Skip to content
Greece · Agentic software engineering

Software Development for Greece With AI Agents and Senior Review

When an engineer in Türkiye opens an admin screen showing your Greek customers' records, EDPB guidance counts that as a GDPR transfer once the transfer criteria are met, even though the data is only displayed. That is what outsourcing software development from Greece has to plan for. The clock barely matters: the two countries show the same time in summer and sit one hour apart in winter. The harder questions are transfer paperwork, Greek rules on consent banners and AI features, and who reviews code written by agents.

Curiosive is a software studio in Ankara, Türkiye. We build products end to end or join a team on monthly engagement as its engineering partner, using AI coding agents for scaffolding, migrations and wide refactors, with a senior engineer reviewing every change before it merges. Data models, authentication, permissions, payment paths and anything touching personal data are designed by people. Repository, database and hosting accounts are opened in your name, or connected to ones you already hold, from the first commit.

24
published portfolio projects
5+
years building for production
12
countries the work runs in
100%
of code read by a senior engineer
1 day
to hear back, from the engineer

Working hours between Greece and Ankara in winter and summer

Ankara keeps UTC+3 all year. Greece runs on UTC+2 in winter and UTC+3 in summer. In summer the two match exactly: our 09:00 is 09:00 there, our 18:00 is 18:00, and all 9 hours of a standard 09:00 to 18:00 day are shared. In winter Ankara is one hour ahead. Our day runs from 08:00 to 17:00 Greek time, a local 09:00 start is 10:00 for us, and 8 of the 9 hours overlap. The one hour that does not fit is 17:00 to 18:00 on your side in winter, after our day ends. We run on writing by default: decisions are recorded, each week ends with a releasable increment, and one short weekly call covers what the text did not.

GDPR transfers when engineers in Türkiye work on data from Greece

The Hellenic Data Protection Authority (HDPA) oversees the GDPR in Greece together with Law 4624/2019 and Law 3471/2006. As of 2 October 2026, Türkiye is not on the European Commission's list of adequacy decisions, so personal data made available to a studio here needs another Chapter V transfer tool. EDPB Guidelines 05/2021 add that remote access from a third country is a transfer when the transfer criteria are met, even if data is only displayed on a screen. A common tool is the Standard Contractual Clauses in Commission Implementing Decision (EU) 2021/914, in the module that fits the roles, such as controller to processor. Under Clause 14 both parties warrant they have no reason to believe the destination country's laws and practices prevent the importer from complying. Confirm the paperwork with your lawyer, and design systems so engineers rarely need live personal data.

The HDPA Recommendations 1/2020 allow advertising trackers, and third-party analytics trackers such as Google Analytics, only after prior informed consent. In a 9 May 2022 press release it reported an ex officio audit of 30 high-traffic news websites, gave each 15 days to comply and called on every website to let users accept or reject trackers with the same number of clicks, from the same banner layer. It also recommends accept and reject buttons of the same size, emphasis and colour. A web product for Greek users should use that layout from the start. It also covers AI: under Law 5321/2026, which implements the EU AI Act, it is market surveillance authority for prohibited practices, Annex III high-risk systems and Article 50 transparency. Article 50 has applied since 2 August 2026, so a chatbot must be designed to tell people they are dealing with an AI system unless that is obvious.

Task, agent, checks, review: how the engineering monthly engagement runs

Work starts as an engineer's written task: what done looks like, which tests must pass and which parts of the system the agent may not change. Claude Code or Cursor then works inside the repository, reading the existing code, planning, implementing and running the type checker, linter and test suite before proposing a change. Continuous integration repeats the checks, and a senior engineer reads the diff before anything merges. That lowers the cost of volume work such as migrations, Playwright end-to-end tests and refactors across hundreds of files. It does not lower the cost of judgement about data models, permissions or security, which is where review time goes. Our record includes the Zing Coach (zing.coach) rebuild from Webflow to Next.js, the revival of RateItAll (rateitall.com) with its 12M+ reviews, and the Detailed SEO Extension, used by 600,000 SEOs.

Contracting from Greece: currency, scope and the startup registry

European clients contract with Curiosive cross-border, with scope agreed in writing after a discovery call. Greece has used the euro since 1 January 2001, while our published prices are in US dollars, so the invoicing currency belongs in that written scope. For founders, the official National Startup Registry accepts companies with their head office in Greece, or foreign firms with a Greek branch or subsidiary and a Greek VAT number, that are at most 8 years old, employ fewer than 250 full-time equivalents and turn over up to €50 million. It does not count consulting, design services or tailor-made solutions as scalable, and registration does not by itself bring eligibility for state aid.

Questions

The things people ask before starting.

What is the time difference between Greece and Türkiye?

Zero hours in summer and one hour in winter, with Türkiye ahead, because Ankara stays on UTC+3 all year. In winter our working day covers 08:00 to 17:00 local time, so 8 hours are shared, and in summer the full 9 hours line up.

Do we need Standard Contractual Clauses to outsource development from Greece to Türkiye?

Yes, or another GDPR Chapter V transfer tool, whenever engineers in Türkiye can access personal data in your systems. Türkiye has no EU adequacy decision as of 2 October 2026, and the EDPB counts remote access from a third country as a transfer when the criteria are met, even when data is only viewed on screen.

Which authority enforces the EU AI Act in Greece?

The Hellenic Data Protection Authority, under Law 5321/2026, for prohibited AI practices, Annex III high-risk systems and Article 50 transparency. It is also Greece's single point of contact with the European Commission, handles AI Act complaints and runs the national AI regulatory sandbox jointly with EETT. Annex III high-risk obligations now apply from 2 December 2027.

How much does a software development monthly engagement cost for a Greek company?

Work runs as AI-accelerated development, starting from $2,000 per month, with scope agreed in writing. The figure is a starting point in US dollars rather than a quote. Hours, scope and invoicing currency are agreed in writing after a discovery call, with no long contract up front.

How it starts

What happens after you write to us.

  1. 01

    You describe the product

    One paragraph on what you are building, roughly when you need it, and who it is for. No brief, no form with fifteen fields.

  2. 02

    You get a reply within a day

    From the engineer who would do the work, not a sales team. If we are not the right fit we say so, and where possible we point you somewhere better.

  3. 03

    You get a scoped plan

    Scope, price and timeline in writing before anything is committed. You decide with the numbers in front of you.

No long contract to begin, no lock-in to our tooling, and the code is yours from the first commit.

Start a conversation
Contact

Looking for an engineering partner for the long haul?

A short note about the product, the timeline and who it is for is enough to start. You will hear back from the engineer who would do the work, not a sales team.

Ankara / Türkiye · Working across European and US time zones