Products
SCRS — the AI data firewall Other Me — the workspace Compare both products
Solutions
All solutions AI Assistants Email + Projects CRM Live Chat Ticketing Flows HR-lite Control Center
By industry
Accountancy Legal Mortgage & IFA Healthcare
Company
Custom Solutions Pricing Blog About Us
Log in
SCRS login Other Me — Business Other Me — Family Get started with SCRS
Custom Solutions

Built on our patent-pending governed AI architecture.

We turn the tools
you run on into
one system.

Most businesses run on four or five tools that don’t talk to each other. We bring them together into one secure operating system — like a CRM for how you actually work.

Governed AI follows your rules, keeps data private, and handles the busywork so your team can move faster.

Free scoping call. Fixed price before build. Reply within one working day.

Secure by designPII removed. Data never used to train.
Built around your workflowWe adapt to how your team works.
Governed & secured AI automationOne enquiry. Governed AI. Answered. Live

Enquiry arrives

From website form

10:42:13

Rules checked

Before the work begins

Passed

Names removed

Sarah Whitfield[PERSON_1]
PII removed

AI drafts

Personalised response created

Draft ready

You send

On the record

Ready to send
System status
  • Rules passed
  • PII removed
  • Draft ready
Ready to sendAuto-ready when you are.

Enterprise-grade security

Redact-before-the-model • encrypted vault • full audit trail

Proven in production

We have built this before. It is running at scale.

We are not starting from a blank page. Every build sits on our patent-pending governed AI architecture, the same one behind SCRS. We have designed, built and run custom systems — CRMs and the governed software around them — for real teams, and today that software serves over 30,000 people every month. Your build starts on the same foundation, already working, already proven.

30k+

End users a month on SCRS-governed software we’ve built and run

Multiple

Custom CRMs designed, built and live in production

Agreed

Hosting region and data residency, set at scoping and written into the contract

Every build

The AI never sees a client’s name, and every action is logged where nobody can quietly edit it

Real projects. Real users. This is not theory — it is what we run every day.
The problem, in other people’s numbers

What it costs to run on memory.

Three things quietly take money out of an appointment business: people who do not turn up, enquiries nobody answers in time, and checks that get missed until somebody notices. None of it is a failure of effort — it is what happens when the remembering is done by people who are already busy. All three have been measured, and not by us.

£43,200
Lost per year

Lost per year by a typical UK garage to no-shows — 12% of bookings, measured across almost 2,800 UK and Irish garages.

51%
Of enquiries

Of enquiries are never contacted at all. The industry average first response is 42 hours.

£1.2bn
Lost every year

Lost every year to no-shows in UK beauty alone — up to 18% of a salon’s annual income.

What changes when the software remembers instead

Reminders are the most-studied automation there is. A systematic review put the reduction in missed appointments at 29% for automated reminders, 34% as a weighted mean. One deployment went from 18.55% to 7.01%.

Around a 30% reduction is what the published research supports for automated reminders — and reminders are one of fourteen automations a build can carry.

What that is worth in your business depends on your numbers, not ours, which is why the scoping call starts by asking for them.

Sources: Klipboard analysis of ~2,800 UK and Irish garages, January–May 2026; UK beauty industry no-show research; Harvard Business Review study of 2.24m sales leads; systematic review of automated appointment reminders. These measure the problem and the published effect of reminders in general — they are not results from our own builds.

The problems people actually bring us

The problems people actually bring us

Nobody wakes up needing an API. They wake up because two systems do not talk to each other, and somebody is paid to sit in the middle retyping things.

01

Two systems that don’t talk, so the same thing gets typed twice

Connect Other Me, or SCRS, to the systems you already run: practice management, finance, case & policy tools, data warehouses and line-of-business apps. Bespoke API endpoints, webhooks and sync jobs move it both ways, pseudonymised through SCRS before it ever leaves your control.

02

A process that lives in someone’s head

A custom workflow, portal or internal tool, built on our governed platform. Personal details are stripped before any AI sees them, and every action is logged.

03

Years of work stuck in a system you’ve outgrown

Move your documents, contacts and matters off the old system. Mapped, duplicates merged, and a record of exactly what moved.

