Global Solutions Labs — software products, built and run from Peru

What we work on

We're a product company, not a single-product company. Each area shares the same engineering team and platform.

Cloud and operations
Platforms to deploy, monitor and operate services and the servers under them.
Identity and security
Sign-in, permissions and the security controls every product needs from day one.
Data and AI
Pipelines, event streams and models that classify, summarise and automate repetitive work.
Products for businesses
Web and mobile software for finance, commerce and operations, built for Latin American teams.

Two products already running in production, built to the standard we apply to everything else.

Fleet operations for Linux servers

An agent on every host reports uptime and heartbeats, and runs only typed jobs from a closed catalog. It never executes a shell command it was sent.
Alerts from Grafana and Sentry pass through Kafka workers and are classified before they reach whoever is on call.
Optional firewall enforcement of CrowdSec decisions with nftables, authenticated by short-lived Vault certificates that never touch disk.
An operator console with per-tenant permissions and a second factor for destructive actions.

Sign-in and access control for multi-tenant apps

Hosted sign-in pages per tenant, each with its own domain, branding and sign-in methods.
Passwords, passkeys, social sign-in, one-time codes and two-factor authentication, built on Ory Kratos.
OAuth 2 and OpenID Connect for your apps through Ory Hydra, and relationship-based permissions with Ory Keto.
Operated by No ID, our subsidiary.

The pieces we reuse across services are public. Read them, use them, and tell us when something breaks.

Go services with clear boundaries: REST for clients, gRPC between services, PostgreSQL for state, migrations embedded in the binary.
Kubernetes managed from Git: Clusters are reconciled by Flux from a repository. Renovate keeps every pinned dependency current.
Observable by default: Structured logs with request IDs, Prometheus metrics, Grafana dashboards and Sentry for errors.
Secure by default: Mutual TLS between services, short-lived credentials, least-privilege permissions, and a second factor for anything destructive.

We are consolidating our workloads on a single European cloud provider with predictable pricing and clear data residency. The plan:

Managed Kubernetes for PlatformD's control plane, No ID's identity services and our internal tools.
Public Cloud instances for databases, Kafka and the build runners that ship our images.
S3-compatible Object Storage for backups, product media and logs past their hot retention.
Private networking between all of it, with nothing but the load balancers exposed.

Questions about our products, partnerships or anything on this site. We answer within two business days.