The Fourths
Amalfi Outsourcing
This proposal is confidential. Enter your access code to continue.
Incorrect code. Try again.
TF-AMALFI-001
12 MAY 2026
CONFIDENTIAL
12 MAY 2026
CONFIDENTIAL
Digital Partnership Proposal
Amalfi
Outsourcing.
What we found in your infrastructure — and what a real systems partner could change.
Overview
What we found
in your infrastructure.
R500K
Monthly tech spend
Confirmed spend on ConnexAI alone. Additional contractor and hosting costs unquantified.
0/7
Security headers set
Zero of the seven standard web security headers are configured on your primary domain.
MISSING
DMARC record
Your domain has no DMARC policy. Anyone can send email that appears to be from Amalfi today.
35 days
Until SSL expires
Let's Encrypt wildcard certificate expires 15 June 2026. Renewal action required immediately.
Amalfi is a 600-person BPO operating across South Africa, the UK, and the United States. The infrastructure underneath this operation does not reflect the scale of the business. That gap is the opportunity.
About Us
Not a dev shop.
A systems partner.
The Fourths is a Johannesburg-based digital agency. We design, build, and operate cloud infrastructure, AI automation layers, and enterprise technology for businesses that have outgrown generic solutions.
We are active in UK mortgage regulation (FCA-compliant platforms), education technology (Abu Dhabi, ADEK-compliant), and industrial operations. We do not sell software licences. We become a part of the business we work with.
Dominic Nel
Founder & Technical Director
Engineer and entrepreneur. Leads cloud architecture, AI system design, and complex platform builds. Works across financial services, education, BPO, and healthcare simultaneously.
–
Led Azure migration for a 600-API regulated insurance platform
–
Built FCA-regulated mortgage broker platform (UK, live)
–
Digital infrastructure lead for Sheikh Zayed Private Academy, Abu Dhabi
–
Deployed AI operational layer across enterprise Teams environments
Monique
Business Development Director
Strategic relationship builder with a network across South African business, sport, and enterprise. Brings clients in at the right level — and stays close through delivery.
–
Existing relationship with the Amalfi leadership network
–
Client management across BPO, professional services, and retail
–
Manages senior-level client relationships across South Africa
Our active client work includes: A UK FCA-regulated mortgage platform processing live applications. The digital infrastructure for Sheikh Zayed Private Academy in Abu Dhabi. Source & Style (Australia and UAE). UK and SA healthcare platforms. Each of these clients gave us deep context in exactly the challenges Amalfi faces.
What needs fixing
Five problems we
identified before the meeting.
These findings came from open-source intelligence, DNS records, email authentication checks, and security tooling. No access to your systems was required.
01
Domain spoofing is possible right now
Your domain has no DMARC record and DKIM is unconfigured. This means any party — a fraudster, a disgruntled ex-employee, a competitor — can send email that passes basic authentication checks and appears to come from @amalfioutsourcing.com. For a business operating in debt collection, financial services, and UK markets, this is not a theoretical risk. We run a product called Sentinel that monitors and manages this autonomously. DMARC hardening is a day-one fix, not a project.
Critical
02
UK operations without visible compliance structure
Amalfi self-reports ICO registration and GDPR compliance. However, your UK entity appears no longer active, while you continue to operate in UK markets. The obligations do not disappear when the entity does. Processing UK citizen data — including via outbound call campaigns and contact centre operations — carries ICO registration requirements, data processing agreements, and GDPR Article 28 obligations. An audit here is worth doing before a client triggers it.
High
03
SSL certificate expires in 35 days
Your Let's Encrypt wildcard certificate expires 15 June 2026. Let's Encrypt certificates should auto-renew — if auto-renewal is broken (common on shared hosting configurations), your site goes dark without warning. For a business that processes customer acquisition campaigns, this is a revenue risk. This is worth confirming with your current hosting provider immediately regardless of any engagement with us.
