures (RSA-2048, X.509 certificates) compliant with 21 CFR Part 11 for legally valid electronic sign-out.
check_circle Multi-tenant SaaS with token-based pricing — one token per signed-out report, 98.7% same-day sign-out rate.

Visit PathLab LIS open_in_new

AI/LLM Android Offline-First Privacy-by-Design

Second Opinion

An AI-assisted clinical decision support tool for physicians. Four input modes — text, voice, passive consultation listening, and image analysis — feeding a structured diagnostic output in under 500ms.

check_circle Structured output across five sections: Differential Diagnosis, Supporting Evidence, Suggested Investigations, Red Flags, and Disposition Guidance.
check_circle Consultation transcripts exist only in device RAM — discarded the moment the session ends. No patient data stored, ever.

Visit Second Opinion open_in_new

Second Opinion Android app interface showing AI-assisted differential diagnosis with structured clinical output cards on a phone mockup.

What We Do

Cloud-native engineering, end to end

We don't just write code — we architect systems that scale. Six capabilities, one principle: build it right the first time, with the guardrails regulated industries demand.

medical_services

Regulated Healthcare Platforms

FHIR-native systems for HPCSA-registered clinicians, NDoH-aligned data flows, and 21 CFR Part 11 electronic sign-out. Built to pass procurement and audit on the first review.

HL7 FHIR R4 architecture & APIs
Physician-supervised AI triage
POPIA, HPCSA & NHI compliance
Multi-channel: Email, PWA, WhatsApp, push notificaitons

sensors

Edge-to-Cloud IoT

Full-stack engineering from custom hardware and embedded firmware through to cloud telemetry, real-time analytics, and compliance reporting. Almost no consultancies do all four.

Hardware & firmware design
MQTT/Kafka telemetry pipelines
Real-time compliance dashboards
10K → 500K+ device scaling

neurology

AI in Production

LLM and ML integration with the guardrails a regulated buyer actually needs: safety filtering, audit trails, latency budgets, and on-device inference when connectivity is unreliable.

LLM integration & RAG pipelines
On-device inference (Gemma, etc.)
MLOps & model observability
Domain-specific safety guardrails

smartphone

Mobile & Multi-Channel

Reach users on whatever device they have — Android, iOS, Huawei all via the PWA. Offline-first sync and 11-language support are first-class, not afterthoughts.

Native Android (Kotlin, Jetpack)
Progressive web apps
Whatsapp, Email and push notifications.
Offline-first sync (CRDT, queue)

cloud_done

Cloud Foundation

AWS, Azure, or GCP — we pick the right one for your data residency, cost profile, and team. Infrastructure as Code from day one, so your platform is reproducible the moment you take it over.

AWS, Azure & GCP architecture
Kubernetes & serverless
Terraform / Pulumi IaC
Cost & FinOps optimisation

hub

Enterprise Integration

B2B integration engines, event-driven microservices, and legacy modernisation. We connect the systems your business actually runs on — without forcing a rip-and-replace.

Event-driven microservices (Kafka)
API design (REST, GraphQL, gRPC)
B2B partner onboarding
Legacy modernisation

Our Approach

How we work

We don't just build software; we architect the future of your business through a disciplined, practitioner-led methodology.

Discover

We deep-dive into your domain — understanding business rules, compliance requirements, and user needs — before we write a single line of code.

architecture

Architect

We design for scale, security, and resilience — creating blueprints informed by two decades of hard-won production experience.

rocket_launch

Deliver

Iterative builds, rigorous testing, and knowledge transfer — ensuring your team owns the platform, not just the vendor relationship.

Engagement

How we work together

Three ways to engage — pick the shape that fits the problem, not the other way around.

