Recent Case Studies

    Real problems, and what I did about them. The two most recent are products I built for myself and then opened up: one to AI agents, one to anyone living off grid and their agents. The rest is client work, from a condo tower that sold out before it was built to HIPAA email and Hawaii small business automation.

    Built for myself
    AI agents
    MCP
    Email follow-up

    I made a six-email follow-up tool for myself, then opened it up to agents

    Product: driptoolagent.com (my own product)Industry: Email follow-up / Tools for AI agentsLocation: Built on Hawaii Island, runs anywhere

    TL;DR

    After a consultation, the follow-up is the part nobody owns. I wrote six short emails to send to the people I had already talked to, and I got tired of retyping them. So I built Recontact at driptoolagent.com: six emails, written and previewed side by side, sent one a day to one person you already know. No signup. Then I opened the same tool to AI agents through a REST API and an MCP server, because an agent that has just finished a sales call has exactly the same problem I had.

    The Recontact editor on driptoolagent.com: six email tabs from day 0 to a thank-you on day 5, with subject, greeting, rich-text body and a closing question
    Read the full case studyOpen driptoolagent.com
    Built for myself
    Off-grid solar
    Offline PWA
    AI inside

    I made an off-grid power record for my own system, then opened it up to humans and agents

    Product: minigridmap.com (my own product)Industry: Off-grid solar / Field recordsLocation: Hawaii Island, four miles from pavement

    TL;DR

    I have lived off grid on Hawaii Island for 25 years. My power system was assembled over that time, and the record of it lived in a shoebox of receipts, a phone full of photos and my memory. GRID COMMAND at minigridmap.com is the record I wanted: every component by its label, what feeds what, what the loads cost, what is due, and the manuals, on my phone, with no signal. It needs no account and keeps your data on your device. I built it for myself and then opened it to other owners and to their AI agents.

    GRID COMMAND wiring map on minigridmap.com showing a 1,780 W solar array feeding a charge controller, a 12.8 V busbar, a 314 Ah battery bank and a 3,000 W inverter, with 165 W in use
    Read the full case studyOpen GRID COMMAND
    Interactive Sales Tool
    PropTech
    3D Visualization
    Pre-Construction Sales

    How an Interactive Web Application Sold Every Condo Unit Before Construction Began

    Client: Above Summit, LLCIndustry: Real Estate Development / PropTechLocation: Boston, Massachusetts

    TL;DR

    Above Summit hired me to build a web-based sales tool for the Stratus Residences condominium project in Boston. The application put real drone footage from each floor, interactive floor plans and photorealistic 3D interiors in front of buyers before a single wall was built. The sales team sold every unit pre-construction, which raised the capital to build.

    Rendered kitchen from the Stratus Residences sales applicationBook a Strategy Session

    "Every single person I shared this project with could not believe that the building had not yet been built. This type of realism and interactivity will become the norm for projects of this scale."

    - Brent Norris

    The Problem

    A large Boston condominium development had to sell all of its units before construction began in order to fund the project. The usual answer is a physical scale model: expensive, stuck in one sales office, impossible to update, and silent about what it is like to live in a specific unit.

    Why It Mattered

    A scale model costs far more than a digital one, cannot show the view from an individual unit, and offers no interactivity. Buyers had no way to see their actual balcony view, walk the finishes in their own unit, or feel how the amenity spaces would work. At this price point those are the things a pre-construction buyer needs before committing.

    The Solution: Step-by-Step

    Step 1: Immersive Drone-Captured Balcony Views

    Above Summit flew drones at each floor height around the not-yet-built site, so the application could show a buyer the real view from their future balcony at their exact elevation.

    • Real drone footage captured at each floor height around the building site
    • Buyers saw the actual view from their specific unit and floor
    • Video gave a sense of presence before construction began
    • Real footage replaced static renderings, which is what buyers trusted

    Step 2: Interactive Floor Plans with 3D Unit Exploration

    I converted the full set of architectural floor plans into interactive maps. A visitor clicks the 3D building exterior, picks a unit, opens its floor plan, and walks through photorealistic 3D interiors.

