Praxis-Q

Praxis-Q is our own subsidiary, not a client. It needed a compliance audit platform that certification decisions are made on, not a marketing site with a login page. A client working toward two certifications at once should not have to prove the same control twice, which makes overlapping frameworks a data-modelling problem before it is a user-interface problem.

• 01Modelled 33 audit-ready frameworks and 1,588 individual controls in one schema, with controls mapped across frameworks so shared evidence is proven once — ISO 27001, SOC 2, PCI DSS, HIPAA, GDPR and NIST among them
• 02Built the client portal in Next.js and TypeScript: evidence upload, readiness tracking per framework, and real-time scoring of uploaded evidence against the mapped controls
• 03Implemented role-based access across Admin, Auditor and Client tiers, with two-factor authentication by email code and 15-day device trust
• 04Put certificate verification on a separate subdomain with QR and cryptographic checks, so a third party can confirm a certificate without contacting either company
• 05Added continuous automated checks against controls a client has already passed, rather than testing only at audit time
• 06Designed, built, deployed and hosted end to end on our own AWS estate, under our own 24/7 monitoring

• 33 frameworks and 1,588 mapped controls in one system, replacing a spreadsheet per framework
• Evidence scored automatically against mapped controls in real time, so readiness is visible before an audit rather than discovered during one
• Certificates independently verifiable by QR and cryptographic check on a separate subdomain — no phone call to us required
• Built, deployed and hosted end to end by Techtweek Infotech: one team owns the application, the infrastructure and the uptime