// case studies

Selected engagements.

Anonymized where the NDA requires it. Metrics are real and checkable on request.

• LATAM payment gateway — HSM migration

  Technology Consulting + OutsourcingFinancial services

  Challenge

  A regional payment processor was running SoftHSMv2 in production and needed to migrate to a FIPS-readiness path without downtime or a rip-and-replace.

  Approach

  Drop-in Craton HSM behind the existing PKCS#11 boundary, with a feature flag and shadow-mode verification for four weeks before cutover. Two Craton engineers embedded with the client's team.

  Outcome

  • Zero downtime during cutover
  • 17 POST self-tests integrated into startup
  • Signing throughput up 2.1× vs. SoftHSMv2 on the same hardware
  • Audit-ready evidence trail produced as a side-effect of the migration

  Stack

  • Rust
  • PKCS#11 v3.0
  • Postgres
  • Kubernetes
  • aws-lc-rs backend

• Kitchen manufacturer — quoting workflow

  Digital TransformationManufacturing

  Challenge

  A 14-tab Excel macro was the single source of truth for a 3D kitchen quoting process. One employee understood it. Quote turnaround was days.

  Approach

  Shadowed the operators for a week, built a thin-slice replacement in Next.js + Postgres with an ERP write-back, trained the team in parallel, cut over workflow-by-workflow.

  Outcome

  • Quote turnaround 3 days → 40 minutes
  • Quoting errors down 85%
  • Operator onboarding 3 weeks → 2 days
  • Production-ready in 10 weeks end-to-end

  Stack

  • Next.js
  • TypeScript
  • Prisma
  • Postgres
  • Redis
  • Three.js

• US fintech — embedded cryptography team

  OutsourcingFinancial services

  Challenge

  A US-based fintech had lost two cryptography engineers in six months and couldn't replace them at the required seniority inside nine months.

  Approach

  Two senior Rust engineers from Buenos Aires embedded into the client's existing team and process. Full UTC-3 overlap with NY. No intermediary account manager.

  Outcome

  • Back to feature velocity in under three weeks
  • Co-ownership of two production cryptographic services
  • Completed a deferred FIPS-readiness project
  • Engagement continuing into its 15th month

  Stack

  • Rust
  • PostgreSQL
  • Redis
  • Kafka
  • Kubernetes
  • Prometheus