    • Architectural floor plans converted into clickable interactive maps
    • 3D interiors for every unit type, from kitchens to penthouse suites
    • Finishes, layouts and views explored per unit
    • Parking spaces and amenity areas included

    Step 3: Multi-Device Sales Office Deployment

    The application ran on large monitors, Apple TVs and iPads in the sales office, so the team could present to a group, then hand a buyer an iPad to explore on their own.

    • Large-screen monitors for group presentations
    • Apple TV for wireless display in the sales office
    • iPad for one-on-one buyer walkthroughs
    • Delivered on the web, so no app store and nothing to install

    Key Metrics

    100%

    Units Sold Pre-Construction

    3

    Platforms Deployed

    Fraction

    vs. Scale Model Cost

    Full Interactive

    Buyer Immersion

    Key Technical Stack

    Custom Web Application
    Interactive Floor Plans
    3D Model Integration
    Drone Video Integration
    Multi-Device Deployment (Monitor / Apple TV / iPad)

    The Result

    The Stratus sales team sold 100% of units before construction began, which raised the capital to fund the build. The application replaced the physical scale model at a fraction of the cost, and that was the difference for the client.

    Project Overview

    Interactive Sales Application

    Project Gallery

    Unit kitchen with quartz island, pendant lighting, and city views
    Unit kitchen with quartz island, pendant lighting, and city views
    Primary bath with dual vanity, frameless glass shower, and marble tile
    Primary bath with dual vanity, frameless glass shower, and marble tile
    Living room with floor-to-ceiling windows and neighborhood views
    Living room with floor-to-ceiling windows and neighborhood views

    3D renderings, animation, and floor plans courtesy of Above Summit, a full-service production studio built by creative risk takers.

    Let's Talk About Your Next Immersive Sales Tool

    From interactive floor plans to drone-integrated 3D walkthroughs, I build web applications that sell real estate before a single wall goes up.

    Start a Strategy Session
    Website Design
    Local SEO
    Construction

    Building a Digital Foundation for a Hawaii Contracting Business

    Client: Cabreros ContractingIndustry: Local Small Business DevelopmentLocation: Hawaii

    TL;DR

    Cabreros Contracting needed a professional web presence to compete for residential and commercial insulation and drywall work across Hawaii. I designed and launched a site built to convert, with local search optimization, so general contractors and property owners can find the company, review its work and request a proposal online.

    Cabreros Contracting website homepageBook a Strategy Session

    The Problem

    Cabreros Contracting, a residential and commercial acoustical insulation and drywall firm in Hawaii, had no website. The business ran entirely on word of mouth and was invisible to the homeowners and general contractors who search online for insulation and drywall subcontractors.

    Why It Mattered

    In Hawaii's construction market, general contractors and property owners vet subcontractors online before they pick up the phone. Without a site or any local search visibility, Cabreros was losing bids to competitors who showed up in Google, even where its craftsmanship and pricing were better.

    The Solution: Step-by-Step

    Step 1: Conversion-Focused Website Design

    I designed and built a site that shows the residential and commercial work and makes the next step obvious: see the work, request a proposal, make contact.

    • Mobile-first, responsive site with a project portfolio
    • Separate sections for residential and commercial services
    • Clear calls to action: Our Work, Request Proposal, Contact Us
    • Page speed and Core Web Vitals tuned, because they are ranking signals

    Step 2: Local SEO & Search Visibility

    Local search optimization aimed at the Hawaii construction queries that bring in qualified leads.

    • Optimized for local keywords: Hawaii insulation, drywall contractor Big Island
    • LocalBusiness structured data for rich search results
    • Meta tags and Open Graph for search and social sharing
    • Semantic HTML with a proper heading hierarchy

    Step 3: Brand Identity & Digital Presence

    A consistent brand across the site that reflects the company's professionalism and its Hawaii roots.

    • Company branding integrated with professional imagery
    • One visual language across every page
    • Proposal request workflow for lead capture
    • SSL and security basics in place from day one

    Key Metrics

    Launched

    Web Presence

    100%

    Mobile Optimized

    Active

    Local SEO

    Online

    Lead Capture

    Key Technical Stack

    Responsive Web Design
    Local SEO Optimization
    JSON-LD Structured Data
    SSL / HTTPS
    Core Web Vitals Optimization

    The Result

    Cabreros Contracting now has a professional presence that puts it in the running for Hawaii construction work. The site works as a lead generator around the clock: GCs and property owners can review the work and request a proposal without a phone call.

