Bots, websites, security audits — engineered to last.
Small studio of senior engineers. Fixed-price scope, signed engagement letter, code yours from day one. Pick a track below — each opens with the verticals we focus on and outcomes worth measuring.
Short brief in chat (Telegram or email). We map the workflow, scope the build, send a fixed-price proposal in 48h. Free, no obligation.
4-12 weeks. Weekly Loom demos, you join our Slack. Code lives in your GitHub from day one. Spec changes invoiced separately.
Code + runbook + 30 days post-launch monitoring. After that, optional retainer for evolution — never required.
Workflow automation, voice agents, document pipelines.
Most "AI automation" on the market is drag-and-drop UI — fragile, no observability, breaks the moment your Stripe webhook lags. We build the actual machine: state handling, retry logic, queue back-pressure, audit logs, alerts. The difference matters at 3 AM during your Black Friday outage.
Three components in every build: a clear scope document, the runtime architecture, and a handoff runbook. Each delivered within the fixed-price engagement letter — no scope creep invoices, no surprise extras.
Each vertical below has a different operational pain. Click the closest match and see exactly what we ship for that industry.
AI agents and workflow automation that run while you sleep.
Voice agents that book appointments, document generation pipelines that turn data into PDFs, inbox autoresponders that don't sound like inbox autoresponders. Built on first-class platforms, wired into your stack, shipped under signed engagement.
- →AI voice agents (inbound + outbound)
- →Document generation & data pipelines
- →Workflow integrations (CRM ↔ inbox ↔ ledger)
- →Custom internal tools & admin dashboards
Fixed-price scope after a short discovery brief. Signed engagement letter, scope document, runbook. You own the code & runbook on day one. Re-run / revision included.
Front desk, paperwork, follow-up — handled before the next patient walks in.
Private practices lose 30-50% of after-hours calls and 10-20% to no-shows. Doctors spend ~13 hours per week typing into the EHR. We automate the operational layer so clinicians stay clinical — under GDPR-native architecture and a signed DPA / BAA from day one.
- →24/7 voice receptionist (booking + cancellations + no-show recovery)
- →Ambient AI scribe with EHR write-back (Athena, Epic, EMIS, MEDOS, Pabau)
- →Smart intake forms in EN/DE/LT/FR with red-flag triage routing
- →Post-visit follow-up, recall engine, GDPR-consented review prompts
EU-region data residency (Frankfurt/Dublin) by default, US-East available. Pre-signed GDPR DPA for EU/UK clinics, HIPAA BAA for US private practices. Named DPO contact, per-project DPIA, ISO 27001-aligned. No training on patient data — clause in every engagement letter.
From inquiry to keys handed over — automated where it matters.
Independent dealerships and garages lose ~30% of after-hours leads, spend 10-15h/week on cross-portal listing admin, and hit 35-45% test-drive no-show rates on weekends. We automate the operational layer so your sales floor stays on the hot leads — not on data entry, MOT phone calls, and licence photocopies.
- →WhatsApp / Telegram lead bots with sub-5-min reply 24/7
- →Multi-portal listing sync (mobile.de, AutoScout24, AutoTrader, Cars.com)
- →OCR-based trade-in pipeline (V5C / title docs + CAP HPI / KBB valuation)
- →MOT / service reminders + DMS-integrated self-booking with ID pre-verify
ICO data-controller registration (mandatory for DVLA / customer data work). Live WhatsApp bot demo on a sandbox number in 15 minutes — not slide-ware. Postman collections + log lines from real production integrations available on request.
Your industry isn't on the list. That's fine — most of ours weren't either.
We've shipped automation for legal firms, e-commerce brands, fintech back-offices, e-learning platforms, and small manufacturers. The common thread isn't industry — it's a repetitive operational workflow that costs real hours every week. If you can describe it in 5 sentences, we can scope a fixed-price build in 48 hours.
- →You have a workflow that requires "the same thing, but for each X"
- →It currently takes 5+ hours per week of someone's time
- →The data lives in 2+ systems that don't talk to each other
- →Errors here cost money or trust (not just inconvenience)
Before quoting, we check: regulatory floor (any data residency / consent rules), integration surface (do the systems have public APIs or is it a scraping job), and success metric clarity (can we agree on a measurable outcome?). If any of three is broken — we say so before you sign.
Custom-coded sites for SMBs whose homepage is a paid-ad landing zone.
Most agencies design for the Figma frame. Your real visitor lands at 23:47 from a Google ad, on a 4-year-old Android, on a tired LTE cell. Every 100ms of LCP on that visit burns roughly 7% of what you paid Google to put them there — money you'll never see again, on every campaign, every month.
We build under that constraint. Astro or Next.js, hosted under your domain, your GitHub, your analytics — instrumented from day one so the gap between "landed" and "submitted" is measurable, then shorter every sprint. No CMS lock-in, no template that breaks the moment you launch a new vertical.
