Client testimonials & reviews

The value showed up in the first two weeks, before any code: they went through our transaction data and told us our customer records were not resolvable to a single entity, which meant screening would generate noise no matter how good the rules were. Entity resolution became phase one. That reordering saved us a false start we had already budgeted for.

Our examiner asked why a specific alert closed the way it did, eleven months after the fact. The system produced the rule version, the data as it stood that day and the analyst’s narrative in one export. That single interaction justified the whole approach to our board.

We had been quoted for a payment switch by three firms. NovuLabs was the only one that asked what our settlement reconciliation looked like before quoting, and the only one whose estimate did not move afterwards.

The FHIR work was done properly rather than as a translation layer bolted on at the end. When we later connected a second hospital group, integration took days instead of the quarter we had planned for.

They were direct that HIPAA has no certification to buy and that our obligations sat with us, not with them. Every other vendor we spoke to let us keep believing otherwise. That was the point we decided.

Public-sector procurement means the architecture has to survive review by people who will never use it. The documentation they produced alongside the build cleared our security review without a single follow-up round.

The NADRA integration was the part we expected to slip and the part that did not. They had already handled the failure modes we had not thought to ask about, like timeouts, partial matches, and what the citizen sees when verification fails.

We came in wanting a custom ERP. They mapped our processes, found that eighty per cent matched a product we could licence, and scoped a build for only the twenty per cent that was genuinely ours. They talked themselves out of most of the contract.

Their engineers joined our sprints and used our review process rather than importing their own. Six months in it is genuinely hard to tell from the commit history which half of the team is which.

We asked for machine learning on the alert queue. They put a model on prioritisation and kept deterministic rules as the alerts of record, because an examiner needs a reason they can read. It was a better answer than the one we asked for.

Multi-tenancy was designed for on day one instead of retrofitted at customer forty. We have onboarded institutional tenants with their own data residency requirements without touching the core.

Support after launch is the part most vendors treat as an afterthought. When the reporting schema changed, they had already tracked it and shipped the update before our compliance team raised the ticket.