    Need a Website That Generates Leads?

    Whether you're a contractor, tradesperson, or local service business without a web presence, I build conversion-focused websites with local SEO that drive real inquiries.

    Start My Website Project
    HIPAA
    eDoc Compliance
    S/MIME
    Google Vault

    High-Stakes HIPAA & eDoc Compliance

    Client: Island Court Reporting (ICR)Industry: Law Firms & Judicial ServicesLocation: Hawaii Island

    TL;DR

    Island Court Reporting was delivering sensitive legal and medical transcripts on physical CD-ROMs and unmanaged OneDrive links. Outgoing email was tripping "Threat" flags, and there was no central retention system for eDoc discovery. I deployed S/MIME encryption, Google Vault for immutable retention, and a dual Shared Drive architecture, and the firm now runs a 100% digital, HIPAA-compliant workflow.

    The Problem

    Island Court Reporting (ICR) handles legal and medical transcripts that contain Protected Health Information (PHI). Files went out on CD-ROMs and unmanaged OneDrive links. Outgoing emails frequently triggered "Threat" flags at the recipient, and there was no central system to manage eDoc retention for long-term legal discovery.

    Why It Mattered

    In legal work, a data breach or a transcript that cannot be produced during discovery is not a technical failure. It is a federal HIPAA violation and a malpractice liability.

    The Human-Verified, AI-Driven Solution

    Step 1: S/MIME Digital Encryption

    I deployed S/MIME certificates across the whole team. The "green padlock" means every email is digitally signed and encrypted, which cleared the delivery flags immediately and met HIPAA's data-in-transit requirement.

    • Procured and installed S/MIME certificates for each staff email account
    • Configured clients for automatic digital signing and encryption
    • Cleared email "Threat" flags with verified certificate chains
    • Met HIPAA "Data in Transit" encryption requirements

    Step 2: Immutable eDoc Retention (Google Vault)

    Google Vault now preserves, searches and exports organization-wide data automatically, so ICR can answer an eDoc discovery request at once, including for items a user deleted.

    • Google Vault configured for automated organization-wide preservation
    • Instant search and export for eDoc discovery requests
    • Deleted items retained for legal compliance
    • Long-term legal discovery and archival requirements met

    Step 3: "Copy-Only" Security Workflow

    A dual Shared Drive design separates Internal Work from Client Shared. With external metadata and activity views switched off, counsel receives only the final document and never the internal version history.

    • Dual Shared Drive architecture: Internal Work vs. Client Shared
    • External metadata and activity views disabled on client-facing drives
    • Counsel receives only final documents, no internal history
    • PIN-based secure "Visitor Sharing" for non-Google users

    Key Metrics

    100%

    Digital Workflow

    HIPAA + eDoc

    Compliance Standard

    Enterprise Std

    Licensing

    Automated

    eDoc Retention

    Key Technical Stack

    Google Workspace Enterprise (HIPAA BAA)
    S/MIME Digital Certificates
    Google Vault
    DLP (Data Loss Prevention)
    GCP Secure Portal Integration

    The Result

    ICR moved from physical media to a 100% digital, HIPAA-compliant workflow. The firm runs on a lower licensing tier (Enterprise Standard) while keeping strong encryption and automated eDoc retention.

    Ready to Secure Your Firm?

    Legal and medical professionals cannot afford compliance gaps. I set up HIPAA-compliant email, eDoc retention and encryption that enables the work instead of slowing it down.

    Download My Custom Services GuideStart a Free Consultation
    Content Automation
    Trademark
    Brand Protection

    How We Automated Social Media and Protected a Hawaii Brand's Trademark

    Client: Miranda Country StoreIndustry: Local Small Business DevelopmentLocation: Big Island, Hawaii

    TL;DR

    Miranda Country Store now spends a fraction of the hours it used to on social media, with AI agents producing the weekly posts. While rebuilding that pipeline I also filed the ten-year renewal for the MIRANDA COUNTRY STORE trademark with the USPTO. I built the content automation, handled the renewal, and continue to provide fully managed hosting. The store cut its social media cost by about 80%.

