Question 1

Can you develop an intranet portal for our employees?

Accepted Answer

Yes, we have built intranet portals for companies with 50–500 employees, including document management with version control, onboarding modules, HR self-service dashboards, task management, and internal communication channels. Portals are hosted on your servers or private cloud for full data sovereignty. Every portal includes full-text search, mobile-responsive design for field staff, and role-based access control ensuring each department sees only information relevant to their function.

Question 2

Do you support Single Sign-On (SSO) integration?

Accepted Answer

Yes, we implement SSO with all major identity providers: Microsoft Azure AD (Entra ID), Google Workspace, Okta, Auth0, and custom SAML 2.0 or OAuth 2.0 solutions. SSO provides secure access across all business systems with a single set of credentials, eliminating password fatigue and reducing IT support tickets. For enterprises requiring advanced security, we implement multi-factor authentication (MFA) and conditional access policies based on device, location, and risk signals.

Question 3

Do you work with public institutions and EU-funded projects?

Accepted Answer

Yes, we have direct experience delivering software for EU-funded projects and can assist with technical documentation for EU tenders, including ESF+ (European Social Fund), ERDF (European Regional Development Fund), and Horizon Europe programmes. Our solutions satisfy EU eligibility requirements for digital transformation grants: GDPR compliance, accessibility standards (WCAG 2.2), and documentation in the format auditors expect. Our EU jurisdiction simplifies procurement compliance.

Question 4

How secure is your software for business data?

Accepted Answer

We apply layered security: HTTPS/TLS 1.3 encryption in transit, AES-256 at rest, Role-Based Access Control (RBAC) with granular permissions, regular penetration testing by independent auditors, automated daily backups with point-in-time recovery, and real-time monitoring with anomaly alerting. For businesses handling sensitive data, financial records, HR data, trade secrets, on-premise deployment with no shared tenancy is available. All systems are GDPR-compliant from the ground up.

Question 5

Do you take part in public procurement?

Accepted Answer

Yes, either as a bidder or as a partner to a larger contractor, depending on the size and terms of the process. For smaller procurements we bid directly, while for large framework agreements demanding references and capacity a small studio does not have, working as a subcontractor is more realistic, and we will say that openly rather than costing you time on a bid that fails qualification. If you are preparing the documentation, we help with the technical description of the subject, because a badly written technical spec later constrains you as much as the bidders.

Question 6

Must data stay in our own country, or is the EU enough?

Accepted Answer

For most obligations the EU is enough, but parts of the public sector and certain fields carry stricter requirements, so this gets checked rather than assumed. In practice we choose a provider with an EU data centre and a processing agreement, which removes the question of transfers outside the EU that would otherwise need an additional legal basis. If your institution is bound by a rule requiring in-country storage, that is also workable; it changes the choice of provider and the cost, so it has to be known at the start.

Question 7

What is NIS2 and does it apply to us?

Accepted Answer

NIS2 is the European cybersecurity directive, transposed into national law, that extends obligations to more sectors than before, including medium-sized companies previously not treated as critical. The obligations come down to risk management, reporting significant incidents within set deadlines, and accountability at management level rather than only in IT. For the software we build that means access logging, controlled permissions, secure defaults, and a plan for what happens when something goes wrong. Whether you fall in scope is confirmed by a lawyer, because it depends on sector and size.

Question 8

How is access handled when an employee leaves?

Accepted Answer

Through one place where access is revoked, not a tour of ten systems. If you use Microsoft Entra or Google Workspace, the system connects to it, so disabling the account in your identity provider closes access to the application at the same moment. Without that, in practice a former employee keeps working access for months because someone forgot to remove them from one tool. The system also records last sign-in, so dormant accounts surface without a manual review.

Question 9

Can we have a system that works when the plant has no internet?

Accepted Answer

For specific tasks yes; for a whole system it rarely makes sense. Offline operation requires local storage and reconciliation rules for when two people change the same record, and those rules are the expensive part, not the storage. So the scope is kept narrow: a stock count, a work order, a field log. If a site has no stable connection, fixing the network is often cheaper than building a system that works around it.

Question 10

Who maintains the system after delivery?

Accepted Answer

You, us, or your IT department with our support, and that is agreed before delivery. At handover you receive the code, the documentation, access to the environments and deployment instructions, so none of those options locks you in. If your team takes over maintenance, we walk them through it rather than handing over an archive and wishing them luck. What we do not do is deliver without documentation, which would force you to call us for every change.

Question 11

How do we prove to an auditor who changed what?

Accepted Answer

With a change log that cannot be quietly edited. The system records who changed what and when, with old and new values for the fields that require it, and that record is not deletable through the normal user interface. It is also the single most requested thing in internal audits and inspections, and the most expensive to add later, because it means touching every place that writes to the database. So it is set up at the start, with the scope agreed: there is no point logging every change if the audit only cares about part of the data.

Question 12

Our IT department wants everything on our own servers. Is that a problem?

Accepted Answer

No, and it is a legitimate choice we respect. The system is built so it can be deployed to your infrastructure, with a documented deployment procedure and a list of what has to be in place. What changes is the division of responsibility: backups, server upgrades and availability then sit with your team rather than with a provider. That is worth saying out loud before the decision, because the cost of self-hosting is usually underestimated in exactly that part.

Custom Software Development for Companies and Institutions in San Francisco