Skip to content
Lithuania · Agentic software engineering

Software Development Partner for Teams in Lithuania

Companies in Lithuania that bring in engineers from outside the EU often assume that an EU-hosted database keeps personal data inside the EU. The European Data Protection Board disagrees: remote access from a third country is a transfer when the three transfer criteria are met, even if an engineer only sees records on a screen while troubleshooting. The transfer paperwork and the access design therefore come before the first pull request.

Curiosive works from Ankara, Türkiye, as a remote engineering partner, building products end to end or joining an existing team on monthly engagement. AI coding agents such as Claude Code and Cursor do the volume under senior engineer review. Data models, authentication, permissions, payment paths and anything touching personal data are designed by engineers, and nothing merges until a person has read it.

24
published portfolio projects
5+
years building for production
12
countries the work runs in
100%
of code read by a senior engineer
1 day
to hear back, from the engineer

GDPR transfers when engineers in Türkiye work on Lithuanian systems

As of 2 October 2026, Türkiye is not on the European Commission's list of adequacy decisions, so EU personal data made available to a studio in Ankara needs another GDPR Chapter V transfer tool, such as the Standard Contractual Clauses of Commission Implementing Decision (EU) 2021/914. Where your company is the controller and the studio your processor, the controller to processor module describes that relationship, and under Clause 14 both parties warrant that they have no reason to believe the laws and practices in Türkiye prevent the importer from complying. EDPB Guidelines 05/2021 explain why this matters for development work: their Example 11 concludes that a third-country processor remotely accessing EU-stored data for EU controllers results in transfers. Limiting production access reduces how much is transferred. It is worth confirming the set-up with your data protection lawyer.

In Lithuania the GDPR is supplemented by the Law on Legal Protection of Personal Data, recast by Law No. XIII-1426 from 16 July 2018 and supervised by the State Data Protection Inspectorate (VDAI). Its Article 3 matters for system design: the personal identification number, the asmens kodas, may be processed only where a GDPR Article 6(1) legal basis applies, must not be published and may not be processed for direct marketing. That means keeping it out of logs, analytics events, marketing exports and test fixtures, and masking it in admin screens. Under the Law on Electronic Communications only strictly necessary cookies may be used without consent, the 'Sutinku' and 'Nesutinku' buttons must be equally easy to reach, cookie walls are not allowed and withdrawing consent must be as easy as giving it. VDAI published a summary of cookie practice in 2025 based on its 2024 monitoring of cookies on websites.

Working hours between Ankara and Lithuania through the year

Ankara runs on UTC+3 all year, since Türkiye does not use daylight saving time, while Lithuania changes its clocks with the seasons. In winter it is on UTC+2, one hour behind Ankara: when our day starts at 09:00 it is 08:00 there, and when it ends at 18:00 it is 17:00 there. A 09:00 start on your side is 10:00 in Ankara, so 8 of the 9 hours in a standard 09:00 to 18:00 day overlap. In summer Lithuania is on UTC+3 and the clocks match exactly, so all 9 hours overlap. We still run engagements in writing: decisions are recorded asynchronously, a releasable increment lands every week and there is one short weekly call.

How agentic software development runs on a monthly engagement

Each task starts with an engineer writing the scope, acceptance criteria and the boundaries the agent must not cross. The coding agent reads the existing code, plans, implements, writes or updates tests, and runs the type checker, linter and test suite before proposing a change. A senior engineer reviews every diff, agents never merge their own work, and continuous integration re-runs the checks on every change. That review gate matters more as agents write more of the code. It lowers the cost of mechanical work such as migrations and test coverage, not the cost of deciding a data model or an access rule. Work runs as AI-accelerated development, starting from $2,000 per month, with scope agreed in writing. Earlier work includes the Zing Coach rebuild from Webflow to Next.js and the Detailed SEO Extension, used by 600,000 SEOs, maintained through its acquisition by Ahrefs.

AI Act duties and supplier rules for software teams in Lithuania

The AI Act's Article 50 transparency duties have applied since 2 August 2026: an AI system that interacts with people must be designed so they are told they are interacting with an AI system, unless that is obvious. The country's AI regulatory sandbox is a EUR 3,000,000 project funded by the European Regional Development Fund and run by the Innovation Agency with RRT as partner, from 30 October 2025 to 2 November 2028, for Lithuanian SMEs that develop or deploy AI; RRT's page gives no confirmed opening date. Customers covered by NIS2, which reaches medium-sized and larger entities in sectors including cloud computing and managed services, must address supply chain security with their direct suppliers under Article 21. What we bring to that review is the security gate: every change is read for secrets handling, input validation, access control and dependency risk before it merges.

Questions

The things people ask before starting.

Can a Lithuanian company outsource software development to Türkiye under the GDPR?

Yes, provided a GDPR Chapter V transfer tool is in place. Türkiye has no EU adequacy decision as of 2 October 2026, so a tool such as the Standard Contractual Clauses of Decision (EU) 2021/914 is needed, signed before engineers can reach systems holding personal data, since remote access can itself be a transfer.

How many working hours overlap between Lithuania and Ankara?

Eight hours in winter and nine in summer, in a standard 09:00 to 18:00 day. In winter Lithuania is one hour behind Ankara, so our 09:00 start is 08:00 there. In summer both run on UTC+3 and the clocks are identical.

Who owns the code a studio in Ankara writes for a company in Lithuania?

You do, from the first commit. Repository, database and hosting accounts are opened in your name or connected to accounts you already hold, and the code is typed, tested and documented so another team could take it over.

Can our product store the asmens kodas in its database?

Only where a GDPR Article 6(1) legal basis applies, and it may never be published or used for direct marketing. Design for that from the start: restrict which roles can read the field, keep it out of logs and analytics, and mask it wherever full display is not needed.

What does a monthly engineering monthly engagement cost for a team in Lithuania?

Work runs as AI-accelerated development, starting from $2,000 per month, with scope agreed in writing. You do not sign a long contract to begin. Scope and budget are settled in writing after a discovery call.

How it starts

What happens after you write to us.

  1. 01

    You describe the product

    One paragraph on what you are building, roughly when you need it, and who it is for. No brief, no form with fifteen fields.

  2. 02

    You get a reply within a day

    From the engineer who would do the work, not a sales team. If we are not the right fit we say so, and where possible we point you somewhere better.

  3. 03

    You get a scoped plan

    Scope, price and timeline in writing before anything is committed. You decide with the numbers in front of you.

No long contract to begin, no lock-in to our tooling, and the code is yours from the first commit.

Start a conversation
Contact

Looking for an engineering partner for the long haul?

A short note about the product, the timeline and who it is for is enough to start. You will hear back from the engineer who would do the work, not a sales team.

Ankara / Türkiye · Working across European and US time zones