Skip to content
Serbia · Agentic software engineering

Software Development for Teams in Serbia

In summer Serbia runs one hour behind Ankara and in winter two, so most of a working day is shared with a studio in Türkiye. Data is the harder question. Serbia is an EU candidate country, not a member state, so personal data there falls under its own Law on Personal Data Protection, personal data from EU customers brings GDPR transfer rules, and neither Serbia nor Türkiye has an EU adequacy decision.

Curiosive is an AI-native studio in Ankara, Türkiye: AI coding agents write much of the volume and senior engineers review every line before it merges. Teams can use us for a product built end to end or for an embedded monthly engagement, with scope and capacity agreed in writing. The code is yours from the first commit, in repositories and hosting accounts opened in your name.

24
published portfolio projects
5+
years building for production
12
countries the work runs in
100%
of code read by a senior engineer
1 day
to hear back, from the engineer

Working hours between Serbia and Ankara, summer and winter

Ankara is on UTC+3 all year because Türkiye does not use daylight saving time, while Serbian time moves between GMT+1 in winter and GMT+2 in summer. In winter Ankara is two hours ahead: our 09:00 to 18:00 day runs from 07:00 to 16:00 your time, your 09:00 is 11:00 for us, and a standard 09:00 to 18:00 day in both places shares 7 hours, from 09:00 to 16:00 your time. In summer the gap is one hour: our day runs from 08:00 to 17:00 your time, your 09:00 is 10:00 in Ankara, and the shared window is 8 hours, from 09:00 to 17:00 your time. Work runs on Türkiye business hours. Decisions are recorded in writing, with a releasable increment every week and one short weekly call.

Serbia's personal data law and engineers working from Türkiye

The Law on Personal Data Protection (Official Gazette RS No. 87 of 13 November 2018) has applied since August 2019 and is supervised by the Commissioner for Information of Public Importance and Personal Data Protection. Legal entities face fines of RSD 50,000 to 2,000,000 for the breaches listed in Article 95(1), so production access is never granted casually. Before an engineer in Türkiye touches production, the processing terms, the access each person gets and how that access is logged should be agreed in writing. Anything touching personal data is designed and reviewed by an engineer, never left to an agent. A useful first decision is which environments hold real personal data at all, since development and staging seeded with synthetic data keep most of the work away from it. How the law treats data reaching Türkiye is worth confirming with a lawyer.

EU customer data and transfers to a studio in Türkiye

If your company also handles personal data from customers in the EU, the GDPR transfer rules sit on top. Serbia has no EU adequacy decision, so an EU client cannot rely on adequacy when sending personal data to a Serbian vendor, and as of 2 October 2026 Türkiye is not on the Commission's adequacy list either. Transfers of that data therefore need another GDPR Chapter V tool, such as the Standard Contractual Clauses in Commission Implementing Decision (EU) 2021/914, which come in four modules, including processor to processor. EDPB Guidelines 05/2021 add that remote access from a third country is a transfer when the transfer criteria are met, even if personal data is only displayed on a screen for support or troubleshooting. That can cover an engineer opening a production admin panel from Ankara, so the contract chain should be in place first.

Public-sector software in Serbia: hosting and accessibility rules

Under the Law on Electronic Government (Official Gazette RS Nos. 27/2018 and 80/2026), public authorities must make the content of their websites available on mobile devices and accessible to everyone, especially persons with disabilities. Their electronic registers and records and electronic-communication accounts may be located only in Serbia, except that communication accounts of authorities operating abroad may be held there with prescribed security measures. Certain existing bylaws must be amended to align with the 2026 amendments by 1 March 2027. For a software team this fixes part of the architecture before any code is written: the database and file storage behind a register sit on infrastructure in the country, and engineers writing and reviewing the code from Türkiye should work against test data rather than the register itself. Accessibility is cheaper to build in from the first slice.

How agentic engineering changes cost for a Serbian product team

An engineer scopes the task in writing, with acceptance criteria and the limits the agent must respect. Claude Code or Cursor reads the repository, plans, implements, updates tests and runs the type checker, linter and test suite before proposing a change. A senior engineer reviews the diff, since agents never merge their own work, and continuous integration re-runs every check. What drops is the cost of volume: migrations, test coverage and refactors across hundreds of files. What stays is the cost of judgement, which on a project here includes where register data is hosted and who can reach personal data covered by the 2018 law. Comparable work includes the Webflow to Next.js rebuild of Zing Coach (zing.coach), the revival of RateItAll (rateitall.com) and the Detailed SEO Extension, used by 600,000 SEOs.

Questions

The things people ask before starting.

Does GDPR apply to software development for a company in Serbia?

Not directly, because Serbia is not an EU member state. As of October 2026 the European Commission lists it as a candidate country that has opened 22 of 35 chapters, so EU-only rules apply there only where it has adopted its own laws. GDPR transfer rules still come in when personal data from EU customers is involved.

How many working hours overlap between Serbia and a studio in Türkiye?

Seven in winter and eight in summer. Ankara is two hours ahead in winter and one hour ahead in summer, so the shared part of a standard 09:00 to 18:00 day runs from 09:00 to 16:00 Serbian time in winter and from 09:00 to 17:00 in summer.

What does the Innovation Fund of Serbia's Smart Start programme offer for an MVP?

Up to RSD 5,400,000 per project, covering up to 90% of the budget, plus RSD 600,000 for mentoring, to build a prototype or MVP over 6 to 9 months. Teams of 2 to 5 people, at least 51% of them Serbian residents, can apply. The current call closes at 12:00 on 16 November 2026, with portal registration due by 13 November 2026.

How does a company in Serbia contract with a studio in Türkiye?

Cross-border, after a discovery call, with scope and budget agreed in writing and no long contract or lock-in to begin. We sell one offer, AI-accelerated development starting from $2,000 per month, priced in US dollars. Delivery is remote by default, with async written decisions and a releasable increment every week.

How it starts

What happens after you write to us.

  1. 01

    You describe the product

    One paragraph on what you are building, roughly when you need it, and who it is for. No brief, no form with fifteen fields.

  2. 02

    You get a reply within a day

    From the engineer who would do the work, not a sales team. If we are not the right fit we say so, and where possible we point you somewhere better.

  3. 03

    You get a scoped plan

    Scope, price and timeline in writing before anything is committed. You decide with the numbers in front of you.

No long contract to begin, no lock-in to our tooling, and the code is yours from the first commit.

Start a conversation
Contact

Looking for an engineering partner for the long haul?

A short note about the product, the timeline and who it is for is enough to start. You will hear back from the engineer who would do the work, not a sales team.

Ankara / Türkiye · Working across European and US time zones