2 weeks · fixed fee

Discovery Sprint

A short, paid engagement to map your domain, constraints, compliance surface, and the right architecture. You walk away with a written brief and a fixed quote for build.

check_circle Stakeholder & user interviews
check_circle Compliance & risk review (POPIA, HPCSA, etc.)
check_circle Architecture options & costed proposal

Start a sprint arrow_forward

Embedded Team

Senior engineers working inside your team, on your tools, on your standups. We bring the hard-to-hire skills (FHIR, embedded, regulated AI); you keep the roadmap.

check_circle Senior engineers, no offshore bodies
check_circle Direct access — no account managers
check_circle 30-day rolling, cancel any time

Talk to us arrow_forward

Fixed scope & price

Build & Transfer

We deliver a complete platform — code, infra, documentation, runbooks — and hand it over. You own the IP outright. We stay on for a support window, then your team runs it.

check_circle Fixed milestones & acceptance criteria
check_circle Full IP transfer on final payment
check_circle Optional 90-day support window

Scope a project arrow_forward

Compliance & Trust

Built for regulated industries from day one.

verified_user

POPIA

Data protection by design

gavel

HPCSA

Registered clinician workflows

enhanced_encryption

21 CFR Part 11

Electronic signatures & audit

shield

HIPAA-aligned

For cross-border health data

cloud_queue

SA Data Residency

Hosted in-region by default

workspace_premium

B-BBEE Level 1

Procurement-ready

Client Testimonials

Trusted by the people who run our platforms.

SANTAM AAFIYA NSIGHTS

format_quote

"The IoT ecosystem UBQT designed and built for us has been flawless. They handled the full stack — hardware integration, cloud architecture, and the analytics dashboard — with a level of rigour you rarely find."

person

Mohamed Mukadam

CEO, IoT Concepts

format_quote

"UBQT's team designed the cloud architecture and AI layers of our health platform with the kind of care you'd expect from a world class company. Their input has been invaluable in shaping the direction of our platform."

person

Dr Bahia Lagardien

Aafiya Health Ecosystem

FAQ

Common questions

Straight answers about how we work, what we build, and who we work with.

How much does a typical engagement cost?

A Discovery Sprint is a fixed 2-week fee. Embedded-team engagements typically start at one senior engineer, billed monthly. Build & Transfer projects are quoted against a written scope after the sprint. We publish a ballpark on every proposal — no "starting from" without numbers.

How long does a project take?

A Discovery Sprint is 2 weeks. A working MVP of a focused platform is typically 8–14 weeks. A full production platform with integrations, compliance sign-off, and handover is usually 4–9 months. We commit to milestones, not vibes.

Who owns the intellectual property at the end?

You do. On Build & Transfer engagements, full IP transfers to your entity on final payment, including source code, infrastructure code, documentation, and design assets. Embedded-team work is typically work-for-hire assigned on day one. Our own product IP (UBQT frameworks, internal tooling) stays ours unless explicitly licensed.

Can you sign our NDA, MSA, and POPIA clauses?

Yes. We're procurement-ready: standard NDA, MSA with IP and liability terms your legal team will recognise, and POPIA-aligned data processing clauses. B-BBEE Level 1 affidavit on request. We don't have a 40-page redline process — we have a one-page redline process.

Do you provide ongoing support after launch?

Yes — three shapes. Hands-off: your team runs it, we stay reachable for paid incident response. Co-managed: a monthly retainer with agreed SLOs, on-call rotations, and a small pool of engineering hours. Embedded: one of us stays on the team part-time. Most regulated engagements go co-managed.

Where is our data hosted, and who can access it?

By default, in-region: AWS Cape Town (af-south-1) or Google Cloud (africa-south1). We design for SA data residency from day one. Access is governed by least-privilege IAM, short-lived credentials, and full audit logging. We do not exfiltrate data to UBQT systems.

Selected Stack

AWS Google Cloud Java · Kubernetes Docker Terraform · Kafka Redis PostgreSQL · Kotlin React Spring Boot · FHIR R4 HL7 GraphQL · Firebase

Let's build something that matters.

Whether you need cloud architecture, a custom platform, or an AI-powered application — we're ready to be your engineering partner.

mail Contact Us