Loan processing platforms
Typically many processes and channels on one data set, connections to third parties and changes that have to go live without downtime. Also directly for banks.
Experience with production systems
Our engineers have worked on business-critical platforms that have grown over many years, for example for loan processing, mortgage financing and leasing.
- ColdFusion and Lucee in production systems since 2015
- Adobe ColdFusion 9 to 2025 and Lucee 5, 6 and 7
- Full stack and DevOps since 2012
System types our engineers have worked on
We describe typical features of these systems.
-
-
Mortgage financing platforms
Applications pass through several steps, with many interfaces and checks that must leave a traceable record.
-
Leasing platforms
Contracts have long terms, calculations have many special cases, and data is reconciled between systems.
-
Systems that generate documents and contracts
Our engineers have programmed logic that fills in variables and chooses text variants depending on the case, with PDF output.
-
Web services of companies that work for the public sector, cultural institutions included
The applications run for a long time, follow fixed review cycles and place high demands on availability and traceability.
-
Video portals with streaming and conversion
Large volumes of video are uploaded, converted automatically into several formats and delivered to many viewers at once; queues and storage have to grow with them.
-
High-traffic news and classifieds portals
Many requests for few pages, load peaks at fixed times, caching, search and image processing; operations decide the reach.
Technologies: focus on ColdFusion and Lucee, plus PHP and Linux
Areas and versions (As of 2026-10)
| Area | Scope |
|---|---|
| CFML | Adobe ColdFusion 9 to 2025, Lucee 5, 6 and 7, ColdSpring and our own frameworks; in production systems since 2015 |
| PHP | PHP with Smarty, Slim and WordPress since 2012, plus jQuery in long-running front ends |
| Databases | MySQL and MariaDB since 2012, also in a Galera cluster, migrations such as Firebird or MS SQL to MariaDB |
| Further databases | Microsoft SQL Server, PostgreSQL and Oracle |
| Linux and virtualisation | Debian and Ubuntu, in migrations also CentOS, KVM and Proxmox, Docker; Windows Server with IIS in production since 2015 |
| Network, security and logs | Firewalls and segmentation, VPN for administrative access, WAF with rules adapted to the application, Loki and Grafana |
| Postfix and Dovecot, systems for transactional email | |
| JavaScript and TypeScript | React, Next.js and TypeScript on Node.js |
| Python | FastAPI |
Tasks our engineers have solved
-
From Windows and IIS to Linux with Apache
Linux servers have different fonts from Windows, so PDF documents can look different. Our engineers check fonts and page sizes before and after the switch.
-
From Adobe ColdFusion to Lucee
Lucee lacks some of the functions specific to Adobe ColdFusion. Our engineers check them before the switch and test the application afterwards.
-
Moving databases between systems
For example from Firebird or MS SQL to MariaDB. Our engineers know the differences between MariaDB and MySQL.
-
Galera clusters for MySQL and MariaDB
Our engineers set up and run Galera clusters. If one server fails, the others keep working.
-
Self-hosted mail servers and transactional email
Our engineers run Postfix and Dovecot servers and systems for transactional email, for virtually all the clients they support.
How we approach a long-running system
-
Record the current state
We record versions, dependencies, access, backups, scheduled tasks, data sources and mail routes.
-
Draw up a plan
We rank the risks, weigh staying put against updating and migrating, and state the effort in working days.
-
Operate or modernise
After that we look after the system on an ongoing basis or modernise it step by step. We recommend a rewrite only if it pays off. Code, access and documentation stay with you.
Which starting position is closest to yours?
-
Your developer has resigned or already left, and the system has to keep running. We review the system and give you a written report 48 hours after access: its state, the immediate risks and a plan for the first 30 days.
-
Your system runs, but nobody knows it in detail. We record application, database, server and email, assess the risks, recommend the next step in writing and, if you wish, take over operations.
-
According to Adobe, ColdFusion 2021 has received no security patches since 10 November 2025. We compare four routes: stay and harden, update, move to Lucee or replace the system step by step, with dates and risks (As of 2026-10).
-
Security updates for PHP 8.2 end on 31 December 2026, and for PHP 8.1 and older they have already ended (As of 2026-10). We move long-running PHP applications, including those with Smarty templates and jQuery front ends, to PHP 8.4 or 8.5 and test every stage.
