Skip to content
Bosnia and Herzegovina · Agentic software engineering

Software Development for Teams in Bosnia and Herzegovina

If your company in Bosnia and Herzegovina was already processing personal data when the new Law on Personal Data Protection entered into force in March 2025, Article 116 gives you two years to bring that processing into line, so the deadline falls in March 2027. That is engineering work as much as paperwork: data models, access rules, retention and logs in systems that are already live.

Curiosive builds software from Ankara, Türkiye, with AI coding agents doing the volume and senior engineers reviewing all of it. Work runs as AI-accelerated development, starting from $2,000 per month, with scope agreed in writing. Agents carry a change across a large codebase; engineers own the data model, access control and the decision to merge each diff.

24
published portfolio projects
5+
years building for production
12
countries the work runs in
100%
of code read by a senior engineer
1 day
to hear back, from the engineer

The 2025 data protection law in Bosnia and Herzegovina for engineers

The law was published in Službeni glasnik BiH No. 12/25 on 28 February 2025, entered into force on 8 March 2025 and has applied since 4 October 2025, after a 210-day period. It is enforced by the Agency for Personal Data Protection in BiH. Fines for legal entities run from 10,000 KM to 20 million KM, or up to 2% of total annual worldwide turnover, for some breaches, and from 20,000 KM to 40 million KM, or up to 4% of total annual worldwide turnover, for the most serious ones, whichever amount is higher. For an existing system, alignment usually starts with finding every place personal data is read or written. Agents trace that across hundreds of files and add tests around it; engineers decide what changes.

Engineers in Türkiye working on data from Bosnia and Herzegovina

Bosnia and Herzegovina is not an EU member state. The European Commission lists it as a candidate country: the European Council granted candidate status in December 2022 and decided in March 2024 to open accession negotiations. Personal data of your users in BiH is covered by the national law above. The picture changes when the same system also holds personal data that falls under the GDPR, such as data about EU customers. Neither Türkiye nor BiH has an EU adequacy decision, so EU personal data made available to engineers in Türkiye needs another Chapter V transfer tool, such as the Standard Contractual Clauses of Commission Implementing Decision (EU) 2021/914. EDPB Guidelines 05/2021 treat remote access from a third country as a transfer when the transfer criteria are met, even if it only means displaying data on a screen for support. The contract should set out our role as processor.

Time zones between Bosnia and Herzegovina and Ankara, season by season

Ankara runs on UTC+3 all year because Türkiye does not use daylight saving time. Bosnia and Herzegovina is on GMT+1 in winter and GMT+2 in summer, so the gap changes twice a year. In winter, Ankara is two hours ahead: our 09:00 to 18:00 day runs from 07:00 to 16:00 your time, your 09:00 is 11:00 in Ankara, and a standard 09:00 to 18:00 day on both sides shares 7 hours. In summer, Ankara is one hour ahead: our day runs from 08:00 to 17:00 your time, your 09:00 is 10:00 in Ankara, and the shared window is 8 hours. The weekly call and most written back-and-forth fit inside that shared window. Work runs on Türkiye business hours.

Contracting from abroad and fiscalization in Republika Srpska

Clients in Bosnia and Herzegovina contract with Curiosive cross-border. There is no long contract to begin: scope and budget are agreed in writing after a discovery call, our published starting prices are in US dollars, and repository, database and hosting accounts are opened in your name or connected to ones you already hold. One local rule shapes software that sells to consumers. In Republika Srpska, the Law on Fiscalization (Službeni glasnik RS 15/2022) requires every business registered to trade goods and services to record each sale at the moment it happens on an electronic fiscal device approved by the Tax Administration and to issue a fiscal receipt, whatever the payment method, unless its activity is exempted by government decree. Only suppliers approved in advance by the Tax Administration may place invoicing systems on the market. An ordering or booking product for a business there has to plan for that from the start.

Agentic software engineering on an existing codebase

Take the Article 116 alignment as an example. An engineer scopes the task: find every read and write of personal data in one module, add tests that pin the current behaviour, leave authentication alone. A coding agent such as Claude Code or Cursor reads the code, plans, implements and runs the type checker, linter and test suite before proposing a change. A senior engineer reads each diff, agents never merge their own work, and continuous integration repeats the checks. That cuts the cost of volume work, not of judgement. Our work at scale includes the Webflow to Next.js rebuild for Zing Coach (zing.coach), AI fitness coaching for 1M+ users, the revival of RateItAll (rateitall.com) with its 12M+ reviews, and maintaining the Detailed SEO Extension, used by 600,000 SEOs, through its acquisition by Ahrefs.

Questions

The things people ask before starting.

When must existing systems comply with the new data protection law in Bosnia and Herzegovina?

By March 2027 for processing that was already running. Article 116 gives controllers and processors two years from the law's entry into force in March 2025 to bring existing processing into line. Processing that started later has been under the law since it began applying on 4 October 2025.

Do we need Standard Contractual Clauses to outsource development from Bosnia and Herzegovina?

You need them, or another Chapter V tool, when engineers in Türkiye can access personal data covered by the GDPR, because neither BiH nor Türkiye has an EU adequacy decision. For data covered only by the national law, how it treats access from Türkiye is worth confirming with your lawyer before the contract is signed.

How many working hours overlap between Bosnia and Herzegovina and Ankara?

Eight hours in summer and seven in winter, in a standard 09:00 to 18:00 day on both sides. Ankara is one hour ahead in summer and two hours ahead in winter, because Bosnia and Herzegovina changes its clocks while Türkiye stays on UTC+3 all year.

Does Curiosive have developers in Bosnia and Herzegovina?

No. Curiosive works remotely from Ankara, Türkiye, with no office in any other country. Clients there work with us through async written decisions, a releasable increment every week and one short weekly call, held inside the shared working hours.

How much does a software development monthly engagement cost?

Work runs as AI-accelerated development, starting from $2,000 per month, with scope agreed in writing. Neither figure is a quote; the actual scope and budget are written down after a discovery call.

How it starts

What happens after you write to us.

  1. 01

    You describe the product

    One paragraph on what you are building, roughly when you need it, and who it is for. No brief, no form with fifteen fields.

  2. 02

    You get a reply within a day

    From the engineer who would do the work, not a sales team. If we are not the right fit we say so, and where possible we point you somewhere better.

  3. 03

    You get a scoped plan

    Scope, price and timeline in writing before anything is committed. You decide with the numbers in front of you.

No long contract to begin, no lock-in to our tooling, and the code is yours from the first commit.

Start a conversation
Contact

Looking for an engineering partner for the long haul?

A short note about the product, the timeline and who it is for is enough to start. You will hear back from the engineer who would do the work, not a sales team.

Ankara / Türkiye · Working across European and US time zones