locations · dallas–frisco · headquarters

Our home market, where bank back offices, telecom billing and new trading venues hire from one talent pool.

Frisco is where Cohash is based, so North Texas is the market we know from the inside. Much of the work here starts after a relocation or an acquisition, when a new regional headquarters inherits three directories, two CRMs and a data warehouse nobody fully owns.

in short·15-second read

We're an engineering consultancy headquartered in Frisco, Texas.

Around Dallas–Fort Worth our clients are banks, fintechs, telecoms and corporate headquarters, and the work is identity governance, privileged access, Salesforce, Dynamics 365, and Snowflake or Databricks. Because we're local, discovery sessions, workshops and go-live weekends happen in your office. Nobody books a flight.

Frisco is home base. Across Dallas–Fort Worth our engineers show up at your office for workshops, cutovers and handover, and work remotely the rest of the time.

Ask an engineer facts checked 2026-10-20 · 7 sources
rules
Texas Data Privacy and Security ActTexas Business & Commerce Code §521.053, breach noticeTexas SB 2610 , cybersecurity safe harborTexas Responsible AI Governance Act
who and what

Who we work with in Dallas–Frisco, and the rules they work under

industries
  1. Regional and national banks

    Back-office and operations centers in Irving, Plano and Frisco often run identity stacks that were built for some other headquarters. We usually find entitlement sprawl in core banking and loan origination systems, plus service accounts older than the current IAM team. We start with an access review the examiners would recognize. Then we automate the joiner, mover and leaver flows.

  2. Fintech and new market infrastructure

    Payment startups and the firms building around the new Texas exchange need customer identity, API security and audit trails before the first regulator visit. The pattern we see is fast product teams with one shared cloud admin role. Splitting that into scoped, short-lived roles is usually week one.

  3. Telecom and IT services

    Telecom carriers keep subscriber data across billing, CRM and field-service tools, and thousands of contractor identities sit on top. Most of our work there is CRM data modeling and consent handling in Salesforce or Dynamics 365. Network operations staff need privileged access controls as well.

  4. Relocated headquarters

    Companies that move a head office to Collin or Denton County bring their old systems with them. We consolidate directories, retire the duplicate CRM, and rebuild data pipelines so the new finance team does not inherit reports that nobody can trace back to a source.

regulations
  1. Texas Data Privacy and Security Act ↗

    If you operate in Texas or target Texans, assume this covers you unless you're a small business by SBA standards. You'll need privacy notices and a working process for consumer rights requests. Sensitive data and targeted advertising also need data protection assessments. The Attorney General enforces it.

  2. Texas Business & Commerce Code §521.053, breach notice ↗

    Individual notice within 60 days and Attorney General notice within 30 days for breaches involving at least 250 Texas residents, filed through the AG's online form with counts and remediation steps.

  3. Texas SB 2610 (2025), cybersecurity safe harbor ↗

    Effective 1 September 2025 for Texas businesses with fewer than 250 employees. Bars exemplary damages in a breach suit if the business had a written cybersecurity program aligned to a recognized framework when the breach happened.

  4. Texas Responsible AI Governance Act (HB 149) ↗

    In force since 1 January 2026. It bans certain harmful AI uses, preempts local AI ordinances and leaves enforcement to the Attorney General, who gives you 60 days to cure. Putting an AI agent in front of bank or telecom customers? Read it before launch.

01Does being local change how you run a project?

Mostly it changes the expensive moments. Discovery workshops, cutover weekends and the first certification campaign go better in the same room. We do those on site in North Texas and keep the build work remote, which keeps flights and hotels out of the budget.

02We are a small fintech. Does SB 2610 apply to us?

It can, for a Texas business with fewer than 250 employees that holds sensitive personal data. The catch is that your documented program has to conform to a recognized framework at the time of the breach. We build the identity and access controls inside that program. Whether you're covered is your counsel's call.

03Can you staff engineers into our team instead of running a project?

Yes. Some North Texas clients prefer senior identity, Salesforce or data engineers embedded in their own sprints. We say up front which model fits the work and what you'd still need to own.

04Do you work on Salesforce and Dynamics 365 in the same company?

Often. Banks and telecoms that grew by acquisition commonly run both. We look at which one holds the cleaner customer data and the deeper integrations before suggesting a consolidation, and sometimes the answer is to keep both with one identity layer.

sources 7 sources linked last checked 2026-10-20 content fingerprint 1fbbdbcd
  1. 01Dallas Fed, Dallas Economic Indicators (July 2026)dallasfed.org ↗
  2. 02Dallas Fed, At the Heart of Texas, Dallasdallasfed.org ↗
  3. 03Venable, Texas Stock Exchange opens for tradingvenable.com ↗
  4. 04Texas Business & Commerce Code chapter 521statutes.capitol.texas.gov ↗
  5. 05Texas DIR, Texas Data Privacy and Security Actdir.texas.gov ↗
  6. 06Texas SB 2610, enrolled textcapitol.texas.gov ↗
  7. 07Texas HB 149 (TRAIGA), enrolled textcapitol.texas.gov ↗
Reviewed by the Cohash team Product names are trademarks of their owners. how we handle facts and data →
next step

Tell us what you're running. We'll tell you what we'd do first.

A 30-minute working session with a senior engineer. No slides.

useful to bring
  • The platform and the version you're on
  • Where you need to get to, and by when
  • What's custom: rules, plugins, integrations
  • Any audit finding or deadline driving it