pdPurpledecks

Where we have built.

EST. 2012
SENIOR TEAM · IRELAND · EU
Media and broadcast Wearables and IoT Veterinary Community and peer support Payments Government and public services UtilitiesMedical devices Financial services Identity and security Telecoms Retail and loyalty and more

We follow the problem, not the industry. If yours is not here we would still like to hear from you.

§ 01 · What we do
Five problems · find yours

Five problems we're built for.

Lane 01 · Assess

Production-readiness and technical due diligence

"My product is going in front of an investor, an acquirer or an enterprise customer. Find the risks before they do."

Technical due diligence, run as a fixed-scope Readiness Audit. We read the codebase the way the reviewer on the other side will.

READINESS AUDIT
· fixed scope
· decision memo: harden, rebuild or proceed
· remediation roadmap
From €13,000 or $15,000
Lane 02 · Build

Custom software: products, portals and internal systems

"I have a serious product to build. A customer portal, an operational system, a connected product. I want it built properly, the first time."

Direct clients include RTÉ, Musgrave / Centra, Eir and Fáilte Ireland. Sage acquired the accounting software we built.

DESIGN · BUILD · SHIP · iOS · ANDROID · WEB · CLOUD
Lane 03 · Rescue

Software rescue and codebase takeover

"My developer disappeared. The codebase is a mess. My app was built with AI tools and now it has to be real."

We harden legacy, inherited and AI-built code for real users. We sell the engineering, not the AI.

RESCUE ASSESSMENT · fixed scope · from €4,500 · $5,000 · a decision and a plan
See how the Rescue Assessment works →
Lane 04 · Regulated

Regulated and connected medical-device software

"I'm a funded founder, not big pharma. I need medical-device software built properly, under my quality system."

Software as a Medical Device, ready for the scrutiny that FDA and EU MDR bring.

IEC 62304 · IEC 62366-1 · ISO 13485 · FDA · EU MDR · BLE
See how we build medical device software →
Lane 05 · Partner

Senior delivery partner

"My team is at capacity. I need senior people now, who need no managing and leave the code better than they found it."

In Ireland, in the EU. The same senior people from scope to delivery, no offshore hand-off, and we overlap your US morning.

EMBEDDED · IRELAND · EU · NO HAND-OFF
StackMobile · Web · Backend · Cloud and infrastructure · BLE and firmware integration
§ 03 · Named proof

Three cases. What we built, and where it went.

Case 01 · ResMedConsumer + health data · BLE · App and platform
The ResMed S+ bedside sleep device on a nightstand beside a bed.
The S+. ResMed's first consumer product. We built the software.

A new way to measure sleep, with nothing worn or attached.

What we builtWe built the software for the S+: the app beside the device, and the platform behind it.
OutcomeResMed's first consumer product, in the home and on the market.
Case 02 · Someone Like MeCommunity and peer support · Moderation · Platform and admin
A person holding a phone showing a new connection in the Someone Like Me app.
Someone Like Me. Screens from the app. We built the platform behind them.

Peer support for people with cancer, from someone who has been there.

What we builtWe built the peer-support platform and the moderation system that runs in it.
OutcomeA cancer peer-support platform with moderation built in, live and in use.
Case 03 · ETLPayments · EPOS · Offline first

Twelve years of an offline-first EPOS system selling prepaid vouchers through shops and markets.

It keeps trading when the internet drops, driving till printers over serial cable and Bluetooth. Built, maintained and still live.

See all our work →
§ 04 · The regulated position

Built to the standard.

We build the software to the standard that applies, under your quality system. Regulated or audited, the discipline is the same. We produce the design records, the traceability, the test evidence and the software risk analysis. Your quality system holds them and the release authority, in your own process, ready for your reviewer.

Medical devices are the sharpest and most nameable proof: we build to IEC 62304 and IEC 62366-1, under your ISO 13485 quality system, our software risk analysis feeding your ISO 14971 file. ResMed is the proof, with Fire1 the connected-device depth behind it. Here is how it maps to delivery.

