Portfolio & Projects
Work that made a difference
A selection of the projects, methodologies, and technical initiatives I’ve led across enterprise architecture, data resilience, and AI over 15+ years.
Signature projects
High-impact initiatives where I led architecture, strategy, and delivery.
Recoverly – Data Recovery Maturity Assessment & Response Plan
Independent project
Designed and built a free maturity assessment that helps organisations answer one question before a data-loss incident happens: how ready are we, really? Twelve plain-English questions across governance, protection, detection, response, and recovery produce two things – an industry-weighted Risk Assessment with a visual breakdown of where the gaps are, and a genuinely fillable Data Recovery Response Plan structured around the actual order an incident unfolds in: detection, triage and escalation, regulatory notification, recovery execution, and validation. Built as a single dependency-free page using Claude Code, deployed as a static site with no backend.
- Industry-weighted scoring across 12 dimensions, with a radar chart and RAG breakdown surfacing exactly where the gaps are
- A genuinely fillable Data Recovery Plan, not just an improvement checklist – includes a defined recovery-team role structure (Technical Lead, SME, QA/Tester, Comms) and an ordered incident-response sequence
- Exports to a properly paginated PDF with a branded footer, or an editable Word document
- Independent and open-source; not affiliated with or endorsed by Salesforce or any named vendor
Redline – The True Cost of Downtime Calculator
Independent project
Designed and built a free calculator that shows the real gap between the RTO/RPO an organisation has promised and what recovery actually costs in practice. Pick a realistic incident scenario – ransomware, accidental mass deletion, a bad integration sync – and see the true financial and regulatory exposure priced in, not just an abstract time figure. Built as a single dependency-free page using Claude Code, deployed as a static site with no backend.
- Multiple realistic incident scenarios modelling the actual RTO/RPO gap and its financial cost, not just a theoretical deadline
- A regulatory notification clock covering GDPR, UK GDPR, HIPAA, Singapore PDPA, and custom jurisdictions
- A visual horizon bar showing exactly how close a scenario runs to breaching Maximum Tolerable Downtime
- Hands off directly into Recoverly, so a cost figure can turn straight into a readiness assessment
Schema Explorer – What Actually Breaks When You Delete a Record
Independent project
Designed and built a free visual tool that answers a question every Salesforce admin has faced without a clean way to check: if I delete this record, what else goes with it? Pick from 300 modelled standard objects, or import your own org’s real schema, and see an interactive diagram distinguishing what cascade-deletes, what simply gets orphaned, and what blocks the deletion outright – before finding out the hard way. Built as a single dependency-free page using Claude Code, deployed as a static site with no backend.
- 300 Salesforce standard objects modelled across Sales, Service, Product Catalogue, Order Management, Workforce Engagement, and more
- Import your own org’s real schema via a safe, credential-free pattern – paste Apex debug log data, no OAuth, no backend, no data ever leaves the browser
- An interactive radial diagram with collision-free label placement, verified against real font metrics rather than guessed spacing
- Clearly distinguishes cascade-delete, orphaned-lookup, and restricted-delete relationships – the distinction that actually matters before deleting a record for real
Tabletop – Practise Incident Command Before You Actually Need It
Independent project
Designed and built a free live tabletop exercise for practising Incident Command – not a quiz, a genuine decision-driven drill. Pick one of twelve data-loss scenarios, assign the real Incident Command roles, and work through six staged decision points as a team while the situation gets messier. Grounded throughout in the public Incident Command System (ICS/NIMS), not any proprietary methodology. Built as a single dependency-free page using Claude Code, deployed as a static site with no backend.
- 12 scenarios, each with genuinely bespoke decisions across all 6 stages of the incident lifecycle – 288 distinct decision points grounded in real ICS practice
- Real branching: the team’s actual choices, not an averaged score, determine how later stages unfold
- An Incident Readiness Score computed from the decisions actually made during the exercise, not a self-reported checklist filled in afterwards
- Opt-in session history surfaces recurring weak points across multiple practice runs – a pattern no single session can show on its own
Drillmaker – Incident Exercise & MSEL Inject Generator
Independent project
Designed and built a free generator that produces a HSEEP-aligned Master Scenario Events List for a data-incident tabletop exercise – pick a category, recovery window, audience, and duration, and Drillmaker builds a structured set of injects ready to run. Built as a companion to Tabletop: generated scenarios can be run live directly inside it, turning a generated exercise into an actual practised one. Built as a single dependency-free page using Claude Code, deployed as a static site with no backend.
- HSEEP-aligned Master Scenario Events List generation – the same public exercise-design framework used across professional emergency management, not a bespoke or proprietary format
- Configurable by category, recovery window, audience, and duration, so exercises are tailored rather than generic
- Generated injects run live directly inside Tabletop, closing the loop between designing an exercise and actually practising it
- Independent and open-source; not affiliated with or endorsed by any named vendor
Traceability – Multi-System Data Lineage & Recovery Sequence Visualizer
Independent project
Designed and built a free visual tool that maps how systems actually depend on each other during recovery – not just a single application, but the web of upstream and downstream dependencies that determine what has to come back online, and in what order. Detects circular recovery hazards that would otherwise only surface during a real incident, and produces a topologically sorted recovery sequence. Built as a single dependency-free page using Claude Code, deployed as a static site with no backend.
- Maps multi-system dependencies and visualises how systems actually rely on each other during recovery, not just in normal operation
- Detects circular recovery hazards – dependency loops that would otherwise only be discovered mid-incident
- Produces a topologically sorted recovery sequence: the actual order systems need to come back online
- Hands the calculated recovery-time gap straight to Redline, connecting dependency mapping directly to cost
HIPAA/GxP Data Migration – Global Pharmaceutical Client
Own from Salesforce (formerly Own Company) – London, UK
Led a critical data migration project for a global pharmaceutical client to transfer sensitive patient data from Salesforce to a compliant archiving solution. The data was under legal hold due to prior breaches, subject to HIPAA and GxP regulations, and stored in a US data centre. Coordinated across legal, compliance, information security, and ethics committees to design a migration plan with end-to-end encryption, immutable backup, and full audit controls.
