25 people in York
We build software, and we've stayed independent the whole way.
Since 2004
We started Isotoma in 2004 as an open-source business. Twenty years on we're still here, still independent, and still convinced that software built properly outlasts software built fast.
The people who start your project are usually the ones who finish it, and often the ones still looking after it years later.
The work
We build new software from the ground up and for the long term: the kind of systems an organisation runs on for years, not quick fixes or throwaway builds.
We write code other people can read, in a small set of tools we know deeply (mostly TypeScript and Python), and we stay to keep it working. That might cost a little more up front, but a lot less over time.
We're an AWS Advanced Consulting Partner and a Microsoft Partner. We're comfortable with both: the cloud your software runs on should be the one that suits your organisation, not the one that suits us.
Accreditations
The credentials that let us work with sensitive health, legal, and financial data. All independently assessed, and renewed every year.
- Cyber Essentials Plus
- The government-backed scheme for the technical controls that stop the most common attacks. The "Plus" means an independent assessor tested our systems directly, rather than us marking our own homework. It's a hard requirement for a lot of public-sector work.
- NHS Data Security and Protection Toolkit
- The annual assessment every organisation handling NHS patient data has to pass. It means we're cleared to work on systems that touch patient records and clinical workflows.
- ISO 27001 and ISO 9001
- International standards for information security and quality management, both audited every year. Documented, externally verified ways of protecting client data and running the business consistently.
The team
Most of us have been here for years, which we take as a fair sign it's a good place to work. We look after each other, and we put that near the top of the list.
A lot of us came to software from somewhere else first, so there's real-world experience behind the code. It's part of how we make sure what we build holds up once it's out in the world.