# Custom software development and APIs

URL: https://www.eclosionit.com/en/development

We build applications, Odoo modules and APIs with a transparent engineering process: you always know what is being built, why, and when it reaches production.

### Solutions built for your operation

- **Web applications & portals:** Customer, supplier and self-service portals; internal tools that replace spreadsheets.
- **Odoo modules & extensions:** Custom features on top of Odoo that respect its architecture, so upgrades remain viable.
- **APIs & backend services:** REST and GraphQL APIs, services and background jobs, ready to scale in the cloud.
- **Integrations:** Banks, payment gateways, e-commerce, marketplaces, DIAN technology providers, messaging and legacy systems.
- **Process automation:** Approval flows, scheduled jobs, notifications and syncs that remove manual work.
- **Dashboards & reporting:** Real-time KPIs connected to your data so you decide with reliable information.

### Our development lifecycle, step by step

1. **Discovery & scope:** We interview key users, map current processes and define measurable business goals. We prioritize so the most valuable features ship first. Deliverables: Process map, Prioritized backlog, Phased estimate.
2. **Architecture & design:** We design the architecture, data model and API contracts before writing code, and validate flows and screens with prototypes. Deliverables: Architecture diagram, OpenAPI contracts, Clickable prototypes.
3. **Iterative development:** We work in two-week sprints. Every change goes through code review and every sprint ends with a working demo in a test environment. Deliverables: Bi-weekly demo, Repository with history, Progress board.
4. **Quality & security:** Automated unit, integration and end-to-end tests. Static analysis, dependency review and OWASP Top 10 controls. Deliverables: Test suite, Security report, Acceptance testing.
5. **Continuous delivery:** CI/CD with separate development, QA and production environments, infrastructure as code and rollbacks in minutes. Deliverables: CI/CD pipeline, Dev · QA · prod environments, Runbook.
6. **Operations & evolution:** Monitoring, alerting and support with agreed response times. We plan product evolution with you based on usage data. Deliverables: Monitoring & alerts, Support agreement, Roadmap.

### APIs designed to last

- **Contract-first:** An OpenAPI specification agreed before coding, with always up-to-date documentation.
- **Versioning:** The API evolves without breaking existing consumers (/v1, /v2), with advance notice before a version is retired.
- **Strong authentication:** OAuth 2.0 or least-privilege API keys, rotated regularly and stored in secret managers.
- **Idempotency & retries:** Retry-safe operations so orders, payments and invoices are never duplicated.
- **Signed webhooks:** Real-time events with HMAC signatures and exponential-backoff retries.
- **Observability & limits:** Structured logs, metrics, traces and rate limits to protect the service.

### Security and quality from the first commit

- Mandatory code review on every change
- Automated tests in the CI pipeline
- Dependency and vulnerability scanning
- OWASP Top 10 controls and security headers
- Secrets kept out of code, in secret managers
- Encryption in transit (TLS) and verified backups
- Separate environments and least-privilege access
- Compliance with Colombian data protection law (Law 1581 of 2012)

### Choose how you want to work with us

- **Fixed-scope project (Fixed price):** Scope, timeline and budget agreed upfront. Ideal for well-defined products or integrations.
- **Dedicated team (Monthly):** A dedicated team (development, QA and a tech lead) that works as an extension of yours, with priorities set each month.
- **Hours bank (Flexible):** Prepaid hours for support, improvements and continuous evolution of your systems or Odoo.

### About how we build

**Who owns the source code?**
The client, as agreed in the contract. We hand over the full repository, documentation and deployment runbook.

**How much does custom development cost?**
It depends on scope. After a free discovery session we deliver a phased estimate so you can start with what creates the most value.

**Can you work alongside my IT team?**
Yes. We adopt your tools and ways of working (repositories, boards, meetings) and transfer knowledge throughout the project.

**What happens after go-live?**
We offer support with agreed response times, monitoring, and an hours bank or dedicated team to keep evolving the product.

**How do you protect my company’s information?**
Least privilege, separate environments, encryption in transit, secret management and confidentiality agreements with the whole team.