- A technical roadmap tied to the company plan and understood by the whole team
- Architecture decisions written down, reviewable and easy for new hires to learn
- Delivery and reliability measured, discussed and improved in the regular cadence
- Security foundations and evidence in place ahead of customer and investor scrutiny
- The first senior engineering hires made, with a clear path to a full-time leader
Anonymised composite. Client names, identifying details and confidential figures are withheld; public facts are cited in the references.
The situation
A seed-stage B2B software company had found traction. The founders were strong builders and the small engineering team shipped quickly, but the things that matter at the next stage were falling behind. Architecture choices were made in chat and forgotten, the release process depended on one person, there was no shared view of reliability, and enterprise prospects were sending security questionnaires nobody had time to answer well. A Series A process was on the horizon, and technical diligence would follow.
The company did not yet need, or want to pay for, a full-time CTO. It needed senior technical leadership for part of each week, with a clear plan for handing over.
What had to be true
- A roadmap the team believed, connecting product goals to platform work and technical debt.
- Decisions written down, so they can be reviewed, challenged and learned by new hires.
- Delivery and reliability measured, as signals for improvement rather than targets to game.
- Security that stands up to scrutiny, with controls and evidence rather than promises.
- A team that outlasts the engagement: senior hires and habits that keep working after hand-off.
Architecture
Here the architecture was as much the operating model as the system. The technical work rested on a light set of leadership practices, each producing an artefact the team and investors could see.
Architecture decision records followed the lightweight format Michael Nygard described: context, decision and consequences, kept with the code1. How I use them in a fractional role is in architecture decision records for fractional CTOs.
The data flow, end to end
The cadence mattered more than any single document. Each cycle followed the same loop:
- AssessReview the stack, delivery pipeline, incidents and open risks
- DecideWrite ADRs for significant choices; review with the engineers affected
- PlanUpdate the roadmap and debt register against company priorities
- DeliverTeam ships; pipeline produces delivery and reliability data automatically
- MeasureDiscuss DORA metrics and SLO error budgets as improvement signals
- ReportShort update for founders and board on progress, risks and hiring
Delivery was tracked with DORA's software delivery metrics, which cover throughput and instability. DORA itself warns against turning them into blanket targets, so they were used per service and only to find bottlenecks2. See DORA metrics for AI-assisted engineering. Reliability used a small number of SLOs on the journeys customers cared about, with an agreed policy for what happens when an error budget is spent3.
The hard part: adding structure without slowing the team
A fast seed team is right to be suspicious of process. Every practice had to earn its place by saving more time than it cost. That meant:
- ADRs only for decisions that are expensive to reverse, written in under an hour, not for every library choice.
- Automating the evidence: delivery metrics from the pipeline, access reviews from the identity provider, change history from pull requests.
- Sequencing security work against real demand. The SOC 2 trust services criteria (security, availability, processing integrity, confidentiality and privacy) gave the structure4, with security controls first because every enterprise questionnaire asked about them. More in SOC 2 for AI startups.
- Hiring senior engineers who could own areas, not just add capacity, so leadership could be handed over rather than borrowed.
A fractional CTO succeeds when the role becomes unnecessary. The test is whether decisions, metrics and hiring keep happening well in the weeks you are not there.
How the engagement ran
- Set company priorities
- Approve hiring plan
- Own investor narrative
- Run architecture reviews
- Write and coach ADRs
- Lead senior hiring
- Propose and record decisions
- Own delivery and on-call
- Join interview loops
- Stack and pipeline review
- Risk and debt register
- Quick wins
- Roadmap and ADRs
- CI/CD and infrastructure as code
- Core security controls
- DORA metrics and SLOs
- SOC 2 readiness
- Senior hires
- Diligence pack
- Full-time leader onboarding
- Advisory follow-up
Key decisions and trade-offs
| Decision | Alternative | Why |
|---|---|---|
| Fractional CTO first | Hire full-time CTO immediately | Senior judgement now, while the company learns what role it needs |
| ADRs in the repository | Wiki pages or chat threads | Versioned with code, reviewed like code, found by new hires |
| Metrics as signals | Metrics as targets | Avoids gaming; focuses on bottlenecks |
| Security controls before certification | Rush to an audit | Real controls and evidence first; audit when customers require it |
| Senior owners before headcount | Hire for capacity | Creates leaders who can take over from the fractional role |
What I'd do again, and differently
Again: write decisions down from the first week and keep the cadence predictable, even when the week is busy. Differently: start the search for the permanent engineering leader earlier. Good senior hires take longer than any technical workstream, and the hand-off is only as strong as the person receiving it.
If your team is at a similar stage, the fractional CTO page describes how I work, when you need one covers the signals, or analyse your challenge and bring the result to a call.
- 1Documenting Architecture DecisionsCognitect (Michael Nygard) · 2011-11-15
- 2
- 3
- 4