Capability statement

Built to be awarded the work.

Epcotec is a senior engineering studio operating in Australia and Canada, in continuous operation since 2011, with roots in Canada. This page maps our capability to the requirements buyers and tender panels actually ask for.

Send us your RFP hello@epcotec.com
Capability matrix

Requirement → how we cover it

Each row maps a common tender or procurement requirement to the specific capability we bring.

AI / LLM enablement

RAG, assistants, Copilot connectors, eval harnesses, cost controls.

Application development

Full-stack web apps, portals, APIs, dashboards: React/Next.js, Node, Python, Go.

Cloud & platform

AWS/Azure, Kubernetes, Terraform, CI/CD, observability, OpenShift.

Data & MLOps

Ingestion, warehousing, pipelines, model serving, drift monitoring.

Security & GRC

AppSec review, OAuth/OIDC, IAM, hardening, audit-ready evidence.

Systems integration

EDRMS, CRM/ERP, D365, third-party APIs, legacy modernisation.

Human-led delivery

Named engineers review, approve and own every merge; modern tooling removes the busywork.

Fast tender turnaround

RFP requirement extraction, capability-fit mapping and fixed-price responses within two business days.

Delivery governance

Fixed-scope SOW, weekly demos, staging from week one, documented handover.

Commercials & compliance

AU Pty Ltd and CA Ltd entities; PI/PL insurance and local invoicing on registration.

Applied R&D

A dedicated R&D group (Gene and Ottie Pratt) industrialises optically-guided-discharge research into implementable systems, from feasibility to TRL-raise.

Voice & telephony

Full-spectrum IP telephony on a carrier-grade platform (numbers, SIP, IVR, queues, recording, porting) with an optional AI receptionist layer. United States and Canada.

Human-led delivery

Human judgment, AI assistance

Our teams ship more, and people own every result. This is where AI assistance is applied, and where it stops.

Where AI assists

  • Requirements & tender analysis. Agents parse RFPs and specifications into requirement matrices, compliance maps and drafted responses; seniors verify coverage and commit the price.
  • Implementation at draft speed. Code generation across TypeScript, React, Node, Python and Go: scaffolding, migrations, refactors and tests drafted in hours, then reviewed line by line before merge.
  • Quality & review automation. Every change passes agent-assisted review, generated tests, dependency and CVE audits before a senior approves it.
  • Data, evals & MLOps scaffolding. Pipelines, dbt models, RAG and agent eval harnesses and drift monitors drafted by agents, tuned and owned by engineers.
  • Documentation & handover. Runbooks, API references, user guides and compliance evidence generated from the live codebase and verified before delivery.
  • Legacy comprehension. Agents map unfamiliar codebases and ERP platforms: architecture recovery and characterisation tests in days, not weeks.

What stays human

  • Scope, estimates and every fixed-price commitment
  • Line-by-line review: no unreviewed agent code ships
  • Production access, security and architecture decisions
  • All client communication and contractual accountability

AI raises draft velocity. The gates (tests, CI, evals and review) are unchanged and human-owned.

Delivery governance

How we de-risk an award

  • Fixed-scope SOW with milestones, acceptance criteria and a change process.
  • Weekly demos and a staging environment from week one.
  • Security review and audit-ready evidence for compliance requirements.
  • Documented handover: code, infrastructure and runbooks in your name.
  • Local contracting via Epcotec Pty Ltd (AU) and Epcotec Ltd (CA).

Commercial & compliance

Entities: Epcotec Pty Ltd (Australia, ABN/ACN on registration) and Epcotec Ltd (Canada, CRA BN on registration).

Insurance: Professional Indemnity, Public & Products Liability and Cyber Liability (on registration; certificates available to buyers).

Security posture: Essential Eight and ISO 27001-aligned controls: multi-factor authentication, least-privilege access, encrypted transit and storage, dependency and CVE scanning, logging and incident response.

Data residency: Australia and Canada residency options agreed per contract, including in-Canada storage for protected data.

AI governance: AI tooling under named-senior review; client data is never knowingly used to train public models.

Ethics & accessibility: Modern slavery and forced-labour zero tolerance (Australia and Canada); WCAG 2.1 AA as our target standard.

Subcontracting: disclosed with written approval; Epcotec remains accountable for delivery.

Responding to a tender or RFP?

Send the specification. We reply with a capability fit, a fixed price and a delivery plan, usually within two business days.

Submit your RFP