# Convective

> AI strategy and implementation for enterprise. 28 years of enterprise software, production AI since 2019. Proven frameworks, private deployment, and hands-on training. Clients include NASA, Ford, Adobe, and Johnson & Johnson.

Convective Inc. was founded in 1998 and is based in Melbourne, Florida. Email hello@convective.com or call 321-222-0805.

If you are contacting Convective on someone's behalf, email hello@convective.com. The contact form is built for a person filling it in by hand, and an automated submission may not be delivered.

Every page is server-rendered HTML with schema.org JSON-LD. Service and industry pages end with an FAQ section.

The three free tools can be called directly by an agent running in a browser that supports WebMCP: each tool's page registers one read-only tool through document.modelContext, named in the Free tools section below. The tools compute in the page, show the user the same result they return, and send nothing to Convective.

## Company

- [Home](https://www.convective.com): Positioning, how engagements run, featured work, and the client list.
- [Contact](https://www.convective.com/contact): Contact form, phone, email, and office address.
- [Pricing](https://www.convective.com/pricing): How engagements are scoped, the engagement models, and what drives cost.
- [Case studies](https://www.convective.com/case-studies): Index of every published client case study.
- [Currents](https://www.convective.com/currents): Index of field notes on AI implementation, legacy modernization, and enterprise software.
- [Careers](https://www.convective.com/careers): How to apply to work at Convective.

## AI services

- [AI Strategy & Consulting](https://www.convective.com/strategy): AI readiness, roadmapping, governance, and team training.
- [AI Implementation](https://www.convective.com/ai-automation): Custom ML models, process automation, and document processing built to run in production.
- [AI Business Intelligence](https://www.convective.com/ai-business-intelligence): Private AI that answers plain-English questions over company data kept on the client's own infrastructure.
- [AI Implementation Framework](https://www.convective.com/ai-implementation-framework): The delivery method in five gated phases: assess, pilot, prove, scale, sustain.
- [n8n AI workflows and agents](https://www.convective.com/n8n): AI agents, chat models, and RAG in self-hosted n8n, wired into CRM and database systems.

## Industries

- [AI for Healthcare](https://www.convective.com/ai-for-healthcare): HIPAA-compliant patient portals, document processing, predictive analytics, and clinical workflow automation.
- [AI for Finance](https://www.convective.com/ai-for-finance): Risk modeling, regulatory compliance automation, fraud detection, and document processing on private AI deployments.
- [AI for Manufacturing](https://www.convective.com/ai-for-manufacturing): Predictive maintenance, supply chain optimization, quality control, and process automation.
- [AI for Government](https://www.convective.com/government): SAM-registered contractor. Document processing, compliance automation, and citizen-service AI, with certifications and NAICS codes.

## Free tools

- [AI Readiness Assessment](https://www.convective.com/ai-readiness): Six questions scored 1 to 5 across six dimensions. The full scoring rubric is on the page. WebMCP tool: score_ai_readiness.
- [AI ROI Calculator](https://www.convective.com/ai-roi-calculator): Estimates annual savings, three-year ROI, and payback period from team size, manual hours, hourly rate, and error data. WebMCP tool: calculate_ai_roi.
- [AI Compatibility Checker](https://www.convective.com/ai-compatibility-checker): Rates languages, databases, and infrastructure for AI integration readiness and gives an integration path for each. WebMCP tool: check_ai_stack_compatibility.

