• “hey, loved your photos. can we move to telegram?”

    Review
  • “Selling iPhone 16 Pro, gift cards only, no meetups”

    Remove
  • “Anyone going to the meetup Saturday?”

    Allow
  • image uploadBlurred image
    Remove
  • new account, created 3 minutes ago

    Review
  • “Great stream tonight, thanks everyone”

    Allow
  • “Click here to verify your account: bit.ly/...”

    Remove

We build the systems that keep your platform safe.

Trust and safety engineering, built below the waterline.

  • 500M+Conversations moderated
  • 3MMonthly users on apps we built for
  • 21Days from audit to production

Most of the work happens below the waterline.

Your users see a feed. We build what keeps it upright.

The rules changed. The fines are real.

The US, UK and Canada now expect platforms to act fast and prove it.

Updated September 2026. Every buoy links to its source.

Seven layers. One keel.

Each layer handles what it is best at, so the expensive ones only see what they must.

The keel: a seven layer moderation system1. Intake: Every post, message, image and profile enters one queue, with user and context attached. 2. Fast filters: Hash matching for known abuse, plus scam and spam rules. Most traffic is settled here in milliseconds. 3. Classifiers: Models tuned on your data for text, images and behavior. They score risk, they do not decide alone. 4. Policy judge: An LLM reads your written policy and decides the hard cases. Every decision comes with a reason. 5. Human review: Only truly ambiguous items reach your team, ranked by risk, with the context already gathered. 6. Action and reporting: Takedowns, appeals, NCMEC reports and 48 hour removal clocks, logged for auditors. 7. Evals and cost: Every decision measured for accuracy, speed and cost, so the system gets cheaper and better each month.
  1. 1Intake

    Every post, message, image and profile enters one queue, with user and context attached.

    Every item, one place

    • Posts, messages, images, profiles and reports
    • User age, history and trust signals attached
    • One schema across every product surface
  2. 2Fast filters

    Hash matching for known abuse, plus scam and spam rules. Most traffic is settled here in milliseconds.

    p95 under 20 ms

    • Perceptual hash matching (PDQ, PhotoDNA)
    • Scam, link, phone and payment handle rules
    • Burst and rate limits on new accounts
  3. 3Classifiers

    Models tuned on your data for text, images and behavior. They score risk, they do not decide alone.

    Tuned per policy

    • Text, image and behavior models
    • Vendor APIs or models trained on your labels
    • Thresholds tuned per harm, with a review band
  4. 4Policy judge

    An LLM reads your written policy and decides the hard cases. Every decision comes with a reason.

    A reason for every call

    • Your written policy is the prompt
    • Verdict, category and a cited reason
    • Low confidence always goes to a person

    Example reason: Asks to move off platform after 2 messages. Policy 4.2, off platform solicitation.

  5. 5Human review

    Only truly ambiguous items reach your team, ranked by risk, with the context already gathered.

    Reviewers see what matters

    • Queue ranked by risk and reach
    • Context and history in one view
    • Blurred previews and exposure limits
  6. 6Action and reporting

    Takedowns, appeals, NCMEC reports and 48 hour removal clocks, logged for auditors.

    Audit trail by default

    • Remove, restrict, warn, ban or escalate
    • 48 hour TAKE IT DOWN removal clocks
    • NCMEC reports, appeals and audit logs
  7. 7Evals and cost

    Every decision measured for accuracy, speed and cost, so the system gets cheaper and better each month.

    Cost per decision, tracked

    • Golden sets labeled with your team
    • Precision and recall per harm
    • Cost per decision for every stage

See a decision, with its reason.

Pick a sample or write your own. The policy judge explains its call.

Samples

0 / 280

Decision

Pick a sample or write your own to see a decision.

Demo on a sample policy with preset thresholds. Your production system is tuned to your policy and data. Inputs are deleted within 24 hours. Privacy

What it looks like when it works.

Moderation that grows with your users, not your review team. Here is what the systems we have built handle today.

  • 500M+

    Conversations moderated

  • 3M

    Monthly users on apps we built for

  • 21

    Days from audit to production

Client names and results are shared only with written approval.

Start small. Ship in 90 days. Stay on watch.

  1. 1

    Safety audit

    2 weeks

    We review your stack, policies, costs and compliance gaps.

  2. 2

    Build sprint

    90 days

    We build the systems the audit points to, in your cloud.

  3. 3

    Managed watch

    Monthly

    We monitor, evaluate and tune what we built.

Audits from $4,500. Build sprints quoted after the audit.

A senior team in Serbia, with real overlap on US hours.

Engineers who write the code, clear English, and pricing that makes sense for a mid-size platform.

Map: arcs from Belgrade, Serbia to New York, Toronto and San Francisco
Serbia
US Eastern
Belgrade time. Amber is when both teams are online.

Questions buyers ask us.

Book a safety audit.

Two weeks, a clear roadmap, and no obligation to build with us after.

The booking calendar did not load. Email hello@hullward.com and we will send times.