Standard
What we do in delivery
The artefact we produce
What stays with you
IEC 62304
Risk-based software lifecycle, versioned and traceable
Design records, traceability, test evidence
Release authority, the QMS itself
IEC 62366-1
Usability engineering worked into the software lifecycle
Use-specification and use-related risk inputs, evidence for your usability file
The usability engineering file itself
ISO 13485
Work to your controlled processes and your regulatory partner's
Controlled documents, inputs to your design history file
The quality system itself and the regulatory process
ISO 14971
Software risk analysis feeding your risk file
Hazard and mitigation records
The risk management file
IEC 62304
What we do in delivery
Risk-based software lifecycle, versioned and traceable
The artefact we produce
Design records, traceability, test evidence
What stays with you
Release authority, the QMS itself
IEC 62366-1
What we do in delivery
Usability engineering worked into the software lifecycle
The artefact we produce
Use-specification and use-related risk inputs, evidence for your usability file
What stays with you
The usability engineering file itself
ISO 13485
What we do in delivery
Work to your controlled processes and your regulatory partner's
The artefact we produce
Controlled documents, inputs to your design history file
What stays with you
The quality system itself and the regulatory process
ISO 14971
What we do in delivery
Software risk analysis feeding your risk file
The artefact we produce
Hazard and mitigation records
What stays with you
The risk management file

Security and auditBuilt to your security requirements. Access control, secrets handling, logging and data separation, with the evidence your reviewer asks for.

The same model holds beyond medical devices. In finance, Sage acquired the accounting software we built and kept us on. Our heavier regulated-financial work sits under partner agreements we cannot show. We build to the standard that applies, under your quality system.

See how we build medical device software →
§ 05 · Selected work
The clients we can name.

Work we can put our name to.

Most of this work is still running. Our longest client relationship is twelve years.

Payments and retail hardware

ETL

Twelve years. Built and long maintained the system that sells prepaid vouchers through shops and markets: an app that works offline and drives till printers over serial cable and Bluetooth.
Broadcast

RTÉ

Built and ran the RTÉ News apps, over ten years.
Telecoms

Eir

Built and maintained products for the former national telecoms operator since 2016.
Retail

Musgrave / Centra

Built and ran the Centra app, Ireland's largest convenience chain, since 2017.
Veterinary

Epona Biotech

The native iOS and Android apps that talk to their Bluetooth reader, the backend and the admin portal. Since 2018.
Tourism

Fáilte Ireland

Built and maintained the official app of the national tourism authority, for five years.
Accounting software

Sage

Acquired the accounting software we built and kept us on.
Identity and security

Safran Morpho · Idemia

Identity engineering on a UK government programme.
Behind the agencies

Momentum Design Lab · Isobar

We have been the development team behind global agencies. Their end clients are theirs to name, not ours.
§ 06 · From our own audit record
40+ takeovers · since 2012

What we find when we open other people's code.

Since 2012 we have opened and assessed more than forty codebases other people built. The same faults keep turning up. Here are four of the ones we see most.

Frequency is our own estimate. An honest read across the work, in bands, not counted figures.

The finding
How often
Hardcoded secrets
Passwords, keys and database logins written straight into the source, and committed into the history where they live forever.
Very common
Broken access control
Parts of the system with no login check. Anyone who reaches the server can do the thing.
Common
Happy path only
No handling for the third-party call that fails, the payment that times out, the request that half-completes.
Very common
Runs in a demo, falls apart in production
AI-built code that was never hardened, never load-tested, never checked for security.
Nearly alwaysin AI-built work
One we opened

On one system we took over, a messaging token and a cloud key were sitting in the source and committed into the version history, where they live forever. Files that should have been private were in storage left open to the public internet. We rotated every key, locked the storage down, and wrote the data-handling paperwork that had never existed.

A note on confidentiality

Every example here is altered or combined so no client, system or project can be recognised. We do not say whose code any of them came from. What we find in yours stays between us.

§ 07 · Common questions

Straight answers.

