Skip to content
Alabama · Agentic SaaS development

SaaS Development for Founders Selling into Alabama

Before setting a subscription price for Alabama customers, a founder runs into a tax question the state's own rule does not settle. Department of Revenue Rule 810-6-1-.37 treats computer software as tangible personal property and taxes its sale or licensing regardless of its function or form of transmission, but it does not expressly mention remotely accessed software or software as a service. How that question is answered changes what you charge, what you collect and when you have to register.

Curiosive, a studio in Ankara, Türkiye, builds SaaS with AI coding agents and senior engineers who review every diff. Engineers design the tenant model, billing webhooks and entitlement logic. Agents produce the CRUD screens, admin views, migrations and test suites around them. Work runs as AI-accelerated development, starting from $2,000 per month, with scope agreed in writing.

24
published portfolio projects
5+
years building for production
12
countries the work runs in
100%
of code read by a senior engineer
1 day
to hear back, from the engineer

For US founders and product teams

A US company. An engineering partner you can keep.

Curiosive LLC is our US-registered company. Engineering is led from Ankara, Türkiye, with collaboration across European and US time zones. Your engagement starts with a written scope, monthly capacity and a clear delivery plan.

Know who you hire

Curiosive LLC provides the services. Our US company details and service terms are published, and pricing is in USD.

Know what will ship

Agree scope, capacity and start date before checkout. Work through a prioritized queue, with senior engineers reviewing changes before they reach production.

Keep ownership

Typed, tested and documented code, with no lock-in to our tooling. Define repository access, handover and the working-hour overlap during discovery.

Sales tax on SaaS in Alabama: rates, thresholds and open questions

The Department of Revenue lists a 4% state general sales and use tax rate, with city and county rates published separately, and a flat 8% Simplified Sellers Use Tax rate for eligible remote sellers. Under Rule 810-6-2-.90.03, an out-of-state seller must register and collect once its retail sales of tangible personal property into the state exceed $250,000 a year, based on the previous calendar year. That threshold sits well above the more than $100,000 in sales or 200 or more transactions the Supreme Court upheld for South Dakota in Wayfair. Each state draws its own line on SaaS; California, for example, begins taxing it on January 1, 2027. Because the state rule is silent on SaaS itself, confirm your position with an accountant before launch.

Billing for Alabama sales tax and tenant isolation in a SaaS build

The state offers two routes that ask different things of billing: one flat 8% rate under the Simplified Sellers Use Tax, or the 4% state rate with city and county rates published separately. Billing therefore has to know which route you chose and where each customer is. The $250,000 threshold is measured on the previous calendar year, so we keep a running total of Alabama sales per calendar year and record the rate applied on each invoice. The payment provider's events stay the source of truth, handled by idempotent webhooks so a redelivered event is never applied twice. Tenant isolation is designed into the data model from the first table. Agents then write the screens, admin views, migrations and tests around those boundaries, and a senior engineer reviews every diff. PicKey (pickey.ai), with subscription billing, and Inspire Film (inspire.film), with per-title entitlement, were built with the same split.

From May 1, 2027, controllers covered by the state's Personal Data Protection Act must answer authenticated requests to confirm, access, correct, delete or port personal data within 45 days, extendable once by 45 more when reasonably necessary. Consumers can also opt out of targeted advertising, the sale of their data and profiling in furtherance of solely automated significant decisions. Covered businesses need a clear and conspicuous website link to an opt-out page, and when a consumer's opt-out preference signal conflicts with a saved privacy setting or loyalty-program participation, the signal wins, though you may tell the consumer about the conflict. We build the request queue with its deadline, per-tenant export and server-side signal handling into the product, not as a later patch.

Breach notice deadlines for SaaS vendors with Alabama customers

The Code of Alabama sets two breach notification clocks, and a SaaS company can sit on either side. When you maintain, store or process sensitive personally identifying information for a business client, you are its third-party agent under Section 8-38-8: after a breach you must tell that client without unreasonable delay and no later than 10 days after determining the breach or having reason to believe it occurred, then give it the information it needs for its own notices. The contract can hand those notifications to you. When you are the covered entity and must notify more than 1,000 people, Section 8-38-6 requires written notice to the Attorney General within 45 days of determining that a breach occurred and is reasonably likely to cause substantial harm, including the approximate number of affected Alabamians. Tenant-scoped audit logs that show who was affected make both clocks easier to meet.

Health and AI SaaS in Alabama: prior authorization and genetic data

Two sector laws matter if your product serves health. Act 2026-589, in effect since October 1, 2026, covers health benefit plan providers and their utilization-review contractors that use AI for prior-authorization medical-necessity decisions. Decisions must rest on the enrollee's own medical history and clinical circumstances, plans certify annually to the Alabama Department of Insurance that the AI does not rely on a group dataset and does not discriminate, and any denial, delay or modification is left to a licensed physician or other competent health care professional. A tool sold into that chain should include a human sign-off step and record each decision's inputs. Separately, the Genetic Data Privacy Act, in force since October 1, 2024, requires direct-to-consumer genetic testing companies to get express consent, offer access and account deletion, and destroy samples and genetic data within 30 days of a request.

Questions

The things people ask before starting.

Is SaaS taxable in Alabama?

The state rule does not answer it directly. Rule 810-6-1-.37 taxes the sale or licensing of software regardless of its function or how it is transmitted, but it does not expressly mention remotely accessed software or software as a service. We build billing so the state's tax can be switched on once your position is settled.

When does an out-of-state SaaS company have to collect Alabama sales tax?

If your product falls under the software rule, once retail sales into the state exceed $250,000 a year, based on the previous calendar year, under Rule 810-6-2-.90.03. You then register with the Department of Revenue and collect through the regular provisions, the flat 8% Simplified Sellers Use Tax program if eligible, or a marketplace facilitator.

Does Alabama's privacy law cover a B2B SaaS product?

Partly, and less than a consumer app. From May 1, 2027, the act protects consumers, and someone acting for a business or as an employee does not count as one. A B2B product can still hold personal data about its customers' own end users, so the request and opt-out machinery is worth building if you meet the act's thresholds.

What does it cost to build a SaaS product?

Work runs as AI-accelerated development, starting from $2,000 per month, with scope agreed in writing. You hold the code, the repository and the hosting accounts from the first commit, with no lock-in to our tooling.

How it starts

What happens after you write to us.

  1. 01

    You describe the product

    One paragraph on what you are building, roughly when you need it, and who it is for. No brief, no form with fifteen fields.

  2. 02

    You get a reply within a day

    From the engineer who would do the work, not a sales team. If we are not the right fit we say so, and where possible we point you somewhere better.

  3. 03

    You get a scoped plan

    Scope, price and timeline in writing before anything is committed. You decide with the numbers in front of you.

No long contract to begin, no lock-in to our tooling, and the code is yours from the first commit.

Start a conversation
Contact

Looking for an engineering partner for the long haul?

A short note about the product, the timeline and who it is for is enough to start. You will hear back from the engineer who would do the work, not a sales team.

Ankara / Türkiye · Working across European and US time zones