04

You want to sell it as your own

Embed the governed chat or the firewall inside your own product with your branding, over MCP or a bespoke integration.

05

It has to run on the desktop, not in a tab

Native Windows applications, built on the same governed core. Files open straight from the machine, work that carries on when the connection does not, and an installer your IT can deploy. We build and run our own: the Documents and Mail apps are ours.

06

You need one person who owns it

A scoped engagement with a named contact, clear milestones and ongoing support once it’s live.

The pattern is always the same: disconnected systems, manual work, or the wrong home for critical data.

We fix that, and keep it fixed.
Custom CRMs

Your CRM should fit your business, not the other way round.

Off-the-shelf CRMs make you bend to their model. We’ve built multiple bespoke CRMs shaped around how a team actually works: the records, the stages, the automations, the reports. We govern them with SCRS so client data never trains or leaks to a model. It’s the same craft behind software that already serves tens of thousands of end users a month.

  • Your objects, fields, pipelines and stages,not a vendor’s template
  • Workflow automation, routing and reminderswired to your process
  • Moved off spreadsheets or an old system,with duplicates merged and every record accounted for
  • AI that drafts, summarises and answers,and never sees a client’s name to begin with
  • Dashboards and exports your teamand your regulator can rely on

A demonstration: pressing Sign consent is refused because the clinic's reflection period has not finished. The software gives the reason and says whether it is the law or the clinic's own policy.

  • Governed by SCRS
  • Data never trains
  • Every action is logged

Try it yourself in the clinic demo →

What we can build

The six core modules are your foundation.

Pick only what you need. This is the sheet we quote from — 101 items across 13 sections, plus the trades already worked through — so the page and your fixed-scope quote say the same thing.

Included

Already yours

The six core modules, the secured automation engine that runs everything else, and every protection in the security table further down this page. On every build, never charged as an extra.

  • Overview dashboardWaiting, owed, due and needing a decision — counted live from the records, per role
  • Pipeline & stagesNamed stages in their words, drag-drop board + list, stage rules and ownership
  • Records — people & companiesPeople, companies, links between them, custom fields, merge and dedupe
  • Diary / schedulingAppointments against people, rooms, bays, vehicles or staff; conflicts; working hours
  • Catalogue / price listWhat is sold, duration, price, tax, variants and per-market pricing
  • Billing & invoicesQuote → invoice → paid, deposits, credit notes, numbering and PDF output
  • Secured automation engineThe governed rule runner: triggers, conditions, multi-step actions and per-tenant scheduling
  • Draft-and-release controlNothing sends by itself — the engine writes the message and a named person releases it
  • Injection & XSS hardeningParameterised queries throughout, CSP with per-request nonce, output escaped by default
  • Auth hardening & rate limitingFail-closed rate limits, captcha and honeypots on public forms
  • Transport & headersHTTPS enforced, HSTS with preload, frame embedding denied
  • Data residency setupRegion chosen at scoping and configured on deployment
  • Edge / DDoS configurationConfigured on deployment as part of their infrastructure
Chosen

Operating layer

The screens your day actually happens on — the work, the calendar, the files, and a search that goes across all of them.

  • Message templatesPer-channel templates with merge fields, preview and versioning
  • Web-to-lead formsPublic form → record, spam/honeypot, routing and a response clock
  • Branding & settingsTheir colours, logo, wording, module names and platform defaults
  • Security / audit logTamper-evident record of every access, change, refusal, override and export
  • Search across recordsOne search over every entity, permission-filtered
  • Additional language (each)Authored strings, plural rules, date/number formats — RTL where needed
  • Additional currency (each)Locally set prices, symbol/format, per-market catalogue
  • Reporting & chartsSaved reports, filters, grouping, charts that open back to the source record
  • Dashboards from saved reportsArrangeable dashboards built from the reports above
  • Scheduled reportsReports emailed on a schedule to named people
  • Drag-drop boardsKanban behaviour on any pipeline, with rules on the drop
  • Mobile / responsiveEvery screen usable on a phone, not a shrunken desktop
Chosen

Team management

Who is on, who did what, and who is allowed to. Down to the field.