High
04
Zero web security headers
amalfioutsourcing.com has none of the seven standard security headers configured: no HSTS, no Content Security Policy, no X-Frame-Options, no Referrer-Policy, no Permissions-Policy, no X-Content-Type-Options, no X-XSS-Protection. These headers are free to implement and take hours to configure. They protect against clickjacking, cross-site scripting injection, and data leakage in referrer headers — relevant for a site that collects prospect and client contact data.
High
05
Infrastructure architecture doesn't match scale
Your website runs on shared hosting in London (TMDHosting, IP 198.38.92.236) — shared with other tenants, subject to noisy-neighbour performance issues, and expensive given that you are already operating in an Azure environment. Your current dev tooling (ClawBot for automation, Replit for website builds) reflects a startup pattern, not a 600-person operation. You are paying contractor rates on amateur tooling. Azure Static Web Apps, which you already have capacity for, would host every website in your portfolio at near-zero cost with enterprise-grade reliability.
High
What we offer
Six services. One
digital partner.
Service 01
Security Foundations
Setup + Retainer
See pricing section
The immediate layer that stops your domain from being weaponised against you. We configure DMARC, DKIM, and SPF to the correct enforcement level — not just present, but set to reject spoofed mail. We deploy all seven security headers on your web properties. We add SSL monitoring with automated alerts before expiry. Then we hand it to Sentinel, our autonomous email authentication management system, to watch it continuously going forward. This is not an ongoing project — it is infrastructure you set once and trust.
- DMARC policy to p=reject (phased: quarantine → reject)
- DKIM key configuration and DNS deployment
- SPF record audit and hardening
- All 7 security headers on primary domain and subdomains
- SSL monitoring with 30-day expiry alerts
- Sentinel integration for ongoing autonomous management
- UK ICO and GDPR data flow mapping (initial assessment)
- Monthly domain health report
Service 02
Managed Marketing
R45,000
per month
A full marketing operation, managed externally. You currently have a marketing manager whose work is being done by an outsourced development team — a structural problem that means you are paying for both a salary and a contractor without a clear owner. We replace that entire function with a managed service that covers strategy, execution, and reporting. You do not need to chase anyone. You receive results.
We run automated email outreach sequences, automated social posting across all major platforms, SEO maintenance, and paid campaign management. Every month you receive a content calendar for approval, a performance report, and a pipeline summary. Unlike a single hire, our operation runs across multiple specialists — content, design, automation, analytics — without additional cost to you.
- Monthly content calendar (your approval, then automated)
- Automated posting: LinkedIn, Facebook, Instagram, X
- Email outreach sequences — acquisition and retention
- Lead capture and funnel setup
- SEO monitoring and quarterly technical audit
- Monthly analytics report with attribution data
- Paid campaign management (ad spend billed separately)
- Campaign A/B testing and optimisation
Service 03
Microsoft 365 Managed Services
R35,000
per month
You are paying for a Microsoft 365 environment that you are almost certainly not using at capacity. Most IT teams at BPO operations focus on keeping the lights on — supporting the 600 people doing the actual work. Nobody has time to optimise. What that means in practice is that Power Automate sits unused, SharePoint is a dumping ground, Teams is only used for calls, and you have no visibility into what your Microsoft spend is actually delivering.
We embed a specialist function that audits, configures, and continuously improves your M365 environment. We have run this audit for enterprises and academic institutions — the pattern is always the same: enormous unused capacity sitting behind a licence your team doesn't know how to unlock.
- Full M365 tenant audit (licences, usage, permissions)
- Power Automate workflow design and deployment
- SharePoint site structure and governance
- Teams channel architecture and ticketing setup
- Azure AI Foundry integration planning
- Shared mailbox and delegation management
- Automated internal ticketing (Teams-native, replaces Jira)
- Monthly M365 health and utilisation report
Case study — SharePoint infrastructure audit: For Sheikh Zayed Private Academy (Abu Dhabi), we ran a comprehensive SharePoint audit: document libraries, permission structures, site collections, external sharing policies, access matrix, and gap analysis against ADEK compliance requirements. The same methodology applies to any organisation with an M365 tenancy. You will see exactly what you own and what it should be doing.
