A hatcher.ltd product

Institutional software for organizations that were never supposed to afford it.

orgware gives a tribe, a nation, or a member organization the software a large institution has — a secure member portal, an authoritative record, transparent operations — built on the edge, running for a few dollars a month, with no servers to babysit.

901
Members enrolled
on the live roll
32 yrs
On the record
tribal governance since 1994
$0
This month's cloud bill
within Cloudflare's free tier
~20×
Headroom
before it costs a cent

Live from the waccamaw.org instance · updating…

What it is

Six services. One platform.

orgware is composed of small, independent pieces — most a single Cloudflare Worker, the rest managed integrations wired in as standard — so any one can fail or be replaced without taking down the rest. The public, visitor-facing site stays exactly where it is; orgware only takes over the moment someone signs in.

members-service

The member portal & record

Passwordless sign-in, the verifiable knowledge library, per-member API keys, the roll book, and a live cost console.

contact-service

Directory & outreach

A role-scoped contact directory for leadership and the public contact forms — stateful, no third-party form service.

meetings-service

Meeting archive & podcast

Recovered and ongoing minutes and transcripts, members-only until reviewed, with an Apple-compatible podcast feed.

corpus-mcp

The record, for AI

The same authoritative record exposed to AI assistants over a standard MCP endpoint — under the exact same access rules.

workspace

Email & identity

Org email and accounts on Google Workspace for Nonprofits — provisioned and managed by the agent in Slack through an admin MCP, no console to learn.

syndication

Publish once, everywhere

The public site publishes to the web and syndicates to your social channels in one step, so announcements reach members and followers together.

The rings of access
PUBLIC MEMBER LEADERSHIP

Gated by who you are, not which page you're on.

The same address shows different things to different people.

  • Public

    Anyone on the internet

    The visitor site, the museum, public records and minutes.

  • Member

    A signed-in member

    Adds the portal, the cleared record library, and a personal API key.

  • Leadership

    Elected leaders

    Adds the full record, the roll book, the directory, and the cost console.

The guarantee: nothing gated is ever sent to someone who hasn't signed in. Private pages aren't hidden with CSS — they're rendered by an authenticated Worker that returns nothing until it has verified your session.

◆ The first instance · in production

The Waccamaw Indian People run one of the most advanced digital operations of any tribe in the Carolinas — on waccamaw.org.

901 enrolled members with self-service records. A governing record reaching back to 1994 — 108 resolutions, the constitution, offices, and decisions, each traceable to a primary-source scan. A recovered meeting archive. A record that answers to AI assistants. All of it edge-hosted, and this month it cost $0 to run.

It is a working proof that a small nation can hold institutional-grade software — a member portal, a verifiable record, honest books — without an institutional budget, a server room, or a vendor contract that owns the door.

How it's built

The whole platform, on the edge.

orgware runs entirely on Cloudflare's edge. No servers to patch, no virtual machines, no monthly hosting bill beyond usage. Each part runs close to whoever's asking, backed by Cloudflare's own database, storage, and key-value store.

edge
Cloudflare Workers — every service is a single Worker; independent repo, deploy, and database binding.
data
D1 · R2 · KV — SQLite at the edge, object storage for source scans, key-value for rate limits.
access
One principal function — session cookie, API key, or JWT resolve to a ring; every page and query enforces it identically.
record
Provenance by default — an idempotent ingest turns a private git repo of documents into records with checksums and source scans.
backups
Three layers — 30-day point-in-time, nightly encrypted exports, and an off-site mirror to cold storage.
cost
Metered, in the open — leadership sees live usage against every free-tier limit. Nothing is hidden from the people who own it.
Built to outlast

A record meant to last as long as the tribe.

A tribe's record can't live or die with a database that corrupts or a vendor that folds. So orgware keeps it the way serious archives are kept — tracked primarily in Git, version by version, then replicated into cold storage nobody can quietly overwrite.

01

Git as the source of truth

Every record and its source scan lives in Git — an archival-grade way to manage data at scale, where each change is an immutable, attributed commit, the whole history stays recoverable, and every clone is a complete redundant copy. Nothing is ever silently overwritten or lost to a bad edit.

02

Redundant database backups

Point-in-time recovery across a rolling 30-day window, plus nightly encrypted exports — so the live database can be rebuilt to any recent moment, not just the last snapshot. The most sensitive data is encrypted at every hop, its key held offline.

03

Off-site cold storage — under $5 a month

Encrypted long-term archives replicated to Backblaze B2 and Amazon S3. Every piece of tribal data, held off-platform, hardened against hardware failure, vendor failure, and human error alike — all of it for less than five dollars a month.

Indexed and searchable back to the early 1990s — and no single point of loss anywhere in the chain.

Sovereignty through documentation

For a nation, a verifiable record is sovereignty.