  • Roles & permissionsNamed roles and what each may see, do and change — enforced on the server, not hidden in the interface
  • Per-field access controlField-level visibility and edit rights, so a salary or a medical note is not merely a screen nobody scrolls to
  • Invitations, seats & profilesInviting people, seat allocation, profiles, password and session policy
  • Delegated admin rightsThe owner grants specific admin powers to specific people, instead of one all-or-nothing account
  • Offboarding & access revocationOne action removes a leaver from every surface, and the record of what they could see survives them
  • Skills & certification matrixWho is qualified to do what, and whether it is still current
Chosen

Rules engine

The part that says no. Your policy written once, enforced everywhere, with a record of every time it fired.

  • Rule: a check must existNamed document/consent/certificate must be present and in date before a step
  • Rule: a period must passReflection, cooling-off or rebate period counted by the software
  • Rule: something must be in dateA consumable, licence or registration valid at the moment it is needed
  • Refusal UI + explanationThe block, which rule caused it, whether it is law/regulator/house policy, lawful override path
  • New rule kind (engine work)A proposed rule that is none of the three above
Chosen

Communication

Email, messaging and documents that stay attached to the record they belong to — nothing lives in one inbox.

  • Internal notesNotes on any record, mentions, visibility rules
  • Email — outboundSend from the record, templates, delivery logging
  • Email — two-way inboxIMAP/SMTP mailbox, threading, replies attached to the record
  • WhatsApp Business APIMeta integration, template approval flow, consent per channel
  • SMSGateway integration, delivery receipts, opt-out handling
  • Live chat widgetWebsite widget, routing, human handover
  • Ticketing / shared inboxShared queue, ownership, targets, knowledge base
  • Voice & call loggingClick-to-call and logged calls against the record
  • Consent per channelConsent recorded and enforced separately for each channel
Chosen

AI

Drafting, reading and summarising, inside the same permissions as everything else. It never sees what the person driving it is not allowed to see.

  • AI drafting on every messageDraft any outbound message from the record’s context, for release by a person
  • SCRS connection & governed routingWiring this build into SCRS
  • In-app assistantAsk questions of their own records, permission-filtered
  • Document Q&A / summarisingAnswer from their own uploaded documents
  • Auto-resolve (opt-in)Governed auto-send and close, off by default
  • Natural-language automation builderDescribe the rule, get a governed workflow
  • Spend caps & usage displaySCRS meters every call; this is surfacing it in their system
Chosen

Money

Quote to cash, in your currency and your tax rules, reconciled against the bank.

  • DepositsTaken, tracked, credited against the final bill
  • Tax per line and per marketRates by line and by market, inclusive/exclusive
  • Quote → invoiceOne record from first price to final bill
  • Payment links / online payCustomer pays from the bill; reconciliation back to the record
  • Refunds & creditsAgainst the original trail, never a new orphan record
  • Dunning / overdue chasingScheduled chases in their wording, logged beside the invoice
  • Revenue reportingBooked, invoiced, collected, outstanding — openable to source
  • Purchase orders & supplier invoicesWhat was ordered, what arrived and what it cost — the other side of goods in
Chosen

Customer-facing

The parts your customers touch: booking, portals, forms, and the signature at the end.

  • Online booking pageTheir diary, their rules, their availability — writes into the record
  • Customer portalCustomer sees their records, documents and history
  • Reviews & feedbackRequest, collect, and attach to the record
  • CampaignsSegmented sends to people who agreed to hear from them
  • Front-end website buildThe public site itself, designed and built
Chosen

Scanning & stock

Barcodes, serials, batches, and what is on the shelf right now.

  • Barcode & QR scanningScan with a phone camera or a handheld to open a record, confirm a part, or complete a step
  • Asset register & check-in/outTools, keys, loan equipment and machines: who has it, where it is, when it is due back
  • Stock take & cycle countingScan-based counts against expected quantities, with a variance report somebody has to sign off
  • Goods in & goods outReceive against a purchase order, dispatch against a job, and know what left the building
  • Batch & serial traceabilityWhich batch or serial went into which job, patient, animal or vehicle — and which jobs a recalled batch touched
  • Label printingThermal labels for parts, shelves, samples and assets, printed from the record they belong to
  • Equipment maintenance & calibrationService and calibration due by date, hours or cycles
Chosen

Resources & floor

Rooms, bays, kit and people — booked against real availability.

