Software Development Company for the UK | London, Manchester, Edinburgh

Q: Is RG INSYS UK GDPR and Data Protection Act 2018 ready?

Yes. We design every UK engagement to UK GDPR and the Data Protection Act 2018 from day one. That includes lawful basis registers, Records of Processing Activities (Article 30), Data Protection Impact Assessments where required, data subject access request workflows, breach notification procedures aligned to the 72-hour ICO requirement, AES-256 encryption at rest, TLS 1.3 in transit, role-based access control, and immutable audit logs. We are not ourselves an ICO certified processor, we build to the standard the ICO expects of one.

Q: Where is UK client data hosted?

Default primary region is AWS London (eu-west-2) with optional secondary in AWS Frankfurt (eu-central-1) for disaster recovery. All production data, backups, and logs stay in the UK or EU unless you specifically authorise otherwise. Where engineering access from India is required for support, it is gated through a UK-resident bastion, scoped via IAM, time-bounded, and fully audit logged. Article 46 GDPR safeguards (UK IDTA, Standard Contractual Clauses with the UK Addendum) are in our standard MSA.

Q: How does the timezone difference work for UK clients?

India Standard Time is UTC+5:30. Our UK-aligned shift starts at midday IST, giving you a 5-6 hour real-time overlap with London business hours covering all morning standups, planning sessions, and afternoon delivery reviews. Daily 30-minute standup happens at 09:30 London / 15:00 IST. Critical incidents are answered within 4 hours, 24/7, by an on-call engineer.

Q: What does an engineer cost compared to a UK hire?

A dedicated mid-to-senior engineer with us is £2,800/month all-in (≈£33,600/year). The fully loaded cost of a UK senior developer in London is typically £75,000-£95,000/year once you add employer NI, pension, holiday, equipment, office, recruitment fees and onboarding. You save roughly 60% versus an in-house UK hire and skip 8-12 weeks of recruitment.

Q: Are you a contractor for IR35 purposes?

No. RG INSYS LLP is a fully outsourced B2B software services provider. We invoice your UK company for delivered work or for a fixed monthly retainer, supply our own equipment, manage our own engineers, and carry our own professional indemnity. We are outside the scope of IR35 because we are a service supplier, not a contractor placed in your business. Your accountant or solicitor can confirm this against the SDC (Supervision, Direction, Control) test if you need a written opinion.

Q: Can you sign a UK Master Services Agreement and DPA?

Yes. We sign a UK MSA governed by the law of England and Wales, with a Data Processing Addendum that incorporates the UK IDTA, Article 28 GDPR processor obligations, sub-processor disclosure, and your security schedule. We also sign mutual NDAs before any technical discussion. Sample MSA available on request.

Q: Do you have UK industry experience?

Yes. We have shipped recruitment and contractor management platforms for UK workforce solutions firms, FCA-aware fintech features for UK lending platforms, NHS DSP Toolkit-aligned patient communication tools for UK private healthcare, and custom telecoms billing for UK MSPs. UK pound sterling, UK English spelling and tone, and UK regulatory awareness come built in.

RG INSYS LLP serves UK clients across recruitment technology, fintech, healthcare technology, telecoms, SaaS, and PropTech. We work in pounds sterling, host UK production data in AWS London, sign a UK MSA under English law with a UK GDPR-compliant DPA including the IDTA, and operate a shifted working day that gives you 5-6 hours of real-time overlap with London business hours.

Pricing: £24/hr blended, £2,800/month per dedicated engineer, fixed-price MVPs from £10,000, all in pounds sterling on a UK invoice.
Hours overlap: 5-6 hours of real-time overlap with London business hours. Daily standup at 09:30 London / 15:00 IST.
Data hosting: AWS London (eu-west-2) primary, AWS Frankfurt (eu-central-1) secondary on request. UK-resident bastion for engineering access.
Compliance-ready: UK GDPR + EU GDPR, Data Protection Act 2018, PECR, FCA awareness for fintech, NHS DSP Toolkit awareness for healthcare.
Communication: Slack, Microsoft Teams, WhatsApp, daily async standups in your timezone, fortnightly demos at a London-friendly time.