Recognition, self-governance, and continuity all rest on the same foundation: records a government can stand behind. Scattered across binders, inboxes, and mutable cloud docs, they get waved off as informal. An auditable, independently-verified corpus — every resolution, election, and appointment, each anchored to a primary source — is the difference between a story and a standing.

orgware doesn't just store the record — it makes it defensible: provenance on every document, independent verification, and a transparent trail of how ambiguous records were adjudicated instead of silently flattened. The kind of record a reviewer, a court, or a federal panel can't hand-wave.

Run by the people who own it

Operated in plain language. Improved continuously.

The people who own the data operate and extend the platform by describing what they need — in their own Slack, in plain English. A resident agent triages every request against the live code, batches the work, and ships it, often the same day. Features and fixes don't wait for a quarterly release — they arrive in a steady stream.

Tribal administration · waccamaw.org — no code, no console
"The core true/false box isn't showing on the Roll Book."

Ember — the tribe's resident agent — triages that against the live code and the fix ships to production the same day. That's not a highlight reel; it's the ordinary cadence. In the run-up to launch the Roll Book alone grew from a flat list into a full editor — self-service fields, faceted filters, bulk actions, a provenance trail, a live cost console — request by request, in Slack.

6
services shipped
~30
features & fixes / 90 days
same-day
typical turnaround
v2.0.6
and counting · regular releases

Features and bug reports come in the same way — through Slack — and get triaged, batched, and shipped rapidly, no ticket queue. And because every instance runs orgware, the platform underneath keeps getting better on its own cadence: new capabilities and hardening arrive as regular updates, with no re-platform.

the interface

Plain language in

No admin console to learn, no queue to wait in. If you can describe it in a sentence — a new feature or a bug you spotted — you can ask for it. The conversation is the interface.

the engine

Handled in aggregate

Requests are triaged against the live code, batched, and shipped — often same-day. Always-on agents (OpenClaw) and Claude do the legwork; a human signs off. Nothing reaches production unsupervised.

the platform

Regular updates

orgware itself ships continuous improvements — every instance inherits new capabilities and security hardening without a migration or a re-platform project.

For builders & implementation teams

A delivery model, proven in production — not a slide.

orgware is what the composable, edge-native, agentically-built stack produces taken all the way to a shipped product. It's the successor to the PHP/Java monolith — the same composable-plus-edge-delivery model the big platforms now sell as their premium future, on open foundations, with no license fee and no lock-in. For any team — a heritage brand, a member organization, an institution — carrying decades of data on a platform it has outgrown, it's a working reference for where delivery is heading.

The licensed monolith
  • A licensed platform (PHP · Java · Adobe-class) owns every concern; one change risks all of it
  • Per-seat and per-instance license fees; hosting that scales against you
  • Customization fights the framework and its upgrade treadmill
  • The vendor owns the front door, the data model, and the roadmap
The composable edge model
  • Small independent services on the edge — replace or rebuild one in isolation
  • Open foundations, no license fee — commodity edge infra, a few dollars at scale
  • Deep customization is the default; the code is open and yours to shape
  • Agentic delivery compresses build-and-iterate to days — and the platform keeps updating

The successor to the PHP/Java monolith — composable, edge-delivered, open, and yours. Rivaling the builder and edge-delivery capabilities the incumbents sell as premium, without the license or the lock-in.The path the platform providers would rather you didn't consider.

What it costs to run

A subscription, not a meter.

The agentic layer runs on whatever you already pay for — Claude Code, Codex, GitHub Copilot, or any model API. Point it at a flat-rate coding subscription and the whole build-and-operate layer runs from about $20 a month. Hosting stays at $0. No per-seat licensing, no metered surprise, no vendor holding the meter.

$0
hosting · Cloudflare edge
~$20/mo
build + operate · on a subscription
0
per-seat licenses

The pitch is the proof. Everything on this page runs on the stack it describes. And because the platform is built to be legible to agents — small services, a single access rule, provenance by default — a coding agent gets productive in minutes and carries work from triage all the way to production. Higher data fidelity, more throughput, deeply-customized delivery, on infrastructure that doesn't bill you for existing.

The model

hatcher.ltd owns the software.
You own your record.

orgware is a product. Your organization's data, decisions, and history are yours — held in your own repositories, under your own clearance, on infrastructure in your name. The platform doesn't belong to any officer, any term, or any faction, and it doesn't wobble when leadership changes. It's software with an owner and a record with a home, kept deliberately apart.

Talk to us

Bring institutional software to your organization.

Another nation, a member association, or an implementation team looking for a better stack — start a conversation.

doug@hatcher.ltd →

If you're a tribe or a nonprofit that wants to learn more, reach out. The toolkit is free and open source — self-host it, or let us run it for you fairly and transparently, with full data portability and fit-for-purpose enterprise MCPs and models. Hands-on help when you want it. Either way it's yours: ownership and control, never a vendor's lease.

Built and maintained by Doug Hatcher — an enterprise architect at one of the world's leading digital agencies, a founding member of one of the most influential tribes in the state, with a lifelong commitment to excellence and to putting enterprise-grade software within reach of anyone who needs it.