S / 01
Custom Software
Greenfield SaaS, EHR integrations, regulated mobile.
- TypeScript, Go, Elixir
- Postgres, Kafka, DuckDB
- iOS, Android, React Native
01 - North America · CA / US delivery
Pentabay builds secure, scalable, compliance-ready software for healthcare, fintech, enterprise and SaaS organizations. Since 2018 we have delivered 100+ projects across Canada and the United States - custom platforms, AI applications, cloud infrastructure and digital products engineered for long-term operation, not just launch.
02 - Select clients, 2018 to present
03 - Capabilities
Fixed-fee delivery when the scope is known, embedded teams when it is not. Either way you get named engineers, a written architecture, and an operating handover - not a resource pool.
S / 01
Greenfield SaaS, EHR integrations, regulated mobile.
S / 02
Retrieval, evals and agents built to stay inside your data perimeter.
S / 03
Multi-cloud platforms with data residency built in. No tickets, no toil.
S / 04
Design for clinical and operations workflows where errors cost.
S / 05
Native and cross-platform apps for clinical, field and consumer teams.
S / 06
Multi-tenant SaaS with the billing, identity and scale plumbing built in.
S / 07
Fast, accessible marketing sites that rank well and convert.
S / 08
Low-code builds when speed matters more than fully custom.
2018
Founded in Milton, Ontario
Incorporated in CA
100+
Projects delivered end to end
CA & US
5.0
Average verified client rating
Clutch, 11 reviews
6
Products operating in market
5 live, 1 beta
04 - Platform
We do not prototype on your budget. Each product below runs in market today, and the engineering patterns behind them - tenancy, audit, residency - are the same ones we bring to custom work.
| Product | What it does | Status | Where it runs |
|---|---|---|---|
 AVA |
Clinical messaging that behaves like infrastructure: every thread retained, every access logged, PHI kept inside the tenant your compliance team signed off on. | Live | pentabay.com/ava |
 Zentra |
HR, scheduling and credentialing for regulated workforces - licences that expire, shifts that must be covered by someone qualified, payroll that has to reconcile. | Live | pentabay.com/zentra |
 MyDart |
Consent-first marketing automation. Every send traceable to a recorded opt-in; patient data never crosses into a third-party marketing cloud. | Live | pentabay.com/mydart |
 WeGuard |
Continuous security and compliance posture for healthcare clouds: what is exposed, where PHI sits, and how today's configuration maps to your frameworks. | Live | pentabay.com/weguard |
 NEO |
AI agents that run where your data already lives. Retrieval scoped to the tenant, tools executed in a sandbox, every reasoning step recorded for review. | Beta | pentabay.com/neo |
 Trackme |
Time, attendance and field operations for teams that do not sit at desks: geo-fenced clock-in, central rosters, hours exported straight to payroll. | Live | trackme.pentabay.com |
05 - Compliance
We architect to control requirements from day one - data classification, retention, access logging, breach process - and hand you the evidence map your auditor will ask for.
PHIPAOntario PHI
PIPEDAConsent records
HIPAABAAs in place
SOC 2Trust criteria
GDPRDSAR handlingWording is deliberate: Pentabay designs to these frameworks and supports your certification and audit process. We do not claim to hold certifications on your behalf.
Canada residency
ca-central-1
PHIPA / PIPEDA tenants land in Canadian regions. Backups never cross the border unless your contract demands it.
U.S. residency
us-east-1
HIPAA-aligned tenants run in US-East / US-West with BAAs in place. Same code, same controls, separate data plane.
Jurisdiction
Pick yours
Canada (Ontario) or U.S. (Delaware) entity-of-record on the MSA. We map controls to your regulator, not ours.
06 - Reviews, verified
Every quote below is pulled verbatim from a public review on Clutch or Freelancer. We do not ghost-write testimonials.
Thanks to Pentabay's development work, the platform's performance improved significantly, and users appreciated the new user-friendly interface. Pentabay was incredibly responsive, and their technical skills were great.
Pentabay consistently delivered high-quality results on time, with creativity, technical expertise and user-centric design. Their level of engagement and willingness to go beyond expectations were impressive.
They went beyond what we had asked for to make sure we were completely satisfied. The whole engagement was smooth, responsive and genuinely collaborative.
They do not just quit at 5 o'clock - they go home when the work is done. That work ethic and ownership is exactly what a startup needs from a partner.
Talk to us
Send the regulator, the deadline and the integration you are afraid of. You will speak to an engineer who has shipped against those constraints before - not an account manager.