Cairnova Technologies Ltd · Falkirk, Scotland
Cairnova Technologies is a software company in Falkirk. We build custom software end to end, and we run four products of our own: an identity and access platform, a case management system for regulators and ombudsman offices, a regulated social care system, and an educational visits system for Scottish councils.
Each runs on the same UK-hosted infrastructure and the same identity layer, and each says on its own page exactly how far along it is. One is in live service; three are built to production standard against what Scottish public bodies publish about how they work, and are not yet under contract.
Identity and access management
One login across your services, access decided by policy rather than job title, and an audit record of every decision including the refusals.
Built on open standards, so it connects to what you already run and you are not locked to us. In production since September 2026, serving live users daily beneath our school management platform.
How it worksCase management for regulators and ombudsman offices
Receipt, validation, investigation, decision, closure and retention, with statutory deadlines counted in working days and case types your organisation defines rather than ones written into code.
Append-only, hash-chained audit; personal data encrypted before it reaches the database; a working prototype we can demonstrate today.
What it coversRegulated social care management
Records the things an inspection asks about — adult support and protection, duty of candour, medication, daily care — and holds the evidence in a form you can hand to the Care Inspectorate.
Built to Scottish regulation from the outset rather than adapted from an English or American product. We are looking for early partners to shape it.
What it coversEducational visits management for councils
Every school trip a council runs — local to overseas, Duke of Edinburgh’s expeditions included — from proposal, risk–benefit and approval to PVG-checked staffing, consent, the day itself and closure, against the council’s own Going Out There-based policy.
Offline headcounts and emergency plans on a staff phone, a password-free family portal, and the evidence an inquiry would ask for.
What it coversSecura SSO is the only Cairnova product in live service. It runs beneath Secura SMS, our school management platform, which serves live users in Nigeria. No Cairnova product is yet deployed for, or under contract with, a customer in the United Kingdom.
Casework, Secura CMS and Secura Excursions are built to production standard and prototyped against the published needs of Scottish councils, regulators and the Public Contracts Scotland market — not against a signed specification. We would rather you read that here than discover it during due diligence.
Every consequential rule in our care platform is traced to its source and recorded as statute, guidance, professional judgement, or a data protection decision. In Casework, a historic decision can be replayed from stored facts years later. When an inspector asks why the system behaved a certain way, there is an answer with a citation attached.
We implement published specifications rather than proprietary protocols. Our OIDC client library is published on Maven Central under an open licence, so an integrator can read the contract before committing to it. Every product has a documented API, so what is yours stays reachable.
Everything we run sits in the United Kingdom — application, database, object storage, backups and monitoring, all in AWS London (eu-west-2). That holds for every deployment we operate, not only our UK customers. Our observability stack is self-hosted rather than sent to a third-party analytics service.
We are an early stage company. You deal with the people who build the software, with no account management layer between a question and an answer — and you get a straight answer about what is live, what is in development, and what we are still working towards. The about page sets out where we actually are.
Across sectors, strongest where a system has to be defensible.
Our products show what we can build; they are not the limit of it. We take on work across sectors — line-of-business and workflow systems, case management, customer and citizen portals, integration between systems never designed to talk to each other, data migration off legacy platforms, API development, reporting, and modernisation of applications that have outgrown their original design.
We are strongest where a system has to be defensible: regulated environments, personal or sensitive data, statutory reporting, audit requirements, or anywhere an inspector or auditor will eventually ask how something works and expect a documented answer. Where a project needs a technology we do not routinely use, we will say so rather than learn it at your expense.
If you are assessing us as a supplier, the trust centre sets out hosting, encryption, access control, auditing, backups, subprocessors, the status of each product and our approach to data protection in one place, along with how to report a vulnerability.
Procurement. We are registered on Public Contracts Scotland and are a member of the Supplier Development Programme. We are open to direct award within threshold, to framework and dynamic purchasing routes, and to subcontracting through a main contractor.
Contact info@cairnova.io for a capability statement, security questionnaire response, a demonstration, or a pilot discussion.