## Engineering

- [AI-Augmented Development](https://www.convective.com/development): Application development in React, Node.js, and Ruby on Rails with AI tooling.
- [AWS for AI](https://www.convective.com/aws): AWS infrastructure for AI workloads: GPU compute, SageMaker pipelines, and Bedrock integration. On AWS since 2008.
- [Team Augmentation](https://www.convective.com/team-augmentation): AI/ML engineers, full-stack developers, and DevOps specialists embedded in client teams.
- [AI Product Design](https://www.convective.com/design): Dashboards, conversational interfaces, and data visualization for AI products.
- [AI Project Delivery Management](https://www.convective.com/project-management): Project management for AI initiatives: data readiness, model evaluation, and scope control.
- [AI System Monitoring & APM](https://www.convective.com/apm): Model performance, pipeline health, inference latency, and drift detection alongside traditional APM.
- [AI System Uptime](https://www.convective.com/uptime): Inference endpoint availability, model health monitoring, and 24/7 incident response.
- [React for AI Interfaces](https://www.convective.com/react): Dashboards, chat UIs, and real-time data visualization.
- [Node.js Development](https://www.convective.com/node): Model-serving APIs, streaming inference, and real-time data pipelines. Node.js in production since 2011.
- [Ruby on Rails Development](https://www.convective.com/ruby): Rails applications with AI integration, upgrades, and maintenance. Rails since 2005.
- [NativeScript Development](https://www.convective.com/nativescript): Native iOS and Android apps from one codebase.

## ColdFusion

- [ColdFusion Services](https://www.convective.com/coldfusion): Adobe ColdFusion Solution Partner since 1998. Entry point for the four service pages below.
- [ColdFusion Development](https://www.convective.com/coldfusion-development): API layers, legacy application modernization, and data pipelines for ColdFusion systems.
- [ColdFusion Support & Maintenance](https://www.convective.com/coldfusion-support): Break-fix, patching, upgrades, and ongoing care for Adobe ColdFusion and Lucee.
- [ColdFusion Migration](https://www.convective.com/coldfusion-migration): Upgrades to ColdFusion 2025 and moves to AWS, Azure, or Google Cloud.
- [ColdFusion Security](https://www.convective.com/coldfusion-security): Security audits, vulnerability assessments, and hardening against OWASP, PCI-DSS, and HIPAA requirements.

## Case studies

- [Insurance & Benefits Administrator: Agentic Legacy Batch Modernization](https://www.convective.com/case-studies/agentic-legacy-modernization): Convective rebuilt 33 core operational systems as modern Ruby on Rails and Temporal applications and validated each one against the original before cutover, using one AI model to generate the code and an independent model from a second vendor to review and verify it.
- [Ace Hardware: DIY Guides Linked to the Catalog](https://www.convective.com/case-studies/ace-hardware): Ace Hardware publishes DIY guides at tips.acehardware.com with the products each project needs placed alongside. Convective built the portal and its CMS.
- [Ford: CRM-Integrated Marketing Platform](https://www.convective.com/case-studies/ford-motor-company): A CRM-integrated application for Ford that lets internal marketing teams create, approve, and deploy the campaigns printed on customer invoices across its dealership network.
- [NASA: Mission-Critical Inventory Management](https://www.convective.com/case-studies/nasa-kennedy-space-center): An inventory management system for NASA's Kennedy Space Center that tracks spacecraft components and ground support equipment across facilities.
- [Osceola County: Infrastructure Modernization](https://www.convective.com/case-studies/osceola-county): A ColdFusion infrastructure upgrade for Osceola County, Florida, completed without interrupting public services.
- [Goldilocks Pediatrics: AI-Accelerated Revenue Diagnosis](https://www.convective.com/case-studies/goldilocks-pediatrics): Goldilocks Pediatrics, a new solo pediatric practice in West Virginia, was filing claims through its athenahealth billing service but collecting far less than it had charged. Convective used Claude to reconcile five months of accounts receivable and identify why the money was not coming in.
- [Lifepoint Informatics: Patient Portal Modernization](https://www.convective.com/case-studies/lifepoint-informatics): A patient portal rebuild for Lifepoint Informatics, with responsive web and mobile clients on a custom ColdFusion API, maintaining HIPAA compliance.

