Experienced technical leadership without hiring a CTO
The founders of a medical-records platform got experienced technical judgement on their side, and a clear view of what their outsourced supplier was delivering, without hiring a full-time CTO.
- Client
- Faces Consent
The result
The founders could see what their outsourced supplier was delivering for the money. They got a phased plan for meeting their medical-records obligations, and a hiring panel they could rely on.
When the platform later ran into trouble, they came back to us for an independent check of the supplier's fix plan. They did not have to take the supplier's word for it.
The problem
Faces Consent runs a platform for the aesthetics sector: consent forms, treatment records, prescribing, a pharmacy, a shop and mobile apps. It holds medical and personal data in a regulated market.
An outsourced supplier runs its technology. The founders had no experienced technical person on their side. They were paying for a large programme of work but could not tell whether it was good, which plans to back, or whom to hire.
What we did
We acted as Faces Consent's CTO on a monthly retainer, sitting on the founders' side of the table.
- Visibility. We analysed the work across more than 20 code repositories, some dating back to 2019, to show who was shipping what, how much was merged, and how much never reached the main branch.
- Compliance on the roadmap. Clients have a right to see their own treatment and medical history. We specified how to meet that by building on the existing appointments, prescribing and records systems instead of rebuilding them, phased over 32 weeks with medical-record access as a named milestone.
- Hiring. We ran the interview panel for the platform's technical hires: six candidates in three days in May 2025.
- An independent check. When breakages and regressions appeared, we set measurable acceptance criteria for the fix plan: current, supported framework versions, minimum test coverage for each part of the estate, CI gates that block untested releases, performance budgets and zero critical vulnerabilities, with higher bars for consent handling, payments and medical data.
If your product is built by an outside team and nobody on your side can judge the work, talk to us.