    Miranda Country Store website homepageBook a Strategy Session

    The Problem

    Miranda Country Store, a locally owned Hawaiian retail institution on the Big Island, was spending hours every week creating and posting social media content by hand. At the same time its USPTO trademark for "MIRANDA COUNTRY STORE" was coming up for renewal, and nobody inside the store owned that deadline.

    Why It Mattered

    Without automation the store's weekly "Aloha Friday" presence was inconsistent. Some weeks the post went out, some weeks it did not, and the brand voice drifted across platforms. The trademark was the bigger risk: lose the "MIRANDA COUNTRY STORE" mark and decades of local brand equity are open to any competitor in Hawaii's retail market.

    The Solution: Step-by-Step

    Step 1: Weekly Content Automation Pipeline

    A repeatable workflow that generates, reviews and schedules the "Aloha Friday" social media and website posts.

    • Content calendar with recurring weekly themes
    • Templated posts that keep the "Locally Owned and Operated" branding consistent
    • Automated scheduling across social platforms
    • A review-and-approve step so a person still owns the voice

    Step 2: USPTO Trademark Renewal Management

    I managed the full USPTO renewal for "MIRANDA COUNTRY STORE."

    • Audited the registration status and renewal deadlines
    • Prepared and filed the USPTO Section 8 and 9 renewal documentation
    • Monitored the filing through approval
    • Set a calendar for future renewal milestones

    Step 3: Hosting & Email Infrastructure

    Ongoing hosting and email administration so the store's communications stay up.

    • Managed hosting environment and DNS
    • Business email accounts administered
    • Uptime monitored, hosting issues fixed before the store notices
    • SSL certificate renewals maintained

    Key Metrics

    ~80%

    Social Media Time Saved

    Renewed

    Trademark Status

    Weekly

    Posting Consistency

    Zero

    Hosting Downtime

    Key Technical Stack

    Content Automation Workflows
    USPTO Trademark Filing
    Email Administration
    SSL Certificate Management

    The Result

    Social media management time is down by about 80%, and the store's most valuable piece of intellectual property is secured for another ten years. The brand now shows up every week with very little manual effort.

    Want to Automate Your Business Operations?

    From social media automation to trademark protection and managed hosting, I help local businesses cut overhead and protect their brand.

    Automate My Business
    RBAC
    RLS
    Admin Dashboard
    AEO

    How We Built a Security-First AI Platform for AI Medical Innovation

    Client: Clinical Innovations AI, LLCIndustry: Healthcare AI / MedTechLocation: United States

    TL;DR

    Clinical Innovations AI needed to move from prototype to production with real access control. I implemented role-based access control, row-level security, a custom admin dashboard and answer-engine-optimized content, and delivered a platform ready for medical data handling and client acquisition.

    Clinical Innovations AI platform homepageBook a Strategy Session

    The Problem

    Clinical Innovations AI had a Phase 1 prototype of its medical AI platform and needed a secure, scalable Phase 2 production environment. The prototype had no access controls, no audit logging, and no search visibility to bring in enterprise healthcare clients.

    Why It Mattered

    A medical AI prototype without access controls is a regulatory liability. Without role-based access and row-level data isolation, one breach could expose patient-adjacent data and end the company's regulatory credibility before it reached its market. Zero search visibility meant zero inbound leads despite a strong product.

    The Solution: Step-by-Step

    Step 1: RBAC & Row-Level Security Implementation

    Access control and data isolation across the whole platform.

    • Role hierarchy: admin, clinician, researcher, read-only
    • Row-Level Security (RLS) policies at the database layer
    • Security-definer functions to prevent RLS recursion
    • Audit logging for every data access event

    Step 2: Custom Admin Dashboard

    An administrative interface for managing users, data and security operations.

    • Multi-tab admin UI with role management controls
    • Real-time security audit log viewer
    • User data management with search and filtering
    • Email notifications for security events

    Step 3: AEO & Semantic Search Optimization

    Public-facing content optimized for answer engines and semantic search.

