AI-native delivery · Human-gated
Every requirement, traceable to working code.
Kotoh Labs builds secure, production-ready software for complex operational workflows. AI does the engineering volume; humans gate security, architecture, and money. You get a deployed system in weeks, not a deck. We also design and rebuild websites for nonprofits, public agencies and growing businesses.
Operating in production: Rx telehealth — 50 states · 7-figure payments · self-hosted data stack
In short
Kotoh Labs LLC builds secure, production-ready software and AI workflow automation with a human gate on security, architecture and money, and designs accessible websites for nonprofits and public agencies. Our systems run an Rx telehealth operation in all 50 states with 7-figure payment volume. We're a registered federal contractor (CAGE 25GS4), and you work directly with founder Ian Schechter.
01 — The delivery system
Watch a requirement become deployed code.
Every engagement runs the same pipeline: requirement → spec → build → gate → deploy → verify. Below is the control room every client gets, showing a real trace from our own operations. See how a pilot runs.
Kotoh control room
Trace: REQ-0847 — Refund mirror
- REQRefund mirror for ledger-only gatewaysopened from ops incident · 2026-05-11 · owner I.S.Tracked
- SPECSPEC-0847-03 — mirror refunds to ledger when gateway lacks refund API14 acceptance criteria · client-approvedApproved
- BUILDPR #412 — refunds: ledger mirror + reconciliation job+1,882 −214 · AI-authored · adversarial review passedMerged
- TEST2,409 passed · 0 failed · 0 skippedunit + integration + ledger-replay suite · 41sPass
- GATEPayment-path change — human approval requiredapproved · I. Schechter · 14:32Z · scope: refunds onlyHuman-gated
- DEPLOYprod · rc=0 · rollout 26s · rollback armed2026-05-12 · 14:36ZDeployed
- VERIFYRefund parity confirmed across 3 gateways · ledger delta $0.00verified against live ledger · monitored 72hVerified
Event log — live
- 14:36:12Z REQ-0847 · refund mirror — VERIFIED · ledger Δ $0.00
- 14:32:09Z REQ-0847 — GATE APPROVED · I. Schechter
- 13:58:41Z REQ-0846 · callback queue — DEPLOYED · rc=0
- 13:12:03Z REQ-0845 · intake routing — VERIFIED · 72h monitor clean
Every engagement ships with this view — it is part of the deliverable.
02 — Shipped & operating
Systems in production today.
No logo wall. These run daily — built and operated by Kotoh.
Telehealth patient portal serving prescription workflows across all 50 states
AWS ECS · HIPAA-conscious
Payments, subscriptions and double-entry bookkeeping on 7-figure annual volume
Stripe · Shopify · Custom ledger
Identity-verification and clinical-intake pipeline with automated case routing and human-review gates
IDV · Case routing
Sales CRM with MOTO payments, call-center integration, and timezone-aware callback automation
Spec→prod in days
Analytics platform with live financials, first-party marketing data, and ad generation and evaluation tooling
First-party data
Self-hosted customer-data and email platform, forked open-source, Temporal-backed
Replaced failing SaaS
Case studies and client work
A national telehealth company
A national telehealth platform, designed and built by our founder
A complete medical platform for an 8-figure telehealth business: prescription workflows in all 50 states and 7-figure annual payment volume.
Interior Foliage Design
Interior Foliage Design: lead-generation site and proposal generator
Lead-generation website for a family-owned NYC plant design firm, plus a custom proposal generator.
Beverage Boss
Beverage Boss: online store for a wine and spirits shop
Full online store for a New Haven wine and spirits shop, with delivery ordering and SMS sign-up.
LTV Commerce / Easy Protein
LTV Commerce: subscription management software and reporting tools
Subscription management software and internal reporting tools for a consumer subscription brand.
Zenture
Zenture: a CRM for a tech recruiting firm
Helped build the CRM a tech recruiting firm runs its business on.
Kotoh Home
Kotoh Home: private AI home assistants, built and run by Kotoh
Our own service: private AI home assistants, with an 85-page site and inquiry pipeline we built and run.
Longview Provisions
Longview Provisions: a B2B lead-generation brand, built and run by Kotoh
A B2B brand for a private label deli program: site, buyer guides, qualified quote form and outreach.
Valor Padel
Valor Padel: a 450+ page guide to padel clubs, rackets and the pro tour
A data-driven padel site: club directory, racket and gear database, and fact-checked pro-tour coverage.
03 — Where it hurts
You already know which process is bleeding.
It lives in email threads and a spreadsheet with one owner. The off-the-shelf tool covers half the workflow, and your team hand-carries the rest between systems that don't talk. The last vendor took six months and delivered a slide deck.
We build the system that actually runs the workflow — and we put our name on the deploy.
04 — Engagements
Three ways in. Real prices.