  • Drawn floor planA plan of the actual space
  • Resource timeline (tape chart)Rooms, bays, vehicles or staff across days
  • Capacity & conflict rulesNo double-booking a bay, no seating a party of six at a four, no allocating a vehicle that is already out
Chosen

Field & mobile

The same system on a phone, including where there is no signal.

  • Offline mobile modeScanning and job updates keep working in a stockroom, a basement or a van with no signal
  • Photo & video evidenceCaptured against the job with a timestamp
  • Timesheets & clock in/outScan a job to start and stop the clock; hours land against the job they belong to
Chosen

Data & integrations

Getting your history in, getting your data out, and talking to whatever you already run.

  • Migration from existing systemExtract, map, clean, load, reconcile against their old system
  • ExportEverything back, any time, in a usable format
  • API & webhooksDocumented API and outbound webhooks with retries
  • Calendar syncGoogle and Outlook, both directions, conflict handling
  • Document storagePrivate storage, per-record filing, retention
  • OCR document capturePhotograph a certificate or an invoice and the system reads it
  • Accounting syncXero, QuickBooks or Sage: invoices, payments and credits kept in step both ways
  • Other third-party integration (each)Any further system they still run
Chosen

Automations

Each one is governed: it checks the permission and the rule before it fires, and nothing sends by itself — the software writes it and a named person releases it.

  • Appointment reminderCatches the no-show you would otherwise absorb
  • Deposit requestThe booking held without commitment
  • Document chaseThe certificate missing on the day
  • Expiry warningThe licence, registration or stock that lapsed quietly
  • Response clockThe enquiry nobody picked up, owned by name
  • Cooling-off / rebate endingThe period the software counts instead of a person
  • Subscription renewal noticeNow a legal duty in the UK regime
  • Training or supervision dueThe check that expires while somebody is still rostered
  • Follow-up sequenceThe quote that went quiet
  • Review requestThe happy customer who never said so publicly
  • Overdue chasingThe invoice nobody wanted to ring about
  • Recall & rebookingThe customer due back who forgot
  • Dormant re-engagementThe customer who quietly stopped coming
  • Handover & sign-offThe job finished but not signed
  • Inbound message triageRoute and prioritise what arrives
Chosen

By trade

Each exists because of a rule that trade actually has to follow, so a quote for one of them is days rather than weeks. If yours is not here, it gets written down on the scoping call.

Aesthetics clinic

Consent & reflection period · Clinical photography · Stock & batch tracking · Prescriber sign-off · Recall

Accountancy & law

Conflict register · Client due diligence / KYC · Client account handling

Recruitment

Right to work checks · References · Rebate period

Garage & bodyshop

Authority to proceed · Parts & supplier tracking · MOT & service due

Estate agency

Compliance pack per listing · Key management · Rent & arrears

Hospitality & rooms

Allergy notes · Tips & service charge

Trades & home services

Certificates · Engineer registrations · Job sheets · Warranty tracking

Construction & fit-out

Site file · RAMS · Permits to work · Clearance certificates

Childcare & nurseries

DBS register · Staff:child ratios · Allergy & medical · Incident log

Veterinary

Consent · Controlled drugs register · Vaccination recall · Insurance claims

Dental

Consent · Radiograph justification · Recall · Lab work tracking

Home care

Care plans · Medication records (MAR) · Visit verification · Training matrix

Fitness & studios

Health screening · Membership & cooling-off · Class capacity · Packages & credits

Beauty, tattoo & piercing

Patch test timing · Consent · Licence tracking · Aftercare

Driving schools

Licence checks · Lesson packages · Test bookings · Vehicle allocation

Financial advice

Fact-find · Suitability report · Cooling-off · Vulnerable customer flags

Events & weddings

Run sheet · Supplier coordination · Deposit schedule

Removals & storage

Inventory · Insurance in force · Proof of delivery

Secured on every buildNot a premium tier. It is the floor.
Built end to endThe system, the front end, and the automation between them.
The question everybody asks second

How long, and what does it cost?