    • JSON-LD structured data (Article, FAQPage, HowTo)
    • Content written for clinical AI search queries
    • Speakable specifications for voice search
    • Semantic HTML with a proper heading hierarchy

    Key Metrics

    RBAC + RLS

    Security Model

    100%

    Audit Coverage

    4 levels

    Role Tiers

    5 JSON-LD

    Schema Types

    Key Technical Stack

    RBAC / RLS Policies
    React + TypeScript
    Custom Admin Dashboard
    AEO / JSON-LD Structured Data
    Security Audit Logging

    The Result

    A secure, searchable platform ready for medical data handling and client acquisition, with a full audit trail, role-based data access, and content that AI answer engines can find and cite.

    Building an AI Platform That Needs Enterprise Security?

    From RBAC and Row-Level Security to admin dashboards and AEO, I build security-first platforms for healthcare, MedTech, and regulated industries.

    Discuss My AI Project

    What does Brent Norris do?

    Brent Norris is a Hawaii-based IT consultant who builds web applications, AI agents and the tools around them, HIPAA-compliant email and document systems, and automation for small businesses. He builds products for his own use first, such as a follow-up email tool for AI agents and an off-grid power record, and then opens them up. For clients he fixes security failures, automates the work that repeats, protects intellectual property, and ships web applications with real access control.

    Industries Served

    • AI agents and developer tools
    • Off-grid solar and field operations
    • Real Estate Development / PropTech
    • Law Firms & Judicial Services
    • Local Small Business Development
    • Healthcare AI / MedTech

    Frequently Asked Questions

    How does a web-based sales tool replace a physical scale model?

    A web application can show every unit's interior, the actual balcony view from drone footage, and interactive floor plans. A static model can do none of that. It also costs a fraction of a physical model and can be updated the day the project changes.

    What platforms can this type of application run on?

    The Stratus application ran on large-screen monitors, Apple TVs and iPads. Because it was delivered on the web it runs on any device with a browser, with no app store and nothing to install.

    Why does a construction subcontractor need a website?

    General contractors and property owners research subcontractors online before reaching out. A professional site with project examples, clear service descriptions and an easy way to make contact builds credibility and captures the leads that would otherwise go to a competitor who has one.

    What is local SEO and how does it help contractors?

    Local SEO makes your site show up for geographically specific searches like 'drywall contractor Hawaii.' It includes structured data, location-specific keywords and technical fixes that help Google connect your business with nearby customers who are actively looking for your services.

    How does S/MIME encryption resolve email threat flags for HIPAA compliance?

    S/MIME certificates put a verified digital signature on every email and encrypt the message. That clears the false "Threat" flags that unsigned mail triggers and satisfies HIPAA's Technical Safeguard requirements for transmitting electronic Protected Health Information (ePHI).

    What is Google Vault and why is it important for legal firms?

    Google Vault is an information governance and eDiscovery tool that automates the preservation, search and export of organization-wide data, including email, Drive files and chat. For a legal firm it means eDoc discovery requests and retention mandates can be met even for items a user has deleted.

    How can a small business automate social media without losing brand voice?

    Use a templated content pipeline with a review-and-approve step. The templates hold the brand constant (logo, tagline, tone) and the review step makes sure each post matches the current promotion before it is scheduled.

    How do you renew a USPTO trademark?

    File a Section 8 Declaration of Continued Use, and a Section 9 Renewal Application if you are between the 9th and 10th year, with specimen evidence that the mark is still in commercial use. The deadlines are strict and missing them can cancel the registration.

    What is Row-Level Security (RLS) and why does it matter for healthcare apps?

    Row-Level Security is a database-layer policy that limits which rows a user can read based on who they are or what role they hold. In a healthcare application it means clinicians see only their own patients' data, researchers see only anonymized datasets, and admins have audited oversight, which is what HIPAA-adjacent compliance requires.

    Have a Similar Challenge?

    If you need a tool an agent can use, an immersive sales application, HIPAA-compliant email, or automation for your Hawaii business, ask me the story. I will tell you what worked and what did not.

    Get a Free Consultation