Building Praxis-Q: a compliance audit portal, not a website
Praxis-Q is our own subsidiary, not a client — a cybersecurity and compliance certification firm we built, and whose audit automation platform we engineer and host end-to-end. Here's what that system actually has to do, and why it isn't a website with a login page.
praxis-q.com and its client portal are built, deployed, and hosted end-to-end by TechTweek Infotech.
Most of what's on our portfolio page is work we've done on or with someone else's product. Praxis-Q is different — it's ours. We built it, and the system behind it is the clearest example we can point to of what "custom portal" actually means when the stakes are real: a compliance audit platform that certification decisions get made on, not a marketing site with a contact form.
What the platform actually does
The client-facing side, the Praxis-Q Portal, tracks a client's certification readiness across 33 audit-ready frameworks with 1,588 individual controls mapped between them — ISO 27001, SOC 2, PCI DSS, HIPAA, GDPR, NIST, and others, in one system instead of a separate spreadsheet per framework. That number matters: 1,588 controls across 33 frameworks isn't a UI problem, it's a data-modeling problem, because a lot of those controls overlap across frameworks and a client working toward two certifications at once shouldn't have to prove the same control twice.
| Component | What it does |
|---|---|
| AI Evidence Engine | Automated, real-time scoring of uploaded audit evidence against mapped controls |
| Continuous monitoring | 24/7 automated checks against the controls a client has already passed, not just at audit time |
| Certificate verification | QR-code and cryptographic verification on a separate subdomain, so a third party can confirm a certificate is real without contacting us directly |
| Access control | Role-based tiers (Admin, Auditor, Client), two-factor auth via email code, 15-day device trust |
Why this isn't a website build
A marketing site fails softly — a slow page loses a visitor. A compliance platform failing has a different shape of consequence: if evidence scoring is wrong, a client could walk into an actual audit under-prepared. If the certificate verification system is down, a client's customer can't confirm a certification that's supposed to be instantly verifiable — which is the entire point of a tamper-proof certificate in the first place. Uptime and correctness aren't nice-to-haves here; they're the product.
That's also why the automation matters more than it would on an ordinary internal tool. Manually tracking 1,588 controls across 33 frameworks for even a handful of clients isn't a spreadsheet problem you can duct-tape — it's the reason the fast-track certification timeline (20 days, versus a 60+ day industry average for manual audit prep) is possible at all. The automated evidence engine isn't a feature bullet; it's what makes the speed claim true instead of marketing copy.
The honest point of this post: we're not asking a Wyoming restaurant or salon to build something this complex — most businesses shouldn't. What we want this to demonstrate is the range: the same engineering team building a $150/mo digital menu portal for a Cheyenne restaurant also builds and hosts the system a compliance firm stakes its certifications on. The Full Operations App tier — multi-location management, custom database and inventory tools, full API syncs — is the part of our own pricing page that scales toward this kind of system, not away from it.
Related reading
- What managed hosting actually means (and what it doesn't) — the accountability argument, at a smaller scale than Praxis-Q but the same principle.
- Build vs. subscribe — when a custom system beats an off-the-shelf subscription.
See Praxis-Q and the client portal live, or visit praxis-q.com directly.
Have a system that's more complex than a website?
Multi-location, custom workflows, integrations with tools you already run — tell us what it needs to do, and we'll give you an honest read on scope.
Request System Scope →