News Letter

The Infiniti Tech 
News Letter 

Engineering-led writing on software, cloud, security and AI for growth-stage US and UK leaders. New editions added regularly — read the latest below.

Fractional Engineering Teams: A CTO's Guide for 2026
Hiring8 min read

Fractional Engineering Teams: A CTO's Guide for 2026

When growth-stage CTOs in the US and UK choose a fractional engineering team over hiring, what they actually gain — and what tradeoffs to negotiate up front.

May 20, 2026Read →
SOC 2 in 90 Days: The Engineering-Led Playbook
Security10 min read

SOC 2 in 90 Days: The Engineering-Led Playbook

How a senior engineering team can take a growth-stage SaaS company from zero SOC 2 controls to a Type I attestation in 90 days — without buying a compliance platform.

May 25, 2026Read →
The Real Cost of an In-House Engineering Team: US vs UK
Hiring9 min read

The Real Cost of an In-House Engineering Team: US vs UK

What a 6-person engineering team actually costs in New York and London once you add recruiting, ramp-up, management and attrition — and when that spend is worth it.

June 2, 2026Read →
The 2026 Build vs Buy Decision Framework for Growth-Stage CTOs
Engineering9 min read

The 2026 Build vs Buy Decision Framework for Growth-Stage CTOs

A practical framework for deciding when to build custom software, when to buy off-the-shelf, and when to do both — with the hidden costs most teams miss on each side.

June 2, 2026Read →
How to Hire an AI Consulting Partner: A Buyer's Guide for 2026
AI8 min read

How to Hire an AI Consulting Partner: A Buyer's Guide for 2026

What to look for, what to ask, and the red flags to avoid when choosing an enterprise AI consulting partner — from a team that ships LLM and agent systems to production.

June 2, 2026Read →
AWS Cost Optimization: 12 Levers for SaaS at $5M–$50M ARR
Cloud10 min read

AWS Cost Optimization: 12 Levers for SaaS at $5M–$50M ARR

The 12 levers that cut a growth-stage SaaS company's AWS bill by 30–50% — from rightsizing and savings plans to data-transfer and architecture fixes — without slowing the team down.

June 3, 2026Read →
RAG vs Fine-Tuning vs Agents: Choosing the Right LLM Pattern in 2026
AI9 min read

RAG vs Fine-Tuning vs Agents: Choosing the Right LLM Pattern in 2026

How to choose between RAG, fine-tuning, and agents for an enterprise AI system — with a decision tree, cost benchmarks, and the mistakes that cost teams 3–6 months.

June 4, 2026Read →
Kubernetes or Serverless? The 2026 Decision Tree for Growth-Stage CTOs
Cloud10 min read

Kubernetes or Serverless? The 2026 Decision Tree for Growth-Stage CTOs

When to run Kubernetes, when serverless cuts cost, and how most growth-stage companies use both — with a four-factor decision framework and cost benchmarks.

June 5, 2026Read →
What "Production-Ready" Actually Means (and Why Most MVPs Aren't)
Engineering9 min read

What "Production-Ready" Actually Means (and Why Most MVPs Aren't)

A concrete definition of production-ready software — the checklist a growth-stage team should clear before calling an MVP done, and where most fall short.

June 4, 2026Read →
HIPAA-Compliant Software Architecture: Patterns That Hold Up
Security10 min read

HIPAA-Compliant Software Architecture: Patterns That Hold Up

The architecture patterns that make healthtech software genuinely HIPAA-compliant — encryption, access control, audit logging, and PHI isolation that survive an audit.

June 6, 2026Read →
AI Agents in Production: Lessons from 10 Enterprise Rollouts
AI10 min read

AI Agents in Production: Lessons from 10 Enterprise Rollouts

What separates AI agent projects that reach production from the ones that stall in demo — evaluation, scope, guardrails, and human oversight, drawn from real enterprise rollouts.

June 7, 2026Read →
Technical Due Diligence for a Series B Raise: The CTO's Checklist
Hiring9 min read

Technical Due Diligence for a Series B Raise: The CTO's Checklist

What investors' technical diligence teams actually inspect before a Series B — architecture, security, delivery, and team risk — and how a growth-stage CTO gets ahead of it.

June 11, 2026Read →
Building a Private AI Assistant on Your Own Data: Architecture & Pitfalls
AI10 min read

Building a Private AI Assistant on Your Own Data: Architecture & Pitfalls

How to build a private, secure AI assistant grounded in your company's own data — the retrieval architecture, access control, and the pitfalls that sink most internal LLM projects.

June 12, 2026Read →
ISO 27001 vs SOC 2: Which Compliance Path for US & UK SaaS in 2026
Security9 min read

ISO 27001 vs SOC 2: Which Compliance Path for US & UK SaaS in 2026

SOC 2 or ISO 27001 — or both? A practical 2026 guide for US and UK SaaS founders on which security certification your buyers actually want, what each costs, and how to sequence them.

June 15, 2026Read →
Edge Computing for SaaS: When the Latency Is Worth the Complexity
Cloud8 min read

Edge Computing for SaaS: When the Latency Is Worth the Complexity

Edge computing promises lower latency and resilience, but adds real operational cost. A pragmatic 2026 guide for SaaS CTOs on when the edge pays off — and when a good CDN is enough.

