Tenchi Book a call
Secure platforms · Cyber security

Build secure. Prove it. Keep it that way.

Tenchi builds secure SaaS platforms, and runs cyber security programmes for platforms that carry regulated data. Twenty years of security leadership, working internationally.

Book a 30-min call Email us
20+ Years in information security, from audit floor to executive table
Audit-ready SOC 2 Type 2 and ISO 27001 programmes run end to end, evidence to external audit
Shipped Our own platform, Aikaya, designed, built and run by Tenchi in production

Two practices, one standard

The platforms we build are designed by people who run audits. The security advice we give comes from people who ship software.

Practice 01

Secure platform development

We design, build and operate SaaS platforms with security in the architecture from the first commit. AI-assisted delivery for speed, human review on every security-relevant path.

  • Architecture with the threat model written first
  • Authentication, tenancy isolation, payments and audit logging designed in
  • Delivered on a cloud footprint that is already compliance-ready
Platform development →
Practice 02

Cyber security consultancy

Security leadership and delivery for regulated SaaS, fintech and enterprise platforms, from the first gap analysis to the external audit and beyond.

  • SOC 2 Type 2 and ISO 27001 readiness, fractional CISO
  • Cloud, DevSecOps and secure SDLC
  • Incident response, BC/DR and AI governance
Consultancy services →
Built by Tenchi

Aikaya

A platform for yoga, breathwork and meditation teachers to sell their own recorded classes from their own storefront. We designed it, built it and run it, the same way we would build yours.

Visit aikaya.net
What went into it
  • Video upload and transcoding, with every recording private until the teacher publishes it
  • Payments through each teacher's own connected Stripe account, so sales go straight to them
  • A storefront per teacher, shared as a single link, with tiered subscription plans
  • Consent-based cookies, no ads and no cross-site tracking

Cyber security consultancy

Six practices, each one deliverable on its own or as part of a programme. Most engagements start with one and grow.

01 Certification readiness SOC 2 Type 2 and ISO 27001 from gap analysis through control design, evidence and external audit. 02 Fractional CISO Security leadership on retainer: strategy, risk register, board reporting, customer and regulator assurance. 03 Cloud & platform security Architecture review and hardening across AWS, GCP and Kubernetes, with identity and monitoring that hold up. 04 DevSecOps & secure SDLC Threat modelling, SAST/SCA/DAST, build integrity and software-supply-chain controls to SLSA levels 1 and 2. 05 Incident response & BC/DR Response plans, SIRT structure, tabletop exercises, immutable backup strategy and ransomware resilience. 06 AI security & governance AI-system inventory, risk classification, accountability and controls aligned to the EU AI Act and the NIST AI Risk Management Framework.

How we work with you

Five engagement models. The right one depends on whether you need a leader, a deadline met, an answer or a product.

Product build AI-assisted delivery of a secure SaaS platform, end to end.
Fractional CISO Monthly retainer, named accountability, ongoing ownership.
Fixed-scope assessment Defined audit or review, fixed price, written findings and a plan.
Programme delivery We build the programme and hand it over running.
Advisory hours A block of time for architecture calls, reviews and second opinions.

Track record

Client names stay confidential. The work does not.

More about Tenchi

Owned company-wide security strategy for a cloud platform serving regulated EU financial institutions, and carried SOC 2 Type 2 and ISO 27001 through external audit.

Hardened CI/CD and build integrity for one of the largest blockchain networks in the world.

Stood up AI governance aligned to the EU AI Act before it was a procurement question.

Designed, built and launched Aikaya, a production SaaS platform with payments, video delivery and per-customer storefronts.

Tell us what has to be true in six months.

A certification date, a customer questionnaire, a product launch, a board that wants numbers. Thirty minutes is usually enough for us to tell you what it takes.

Book a 30-min call or email us