Pricing in pounds sterling

Every quote we send to a UK client is written in pounds sterling, fixed at the engagement level, broken down by deliverable, and billed against a UK MSA. There is no hidden agency margin, no time-and-materials surprise, and no currency hedging risk for you. Below are the four most common engagement shapes for UK clients.

Engagement	From	What you get
Hourly rate (small fixes, audits)	£24/hr	Senior India-based engineer, AI-tooled, billed in 15-minute increments. Used for legacy bug-fixing, performance audits, or short bursts of integration work.
Dedicated engineer (monthly)	£2,800/month	One full-time engineer embedded in your standups, dedicated to your codebase. Mid-to-senior level. 160 hours per month, holidays covered, replacement engineer covered if anyone leaves.
Fixed-price MVP (4-8 weeks)	£10,000	Discovery, architecture, build, deployment to AWS London, 80%+ test coverage, handover docs. 30-day stabilisation included.
Legacy modernisation Phase 1	£14,000	Code audit, architecture target state, prioritised migration roadmap, plus delivery of the first slice (commonly the slowest user journey) on the new stack with parallel-run safety net.

All quotes are written, fixed, and broken down by deliverable. No hidden fees. Payment terms are 50% on contract signature, 50% on delivery for fixed-price; monthly in arrears for retainers. UK invoices include reverse-charge VAT treatment under place-of-supply rules; your accountant can confirm specifics.

Timezone overlap with the UK

India Standard Time is UTC+5:30. London is UTC+0 in winter and UTC+1 (BST) in summer. Our UK-aligned engineering shift starts at midday IST and runs until around 21:00 IST, which gives you 5-6 hours of real-time overlap with London business hours covering the morning standup, planning sessions, mid-day pairing, and the start of your afternoon. We do not run a "throw it over the fence" overnight model. Engineers are awake and online while your team is at their desk.

The day is structured around your morning. Daily standup happens at 09:30 London / 15:00 IST so the team starts the day on the same page. Demos and weekly review meetings are scheduled between 14:00 and 17:00 London time. Pull request reviews land in your morning so any feedback you leave overnight is picked up at the start of our shift. Critical incidents (P1) are responded to within 4 hours, 24/7, with an on-call engineer rota; P2 incidents are answered next business day. None of this is best-effort, it is written into the SLA in the MSA.

Data hosting in the UK and EU

By default, UK production workloads run in AWS London (eu-west-2). Backups and disaster recovery sit in AWS Frankfurt (eu-central-1) only when you have authorised EU-region replication; otherwise both stay in eu-west-2. Application logs, telemetry, S3 object storage, RDS databases, and Redis caches all stay in-region. CloudFront edge caching is configured to honour the same residency rules. We do not move production data to India. Where engineering access from our India office is required for build or support, it is mediated through a UK-resident bastion host with IAM-scoped, time-bounded credentials and full audit logging.

For the rare cases where any personal data is transferred outside the UK or EEA, the engagement contract includes Article 46 GDPR safeguards: the UK International Data Transfer Agreement (IDTA), the UK Addendum to the EU Standard Contractual Clauses, and a documented Transfer Impact Assessment that covers Indian government access law. We will sign a Data Processing Addendum that names every sub-processor (AWS, GitHub, Sentry, etc.), specifies their region, and gives you the right to object to new sub-processors before they are added. AES-256 at rest and TLS 1.3 in transit are non-negotiable defaults.

Compliance specific to the UK

UK GDPR EU GDPR Data Protection Act 2018 PECR (cookies + e-marketing) UK IDTA + SCC Addendum FCA awareness (fintech) NHS DSP Toolkit awareness WCAG 2.2 AA SOC 2 Type 1 in progress

UK GDPR and the Data Protection Act 2018 are the load-bearing constraints for any UK build. We design every UK engagement to UK GDPR Articles 5, 25, 28, 30, 32 and 33 from day one: lawful basis registers, Records of Processing Activities, Data Protection Impact Assessments where Article 35 triggers, data subject access request workflows that meet the one-month timeline, breach notification procedures aligned to the 72-hour ICO requirement, and the principles of data minimisation and purpose limitation enforced at the schema level. Cookie banners and e-marketing flows are built to PECR, not just GDPR, which is the more restrictive standard the ICO actually enforces against UK websites.

