We design, build and operate applications, internal systems and cloud infrastructure.
Our work includes web applications, native mobile apps, client portals, operational systems, integrations and automation. Where required, we also handle product design, brand systems, deployment infrastructure and ongoing operation. Black Shard builds primarily on Microsoft Azure in Australian regions.
Our current production work includes multi-tenant applications, clinical software, compliance platforms and internal operating systems, among them the GRM LAW practice portal with its append-only audit ledger and the Stone Leaf Capital fund-administration platform with its monthly-sealed compliance audit log.
Web applications, native iOS and Android apps, client portals and internal operations platforms, taken from design through to production and ongoing operation.
What you get
Marketing sites, web applications and client portals built for performance, accessibility and a defined security posture.
What you get
Native iOS and Android apps taken from concept through App Store and Google Play release.
What you get
Interface and product design: UX flows, design systems and brand identity for production software.
What you get
Architecture, deployment and operation of production workloads on Microsoft Azure in Australian regions.
What you get
Speech, document and workflow automation built into day-to-day operations.
What you get
Security is part of the engineering work: threat modelling, access control, secrets management, logging and deployment security are built in, and higher-risk systems can be tested before release.
What you get
How it is shaped
Engagements can be fixed-scope or ongoing, depending on whether the requirement is a defined build or a product that needs continuous development.
Aurii
Clinical software
The iOS app has been on the Australian App Store since 4 September 2026, and the same product runs in the browser and as a Windows desktop app.
Read the case studyGRM LAW
Legal
The firm operates from the portal. We ship to it weekly under an ongoing engagement, and the build evolves with the workflow.
Read the case studyStone Leaf Capital
Capital markets
We ship to the portal under an ongoing engagement, structured around the firm’s AFSL perimeter and retention obligations.
Read the case studyThe team that builds and runs Black Shard's own products, including the clinical software Aurii. GRM LAW, a Brisbane law firm, engaged us to build and operate its compliance and operations portal, and Stone Leaf Capital, an Australian capital-markets firm, its technology, brand and operating systems. One team owns the build and its security.
Access is scoped to the work, administrative privilege is granted deliberately, and access is reviewed as roles change. Data is encrypted in transit and at rest, client data is hosted in Australian regions, and few third parties touch it. Secrets stay out of code. We hold SMB1001:2026 Gold, verifiable on the public CyberCert registry.
A shipped, operating product: the web app, native iOS and Android where needed, the client portal or internal platform, and a design system and brand where the build calls for one. The architecture is documented, pipelines keep secrets out of code, multi-tenant data layers carry row-level security, and the system runs on Azure in an Australian region.
Either a fixed-scope build with a defined brief and delivery date, or a standing team that designs, ships and operates the product at a weekly ship cadence. The second is how Black Shard's own products run, and how GRM LAW and Stone Leaf Capital run today. We operate what we build, so launch is one milestone in the engagement.
Part of the build. Threat modelling happens before a line is written, the architecture is least-privilege, secrets are handled properly from the first commit, and security review gates run through delivery. For a standalone check on an existing codebase, our secure code review gives a fix for every finding and a re-review once the fixes land.
No. We are a national and international firm, with the head office in Brisbane. Every build runs on Microsoft Azure in Australian regions, so data residency holds wherever the client sits. Distance changes nothing about the engagement: the same discovery, the same ship cadence, the same accountability.
By the shape of the engagement: a fixed-scope build with a defined brief and delivery date, or an embedded team at a weekly ship cadence. Scope drives it: web, native mobile, a portal or an internal platform, a multi-tenant data layer or not, and what the platform carries. We do not publish prices; a scoping call gets you a number.
Send a brief to info@blackshard.com.au or through the contact page, and we reply with whether the work is a fit. Discovery follows: how your software and team work, the data that matters, the obligations you carry. Then we agree the shape, fixed-scope or embedded, and the build starts.