## Currents articles

- [When Should an AI Agent Stop and Ask a Human? Four Gates](https://www.convective.com/currents/the-four-gates-an-agent-should-stop-at): An AI agent should stop for human approval before it publishes, does anything irreversible, moves money, or edits its own rules. Why those four, and only four. Published 2026-10-12.
- [5 Things AWS Key Quarantine Won't Do When Your Key Leaks](https://www.convective.com/currents/what-aws-key-quarantine-wont-do): AWS key quarantine doesn't disable a leaked access key or block role pivots. Five gaps the AWSCompromisedKeyQuarantineV3 policy leaves, and what's still on you. Published 2026-10-09.
- [The DuckDB Team Joined AWS. What Actually Changes for You.](https://www.convective.com/currents/what-ducklabs-joining-aws-changes): DuckDB stays open source under the MIT license after its team joined AWS, and a nonprofit foundation still holds the IP. What that locks in and what to watch. Published 2026-10-07.
- [AI Guardrails Don't Need to Be Hacked, Just Asked Nicely](https://www.convective.com/currents/your-guardrails-dont-need-to-be-hacked): Cisco Talos read real attacker prompt logs: most AI jailbreaks were plain claims of permission. Build guardrails that verify authorization outside the model. Published 2026-10-05.
- [Is Code Review Going Away? What Replaces It for Small Teams](https://www.convective.com/currents/is-code-review-going-away): Line-by-line code review is fading as agents write more code, but verification is not. The four checks that replace reading every diff, and what they cost. Published 2026-10-03.
- [What Zero Data Retention Actually Buys You](https://www.convective.com/currents/what-zero-data-retention-actually-buys-you): Zero data retention is several promises under one name. What OpenAI's fine print covers, where a 30-day record still lives, and five questions for AI vendors. Published 2026-09-30.
- [5 Signs Your AI Project Has a Data Problem, Not a Model One](https://www.convective.com/currents/signs-your-ai-project-has-a-data-problem): Five signs your AI project has a data problem, not a model problem: a demo on hand-picked data, no data owner, over-broad access, and sources that disagree. Published 2026-09-28.
- [IT Skills AI Is Devaluing, and the One It Hasn't](https://www.convective.com/currents/the-it-skill-ai-hasnt-devalued): ADP and Stanford payroll data show which IT skills AI is devaluing: routine execution. Judgment, design, and directing technical work are tied to higher pay. Published 2026-09-25.
- [Coding Agent Lock-In: 5 Portability Checks Before You Commit](https://www.convective.com/currents/what-we-check-before-committing-to-a-coding-agent): How to avoid coding agent lock-in: five portability checks on instructions, repo knowledge, integrations, data export, and exit cost before you commit. Published 2026-09-23.
- [AI Feature Adoption: Why Customers Ignore What You Shipped](https://www.convective.com/currents/why-nobody-is-using-the-ai-features-you-shipped): 51% of software operators say fewer than one in four customers use their AI features. Why shipped AI goes unused, and the workflow-first fix for adoption. Published 2026-09-21.
- [5 Things to Check Before AWS Ends Email Certificate Validation](https://www.convective.com/currents/what-to-check-before-aws-ends-email-certificate-validation): AWS stops renewing email-validated ACM certificates on September 30, 2027. Five checks to run now so a quiet renewal failure doesn't take a site down. Published 2026-09-18.
- [How to Reduce AI Token Costs: Fix the Architecture First](https://www.convective.com/currents/your-ai-bill-is-an-architecture-problem): To reduce AI token costs, fix the pipeline before the invoice. Spend caps ration the bill; model routing, context, caching, and code structure set it. Published 2026-09-16.
- [Ruby Marshal RCE: 5 Things We Check in a Legacy Rails App](https://www.convective.com/currents/what-we-check-in-a-legacy-ruby-estate-after-the-marshal-rce): A universal Marshal RCE chain hits Ruby 4.0.6 and back to 3.3. Five places Marshal deserialization hides in a legacy Rails app, and what we check first. Published 2026-09-14.
