Skip to content
Italy · Agentic software engineering

Software Development for Companies in Italy, with AI Agents

Bringing in engineers from outside Italy changes two pieces of paperwork before it changes any code. When an engineer in Türkiye can see personal data, even only on a screen, EDPB guidance treats that as a GDPR transfer once its criteria are met, and the transfer needs a legal tool behind it. Under the rules in force until 31 December 2026, purchases from a foreign supplier also have to be reported through the Sistema di Interscambio (SdI).

Curiosive is an AI-native studio in Ankara, Türkiye. Coding agents (Claude Code and Cursor) carry the volume: scaffolding, migrations, refactors across hundreds of files and test coverage, with a senior engineer reviewing every change before it merges. Work runs as AI-accelerated development, starting from $2,000 per month, with scope agreed in writing.

24
published portfolio projects
5+
years building for production
12
countries the work runs in
100%
of code read by a senior engineer
1 day
to hear back, from the engineer

Working hours between Italy and Ankara through the year

Türkiye does not use daylight saving time, so Ankara stays on UTC+3 while Italian clocks move between two offsets. In winter the Italian zone is GMT+1 and Ankara is two hours ahead. Our 09:00 to 18:00 day then runs from 07:00 to 16:00 Italian time, your 09:00 is 11:00 in Ankara, and a standard working day shares 7 hours, from 09:00 to 16:00 Italian time. In summer the offset is GMT+2 and the gap is one hour. Our day runs from 08:00 to 17:00 Italian time, your 09:00 is 10:00 in Ankara, and 8 hours overlap, from 09:00 to 17:00. Work runs on Türkiye business hours, so the last hour or two of an Italian afternoon is outside our day. The routine is asynchronous: decisions recorded in writing, a releasable increment every week and one short weekly call placed inside the shared hours.

Italian personal data, the Garante and transfers to Türkiye

In Italy the GDPR sits alongside the Personal Data Protection Code, adapted to the Regulation by Legislative Decree 101/2018 and supervised by the Garante per la protezione dei dati personali. As of 2 October 2026, Türkiye is not on the European Commission's list of adequacy decisions. EDPB Guidelines 05/2021 treat remote access from a third country as a transfer when the three transfer criteria are met, even when it is only for support or troubleshooting. If an engineer in Ankara can query a production database holding personal data, you need another Chapter V tool, such as the Standard Contractual Clauses of Commission Implementing Decision (EU) 2021/914. They come in four modules, and under Clause 14 both parties warrant they have no reason to believe the destination country's laws and practices prevent the importer from complying. The cheapest safeguard is scope: work against seeded or masked data where possible. Repository, database and hosting accounts are opened in your name, so you grant and revoke access.

Invoices from a foreign supplier and SdI reporting in Italy

We have no office or entity in Italy, so this is a cross-border contract and our invoices come from outside the country. Under art. 1(3-bis) of Legislative Decree 127/2015, in the wording Normattiva shows in force until 31 December 2026, data on transactions since 1 July 2022 with parties not established in Italy, purchases from foreign suppliers included, must be sent electronically through the SdI. For incoming transactions the deadline is the 15th of the month after the document is received or the transaction takes place. Purchases that are not territorially relevant for Italian VAT are exempt up to €5,000 per transaction. Your finance team should plan for this monthly step, and whether a given invoice falls inside the exemption is worth confirming with your accountant. Our published prices are in US dollars, so plan for the conversion when scope and budget are agreed in writing after the discovery call.

AI Act dates and Italy's national AI authorities

If the software you are building uses AI, the enforcers are already named. Art. 20 of Law 132/2025 makes AgID the notifying authority under the EU AI Act and the Agenzia per la cybersicurezza nazionale (ACN) the market surveillance authority and single point of contact, responsible for inspections and sanctions. Banca d'Italia, CONSOB and IVASS keep that role for financial entities. The Article 50 transparency duties have applied since 2 August 2026, so a system that talks to people must tell them it is an AI unless that is obvious. Regulation (EU) 2026/1744 moved the high-risk obligations for Annex III systems to 2 December 2027. Generative systems placed on the market before 2 August 2026 must meet the machine-readable marking duty by 2 December 2026. We build these notices and markings into the acceptance criteria, not into a later patch.

How agent-written code is reviewed before it reaches you

An engineer writes a scoped task with acceptance criteria and the boundaries the agent must not cross. The agent reads the existing code, plans, implements, writes or updates tests and runs the type checker, linter and test suite before proposing a change. A senior engineer reads the diff for secrets handling, input validation, access control and dependency risk, agents never merge their own work, and continuous integration re-runs the checks. This makes breadth cheaper, such as a migration touching hundreds of files. It does not make judgement cheaper: data models, authentication, authorization and payment paths stay with people. Larger work we have shipped includes the Zing Coach (zing.coach) rebuild from Webflow to Next.js, the RateItAll (rateitall.com) revival with 12M+ reviews, and the Detailed SEO Extension, used by 600,000 SEOs and maintained through its acquisition by Ahrefs.

Questions

The things people ask before starting.

Can an Italian company outsource software development to Türkiye under GDPR?

It can, once a Chapter V transfer tool such as the Standard Contractual Clauses is in place. As of 2 October 2026 Türkiye has no EU adequacy decision, and remote access to personal data counts as a transfer when the criteria are met, so the clauses come before production access.

How many working hours overlap between Italy and a team in Ankara?

Seven in winter and eight in summer, within a standard 09:00 to 18:00 day. Ankara is two hours ahead in winter and one hour ahead in summer, so our day ends at 16:00 or 17:00 Italian time.

Does an Italian company report invoices from a foreign software supplier to the SdI?

Yes, under the rules in force until 31 December 2026 purchases from suppliers not established in Italy are reported electronically through the SdI. Incoming transactions are due by the 15th of the following month, and purchases not territorially relevant for Italian VAT are exempt up to €5,000 each.

Can a startup in Milan or Rome hire developers on a monthly monthly engagement?

Yes. Work runs as AI-accelerated development, starting from $2,000 per month, with scope agreed in writing. There is no long contract to begin and no lock-in, and the code belongs to you from the first commit.

How it starts

What happens after you write to us.

  1. 01

    You describe the product

    One paragraph on what you are building, roughly when you need it, and who it is for. No brief, no form with fifteen fields.

  2. 02

    You get a reply within a day

    From the engineer who would do the work, not a sales team. If we are not the right fit we say so, and where possible we point you somewhere better.

  3. 03

    You get a scoped plan

    Scope, price and timeline in writing before anything is committed. You decide with the numbers in front of you.

No long contract to begin, no lock-in to our tooling, and the code is yours from the first commit.

Start a conversation
Contact

Looking for an engineering partner for the long haul?

A short note about the product, the timeline and who it is for is enough to start. You will hear back from the engineer who would do the work, not a sales team.

Ankara / Türkiye · Working across European and US time zones