Service 04
Automation & AI Layer
R55,000
per month / 12-month engagement
This is where the long-term commercial opportunity lives. ConnexAI is doing the outbound calls. That is not changing. What we are building is the intelligence layer that sits around it — reporting, routing optimisation, AI handoff analysis, and the beginning of a proprietary capability that you could eventually own and operate yourself.
The 12-month engagement is a build programme. Month by month, we are constructing the infrastructure for Amalfi to become its own AI call-centre operator — not replacing ConnexAI immediately, but reducing dependency over time and creating an asset that compounds in value. At the end of 12 months, you will have infrastructure that no competitor of your size in South Africa has built.
- ConnexAI integration and handoff analytics
- Custom Power BI dashboards (sales, ops, campaign)
- Azure-native automation pipelines
- AI agent design for internal process automation
- Open-source telephony stack evaluation (Azure Communication Services)
- AI voice pipeline prototyping (Phase 2, months 4–6)
- CRM system review and integration roadmap
- Fortnightly build review and reporting
Service 05
Web Development & Hosting
From R2,500
per site / project-based
You are currently paying three times for every website: once to the contractor to build it (using Replit — a development sandbox, not a production tool), once for the technology licences that contractor is using, and once to the hosting company. The websites then land on shared hosting in a London data centre.
Azure Static Web Apps, which sits inside your existing Azure environment, hosts production-grade websites at effectively zero marginal cost. Build time for a standard site is under two hours with our tooling. We migrate your existing web properties, give you a centralised management layer, and charge per site for customisation work at an hourly rate. You should not be paying a contractor and a hosting company for what your own Azure capacity already includes.
- Migration from shared hosting to Azure SWA
- Per-site pricing: see pricing section
- Centralised DNS management
- CDN and performance optimisation
- Custom development: R1,500/hour
- Ongoing hosting: near-zero cost within Azure
- SSL provisioned automatically
- Staging environments for all production sites
Service 06
Operational AI — Alice
R125,000
per month / rental
Alice is the AI operational layer we run internally at The Fourths. Every inbox across our organisation is monitored, actioned, and routed through Alice. Every morning report, every task escalation, every client brief — run through Alice. We built it for ourselves first because we would not install something we hadn't lived with.
What we are offering Amalfi is the same infrastructure, deployed inside your Azure and Microsoft Teams environment. Campbell could open Teams tomorrow morning and say: "Alice, give me every sale we closed yesterday, by campaign, with agent performance." Alice responds with the report, sets a cron to send it every morning at 7am, and flags any anomalies. No ticket. No waiting for a report. No asking someone who is asleep.
This works across your 600 staff. There is no per-user fee. Every team lead, every operations manager, every department head gets the same access. The more people use it, the more value it compounds.
- AI layer deployed across your Teams environment
- CEO-level dashboards and automated morning reports
- Inbox monitoring and intelligent routing
- Task management and escalation workflows
- No per-user fee — all 600 staff included
- Custom agent configuration for your business processes
- Continuous improvement and monthly tuning
- Ownership path available — see pricing section
Ownership path: R150,000/month for 24 months. On month 25, Alice becomes yours. The infrastructure, the workflows, the integrations — all transferred to Amalfi ownership. The monthly rental drops back to R125,000 and continues as a managed service only.
Technology Landscape
What are you
actually paying for?
A starting point for a conversation. What you tell us will update these numbers. The question is whether the cost aligns with the outcome — and whether your Azure capacity is doing any of this for free already.
| Tool / Function | Current situation | Azure alternative |
|---|---|---|
| Ticket management | Jira (est. R800+/user/month for 600 staff = R480K+/month) | Teams-native ticketing via Power Automate — R0 additional cost |
| Website hosting | Shared hosting, London DC, TMDHosting (est. R2K–R5K/month) | Azure Static Web Apps — included in your Azure tenancy |
| Website building | Contractor using Replit (development sandbox, not production) | Production-grade builds, deployed to Azure in hours, not weeks |
| Automation | ClawBot (third-party, low-code, not enterprise-scalable) | Power Automate — licensed in your M365, built by our team |
| Email security | DMARC missing, DKIM unconfigured — domain can be spoofed | Sentinel-managed hardening — fully configured and monitored |
| Marketing management | Internal headcount + outsourced dev doing the work | Managed external function — no salary, full accountability |
| Operational reporting | Manual compilation or ConnexAI native dashboards | Azure AI Foundry + Power BI — automated, real-time |
AI — what it actually is
ChatGPT is not AI.
