APIs & microservices: distributed architecture that actually scales
We design REST and GraphQL APIs, microservices and integrations across your systems (ERP, CRM, banks, SAT/CFDI, carriers) with message brokers, circuit breakers and observability — so you can retire the brittle point-to-point integrations that crash in production.
An API and microservices architecture splits your system into independent services that communicate through well-defined contracts (REST or GraphQL) and, where it fits, through asynchronous events via a message broker like RabbitMQ or Kafka.
Instead of a monolith you must redeploy in full for every change, or point-to-point integrations that break whenever a system changes, each service is deployed, scaled and fails in isolation.
The code and configuration are 100% yours from day one.
Six operational reasons, zero adjectives
The code is yours from day one
Repos in your name, documented CI/CD and zero vendor lock-in. If you leave tomorrow, you take it all, running.
WhatsApp API with an official provider
We are a Meta Tech Provider: your WhatsApp Business API line with no middlemen, and chatbots wired to your ERP.
Sprint delivery, CMMI 2 processes
A working demo every two weeks and measurable progress. No "it’s 80% done" without something you can click.
AI applied to your operation
LLM agents, RAG over your data and process automation — the same practice we use to run iTech itself.
Real nearshore: Texas + Monterrey
Legal entity in the U.S. (iTech Corp, Texas), contracts under U.S. law, same CST time zone and USMCA.
ERP with CFDI 4.0 invoicing
We implement Odoo with integrated SAT stamping (PAC), client portal and reconciliation — a full operation, not just software.
When you need it
What's included
API design & OpenAPI contracts
We define contracts first: resources, versioning, pagination, error handling and authentication, documented in OpenAPI/Swagger. The contract is agreed before coding, so frontend, mobile and third parties integrate in parallel with no surprises.
Microservices & message brokers
We split the system into single-responsibility services with asynchronous, event-based communication via RabbitMQ or Kafka when synchronous coupling is a risk. Each service is deployed and scaled on its own.
API gateway & orchestration
A gateway unifies entry, authentication (OAuth2/JWT), rate limiting and routing. We orchestrate flows across services and integrations so a slow provider doesn't degrade the whole system.
Resilient enterprise integrations
We connect ERP, CRM, banks, SAT/CFDI 4.0, payment gateways and carriers with a per-system adapter, instead of brittle point-to-point integrations you have to redo every time an endpoint changes.
Retries, circuit breakers & idempotency
Resilience patterns so an external failure doesn't cascade: retries with backoff, circuit breakers that isolate the failing service, retry queues and idempotent operations to avoid duplicate charges or orders.
API & credential security
Authentication and authorization (OAuth2/JWT, scopes, mTLS for service-to-service), input validation against the OWASP API Top 10, and management of integration secrets (bank keys, PAC tokens, carrier credentials) in a vault — never in code or loose variables. Deliverable: a documented security layer and a defined secret-rotation policy.
Observability & monitoring
Centralized structured logs, metrics, distributed tracing and alerts. When something fails you know which service, which integration and why — instead of guessing through scattered logs on each machine.
Versioning & documentation portal
A versioning strategy (without breaking existing consumers), controlled deprecation, and a living documentation portal generated from the OpenAPI, with examples and a sandbox environment so your integrators test without touching production.
How we work
1Systems & contract mappingDeliverablean integration map, each service's boundaries, and the API contracts (OpenAPI) agreed before writing any code
We inventory your systems, current integrations and pain points.
2Architecture & proof of conceptDeliverablean architecture diagram, ADRs, and a spike proving the riskiest piece works before committing the full scope
We design the distributed architecture (services, gateway, broker, event schema) and validate the riskiest integration with a functional prototype.
3Service-by-service buildDeliverableeach service deployed to staging with its OpenAPI contract and its tests green at the end of the sprint
We develop service by service in 2-week sprints with CI/CD from day 1, automated tests, mandatory code reviews and functional demos.
4Resilience & observabilityDeliverabledocumented chaos/failure tests and operational monitoring dashboards
We add retries, circuit breakers and idempotency, and put logs, metrics, tracing and alerts in place. We test the failure modes — what happens when the bank or SAT doesn't respond.
5Deploy & go-liveDeliverableservices in production, an operations runbook and the published API documentation portal
Controlled launch with Docker/Kubernetes, gradual rollout and a tested rollback plan.
6Delivery & handoverDeliverablecode that's 100% yours from the first commit, operations documentation and knowledge transfer — with no vendor lock-in
A handover session with your team, the full repository, access and 90 days of post-launch support.
Tech stack
The tools and platforms we build it with — chosen for your problem, not for hype.
Frequently asked questions
Can't find your question? Talk to an engineer — no sales script.
Contact us →Microservices or a monolith? Which one is right for me?
It depends on the problem, not the trend. If you have a small team and a bounded domain, a well-modularized monolith is often the right call and cheaper to operate. We recommend microservices when several teams need to deploy independently, different parts of the system scale at very different rates, or you need to isolate critical failures. We decide this during the systems-mapping phase rather than assuming the answer up front.
Can you integrate SAT/CFDI 4.0, banks and carriers?
Yes. We design each integration with its own adapter and resilience patterns (retries, circuit breakers, idempotency and queues), so a change or outage on the SAT, bank or carrier side doesn't take down your operation. We have experience connecting payment gateways and legacy systems — for example, in retail projects with Worldpay, Cybersource, PayPal, Mercado Libre and Kueski.
Do I need Kafka or RabbitMQ?
Not always. A message broker makes sense when you need to decouple systems, absorb traffic spikes or guarantee an event is processed even if a service is down. RabbitMQ fits task queues and reliable messaging well; Kafka, high-volume event streams with retention. If a synchronous REST call solves your case, we don't add infrastructure you don't need.
How do you keep integrations from crashing in production?
With versioned contracts (OpenAPI), retries with backoff, circuit breakers that isolate the failing service, idempotent operations to avoid duplicate charges or orders, and full observability (logs, metrics, tracing and alerts). We explicitly test the failure modes before go-live and validate quality with our internal ARIA platform.
How long does it take and how do you bill?
It depends on the number of services and integrations. A first set of APIs with a couple of critical integrations usually takes 8 to 12 weeks; a platform with several services and an event broker takes longer. We work with a fixed budget defined after systems mapping — no hourly billing, no ambiguous scope — and deliver in phases with demos every 2 weeks so you see value early.
Do I own the code and documentation?
Yes, 100%. All code, OpenAPI contracts, architecture docs, access and environments are yours from the first commit. We work with a CMMI Level 2 certified process and over 200 delivered projects — no vendor lock-in: if tomorrow you want another team to operate it, you have everything you need.
More from Software factory
Get your AI assessment in 3 minutes
No sales meetings. Answer a few questions and get an actionable plan — with the option to book directly with an expert.
Free · 3 minutes · no commitment