- $4M reduction in storage costs
- $450M in regulatory fines mitigated
- Full TLS/SSL compliance and POC approved by ethics committee
- Delivered on time within complex legal hold constraints
DR3 – Data Recovery Readiness & Response Methodology
Own from Salesforce (formerly Own Company) – London, UK
Co-created the DR3 methodology – a structured assessment framework aligned to NIST CSF V2 that evaluates organisational data recovery readiness across seven lenses: Govern, Identify, Protect, Detect, Respond, Recover, and Report. Triggered by a real incident involving 350,000 lost records at a global pharmaceutical client, the methodology was designed to be accessible to both technical and non-technical stakeholders and scalable across SaaS platforms including Salesforce, ServiceNow, and Microsoft Dynamics 365.
- Adopted globally by 150+ organisations across multiple industries
- 26 TAMs trained as certified DR3 Practitioners
- Healthcare client reduced incident recovery from 10 days to 3 hours after DR3 assessment
- Became a core standalone service offering within Trusted Services
AWS Organisation Design for TAM Platform Enablement
Own from Salesforce (formerly Own Company) – London, UK
Designed and implemented a multi-account AWS Organisation to enable Technical Account Managers to securely test and troubleshoot Own Platform export and encryption features. Architected three segregated accounts (Alpha for billing/IAM, Beta for S3 exports, Charlie for RDS MySQL), with role-based access control, CloudTrail audit logging, CloudWatch alerting, and per-account usage caps.
- Eliminated personal account usage across the global TAM team
- Centralised billing with automated cost controls
- Full CloudTrail audit capability across all accounts
- Aligned to AWS Well-Architected Framework
DDRTP – Dynamic Data Recovery Time Prediction Algorithm
Own from Salesforce (formerly Own Company) – London, UK
Developed an AI-driven algorithm that dynamically predicts data recovery time based on multiple weighted factors – detection time, data complexity, damage scale, and system performance metrics. The algorithm recalibrates predictions in real time as conditions change and alerts users when predicted recovery time exceeds policy-defined RTOs. Implemented within a SaaS application and now the subject of a pending US patent.
- US patent application pending
- Real-time RTO alignment for Salesforce, IaaS, and on-premises environments
- Enabled proactive risk management rather than reactive recovery
- Validated across multiple enterprise client environments
£2M CRM/ERP Consolidation – 50 Systems to One
IRIS Software Group – Datchet, UK
Senior technical stakeholder on a £2M transformation programme to consolidate 50 disparate CRM and ERP systems across IRIS Software Group into a single Salesforce and NetSuite solution. Delivered real-time PCI DSS-compliant integrations via Jitterbit Harmony, migrated a 1TB Salesforce org within one month to avoid renewal costs, and designed automated TPS/EPS compliance checking across all contact records.
- 1TB Salesforce migration completed within one month
- Contributed to £2M programme cost-saving goal
- PCI DSS-compliant Avaya/NetSuite/WorldPay payment integration
- Real-time TPS/CTPS/EPS compliance automation across Salesforce and NetSuite
Further projects
A broader range of technical delivery across platforms, integrations, and tooling.
DR3 Assessment App on Salesforce
Own from Salesforce – Oct-Nov 2024
Replaced a manual Google Sheets DR3 scoring process with custom Salesforce objects, automated flows, and dynamic Lightning dashboards. Reduced report lead time from two weeks to a few days.
Data Recovery Plan Template & Guidance
Own from Salesforce – Sept-Dec 2024
Created a reusable Data Recovery Plan template and guidance notes, drawing on patterns seen repeatedly across DR3 assessment workshops, covering risk assessment, backup and archiving, incident response, and governance for SaaS platforms. Adopted as a standard resource across DR3 engagements globally.
Splunk Integration Package Refactor
Own Company – Jul-Aug 2022
Refactored a JSON/Python package for Splunk audit log integration – eliminating hard-coded credentials, implementing encrypted storage, and rewriting documentation. Reduced support queries by ~35% within three months.
Co-founded TAM Service at Own Company
Own Company – Oct 2020 to Feb 2024
Built the global Technical Account Management function from 2 people to 23 across multiple geo-regions, supporting 150+ customers. Designed onboarding frameworks, escalation protocols, and a TAM enablement programme.
Contract and Service Order Automation
Freelance – Aug-Dec 2019
Architected a low/no-code solution for an education sector software company to automate contract and service order generation in Salesforce, with bi-directional sync to a third-party Customer Success Application.
Case Management Portal & Knowledgebase
CloudApps – Jan-Mar 2018
Designed and implemented a Zendesk-based case management and knowledgebase platform, replacing a static wiki with searchable, article-driven content and structured defect tracking. Increased customer satisfaction with issue handling by 47% and cut educational support queries by 74%.
Polymorphic Object Behaviour Tracking
CloudApps – Aug-Dec 2017
Designed a Flow automation and Apex trigger solution to track user behaviours on Salesforce Task and Event objects against Opportunities – solving a structural gap in polymorphic SOQL reporting.
SuMo AI/ML Behavioural Platform
CloudApps – Jul 2017 to Oct 2020
Led technical discovery and solution architecture for SuMo – a Salesforce managed package evolved into an AI/ML-powered behavioural coaching product on AWS. Built KPI dashboards in LWC and Apex for enterprise clients.