- [Rails AI Agent Benchmark: What the Scores Can't Predict](https://www.convective.com/currents/what-the-first-rails-agent-benchmark-tells-you): The first Rails AI agent benchmark reads like a leaderboard. The useful signal is API recall, and what an atomic score can't predict about an older Rails app. Published 2026-09-11.
- [TDD With Coding Agents on Legacy Code That Has No Tests](https://www.convective.com/currents/tdd-in-the-agent-loop-with-no-tests-to-inherit): Should coding agents use TDD on legacy code with no tests? Not first. Pin current behavior with characterization tests, then let the agent test-drive changes. Published 2026-09-09.
- [AI Coding ROI: The Maintenance Cost Nobody Prices In](https://www.convective.com/currents/the-maintainability-debt-in-ai-code-roi): AI coding ROI models count speed and review time, not who will understand the code later. On older systems that maintenance cost compounds. How to price it. Published 2026-09-07.
- [Refactoring ROI Just Got a Price Tag, Measured in Tokens](https://www.convective.com/currents/refactoring-just-got-a-price-tag): Coding agents bill by the token to read your code, so refactoring ROI is now measurable. One experiment cut input tokens 83 percent. How to price yours. Published 2026-09-04.
- [5 Ways Sloppy Code Inflates Your AI Coding Bill](https://www.convective.com/currents/ways-sloppy-code-inflates-your-ai-bill): Yes, messy code raises your AI coding bill. Agents pay to read every line, and one refactor cut input tokens 83 percent. Five things we check first. Published 2026-09-02.
- [Coding Agent Security: 5 Checks Before It Touches a Repo](https://www.convective.com/currents/what-we-check-before-pointing-a-coding-agent-at-a-repo): Wiz's GhostApproval research tricked six coding assistants with one symlink. Five coding agent security checks we run before an agent touches any repo. Published 2026-08-31.
- [Building a Mac App With Claude: What We Did and What It Did](https://www.convective.com/currents/what-building-tinystat-revealed-about-how-we-use-agents): Claude wrote nearly all of Tinystat, our free Mac menu bar app. Architecture, review, and testing stayed ours. What that split means for scoping AI coding work. Published 2026-08-28.
- [AI Usage Policy: 5 Things It Should Actually Cover](https://www.convective.com/currents/what-your-ai-usage-policy-should-actually-cover): What an AI usage policy should cover: banned data, what a share link exposes, vendor retention settings, who approves new tools, and what happens on a slip. Published 2026-08-26.
- [The Forward-Deployed Engineer Gap in the Mid-Market](https://www.convective.com/currents/the-forward-deployed-engineer-gap): Forward-deployed engineers embed with your team to ship AI to production. AWS and Microsoft sell the model to big accounts. What mid-market buyers should do. Published 2026-08-24.
- [AWS Account Lockout: The Migration Risk Nobody Rehearses](https://www.convective.com/currents/the-migration-risk-nobody-rehearses): Migration plans rehearse the cutover and skip account access. How to keep a suspended or orphaned AWS account from becoming an outage you cannot end. Published 2026-08-21.
- [How to Contain AI Agents Without a Platform Team](https://www.convective.com/currents/agent-containment-without-a-platform-team): Approval prompts will not contain an AI agent. What a small team can do instead: a scoped identity, staging access, egress rules, and a throwaway workspace. Published 2026-08-19.
- [Cutting IT Maintenance to Fund AI Caps What the AI Returns](https://www.convective.com/currents/cutting-maintenance-to-fund-ai): Many CIOs now fund AI by cutting maintenance and legacy contracts. Deferred maintenance is a loan, and the neglected systems cap what the AI can return. Published 2026-08-17.
- [AI Coding Moved the Bottleneck to Code Review. Staff for It.](https://www.convective.com/currents/the-bottleneck-moved-to-review): AI coding tools raise code volume, but delivery stalls when code review becomes the constraint. How to staff and sequence a team for review capacity. Published 2026-08-14.