June 16, 2026Read →
Monolith to Microservices Without Freezing the Roadmap
Engineering9 min read

Monolith to Microservices Without Freezing the Roadmap

How to migrate a monolith to microservices incrementally — using the strangler pattern — without a risky big-bang rewrite or a multi-quarter feature freeze that stalls the business.

June 17, 2026Read →
Multi-Tenant SaaS Architecture: Pooled, Siloed, or Bridge
Engineering9 min read

Multi-Tenant SaaS Architecture: Pooled, Siloed, or Bridge

The three multi-tenancy models for SaaS — pooled, siloed, and bridge — and how to pick the one that fits your security, cost, and scaling needs without painting yourself into a corner.

June 22, 2026Read →
Zero-Downtime Database Migrations: No Maintenance Window Required
Engineering8 min read

Zero-Downtime Database Migrations: No Maintenance Window Required

How to ship schema changes to a live production database with zero downtime — using the expand-and-contract pattern, backfills, and dual writes instead of a 2am maintenance window.

June 23, 2026Read →
GDPR for US SaaS Selling into the UK & EU: A Practical Guide
Security9 min read

GDPR for US SaaS Selling into the UK & EU: A Practical Guide

What a US SaaS company actually has to do to sell into the UK and EU under GDPR — lawful basis, data transfers, DPAs, subject rights, and the engineering work behind compliance.

June 24, 2026Read →
LLM Cost Control: Cut Your AI Bill Without Cutting Quality
AI8 min read

LLM Cost Control: Cut Your AI Bill Without Cutting Quality

The levers that bring a runaway LLM bill under control — model routing, prompt caching, context discipline, and output limits — without users noticing a drop in quality.

June 25, 2026Read →
Disaster Recovery for SaaS: Setting RTO/RPO You Can Actually Hit
Cloud8 min read

Disaster Recovery for SaaS: Setting RTO/RPO You Can Actually Hit

How to build a disaster recovery plan for SaaS around honest RTO and RPO targets — backups you've actually restored, tested failover, and a runbook that works at 3am.

June 26, 2026Read →
Securing LLM Applications: Prompt Injection and the OWASP LLM Top 10
AI10 min read

Securing LLM Applications: Prompt Injection and the OWASP LLM Top 10

How to secure a production LLM application against prompt injection, data leakage, and the OWASP LLM Top 10 — the threat model, the defenses that work, and the ones that don't.

June 30, 2026Read →
The EU AI Act for US and UK SaaS: A Practical Compliance Guide
AI9 min read

The EU AI Act for US and UK SaaS: A Practical Compliance Guide

What the EU AI Act actually requires of US and UK SaaS companies that ship AI features — the risk tiers, the obligations that apply to most products, and the timeline.

July 1, 2026Read →
Observability for Growth-Stage SaaS: Logs, Metrics, Traces, and On-Call
Engineering9 min read

Observability for Growth-Stage SaaS: Logs, Metrics, Traces, and On-Call

How to build observability for a growth-stage SaaS — the three pillars, what to instrument first, SLO-based alerting, and an on-call rotation that doesn't burn your team out.

July 2, 2026Read →
Scaling PostgreSQL: When to Tune, When to Replicate, When to Shard
Engineering10 min read

Scaling PostgreSQL: When to Tune, When to Replicate, When to Shard

A practical order of operations for scaling PostgreSQL under a growing SaaS — indexing and tuning, connection pooling, read replicas, partitioning, and when sharding is finally worth it.

July 3, 2026Read →
PCI DSS for SaaS: What You Actually Need to Handle Card Payments
Security9 min read

PCI DSS for SaaS: What You Actually Need to Handle Card Payments

What PCI DSS actually requires of a SaaS company taking card payments — how to slash your scope, which SAQ applies, the merchant levels, and the obligations you keep even with Stripe.

July 6, 2026Read →
Feature Flags and Progressive Delivery: Ship Faster Without the Blast Radius
Engineering8 min read

Feature Flags and Progressive Delivery: Ship Faster Without the Blast Radius

How feature flags and progressive delivery let you deploy continuously and release safely — canaries, percentage rollouts, kill switches, and the flag debt that quietly rots a codebase.

July 7, 2026Read →
Model Context Protocol: Building Agentic Integrations That Don't Break
AI8 min read

Model Context Protocol: Building Agentic Integrations That Don't Break

What the Model Context Protocol (MCP) is, why it's becoming the USB-C of AI integrations, and how to build and secure MCP servers that connect your agents to real tools and data.

July 8, 2026Read →
Incident Management and Blameless Postmortems: Turning Outages Into Reliability
Engineering8 min read

Incident Management and Blameless Postmortems: Turning Outages Into Reliability

A practical incident management playbook for growth-stage SaaS: severity levels, the incident commander role, on-call that doesn't burn people out, and blameless postmortems that actually prevent repeats.

July 9, 2026Read →
Secrets Management and Key Rotation: Stop Leaking Credentials
Security8 min read

Secrets Management and Key Rotation: Stop Leaking Credentials

How to store, rotate, and control access to secrets in a SaaS environment — why credentials belong in a vault not a .env file, what real rotation looks like, and how to contain a leak.

July 10, 2026Read →

Working on something we should write about?

If your team is wrestling with a problem we have seen before, we usually have notes.

Start a conversation