Blood & Treasure, LLC

Blood & Treasure, LLC is a software development firm headquartered in the United States. The company operates from New York City and lists projects and clients in the Tri-State area as well as engagements with enterprise customers, indicating work across regional and national accounts.

Services and Capabilities

• Custom software development — end-to-end delivery of web and mobile applications from concept through deployment and support.
• APIs, networking and infrastructure — design and implementation of REST, GraphQL and headless APIs, VPN networking, multi-VPC cloud architectures and related infrastructure components.
• Data engineering, analytics and AI — centralizing data platforms (including Databricks), building analytics dashboards, and creating AI/ML integrations while addressing data privacy and control.
• Frontend and native application engineering — development using frameworks such as React, Angular, Vue, Next, React Native, Flutter, Java and Swift for browser and mobile clients.
• Architecture and cloud engineering — AWS pipelines, microservices, scaling strategies, database scaling and multi-cloud work involving Azure, Google Cloud and Firebase.
• Security, compliance and testing — multi-tenancy and row-level security implementations, penetration testing, and support for development-related compliance workflows and ISO verification tooling.

Industry Focus

• Retail and consumer products — employee onboarding and learning applications delivered for a major sports brand.
• Consulting and nonprofit funding — systems and tools supporting grant consulting firms operating in the Tri-State area.
• Government and civic technology — citizen-facing platforms that enable residents to pose questions to officials and receive video responses, and civic engagement tools for campaigns and elected officials.
• Enterprise and supply chain — development of enterprise-grade applications for supply chain operations, demand management and internal tools for large organizations.

Technology and Delivery Approach

Projects typically begin with due diligence to assess existing systems and data, followed by architecture and engineering phases that define cloud infrastructure, microservices and integration patterns. Delivery emphasizes phased rollouts on timelines measured in months, with practices that include CI/CD pipelines, database scaling, multiple VPC setups and use of cloud providers such as AWS, Azure and Google Cloud. Technical work commonly involves API development (REST, GraphQL), front-end frameworks (React, Angular, Vue), native mobile frameworks (React Native, Flutter, Java, Swift), and data platforms like Databricks. Security and compliance activities include penetration testing, multi-tenant and row-level security implementations, and support for compliance verification tools. Engagements cover the full development lifecycle from architecture and implementation to deployment and operational support.