# Technical audit & architecture consulting

> A written review of a system you run or a decision ahead — architecture, data model, code, dependencies, security and operations — with findings in priority order.

Canonical: https://www.deusengineering.com/en/services/technical-audit-consulting · Language: en · Last updated: 2026-10-19

Review & continuity · [Services](https://www.deusengineering.com/en/services)

A technical audit is a written review of software you already run, or of a technical decision ahead. It covers architecture, data model, code quality and tests, dependencies, security posture and how the system is deployed and operated — and ends with findings in priority order, each with its trade-offs.

It fits before building further on an existing system, when inheriting one from another developer or agency, or when choosing between a rewrite and gradual change. Making the changes is a separate step — for example software modernisation & maintenance.

Outcome: What to fix first, what can wait — and why.

## Typical needs

- A major technical decision ahead, or doubts about an existing system
- Plans to build further on software no one has examined closely
- Technical risk that has to be explained to people who don’t read code

## What you receive

- A written review with prioritised findings and their trade-offs
- A recommended order of work, including what to leave as it is
- A short summary for decision-makers, with the technical detail behind it

## How the work runs.

1. Questions and scope: The review starts by agreeing which questions it has to answer — about a decision to make, a risk to size up or a system inherited from someone else — and which parts of the system it covers.
2. Reading the system: Code, data model and migrations, dependencies, access rules, secret handling and the deployment and CI setup are read directly, then checked against how the system is actually used and released.
3. Findings and trade-offs: Each observation is weighed against the agreed questions: what it puts at risk, how soon it matters and what fixing it would take. Sound parts are recorded too, so they are not changed without reason.
4. Sequence and walkthrough: Findings are ordered into a recommended sequence of work and walked through with you, in English or Serbian, so questions are answered before anything is changed.

## Technologies

- TypeScript
- Next.js
- Node.js
- PostgreSQL
- Python

The engineer who does this work is the founder, Filip Volf — you work with him directly. [About](https://www.deusengineering.com/en/about#founder)

## About this service.

### What does the written review contain?

A short summary for decision-makers, then the findings: for each one, where it is in the system, why it matters, how urgent it is, the options with their effort and risk, and a recommendation. It closes with a recommended sequence of work and a note of what is sound and should be left alone.

### How is a technical audit different from software modernisation & maintenance?

The audit ends with the written review: what to change, in what order and why. Software modernisation & maintenance is the change itself — upgrades and migrations in small, tested releases, then ongoing maintenance. One can follow the other, but the review stands on its own: you can act on it with your own developers or anyone else.

### What access does the review need?

Read-only access to the repository, database schema and migrations, and deployment and CI configuration, plus a conversation with whoever runs the system. Secret values are not needed; production data only if a specific question depends on it. The review covers TypeScript, Node.js, PostgreSQL and Python systems, and it does not test or change a live system.

## Related services

- [Software modernisation & maintenance](https://www.deusengineering.com/en/services/software-modernisation-maintenance): Taking over and maintaining software you already run — framework, dependency and database upgrades done step by step, while the system stays in use.
- [Security-aware architecture](https://www.deusengineering.com/en/services/security-architecture): Access control, data isolation and secure defaults designed into the architecture — in the data model, the file storage and the server, not added after launch.
- [APIs, backend architecture & PostgreSQL](https://www.deusengineering.com/en/services/api-backend-postgresql): Data models, APIs and server-side logic that keep business rules in one place — with PostgreSQL doing the work it is good at.

## Let’s talk about what you’re building.

Describe what you need built or fixed, how the work runs today and the constraints. You get clarifying questions or a first outline of the approach — by email, in English or Serbian.

Or write directly: contact@deusengineering.com · [Contact](https://www.deusengineering.com/en/contact)