Direct answers to the questions we hear most

An AI native software engineering firm founded in 2018, registered as a Limited Liability Partnership in India. We design, build, modernise and maintain web, mobile, VoIP and AI products for the UK, US, UAE and India. Remote-first, with hours shifted to overlap your timezone.

Since 2018, shipping across telecom and VoIP, healthcare, fintech, recruitment, eCommerce, logistics, proptech, insurance, edtech and SaaS. LLM coding agents (Claude Code, Cursor, Copilot) have been standard tooling since 2023.

New product development, legacy system modernisation, VoIP and AI call centre engineering, AI / ML integration, DevOps and cloud, QA and test automation, and dedicated developer hiring on monthly retainers. See all services.

SMEs, scale-ups and mid-market enterprises in the UK, US, UAE and India. Typical engagements run $5,000–$250,000 with teams of 1–8 engineers. Not the right fit: 100+ engineer programmes or fully on-site work.

Projects start around $5,000 for a focused MVP or single-module build; retainers from $3,000 per month. Smaller scopes welcome; the free consultation settles fit first.

Three models: fixed-price with scope locked at signing, monthly retainers, and dedicated teams. No hidden fees. Written estimate within 48 hours of the free consultation. See full pricing.

Yes, after a fixed-scope discovery sprint. T&M billing is in 4-hour blocks at the published hourly rate, with itemised monthly statements. No billing for context-switching or PM overhead beyond agreed scope.

Yes: a 2-week free trial on the first engineer of any new engagement. Not a fit at the end of week 2? Pay nothing, and we part ways or replace the engineer at no cost.

6-month retainers receive a 10% discount on the published monthly rate; 12-month retainers receive 15%. Discounts apply on a written variation to the MSA, never silently.

Fixed-price projects: 30% on signing, milestones for the balance, final 10% on acceptance. Retainers: invoiced monthly in advance, net-15 payment terms. We accept SWIFT bank transfer, Wise, and ACH for US clients. Invoices include all VAT/GST as applicable.

Discovery (week 1) → optional technical audit for redevelopments (week 1–2) → architecture and sprint planning (week 2–3) → AI accelerated development in 2-week sprints with end-of-sprint demos → 30–60 day stabilisation period after go-live → optional maintenance retainer. The full process is documented at /process.

Two-week sprints: planning every other Monday, working-software demo and retro every other Friday, daily async standups in your Slack/Teams channel. Backlog and burndown live in your project tool of choice.

A flexible 8-hour day shifted to overlap your timezone (Europe, Americas, Middle East or Asia-Pacific), a dedicated project lead on Slack in your business hours, daily async standups, fortnightly demos, and a 4-hour critical-issue response SLA.

Changes under 4 hours are absorbed into the current sprint at no extra charge where they fit. Larger changes are scoped, priced and agreed in writing before work starts.

We tell you within the sprint, not at the demo. If the slip is on us, we absorb the cost and re-plan; if it comes from scope changes, blocked dependencies or delayed input, we flag it and agree a revised plan.

No. Senior engineers design the architecture, business logic and security-critical modules; AI agents (Claude Code, Cursor, Copilot) handle scaffolding, boilerplate, CRUD, tests and docs. Every AI generated line is reviewed by a senior engineer before merge: roughly 3× faster delivery with higher test coverage.

Claude Code (terminal agent), Cursor IDE, GitHub Copilot, and v0.dev for UI scaffolding, plus Linear and Notion AI internally. New tools are adopted only after a senior engineer stress-tests them on a real project.

Not when reviewed properly. The same senior engineer who would have written the code still reviews, refactors and tests it. Coverage targets (≥80% on new code) and CI gates apply equally to AI-assisted and hand-written code.

No. Every PR (AI-assisted or not) must be approved by a senior engineer, pass all CI checks (lint, typecheck, tests, security scans), and meet our coverage threshold before merge. Our methodology is published at /methodology.

You do, 100% from day one. The MSA assigns all rights, including AI-assisted output, on payment. Our AI tools (Claude Code, Cursor, Copilot) run under enterprise licences that permit commercial output and do not retain client code for training.

Not without explicit written consent. We use enterprise-tier API access (Anthropic, OpenAI) with zero-retention configurations where available, and redact PII from prompts. Highly sensitive workloads can run on-premise LLMs (Llama, Mistral) with no external API calls.

AES-256 at rest (database, object storage, EBS volumes) and TLS 1.3 in transit. Key management via AWS KMS, GCP KMS or Azure Key Vault. Application secrets in HashiCorp Vault or AWS Secrets Manager. Full security posture is at /security.

We design GDPR-ready architecture and sign Article 28 Data Processing Agreements as standard. For UK→India and EU→India transfers we rely on the UK IDTA and EU SCCs (Module 2) with documented supplementary measures. Full posture is at /compliance and a DPA template is at /dpa.

There is no such thing as a HIPAA "certification". We sign Business Associate Agreements (BAAs), follow the Security Rule's required and addressable specifications, and use only HIPAA-eligible AWS/GCP services for in-scope workloads. Honest framing is at /compliance.

We do not currently hold an active SOC 2 attestation. SOC 2 Type 1 readiness is in progress with a target of Q4 2026. We are happy to share our current policy bundle, gap assessment and roadmap on request under NDA.

You choose. UK clients typically host on AWS London (eu-west-2). EU clients on AWS Frankfurt (eu-central-1). US clients on AWS us-east-1 or us-west-2. UAE clients on AWS Bahrain (me-south-1) or AWS UAE (me-central-1). India clients on AWS Mumbai (ap-south-1). We support GCP and Azure equivalents on request.

Yes. The full sub-processor list with purpose, region and DPA status is published at /security. We give 30 days' notice before adding a new sub-processor that handles client data, and clients have the right to object.

Annual third-party penetration tests on rginsys.com and on production systems we operate. Continuous SAST/DAST on every PR for client work (Semgrep, Snyk, Trivy, OWASP ZAP). Dependabot/Renovate for dependency scanning. Security disclosures: [email protected].

You hire named engineers full-time on a monthly retainer; they report into your stack and standups. PTO/sickness backfill via a continuity engineer briefed on your codebase. Minimum commitment one month.

Hourly suits short, well-defined tasks (audits, fixes, small features); monthly suits ongoing build where the engineer retains context. Most clients start hourly for a discovery sprint, then switch to monthly.

Tell us in the first two weeks and we will replace the engineer at no extra cost, with the new engineer briefed by the outgoing one. After two weeks, we replace within five business days on request, with a one-week handover overlap included.

Yes. We send shortlisted CVs and arrange a 60-minute technical interview with each candidate. You make the final call. We do not rotate engineers without written approval.

You do, 100%, from day one: all source code, documentation, infrastructure credentials and deployment scripts. Everything is documented clearly enough that any competent team could take over without us.

Yes, as standard, before any code review or discovery work; your NDA template or ours. We also sign MSAs covering IP assignment, confidentiality, data handling and liability.

Yes. A redacted sample MSA is at /sample-msa and a sample DPA at /dpa. Both are negotiable and we are equally happy to work from your legal team's templates.

Negotiable per contract. Defaults: UK clients: England and Wales (London courts). US clients: Delaware. UAE clients: DIFC or ADGM. Indian clients: Mumbai. Cross-border disputes typically resolved by London Court of International Arbitration (LCIA) or Singapore International Arbitration Centre (SIAC) at client preference.

Either party can terminate for convenience with 30 days' written notice on retainers, with no exit fee. On termination we transfer all repositories, credentials and documentation within 14 days, certify deletion of any client data we retained, and remain available for paid handover support for 30 days.