The ecosystem

One system, four layers, each one governed.

"Ecosystem" is an overused word. Here it means something specific: every component between a DNS query and a closed sale, built on infrastructure we operate, with controls at each layer that can be shown rather than described, and run by one team accountable for the whole.

Architecture

Each layer depends only on the one beneath it.

That rule lets you swap a CRM, redesign a site or change ad platforms without touching the hosting, and it is why we insist on owning the bottom layer before we touch the top one. It also keeps each layer's controls separate, which is what an auditor wants to see.

Layer 03

Growth

Search, paid media, email, automation, CRM. Consumes the events and data produced below. Controls: consent recorded, data minimised, spend and results measured against the same source of truth.

Marketing
Layer 02

Data & automation

Measurement plan, server-side tagging, consent, event pipeline, integrations, dashboards. Controls: every data flow documented, retention set per dataset, integrations monitored and logged.

Engineering
Layer 01

Platform

Websites, storefronts, customer portals, internal tools and APIs. Controls: version control from day one, staging before production, every release logged with who shipped what and when.

Engineering
Layer 00

Infrastructure

Compute, storage, networking, CDN, DNS, TLS, email, firewall, backups, monitoring, access control. Controls: residency pinned, backups drilled, patches logged, access reviewed. This is where Innovations GRC starts, every time.

Hosting · Core
Layer 00 · Infrastructure

The foundation is a product, and it comes with paperwork.

Agencies treat hosting as something to resell at a margin and forget about. We treat it as the thing we are actually selling, and we treat the records as part of the product. Our engineers provision it, harden it, monitor it and carry the pager for it, and every month they write down what happened, because every promise made by the layers above is only as good as the uptime and the evidence underneath.

Full details, specifications and the security model are on the hosting page.

Compute

Right-sized, resident

Sized from measured traffic with headroom for launches, in the region you choose. Dedicated from Assured upwards.

Edge

CDN + WAF

Every request filtered and cached at the edge before it reaches your origin.

Identity

DNS, TLS, email, access

DNSSEC, automated certificates, authenticated mail, named roles with 2FA. The parts that take companies offline, or get them breached, when neglected.

Continuity

Backups + monitoring

Encrypted off-site backups restored on a schedule, monitoring that pages us, and a monthly record of both.

Layer 01 · Platform

Built to be operated, and to be inspected.

We choose boring, well-supported technology and keep the entire build in version control from day one. The result is a platform that survives staff changes, agency changes and framework fashion, and whose history can be read by anyone who needs to.

Web

Marketing sites & content

  • WordPress on a hardened, container-based configuration, or a static / Next.js build for speed-critical sites
  • Editorial workflow your team can actually use, with roles that match your org chart
  • Performance budget enforced on every deploy
  • Accessible, structured-data-ready templates
Commerce

Stores & payments

  • WooCommerce or a headless storefront on your existing commerce platform
  • Payment gateway, tax and shipping integrations, with card data never touching our servers
  • Order events wired into the data layer and CRM
  • Load-tested before every promotion
Apps

Portals, tools & APIs

  • Customer portals, booking systems, dashboards, internal tools
  • Laravel, Django or Node services behind a documented API
  • Authentication with SSO and 2FA, audit trail on sensitive actions
  • Maintained under the same patching and backup regime as everything else
Layer 02 · Data & automation

If it is not measured, it is not managed. If it is not documented, it is not governed.

Most analytics installations are wrong in ways nobody notices for a year, and most data flows exist in nobody's documentation. We treat measurement as engineering: a written plan, tested events, server-side collection, consent handled properly, and a data map you could hand to a regulator.

Measure

Measurement & consent

  • Measurement plan: which events matter, where they fire, what they are worth
  • GA4 with server-side tag management, first-party collection and consent mode
  • Conversion tracking audited against orders and CRM records, not assumed
  • Consent decisions recorded; regional rules applied per visitor
Connect

Integration & automation

  • Forms, store, CRM, email platform, accounting and support tools connected through documented integrations
  • Event pipeline into a warehouse on Sovereign, with dashboards for finance and marketing
  • Automations that replace manual re-entry: lead routing, order notifications, renewal reminders
  • Every integration monitored and logged; a broken webhook pages us
Layer 03 · Growth

Marketing, delivered by the people who run your servers.

By the time we run a campaign, we already know your page speed, your conversion events, your email deliverability and your server headroom, because we built all of it. That changes what marketing can do: landing pages ship through a real pipeline, tracking is correct and consented on day one, and a successful campaign does not take the site down.

The growth layer is included from Assured upwards and runs as a full retainer on Sovereign. It is always the last thing we switch on.

Search

Technical SEO & content

Crawlability, structured data, Core Web Vitals, internal linking, then a content programme built on real search data.

Paid

Paid media

Google and Meta campaigns managed against measured conversions, with spend passed through at cost.

Lifecycle

Email & automation

Onboarding, nurture, abandoned cart and renewal flows on authenticated sending infrastructure, with consent respected.

Review

Reporting & roadmap

Monthly review of what moved and why, quarterly roadmap across all four layers.

In practice

What a complete ecosystem looks like at each plan.

The same four layers exist at every tier; what changes is how much of each layer we build, operate and document for you.

Foundation · $129 / mo

A single site, run properly

Managed hosting in your region, domain, DNS, email, security, backups and monitoring, with a launch-ready site, correct analytics and a monthly evidence pack. The foundation and the first floor.

Foundation details →
Assured · $449 / mo

A growth-ready, reviewed platform

Dedicated infrastructure, staging and CI/CD, hardened security, access reviews, full measurement stack, CRM and automation, technical SEO, and campaign landing pages shipped monthly.

Assured details →
Sovereign · $1,299 / mo

The whole operation, audit-ready

Multi-node infrastructure, custom applications and integrations, a data warehouse, security operations, evidence on demand, 24/7 on-call, and the full growth retainer with a dedicated engineer.

Sovereign details →

Want to see how your current setup maps onto the four layers?

The free audit produces exactly that diagram for your business, with the gaps and the missing records marked.