Regulated Operations Platform — Built for Compliance First
A compliance-first operations platform for a scrap-metal and demolition operator — purchases, stock and dispatch, processing, delivery notes and Health & Safety files, all under the controls a heavily-regulated trade demands. Running as a private pilot; client not named.
The situation
Some industries can't run on a generic tool because the law sits inside every transaction. Dealing in scrap and second-hand goods means regulated purchase records, controlled inspections, and an audit trail that has to hold up — alongside the normal weight of stock, weighbridge dispatch, processing and site safety files. Get the operations right but the compliance wrong and the business doesn't just lose time, it loses its licence.
What I built
This platform was built so compliance is the backbone, not an afterthought. Separate surfaces for staff operations, public applications and controlled regulatory inspections, each behind strict role-based access: the regulator role can read and authorise inspections but can never touch operational state, and operational staff can never reach the inspection endpoints. Every gate was smoke-tested to prove those boundaries actually hold. Sensitive capabilities — like identity-document upload — are deliberately switched off until the full legal, privacy and regulatory review clears. It's the unglamorous, careful half of 'from built to paid': in a regulated trade, being procurable and defensible is the product.
Highlights
- Compliance and audit trail built into the core, not bolted on
- Role-based access proven at the gate — regulator can authorise but not alter operations
- Separate surfaces for staff, public applicants and controlled inspections
- Sensitive features held back pending a full legal and privacy review
- Running as a private pilot with a real operator
Build log
2026
Hardened and deployed as a private pilot; access boundaries smoke-tested, go-live gated on a legal and regulatory review.