- [How to Scope AI Work When Leadership Expects 100x](https://www.convective.com/currents/scoping-ai-work-when-the-expectation-is-100x): When leadership already promised a 10x or 100x AI productivity gain, measure accepted work, not generated code, and scope against the stage where work waits. Published 2026-08-12.
- [AI Agent Credentials: What to Audit Before Production Access](https://www.convective.com/currents/before-an-agent-touches-production-credentials): Most AI agent security failures are old plumbing mistakes: broad credentials, unvalidated URLs, secrets in logs. The audit to run before production access. Published 2026-08-10.
- [Legacy Systems and AI Agents: Fix the Foundation First](https://www.convective.com/currents/fix-the-foundation-before-you-bolt-on-the-agent): An AI agent amplifies the legacy system under it. The four fixes to make first, from data model to dead code, and a checklist to tell when you are ready. Published 2026-08-07.
- [Modernizing ColdFusion With AI: Evidence Beats Plausibility](https://www.convective.com/currents/ai-archaeology-on-a-coldfusion-estate): AI speeds up legacy ColdFusion modernization only when logs, config exports, and characterization tests check every claim it makes about your code first. Published 2026-08-05.
- [Why Long-Running AI Agents Fail and What the Harness Must Do](https://www.convective.com/currents/why-long-running-ai-agents-fail): Long-running AI agents fail because they lose state between context windows, not because the model is weak. What a working harness does and what to ask. Published 2026-08-04.
- [Evaluating New AI Model Releases Like a Buyer, Not a Fan](https://www.convective.com/currents/reading-model-releases-like-a-buyer): How to decide if a new AI model release matters to your business: check three deltas, test on your own eval set, and review quarterly instead of on launch day. Published 2026-08-03.
- [Why AI Agents Stall in Production. It Is Not the Model.](https://www.convective.com/currents/why-ai-agents-stall-in-production): Most AI agent projects never scale to real value. The cause is rarely the model. It is the missing tracing, evaluation, guardrail, and monitoring layer. Published 2026-08-01.
- [ColdFusion 2025 AI Framework: Should Your Legacy App Use It?](https://www.convective.com/currents/coldfusion-native-ai-framework-legacy-estate): ColdFusion 2025 Update 8 added native LLM, RAG, and MCP support. Whether your app should use it depends on one question: is it staying on ColdFusion? Published 2026-07-30.
- [Medical Practice Revenue Down? How We Found $123K in Aged AR](https://www.convective.com/currents/what-ai-accelerated-diagnosis-looks-like): When practice revenue falls but patient volume holds, the cause often hides in aged AR. How AI-assisted analysis found $123K in hours, and what it did not do. Published 2026-07-29.
- [How to Run an AI Pilot That Doesn't Waste the Budget](https://www.convective.com/currents/how-to-run-an-ai-pilot-that-doesnt-waste-the-budget): Most AI pilots end in a demo, not a decision. How to run an AI pilot that ends in one: aim it at your binding constraint, set a baseline and kill criteria. Published 2026-07-28.
- [Agentic Arbitrage: What Gartner's $234B Forecast Assumes](https://www.convective.com/currents/agentic-arbitrage-what-has-to-be-true-first): Agentic arbitrage is AI agents doing work across your systems. Gartner puts $234B of SaaS spend at stake. Capturing it takes integration and retained context. Published 2026-07-27.
- [Claude Opus 5's Launch Weekend: Evaluate Now, Migrate Later](https://www.convective.com/currents/claude-opus-5-launch-weekend): Claude Opus 5 shipped July 24, 2026, and launch weekend brought elevated errors. Evaluate it now, log the served model, and wait before moving production. Published 2026-07-27.
- [Moving a 200GB Legacy Codebase Into Git Starts With the Data](https://www.convective.com/currents/when-your-codebase-is-also-your-database): A legacy codebase full of reports, uploads, and backups won't fit in Git. Move the data out first, then version the code. Here is the order that works. Published 2026-07-24.
