Frequently Asked Questions: Custom Software Development
(01)What tech stack do you use for web applications?
We use Next.js 16 with React Server Components, TypeScript, Tailwind CSS, and depending on requirements PostgreSQL, Convex, or Supabase as database. For hosting, we use Vercel or AWS/GCP with Edge deployment.
(02)How are scope changes handled during the project?
We work in clearly defined stages: first a Sprint of about four weeks aimed at a runnable beta, then the expansion stages in the Build & Support format. Scope changes are welcome and evaluated through a structured change request process. Each change is transparently communicated regarding effort, timeline, and budget before being added to the backlog.
(03)How do you handle ongoing operations?
In the Build & Support format we take care of monitoring, bug fixing and updates. We do not make blanket availability promises; how quickly we respond and how operations are measured is agreed together in the contract, in line with the terms of the cloud services involved.
(04)How is application security ensured?
Security is integrated from the start: OWASP-compliant development, role-based access control (RBAC), secrets management, encrypted communication (TLS 1.3), audit logging, and regular security reviews. For sensitive data, we additionally implement PII handling per GDPR.
(05)How does maintenance work after go-live?
Bugs you report within 30 days of final delivery are fixed free of charge. After that, in the Build & Support format we handle bug fixing, security updates, performance optimization and feature development – with a ticket system, regular status reports and a dedicated contact person.
(06)How is AI integrated responsibly?
We focus on AI governance: model selection based on your requirements (Claude, GPT, Gemini, open source), guardrails against hallucinations and unwanted outputs, cost caps for token usage, and fallback strategies for API outages. RAG systems do not train a model on your data: it is retrieved at query time from a vector index that stays under your control, and it is never passed to third parties.