01 · 1 week
AI Workflow Audit
$5–10K
We find your most expensive manual process and hand you an implementation plan with real architecture, cost, and timeline. Not a strategy deck.
Deliverables
- Process map with fully-loaded cost of the current workflow
- Target architecture and integration plan
- Fixed-price pilot proposal you can hand to any builder
What we need from you
Three hours of your ops lead's time; read-only access where it exists.
Not right for you if
You want validation for a decision you've already made.
02 · 3–6 weeks
Production Pilot
$25–75K
A working, deployed system: portals, document processing, internal tools, integrations, AI-assisted operations. You log into it at the end.
Deliverables
- Deployed system in your cloud, or hosted by us
- Full trace: spec → code → tests → gated deploy
- Runbook, and handoff or managed operations
What we need from you
A named decision-maker and a weekly 30-minute gate review.
Not right for you if
Requirements can't be pinned to a spec yet — start with the audit.
03 · Ongoing
Managed AI Operations
$5–20K/mo
We host, monitor, and improve what we built. Human-reviewed automation, SLAs, and a live view of what the system did and why.
Deliverables
- Hosting, monitoring, and incident response
- Human-reviewed automation queue
- Control-room access and a monthly ship list
What we need from you
An escalation contact and a change-approval channel.
Not right for you if
You want staff augmentation by the hour.
Every engagement starts with the audit — unless you arrive with a spec. Website projects get a fixed-price proposal after a short call: see websites for nonprofits and public agencies and hosting and care plans.
05 — Case files
First-person past performance.
These are systems we built and run for our own companies — anonymized where needed. Full traces available on request.
Case 01 — telehealth, our own operation
A complete medical platform — secure checkout, patient portal, messaging, prescription workflows in all 50 states — for an 8-figure telehealth business.
Constraint — HIPAA constraints, live patients, zero-downtime migrations.
50 states · 8-figure revenue supported
Case 02 — analytics & marketing data
One dashboard for live financials and first-party marketing data, with ad-generation and evaluation tooling — replacing agency reporting.
Constraint — Numbers had to reconcile to the ledger, not the ad platform.
Live P&L · first-party attribution
Case 03 — ops incident, ledger reconciliation
Refund reconciliation across Stripe and Shopify ledgers, with partner API traffic cut ~95% during remediation.
Constraint — Live payment flows; no maintenance window.
~95% API load reduction · $0.00 ledger delta
06 — Government & regulated
Built for environments where mistakes are expensive.
Core competencies
- Custom software for operational workflows
- Document and case processing
- Secure system integration
- AI-assisted operations with human gates
- Public-sector websites and accessibility
Differentiators
- Requirement-to-deploy traceability
- Human-gated releases
- Operator past performance
- Weeks, not quarters
Registration
- Registered federal contractor, SAM.gov (active)
- UEI NU2GWESMFYR3 · CAGE 25GS4
- Primary NAICS 541511, custom computer programming
- Capability statement — PDF on request
Experience
- Healthcare platform built to HIPAA requirements, BAAs in place
- LegitScript-certified telehealth business
- Carrier-registered SMS (A2P 10DLC)
HIPAA-conscious architecture. FedRAMP and CMMC are known territory, not certifications held.
Government and teaming details · Government software development · Request the capability statement
07 — The operator
Founder-led. Operator-run.
Kotoh Labs is run by an operator whose own companies run on the systems above — daily, in production, under real constraints. Every claim on this page is software that exists and runs today. One principal signs every gate.
That operator is Ian Schechter. He founded a national telehealth company and designed and led the build of its entire platform, and before that launched, ran and sold three consumer brands. You work with him directly, from the first call through launch and support.
1 principal on every gate
Questions
Is AI writing the code?
Yes, most of it. AI does the engineering volume — implementation, tests, documentation. Humans hold named gates: security, architecture, and anything touching money or patient data. The control room records who approved what, and when.
We're regulated. Can you work with our data?
We've built and operate systems under HIPAA constraints and design HIPAA-conscious architecture by default, with BAAs in place. Data access is scoped in the audit; many builds need no production data at all.
What if the pilot misses?
The pilot is built against a spec you approved. If the deployed system doesn't meet it, you don't pay the final milestone. The spec exists so "done" isn't a matter of opinion.
Why not an agency, or a full-time hire?
An agency sells hours. A hire takes months and needs management. We sell a deployed system with a price and a date — and if a hire is actually your cheaper answer, the audit will say so.
Do you build websites, or only software?
Both. We also design and rebuild websites for nonprofits, public agencies and growing businesses, with WordPress builds, migrations, accessibility work and hosting.
Read our field guides: what AI workflow automation costs and human-gated AI, or browse all capabilities: nonprofit and public-sector websites, wordpress builds and migrations, accessibility (wcag 2.2 aa).
Find your most expensive manual process.
The audit takes one week, costs $5–10K, and ends with an implementation plan you could hand to any builder. Including us.