Clear timelines. Fixed prices. No surprises.

Timeline

Six to twelve weeks

It depends on scope

It depends on scope, and on how quickly we can get answers from you. The rules come out of a conversation, so how quickly you come back to us genuinely changes the date.

Most builds run six to twelve weeks from agreed scope to live — nearer six for a tightly scoped build, nearer twelve for a larger custom job with migration or a front end of its own.

Price

Less than you are expecting

Fixed price. Fixed scope.

Tell us what you need and we will quote a fixed scope for it, free. What we will say up front is that bespoke software has a reputation for cost that was earned by other people’s day rates, not by ours. It is very likely cheaper than you think.

Ask for a quote →

No obligation and no sales pitch. Just a number.

After it ships

An annual maintenance contract

Built to last, kept that way

A build is finished when it still fits your business a year later. The AMC covers minor updates, small changes, fixes, security patching and support. One known figure a year, not a day rate every time you want a column moved. Larger custom work is quoted as its own piece.

We look after the system, so you can look after the work that matters.

Fixed scopeAgreed in advance
Fixed priceNo moving targets
On timeWe plan it, we hit it
No surprisesThat is the point
Click through them now

Six industry demos. Each one shows a rule a general-purpose CRM cannot enforce.

Nothing in them is real: every record is invented and the assistant is scripted. What is real is the behaviour. Press the button and watch the software refuse, with its reason and its legal basis.

Every demo runs in five languages and four currencies

From one build: English, Arabic, Spanish, Italian and French

Pounds, dirhams, rupees and dollars

Prices are set for each market, never converted

See all of them side by side

The other half

The half your customers actually see.

Not just the system behind it — the public site, the booking journey and the interactive pieces your customers actually touch. Built by the same people, on the same foundation, so the two halves agree with each other.

Check our demos →

SCRS in your stack

Or put SCRS inside the systems you already run.

You don’t have to move onto our product to get governed AI. We integrate the SCRS firewall directly into the stack you already have: your CRM, case or practice system, data warehouse or your own application — so every prompt is redacted and pseudonymised before it reaches a model, and every call lands in a tamper-evident audit trail. Your systems stay yours; the governance layer becomes ours to run.

  • Redact-before-LLM on the apps you already use, with no rip-and-replace
  • Integrated over API, MCP or a bespoke connector we build for you
  • Encrypted vault and tamper-evident audit across every AI call
  • Data residency agreed at scoping and written into the contract
  • We run, monitor and maintain the governance layer. Your team keeps shipping

Works with the systems you already rely on

+ More
How it’s priced

SCRS integrated into your systems

Your stack
SCRS firewall
AI model

Fixed monthly cost + token usage

Two lines on the invoice, so the platform side is predictable and you only pay for what you actually put through the firewall.


Fixed monthly cost

Covers the SCRS deployment, hosting, governance configuration, audit retention, updates and support. Same number every month, whatever your volume does.


Token usage cost

Metered on what your systems actually send through the firewall. Bring your own model keys, or let us manage them and pass the model cost through.

Both figures are quoted per deployment. They depend on the systems in scope and your expected volume.

Get a quote for your stack
Predictable pricing No hidden fees Cancel any time
The other half

A CRM records what happened. Automation is what stops you doing it by hand.

And here is the line no automation agency can match: the automation runs on your data, and the AI inside it never sees a client’s name.

Before

Someone remembers

A reminder that depends on a person having a good week. A follow-up that happens if the diary is quiet. A recall nobody runs.

After

The system drafts, a person sends

Every message is drafted and waits for a human press. Nothing sends by itself. A message to someone who never agreed to that channel is refused outright, with the reason on screen.

Underneath

The model works blind

Names, dates of birth and treatments are stripped before the model is called. The audit line records exactly what was removed, on every single draft.

See it refuse a message in the clinic demo →

Governed to what, exactly

“Governed” is easy to say. Here is what we mean.

The rules your build is made to keep, and the ones we do not claim. Both are worth knowing before you brief anybody.