-
You want contracts, quotes and forms generated as PDF from your system's data, but their text depends on the individual case. We build a dedicated service with variables and text variants, which your system calls through an interface, without rebuilding the core of your software.
Projects described in detail
-
Email deliverability for four company domains
A mail server for four company domains signed nothing, published no DMARC policy and was rejected by Microsoft. Our engineers audited it, piloted the change on one domain and rolled it out in batches. The result: all three checks pass at Gmail, the Microsoft block was lifted, and the users noticed nothing.
-
A spam filter that ran but did not protect
Services up, configuration valid, no errors in the system status. Yet phishing landed in the inboxes while partners' newsletters went to spam. Our engineers measured which detection mechanisms actually fired, repaired the causes, and three months later found and fixed a regression that only showed up hour by hour.
-
A photo upload app for wedding guests
Wedding guests scan a QR code, open one secret address and upload photos and videos straight from the phone: no app, no account, no login. Files of up to 5 GB land on the client's own disk, and the couple watches the gallery fill up during the party. One evening, no second chance, and phones from six years back.
-
A shop flooded by bots that looked like customers
A WooCommerce shop with 52 products loaded slowly or not at all. The cause was a paid network of bots sending tens of thousands of requests an hour, each from a different home address, and every single bot behaved perfectly. Our engineers stopped the traffic at the edge of the network, and when the bots changed tactics a month later, the second rule took the load off within two minutes.
-
ColdFusion 2025 in production behind Apache: five traps that are not obvious
We prepared a production installation of Adobe ColdFusion 2025 on Debian 12, behind an Apache 2.4 that already serves several other sites. The installation itself takes 34 seconds. The attention went into the connector and the configuration details that are easy to miss: an error 503 caused by IPv6, mappings that reach into every virtual host, and a profile that quietly adds a debugger.
-
ColdFusion under load: diagnosing and fixing the JVM heap space error
An Adobe ColdFusion application ran without complaint at low traffic and returned errors and slowed down at peak hours. We reproduced the problem on a real database, measured the exact point at which the JVM heap runs out, and fixed the memory configuration, with the same load test before and after as the proof.
-
SQL indexes in a shop database: from full scans to microseconds
A shop database without indexes worked as long as the tables were small. At 500 000 orders and 1.75 million order items every filter and every join came down to a full scan. We measured exactly what the missing indexes cost, added the right ones, and documented the traps that make an index useless even though it exists.
-
PHP 8.2 and the 30-second limit: pages waiting for the session lock
Web portals · 4 hours
After the move from PHP 7.4 to PHP 8.2, the same page loaded normally one moment and failed after 30 seconds the next. We rebuilt both versions side by side and found the cause: about 20 parallel AJAX calls of one user waited for the lock on the session file, one after another. Fixed with one line per script, without rewriting the application.
Questions clients ask us about our experience
Do you only know Adobe ColdFusion, or Lucee as well?
Both. Our engineers have worked continuously with ColdFusion and Lucee in production systems since 2015. That covers Adobe ColdFusion from version 9 to 2025 and Lucee 5, 6 and 7. We also work with ColdSpring, custom frameworks and migrations from Adobe ColdFusion to Lucee.
Do you do frontend and backend, or backend only?
Both. Our engineers have worked as full-stack developers since 2012. Typical tasks are a new frontend for an existing backend and the maintenance of jQuery frontends that have grown over the years. For new projects we recommend a front end on Node.js, for example with Next.js and React. We discuss in the intro call whether that suits your system.
Do you have experience with Linux and Windows Server?
Linux is our main platform: Debian and Ubuntu, web servers, database clusters and virtualisation with KVM and Proxmox. We have run Windows Server with IIS in production since 2015. We recommend moving to Linux unless you prefer to stay with Windows.
Do you build and integrate APIs (REST, SOAP)?
Yes. We build APIs and connect systems, with REST and JSON as well as SOAP and XML, including the synchronisation of data between applications. Typical use cases are described under Development and integration.
In 20 minutes we work out which first step fits your system
You tell us the goal and the current state, and we say openly whether and how we can help. Reply within one working day, no obligation.
Phone (German, Polish, English)
+48 501 250 220
Email
Email
Reachable: Monday to Friday, 9:00 to 17:00 Central European Time; support and emergencies around the clock (24/7)