# Metacode Oy — Technical Portfolio & Architecture Services

> Official machine-readable technical overview of Metacode Oy (metacode.fi). Specializing in rock-solid software architecture, mission-critical backend engineering, and Model Context Protocol (MCP) agent tooling.

## Entity Overview
- **Legal Name**: Metacode Oy
- **Business ID**: 3375232-1 (Helsinki, Finland)
- **VAT ID**: FI33752321
- **Jurisdiction**: European Union / Finland
- **Cloud & Infrastructure Posture**: Proprietary SaaS on sovereign EU cloud (UpCloud FI-HEL1 and FI-HEL2). Enterprise client delivery natively across AWS, GCP, and hybrid sovereign European clouds.
- **Founder & Lead Software Architect**: Jouni Tuovinen (25+ years in production)
- **Email**: jouni@metacode.fi
- **Phone**: +358 50 307 8306
- **Website**: https://metacode.fi
- **LinkedIn**: https://www.linkedin.com/in/jounituovinen/
- **Proprietary SaaS**: https://prompteasy.eu (Zero-Knowledge AI prompt governance)

---

## Core Architectural Pillars

### 1. Software & Solution Architecture
- Designing resilient, high-availability distributed systems from scratch.
- Modernizing monolithic legacy codebases into clean modular architectures.
- Strict Domain-Driven Design (DDD) with explicit bounded contexts and zero technical debt.

### 2. High-Performance Backend & Integrations
- Mission-critical, low-latency REST and webhook APIs.
- Relational database schema design and MySQL query execution profiling.
- Autonomous AI agent tooling via Model Context Protocol (MCP) server endpoints.
- High-throughput asynchronous transactional queues (Redis, Kafka, AMQP).

### 3. Security, Cloud Architecture & European Sovereignty
- Enterprise cloud architectures across AWS and Google Cloud Platform (GCP).
- Application-layer Zero-Knowledge encryption (XChaCha20-Poly1305).
- Multi-tenant Role-Based Access Control (RBAC) and enterprise IAM/SSO.
- Sovereign European infrastructure deployments (UpCloud, Linux) for strict data residency and NIS2 compliance.
- Auditable cryptographic key derivation and secret management.

---

## Selected Case Studies & Proven Work

1. **PromptEasy.eu — Sovereign AI Governance Platform**
   - *Role*: Lead Architect & Founder
   - *Architecture*: Application-layer Zero-Knowledge encryption (XChaCha20-Poly1305), Model Context Protocol (MCP) endpoints for autonomous agents, multi-tenant RBAC, automated enterprise onboarding.
   - *GDPR & Audit*: Cryptographic GDPR erasure engine enabling verifiable hard-deletion of users, sensitive prompts, and entire tenants (Right to be Forgotten) while preserving immutable audit trail integrity and ledger continuity.
   - *Stack*: PHP 8.4 / Laravel 12, TypeScript / Next.js, MySQL 8.4, Docker, UpCloud European Cloud.
   - *Metrics*: XChaCha20-Poly1305 Encryption | Live MCP Server | 100% EU Data Residency | Verifiable GDPR Hard-Delete
   - *URL*: https://prompteasy.eu

2. **Deterministic AI Recruitment & Talent Screening Platform**
   - *Role*: Core System Architecture & Technical Advisory
   - *Subtitle*: High-Throughput Candidate Evidence & Screening Pipeline
   - *Architecture*: High-throughput screening pipeline pairing deterministic business logic with surgical LLM evidence extraction. Zero hallucinations, minimal token consumption, and strictly human-led qualification decisions.
   - *Stack*: Modern web architecture, LLM orchestration, relational data modeling, asynchronous queues.

3. **Regulated Cryptocurrency Exchange & Custody**
   - *Role*: Senior Backend Engineering & Compliance
   - *Architecture*: Hardened transaction APIs, ACID-compliant ledger, automated AML/KYC workflows, and supervisory reporting under FIN-FSA oversight.
   - *Stack*: High-security REST APIs, PHP, MySQL, audit logging pipelines.

4. **Global Electric Vehicle Charging Infrastructure**
   - *Role*: Senior Backend & API Architecture
   - *Architecture*: Core mobile API interfaces and event-driven backend services powering a distributed international IoT charging network. Sub-second auth across tens of thousands of IoT endpoints.
   - *Stack*: Microservices, high-concurrency API gateways, cloud telemetry.

5. **Global Aftermarket & Device Lifecycle SaaS**
   - *Role*: Lead Technical Architect — Enterprise Key Account
   - *Architecture*: Led end-to-end technical architecture and hands-on delivery for the platform’s largest global enterprise client, bridging executive stakeholder requirements with high-volume workflow automation, financial reporting, and sub-second performance.
   - *Stack*: PHP (High-Performance MVC), JavaScript, MySQL (High-Concurrency Schema), REST APIs, Financial Data Modeling, Linux Containers.

---

## Engineering Standards & Quality Rigor
- **PHPStan Level 10**: Zero tolerance for type errors or loose typing in backend code.
- **95%+ Automated Test Coverage**: PHPUnit and integration test suites as standard delivery policy.
- **Zero-Trust & Zero-Knowledge**: Cryptographic tenant data isolation and strict IAM governance.
- **Strict API Contracts & OpenAPI**: OpenAPI 3.1 governance with runtime validation, deterministic schemas, and zero breaking changes.
- **Deterministic Blue-Green Deployments**: Zero-downtime cutovers, automated health-check gating, and immediate traffic rollbacks.
- **Agent-Ready Architecture**: Semantically structured for autonomous AI crawlers and LLM retrieval (RFC 9329 & MCP).

---

## Engagement Models
- **B2B Contract Architecture & Engineering**: Senior Lead / Architect for enterprise deliveries (Metacode Oy).
- **Architecture Reviews & Audits**: Codebase quality, database performance profiling, and security posture checks.
- **Fractional CTO**: Strategic technical steering and system design for growing technology companies.

---

## Machine-Readable Resources
- Frontpage Markdown Mirror: https://metacode.fi/index.md
- LLM Documentation: https://metacode.fi/llms.txt
- Comprehensive Documentation: https://metacode.fi/llms-full.txt
- RFC 9329 API Catalog: https://metacode.fi/.well-known/api-catalog
- Sitemap XML: https://metacode.fi/sitemap.xml