Engineering & product studio — Casablanca
Anfa Dev Studio designs and builds government platforms, enterprise software, mobile apps and AI systems — from first spec to production, security included.
Trusted on critical work
Positioning
Most agencies build websites. We build the platforms behind them — national registries, multi-region HR systems, payment flows, marketplaces and AI that runs fully offline. Small senior team. No handoffs to juniors. Every line shipped by people who've done it before.
In numbers
Selected work
01Government
National workforce planning for the civil servants of Moroccan communes.
Spec authored, built, secured and deployed by us across 6 air-gapped servers (dev / preprod / prod). Includes an on-prem AI agent for job classification — local LLM and vector search, zero internet. Audit passed.
02Public utility
MyAOS + Expense Back-Office
Member portal and back-office for the employee association of SRM.
Configurable workflow engine with versioned circuits and SLAs, 27 cash desks with monthly closing, budgets, analytics, 15+ roles, append-only audit log, 2FA with trusted devices.
03Public utility
MyDEV
HR self-service platform, in production across many regions.
HR self-service for Morocco's regional water & electricity utility. Engineering team lead and security audits.
04Marketplace
A two-sided job marketplace for a US client, shipped end to end.
Flutter iOS / Android app, Node backend, React admin, AWS infrastructure, in-app subscriptions, location-based job search.
05Real estate
Website for a Moroccan real-estate group.
Designed and built in-house.
06SaaS
Business management system
One system for retail and hospitality — stock, sales, money and direct bookings.
Several organizations under one login, each with its own team and permissions. Hostels and short-stay rentals get rooms, calendars, reservations and a public booking storefront; double bookings are blocked in the database, not the UI.
Capabilities
Workflow engines, RBAC, audit logs, high-integrity data.
Node / Bun, Go, Java, PostgreSQL, Oracle, Redis
Dashboards, portals, back-offices, marketing sites.
Next.js, React, TypeScript
Store releases, payments, offline-first.
Flutter, React Native, Swift, Kotlin
On-prem and air-gapped LLMs, embeddings and semantic search, agents.
vLLM, pgvector, Claude / OpenAI
Pentesting, audits, hardening, TLS everywhere, air-gapped deployments.
Docker, CI/CD, AWS, nginx
Research, design systems, prototypes, brand.
Figma, design systems
Stack we ship with
How we work
01 — Spec
We write the spec, not just read it. Scope, data model, roles, risks — on paper before code.
Technical spec + arch diagrams
02 — Architecture
Threat model, access model, environments and data flows designed up front, not patched later.
Architecture & security dossier
03 — Build
Weekly demos and a shared repo. You see working software every week, not a status report.
Weekly demo + changelog
04 — Harden
Automated tests, load checks, a security review and fixes before anything reaches production.
Test report + security review
05 — Deploy
Cloud, on-prem or air-gapped. Monitored, documented and handed over properly.
Runbooks + handover docs
Sectors & engagement
Best for:A clear spec, a deadline and a budget to hold.
Best for:Ongoing product work, billed monthly, senior people only.
Best for:A project someone else started and couldn't finish. We audit it, stabilize it and ship it.
DifferentiatorBest for:Knowing where you stand before an auditor — or an attacker — tells you.
Studio
Senior engineer
Senior engineer
Senior engineer
UI/UX designer
We say no to work we can't do well.
We document everything we ship.
Security is not a phase.
Contact