Each vertical has a different conversion path. Click the closest match and see what we typically ship for that industry.
Property sites that convert browsers into booked viewings.
Brokerage landings, agent personal pages, MLS-fed listing portals. Fast, mobile-first, lead-capture wired into your CRM. Custom dev — not template-builder clutter — so SEO compounds and pages don't break under traffic.
- →Brokerage & agency landings (custom design)
- →MLS / IDX feed integration + listing pages
- →Lead-capture forms wired to CRM & SMS
- →Multi-language for EU / international buyers
Fixed-price scope after a short discovery brief. Wireframes & copy direction within the first week. You own the codebase, hosting account and domain — no vendor lock-in. Optional retainer for content updates & A/B tests.
Clinic sites that fill the appointment book.
Landings for dental, aesthetic, GP & specialist clinics. Online booking wired into your scheduling system (Cliniko, SimplyBook, Calendly, Setmore), doctor profiles with proper credentials, multi-language for international patients. Fast on mobile because that's where patients actually book.
- →Custom clinic landings & multi-location sites
- →Online booking integration (Cliniko / Calendly / Setmore)
- →Doctor profiles, services, before/after galleries
- →Multi-language for international & medical-tourism patients
Discovery → wireframes → launch. Booking system integrated with your existing tool — we don't force you to migrate. GDPR-compliant cookie & data handling. You own the codebase, domain & analytics. Optional retainer for content updates & new service pages.
Auto-service sites that turn searches into booked workshop slots.
Independent garages, MOT centres, body shops, multi-bay chains, used-car dealers. Online booking wired into your calendar, photo-upload quote intake for collision and detailing, inventory feeds for stock you sell. Mobile-first, because that's where people search for a workshop near them.
- →Garage, MOT & service-centre landings (custom design)
- →Online booking tied to your calendar / DMS
- →Photo-upload quote intake (body shops, detailing)
- →Used-car / parts inventory feed & lookup
Discovery → wireframes → launch. Booking tied to your existing system — Google Calendar, Setmore, a DMS, even a simple inbox if that's what you run. We don't force you to migrate. You own the codebase, domain & analytics. Optional retainer for seasonal promos & new service pages.
Web work outside the three named tracks — same rules apply.
D2C storefronts, B2B SaaS marketing sites, course / membership portals, conferences & events, hospitality. We don't pretend a vertical is "ours" if we've shipped one of them — but the same fixed-price scope, boring-tech default, own-the-code rules apply whether you're selling candles or running a 200-seat restaurant chain.
- →D2C / e-commerce — Stripe, Shopify, or custom
- →B2B SaaS marketing sites + docs / changelog subpath
- →Course & membership platforms (Stripe + auth, no LMS bloat)
- →Conferences, events, restaurants & hospitality
Short discovery brief, fixed-price proposal in 48h. If your project is far outside what we've shipped before, we'll say so — and either pass, or scope a smaller first piece to de-risk it. You own the code, the data, the domain. No hourly billing, no scope-creep invoices.
Independent purple-team consultancy.
Active testing under signed authorisation. Defender-aligned reports. Reproducible findings.
Full security practice runs as a separate site to keep the consulting engagement model clear. Visit security.tholim.com for the full scope, sample reports, and engagement letter.
security.tholim.com →Four operating principles that decide what we ship — and what we refuse.
A small studio's job is to ship working code under a fixed-price scope and let the client own everything from day one. These four principles keep us on that path — across bots, websites, and security engagements alike.
- 01
Fixed-price after discovery
Short discovery brief over chat (Telegram or email — your preference), then a fixed-fee proposal in 48 hours. No hourly billing, no scope creep invoices, no "unforeseen complexity" surcharges. If the brief grows, we scope a separate piece.
- 02
Code yours from day one
Your repository, your hosting account, your domain. Every commit goes straight into a Git remote you control. No vendor lock-in, no rebuild fees, no surprise dependency on us six months later.
- 03
Boring tech, by default
We pick stable, well-documented platforms over framework-of-the-month — Astro, Next, Python, Postgres, Stripe, Telegram Bot API. Easy to maintain, easy to hand off, easy to hire for if you grow internal.
- 04
Signed engagement, runbook on handover
Every project ships with an engagement letter, a scope document, and a runbook handed to your team on day one. Named contact, named timeline, named responsible engineer — same accountability whether the project is £3K or £50K. Tholim Ltd is a registered company; the paperwork exists if you ever need it, but the actual standard is in the build, not the certificate.
Tell us what you're shipping. We'll tell you whether we can help.
We reply within two working days with a scoping note, a rough timeline, and a fixed-fee estimate. If the work isn't a fit, we'll say so and refer you to a practice that is.
- hello@tholim.com
- PGP
- key on request
- Signal
- on request
- Locale
- EU · remote first · on-site by arrangement