Who does medical device software development to IEC 62304?
We do. We build medical device software to IEC 62304 and IEC 62366-1, under your ISO 13485 quality system, with our software risk analysis feeding your ISO 14971 risk file. We have shipped regulated, connected products since 2012. ResMed is the proof.
Do you build new products and systems, or only rescue them?
Yes, and building is most of what we do. We design and build products, customer portals and operational systems, start to finish. Direct clients include RTÉ, Musgrave / Centra, Eir and Fáilte Ireland, and Sage acquired the accounting software we built and kept us on.
Can you do technical due diligence for a startup before a raise?
Yes. Our Readiness Audit is a fixed-scope technical due diligence. We read the codebase the way an investor's reviewer will, then give you a decision memo and a remediation roadmap you can act on before the room does.
Do you do software project rescue?
Yes. We take over stalled, broken, inherited or AI-built codebases. We start with a fixed-scope triage and a written go-forward plan, then bring it to a maintainable, production-ready standard. It is our history, not a side line.
Can you make an AI-built app production-ready?
Yes. We harden AI-built and inherited code for real users, payments and regulated data. We sell the engineering, not the AI.
Are you offshore?
No. Senior engineers, based in Ireland, in the EU. No offshore hand-off. The people who scope your work are the people who build it, and they stay on it. We overlap your US morning.
Can you work under our quality system?
Yes. We build to your quality management system and your regulatory partner's process. We build the software to the standard that applies.
Do you maintain and support what you build?
Yes, and most of our work is with clients we have had for years. We built and ran the RTÉ News apps for over ten years. Our longest client relationship is twelve years. We build, we maintain, and we stay.
Can you build for organisations that serve people at risk?
Yes. We build platforms that carry sensitive personal data and the people using them are often vulnerable. That changes how the software is built: who can see what, what is recorded, how a concern is escalated and who it reaches. We build the moderation and safeguarding workflows into the product rather than bolting them on.
§ 08 · Who we're not for

When we're not the right fit.

Naming who we're not for is how you know the rest is true.

·If price is the only thing that matters. We're not the cheapest, and we won't pretend to be.
·If you want a plaster on a broken build. We'll tell you plainly what needs rebuilding, and we won't paper over it.
·If you need the comfort of a big name. We're a small firm, not a big brand. That's the point of us.
·If it's a pure AI project with no product to build. That's our sister brand, Deep Purple AI. We'll point you there.
·If it's a transformation programme across a big enterprise or a multinational. That's big-consultancy work, and it isn't us.
·If you need us to be your quality system. We build to your ISO 13485 process and your regulatory partner's. If you have neither yet, that is the piece to put in place first. Tell us where you are and we will point you at people who do it. We are the engineering, not the regulatory function.
·If this is the last of the money. A Rescue Assessment tells you what is wrong and what it would take to put it right. If there is nothing left to act on the findings, it is the wrong first spend. Talk to us anyway and we will tell you straight whether it is worth it.
§ 09 · Who you'll work with

Senior engineers, not a sales layer.

You will work with the people who do the work. Brian and Barry lead it. Short, checkable bios, so you can verify us before you ever get on a call.

Brian Egan

Brian Egan

Founder & CEO

Brian started in neural network research at Dublin City University, then held a Marie Curie Research Fellowship from the European Commission, researching in Germany. He spent eight years building on-device software for the world's largest mobile operators and handset makers, founded Purpledecks in 2012, and co-founded Reactable.

Scopes the engagement and sets the technical direction.

LinkedIn →
Barry Gough

Barry Gough

CTO

Barry holds an MSc in Computer Science from University College Dublin, with machine learning at its core, and has spent more than 15 years building production software. He came up through native mobile and backend engineering, led delivery on regulated and connected-device work, and co-founded Reactable.

Leads the engineering on every build.

LinkedIn →

Behind them is a senior core of engineers, product and delivery people. Barry leads the engineering on every build. No hand-offs.

Note

Purpledecks and Deep Purple AI are two brands of the same company, Purpledecks Ltd. Purpledecks is the software engineering brand: product build, rescue, and regulated, connected-device work. Deep Purple AI markets AI implementation for established businesses. The same senior team is behind both.

Start here

Bring us the part that has to work.

Most of our work starts with a conversation, or a scoped Readiness Audit. Both are a straight, senior read on where you are.

Start a conversation Book a Readiness Audit →
A senior engineer replies. Same day if you catch us in the morning, next working day at the latest. No hand-offs.
For rescue work: NDA first. Your code stays in your repositories. We work in your environment.
PURPLEDECKS
53.7°N 7.8°W · IRELAND
EST. 2012 · EU
hello@purpledecks.com
linkedin.com/company/purpledecks