AI is what runs underneath it.
Anthropic built Claude. OpenAI built ChatGPT. These are consumer products — a front-end on top of a model, sold as a subscription to millions of users who needed a simple interface.
What you have inside your Azure environment is the same underlying infrastructure. Azure AI Services, Azure OpenAI, Azure Communication Services — these are the enterprise-grade equivalents of what ChatGPT is wrapping. The difference is that they connect directly to your data, your workflows, your teams, and your operations.
What most people think
AI = a chatbot you log into. You type a question. You get an answer. The conversation ends when you close the browser. No memory. No integration. No action.
What ConnexAI is doing
Automated outbound voice. Structured handoffs to human agents. A specific, high-value use case — well executed. But the intelligence stops at the handoff point.
What AI should be doing for Amalfi
Continuous intelligence across your entire operation. Every report automated. Every escalation routed. Every campaign analysed. Your Azure environment already has the infrastructure. It just needs to be connected.
A quick question before we continue:
Does your team currently use any of these inside your Microsoft environment: Power BI for live dashboards, Power Automate for workflow triggers, Azure AI Services for any automation, or Teams as an internal system beyond calls and chat?
Your answer changes which services are immediate wins and which need infrastructure first.
Digital Audit — amalfioutsourcing.com
What the internet
says about your domain.
Every finding below came from publicly accessible tooling. No system access was required. Sources are listed for each finding — Campbell, you can verify any of these yourself in under five minutes.
| Check | Finding | Status | Source |
|---|---|---|---|
| Domain registrar | GoDaddy — expires 2028 | Pass | WHOIS lookup |
| DNS hosting | TMDHosting shared (ns1/ns2.c14.tmdcloud.london) — shared hosting in London DC | Review | DNS lookup |
| Web server | WordPress + LiteSpeed on shared hosting. IP: 198.38.92.236. London data centre. | Review | Server response headers |
| Email platform | Microsoft 365 (Exchange Online) | Pass | MX record lookup |
| SPF record | Present — hard fail (-all) configured correctly | Pass | MXToolbox SPF check |
| DMARC record | MISSING — no policy set. Domain can be spoofed. | Critical | MXToolbox DMARC lookup |
| DKIM | Not configured for sending domain | Fail | DKIM record check |
| SSL certificate | Let's Encrypt wildcard — expires 15 June 2026 (35 days from today) | Action needed | SSL Labs scan |
| Security headers | 0 of 7 set — HSTS, CSP, X-Frame-Options, Referrer-Policy, Permissions-Policy, X-Content-Type-Options, X-XSS-Protection all absent | 0/7 | SecurityHeaders.com |
| Company page active — @amalfi-outsourcing. Last activity: recruitment posts (2024) | Stale | LinkedIn company search | |
| @amalfioutsourcingcontactcentre — low engagement, infrequent posting | Underperforming | Instagram profile | |
| Page present — facebook.com/amalfioutsourcing | Review | Facebook search |
Note on data freshness: Domain, DNS, SSL, email authentication, and security header checks were conducted in April–May 2026. Social media observations are based on publicly visible activity. If any finding is incorrect, the audit tools are listed — Campbell, you are welcome to run them live in the meeting.
Before we leave
Eight questions
worth answering.
Submit these before the meeting ends. We will send a comprehensive response to your inbox within the hour — not a transcript, a structured brief. This is the first time you will see a sales meeting work this way.
Ready to start
the conversation
with Campbell?
This proposal is valid for 30 days from 12 May 2026. To book the follow-up M365 audit session or to accept any service, use the links opposite or reply directly to this email from alice@thefourths.com.