Rule Where we stand What that means in your build

UK GDPR

Data Protection
Act 2018

Aligned
Subject access requests, consent records, deletion and an audit trail all run inside the software. Your data is stored in the UK or EU.

EU GDPR

Aligned
Same controls. Personal details are swapped for placeholders before any third-party AI model is called.

EU AI Act

Built for it
The Act asks you to keep a record of what your AI does, keep a person in the loop, and be able to show both. Your build does all three as standard: every AI call logged and inspectable, and nothing sends without a person releasing it.

Your own trade’s rules

Built to order
The conflict check, the reflection period, the right-to-work date, the consent before the message. This is the part a general-purpose CRM cannot do, and the part we write for you.

India

DPDP Act 2023

Same controls
Consent recorded, deletion on request, and a record of what was done. Pop Hasta is a registered Indian company. Hosting region is agreed at scoping.

UAE

Federal Decree-Law
45 of 2021

Same controls
The same machinery, and the demos already run in Arabic and price in dirhams. The estate agency demo enforces a different rule in Dubai than in England and Wales, because the law is different.

Somewhere else

Ask us
Most privacy laws want the same four things: know what you hold, delete it when asked, keep a record, and keep it where you said you would. That is built in and it travels. What we will not do is tell you it makes you compliant under a law we have not read with your lawyer.

ISO 42001 · SOC 2 · ISO 27001

On roadmap
Not certified. The controls are built and running. The audits are not done, so we do not call them done.

Same controls means the software does the things that law asks for. It does not mean we are your lawyer, and we will say so in the room. Where we stand on everything →

Security

What we build in, by default.

Listing these makes them a standard we hold ourselves to on every build. That is the point of writing them down.

The riskWhat we do about it

SQL injection

Parameterised queries throughout. No string-built SQL anywhere in the codebase.

Cross-site scripting

A Content Security Policy with a per-request nonce, and output escaped by default.

Clickjacking

Frame embedding is denied outright, so the site cannot be loaded inside somebody else’s page.

Downgrade and interception

HTTPS enforced, HSTS with preload, and secure cookies. There is no plain-text route in.

Credential stuffing

Fail-closed rate limits, captcha and honeypots on every public form.

AI token abuse

Per-team caps and per-seat media limits, with an alert before the ceiling rather than a bill after it.

Volumetric attack (DDoS)

Edge filtering in front of the application, configured at deployment.

Security by design. Not by accident.

These controls are built in, monitored and tested continuously.

You focus on your work. We keep the threats out.

How it works

A scoped, governed engagement.

A structured process with clear scope and strong governance — so you get value fast, with security built in from day one.

Built onSCRS firewall
Your dataYour call
First reply1 working day
ScopeFixed & clear
GovernanceRedact-before-LLM · encrypted vault · tamper-evident audit on every custom build

Tell us the problem

The systems involved, the outcome, any deadlines. We reply within one working day.

Scope & quote

We map the work, agree milestones and fix the scope before anything is built.

Build on the governed platform

Redact-before-LLM, the encrypted vault and the audit trail come as standard.

Ship & support

Deployed to a hosting region agreed at scoping, with a named contact.

Tell us about your project

A short brief is plenty. We will take it from there.

Project enquiry

We typically reply within one working day.

We never share your details. See our privacy policy.

Good fit for

Who we build for

  • Regulated firms with a system that must integrate
  • Teams that need a bespoke governed workflow or portal
  • Products that want to embed SCRS / governed AI
  • Teams keeping their current systems but adding
    SCRS governance
  • Migrations off legacy or spreadsheet-driven processes
Not a fit

When to call someone else

Saying who we turn away is worth more than a testimonial, and it saves us both a call.

  • A cheap rebuild of something that already works
  • A one-week job. Scoping alone takes longer than that
  • Anything where the AI must see raw client data to work.
    We will not build it
  • A project with no internal owner. Bespoke software needs
    somebody on your side who decides
Security first

Governed by default

Every custom build inherits the SCRS firewall and the audit trail. Data residency is agreed at scoping and written into the contract.

Security & compliance

Pop Hasta Labs Ltd · United Kingdom