Internal tools for a 30,000-person workforce

An internal employee platform the organisation uses daily, and the custom products that run inside it: a search experience for internal content, a peer recognition system that replaced a legacy implementation, and a bulletin acknowledgement flow.

The hard parts

AI content moderation, designed to fail open: if the model goes down, the employee is not blocked. Retry with exponential backoff, and a 42-case evaluation suite that runs in about 14 seconds and gates every model change.

A 64,000-user directory sync that failed on every run. Offset pagination was replaced with keyset pagination, with batched writes and deadlock-aware retries. The same crawl now scales toward millions of users.

Notification dispatch moved from an in-process fire-and-forget pattern to a managed queue with authenticated at-least-once delivery and a reconciliation job, so restarting a pod stops losing notifications.

On confidentiality

The client and the delivery channel are covered by a non-disclosure agreement, so this project is published without naming them. We can go into detail on scope and technical decisions in a meeting.