For UK fintech we build with FCA awareness, including the Operational Resilience requirements (PS21/3), the SYSC outsourcing rules and FG16/5 expectations on critical and important business services. We are not an FCA authorised firm, you remain the regulated party, but we deliver a system the FCA will accept under your authorisation: complete audit trails, segregation of duties, immutable logging, and incident response runbooks. For UK healthcare we work to NHS DSP Toolkit standards, including the Data Security Standards, NHS England's Cyber Assessment Framework alignment, and where relevant, the Caldicott Principles for confidential patient information.

Honest disclosure on certifications. RG INSYS LLP itself is not currently SOC 2 Type 2 audited; SOC 2 Type 1 is in progress with a target completion in late 2026. We deliver compliance-ready architecture, the controls, evidence, and documentation that an auditor will accept against your certification, not ours. If your buyer or regulator requires a fully certified vendor, we will tell you up front and recommend an appropriate partner.

Recent UK client work

Most of our UK delivery has been in recruitment technology, contractor management platforms, telecoms billing, and FCA-aware fintech features. UK clients hire us either to rebuild a slow legacy PHP or .NET system on Node.js plus React, or to add AI-led features (semantic search, document parsing, voice automation) to an existing platform. The case study below is a representative example.

Legacy Redevelopment UK workforce solutions firm · 8 weeks · 3 engineers

UK recruitment portal: PHP/Laravel rebuilt on Node.js + React in 8 weeks

A UK workforce solutions company had a PHP/Laravel contractor management portal with 10-15 second page loads and entirely manual job board posting. We rebuilt the platform on Node.js, React, PostgreSQL and Redis with parallel-run migration so the old system stayed live as a safety net. Phase 1 shipped in 8 weeks with 3 engineers using Claude Code and Cursor throughout, including 5 job board API integrations (Reed, Indeed, Totaljobs, CV Library, LinkedIn) and a UK GDPR-compliant document management module covering right-to-work, DBS and contractor agreements.

<1sPage load (was 10-15s)

8 wksPhase 1 delivery

5Job board integrations

60%Cost vs UK agency quote

Read full case study →

FAQ

UK-specific questions

Is RG INSYS UK GDPR and Data Protection Act 2018 ready?

Yes. We design every UK engagement to UK GDPR and the Data Protection Act 2018 from day one. That includes lawful basis registers, Records of Processing Activities (Article 30), Data Protection Impact Assessments where required, data subject access request workflows, breach notification procedures aligned to the 72-hour ICO requirement, AES-256 encryption at rest, TLS 1.3 in transit, role-based access control, and immutable audit logs. We are not ourselves an ICO certified processor, we build to the standard the ICO expects of one.

Where is UK client data hosted?

Default primary region is AWS London (eu-west-2) with optional secondary in AWS Frankfurt (eu-central-1) for disaster recovery. All production data, backups, and logs stay in the UK or EU unless you specifically authorise otherwise. Where engineering access from India is required for support, it is gated through a UK-resident bastion, scoped via IAM, time-bounded, and fully audit logged. Article 46 GDPR safeguards (UK IDTA, Standard Contractual Clauses with the UK Addendum) are in our standard MSA.

How does the timezone difference work for UK clients?

India Standard Time is UTC+5:30. Our UK-aligned shift starts at midday IST, giving you a 5-6 hour real-time overlap with London business hours covering all morning standups, planning sessions, and afternoon delivery reviews. Daily 30-minute standup happens at 09:30 London / 15:00 IST. Critical incidents are answered within 4 hours, 24/7, by an on-call engineer.

What does an engineer cost compared to a UK hire?

A dedicated mid-to-senior engineer with us is £2,800/month all-in (≈£33,600/year). The fully loaded cost of a UK senior developer in London is typically £75,000-£95,000/year once you add employer NI, pension, holiday, equipment, office, recruitment fees and onboarding. You save roughly 60% versus an in-house UK hire and skip 8-12 weeks of recruitment.

Are you a contractor for IR35 purposes?