Skip to content
Norway · Agentic software engineering

Software Development for Norway with AI Coding Agents

A common assumption is that if the database stays in Europe, engineers abroad raise no data protection question. For a team in Norway that is wrong. The GDPR applies there, and EDPB Guidelines 05/2021 treat remote access from a third country as a transfer when the three transfer criteria are met, even if personal data is only displayed on a screen for support or troubleshooting. The contract, the access model and the working hours need as much care as the code.

Curiosive is a software studio in Ankara, Türkiye, with more than five years of production work. We build products end to end or join an existing team as a long-term engineering partner. Coding agents do the volume, from scaffolding and migrations to test coverage and refactors across hundreds of files, while senior engineers design data models, auth and payment paths and review every diff before it merges.

24
published portfolio projects
5+
years building for production
12
countries the work runs in
100%
of code read by a senior engineer
1 day
to hear back, from the engineer

Norway, the EEA and GDPR transfers to engineers in Türkiye

Norway is not an EU member but one of the three EEA EFTA States, inside the single market under the EEA Agreement in force since the start of 1994. The GDPR was incorporated into that agreement and has applied there since 20 July 2018, so a Norwegian controller works under the same Chapter V transfer rules as one in the EU. As of 2 October 2026, Türkiye is not on the European Commission's list of adequacy decisions, so personal data made available to a studio in Türkiye needs another transfer tool, such as the Standard Contractual Clauses in Commission Implementing Decision (EU) 2021/914. Of their four modules, controller to processor fits a client that decides why data is processed and a studio that builds the system. Under Clause 14, both parties warrant that they have no reason to believe the destination country's laws and practices prevent the importer from complying.

Datatilsynet and remote access to personal data from Norway

Norway's Personal Data Act (personopplysningsloven, LOV-2018-06-15-38) sits alongside the GDPR. Under its § 20 the supervisory authority is Datatilsynet, and appeals go to Personvernnemnda under § 22. Because on-screen access from a third country can already be a transfer, the practical safeguard is work designed so engineers rarely see real personal data. A sensible setup develops against test or anonymised data and opens production access only for tasks that need it. Repository, database and hosting accounts are opened in the client's name or connected to accounts the client already holds, so the Norwegian controller decides who has access and can withdraw it. Anything touching personal data, authentication or authorization is designed and reviewed by an engineer, and agents never merge their own work.

Time zones: shared working hours between Norway and Ankara

Ankara is on UTC+3 all year because Türkiye does not use daylight saving time, while Norway moves between UTC+1 in winter and UTC+2 in summer. In winter Ankara is two hours ahead: when our day starts at 09:00 it is 07:00 Norwegian time, our 18:00 finish is 16:00, and a Norwegian 09:00 start is 11:00 in Ankara. That leaves 7 shared hours in a standard 09:00 to 18:00 day. In summer the gap shrinks to one hour: our day runs from 08:00 to 17:00 Norwegian time, a Norwegian 09:00 start is 10:00 in Ankara, and 8 hours are shared. Calls and reviews fit inside normal hours on both sides, while decisions are still written down asynchronously, with one short weekly call and a releasable increment every week.

Contracting, krone budgets and VAT for clients in Norway

Norwegian clients contract with Curiosive cross-border. Scope and budget are agreed in writing after a discovery call, and there is no long contract to begin. Our one offer, AI-accelerated development, starts from $2,000 per month and is priced in US dollars, while Norway's currency is the krone, divided into 100 øre, so a budget approved in kroner needs a conversion line. On tax, the Norwegian Tax Administration says a Norwegian business buying remotely deliverable services from another country may have to report and pay Norwegian VAT on them itself, under section 3-30 (subsections 1 and 2) and section 11-3 of the VAT Act, assessing each purchase individually. It states that the ordinary 25 percent rate applies to most services. That cost sits on top of the dollar figure, so it is worth confirming the treatment with an accountant before the first invoice.

What agentic engineering changes in cost, and what it does not

An engineer writes a scoped task with acceptance criteria. A coding agent such as Claude Code or Cursor reads the existing code, plans, implements, writes tests and runs the type checker, linter and test suite before proposing a change. A senior engineer reviews every diff. This lowers the cost of volume work: migrations, test coverage and refactors across hundreds of files. It does not lower the cost of judgement, which is why review gates matter more when agents write the volume. Because a product owner on Norwegian time shares most of our day, a blocked task can be unblocked before either side logs off. Past work includes a full Webflow to Next.js rebuild for Zing Coach (zing.coach), the revival of RateItAll (rateitall.com) with 12M+ reviews, and the Detailed SEO Extension, used by 600,000 SEOs and maintained through its acquisition by Ahrefs.

Questions

The things people ask before starting.

Can a company in Norway outsource software development to Türkiye under the GDPR?

Yes, with a transfer mechanism in place. The GDPR has applied there since 20 July 2018, and Türkiye had no European Commission adequacy decision as of 2 October 2026, so access to personal data from Türkiye needs a tool such as Standard Contractual Clauses. Limiting access to real data reduces what is transferred.

How many working hours overlap between Norway and Ankara?

Between 7 and 8 hours of a standard 09:00 to 18:00 day. Norwegian winter time puts Ankara two hours ahead, giving 7 shared hours. Norwegian summer time narrows the gap to one hour, giving 8. A 09:00 Norwegian start falls at 11:00 Ankara time in winter and 10:00 in summer.

Does a Norwegian business pay VAT on software development bought from Türkiye?

It may have to. The Norwegian Tax Administration says a Norwegian business buying remotely deliverable services from abroad may have to report and pay Norwegian VAT itself, under sections 3-30 and 11-3 of the VAT Act, assessing each purchase individually. It states that the ordinary 25 percent rate applies to most services.

How much does agentic software development cost for a team in Norway?

From $2,000 per month for AI-accelerated development, with scope and capacity agreed in writing after a discovery call. The figure is in US dollars, so a Norwegian budget needs a krone conversion and room for any VAT the business has to report and pay. There is no lock-in.

How it starts

What happens after you write to us.

  1. 01

    You describe the product

    One paragraph on what you are building, roughly when you need it, and who it is for. No brief, no form with fifteen fields.

  2. 02

    You get a reply within a day

    From the engineer who would do the work, not a sales team. If we are not the right fit we say so, and where possible we point you somewhere better.

  3. 03

    You get a scoped plan

    Scope, price and timeline in writing before anything is committed. You decide with the numbers in front of you.

No long contract to begin, no lock-in to our tooling, and the code is yours from the first commit.

Start a conversation
Contact

Looking for an engineering partner for the long haul?

A short note about the product, the timeline and who it is for is enough to start. You will hear back from the engineer who would do the work, not a sales team.

Ankara / Türkiye · Working across European and US time zones