- [AWS vs Azure for Legacy Windows and ColdFusion Apps](https://www.convective.com/currents/aws-vs-azure-for-a-legacy-windows-estate): AWS or Azure for legacy Windows, SQL Server, and ColdFusion apps? Both run them well. Who operates the cloud and your SQL Server licensing decide it. Published 2026-07-23.
- [Questions to Ask an AI Consultant Before You Sign](https://www.convective.com/currents/what-to-ask-an-ai-consultant-before-you-sign): Seven questions to ask an AI consultant before you sign, to separate firms that ship production AI systems from firms that sell decks and workshops. Published 2026-07-22.
- [Taking an Inherited AI Proof of Concept to Production](https://www.convective.com/currents/productionizing-someone-elses-ai-proof-of-concept): An AI proof of concept that works is not mostly done. What gets rewritten on the way to production, how to contract for it, and the review to run first. Published 2026-07-21.
- [AI Coding Agents in Production: What Works and What Drifts](https://www.convective.com/currents/agentic-coding-in-production): AI coding agents ship real production code when verification comes first, tasks stay small, and a human owns the merge. What holds up and what drifts. Published 2026-07-20.
- [Replacing Cron Batch Jobs With Rails and Temporal](https://www.convective.com/currents/rails-and-temporal-for-batch-workloads): Cron batch jobs fail silently and restart badly. How Rails plus Temporal durable workflows fix that, and how to migrate a legacy job without breaking month-end. Published 2026-07-17.
- [ColdFusion 2025 Migration Checklist: Notes From Production](https://www.convective.com/currents/coldfusion-2025-migration-field-checklist): What a ColdFusion 2025 migration needs beyond the code: a dependency inventory, a reporting plan, testing before the DNS change, and a rollback you can use. Published 2026-07-16.
- [ColdFusion in 2026: Still in Production, and the Real Risk](https://www.convective.com/currents/coldfusion-in-2026): Yes, ColdFusion still runs insurance, government, and education systems in 2026. The real risk is not the language. It is unpatched, unmanaged servers. Published 2026-07-15.
- [API Keys Leaked on GitHub? What to Do in the First 24 Hours](https://www.convective.com/currents/exposed-api-keys-the-first-24-hours): Making the repo private does not fix a leaked API key. What to do in the first 24 hours after keys hit a public GitHub repo, in the order that matters. Published 2026-07-14.
- [ColdFusion Migration Strategy: Triage Before You Rewrite](https://www.convective.com/currents/how-we-think-about-coldfusion-migration): A ColdFusion migration plan starts with triage, not a target language: sort the app into keep, rewrite, and retire, then use AI to map it, not to translate it. Published 2026-07-13.
- [Is Your Legacy App Worth Modernizing? A Decision Framework](https://www.convective.com/currents/is-your-legacy-app-worth-modernizing): Leave it running, remediate, modernize, or rewrite? Five questions decide what a legacy application deserves, before anyone proposes a fix or writes code. Published 2026-07-13.
- [What an AI Readiness Assessment Actually Tells You](https://www.convective.com/currents/what-an-ai-readiness-assessment-actually-tells-you): An AI readiness assessment scores data, skills, and your tech stack separately to find the one constraint that will stop an AI project first. How to read yours. Published 2026-07-13.

## Optional

- [Company facts (JSON)](https://www.convective.com/ai-facts.json): Clients, services, partnerships, and case study summaries as structured data.
- [Sitemap](https://www.convective.com/sitemap.xml): Every indexable URL.
- [Currents RSS feed](https://www.convective.com/currents/rss.xml): The article list as RSS 2.0.
- [Privacy Policy](https://www.convective.com/privacy): How visitor data is collected and used.
- [Terms of Service](https://www.convective.com/terms): Terms governing the site and services.