Skip to content
Spain · Agentic software engineering

Software Development for Companies in Spain, with AI Agents

Mainland Spain shares 7 working hours a day with Ankara in winter and 8 in summer, so the clock is rarely what stops a Spanish company from working with engineers in Türkiye. Data protection is. As of 2 October 2026 Türkiye has no EU adequacy decision, and an engineer in Ankara who can see Spanish customers' personal data, even only on a screen, receives a transfer when the GDPR transfer criteria are met.

Curiosive is an AI-native software studio in Ankara, Türkiye, and a long-term engineering partner. Coding agents handle scaffolding, migrations, test coverage and refactors that touch hundreds of files, while senior engineers design the boundaries and review every diff before it merges. Work runs as AI-accelerated development, starting from $2,000 per month, with scope agreed in writing.

24
published portfolio projects
5+
years building for production
12
countries the work runs in
100%
of code read by a senior engineer
1 day
to hear back, from the engineer

Working hours between Spain and Ankara in winter and summer

Ankara is on UTC+3 all year because Türkiye does not use daylight saving time. In winter mainland Spain runs on GMT+1, two hours behind Ankara: our 09:00 to 18:00 day covers 07:00 to 16:00 Spanish time, your 09:00 is 11:00 here, and 7 hours of a standard 09:00 to 18:00 day are shared. In summer the mainland moves to GMT+2 and the gap narrows to one hour: our day covers 08:00 to 17:00 your time, your 09:00 is 10:00 in Ankara, and 8 hours are shared. The Canary Islands run one hour behind the mainland, so there our day ends an hour earlier on the local clock. Work runs on Türkiye business hours, so anything raised after 16:00 in winter or 17:00 in summer, mainland time, is picked up the next morning. Decisions are written down, a releasable increment ships every week and there is one short weekly call.

GDPR transfers from Spain to Türkiye and the role of the AEPD

Spain supplements the GDPR with Ley Orgánica 3/2018 (LOPDGDD), in force since 7 December 2018, and its independent supervisory authority is the Agencia Española de Protección de Datos (AEPD). Türkiye is missing from the Commission's list of adequacy decisions, so EU personal data made available to a studio there needs another Chapter V transfer tool. EDPB Guidelines 05/2021 treat remote access from a third country as a transfer when the three criteria are met, even for support, troubleshooting or administration. Before anyone in Ankara can open a production database holding Spanish records, the Standard Contractual Clauses of Decision (EU) 2021/914 should be signed in whichever of the four modules fits the roles. Under Clause 14, both parties warrant that they have no reason to believe the destination country's laws and practices prevent the importer from complying. It is worth having a lawyer confirm the module and annexes. Seeded test data keeps most daily work away from real records.

VeriFactu billing systems and DPO duties for companies in Spain

Two national rules can add work. After the extension in Real Decreto-ley 15/2025, de 2 de diciembre, entities filing Impuesto sobre Sociedades must have their billing systems (SIF) adapted to the RRSIF regulation, known as VeriFactu, before 1 January 2027, and all other obligated taxpayers before 1 July 2027, with a test period until then. Then there is Article 34.1 of the LOPDGDD, which makes appointing a delegado de protección de datos mandatory beyond the GDPR Article 37.1 cases for listed entities, including information society service providers that build large-scale user profiles, schools and universities, credit and insurance entities and online gambling operators. A client in one of those sectors should bring its DPO in before the data model and transfer clauses are settled.

Coding agents under senior review: where the cost changes

Each piece of work starts as a scoped task written by an engineer: acceptance criteria plus the boundaries the agent must not cross. The agent reads the codebase, plans, implements, writes or updates tests, then runs the type checker, linter and test suite before it proposes anything. A senior engineer reads the diff, agents never merge their own work, and continuous integration runs the checks again. The saving is in volume work such as scaffolding, migrations and wide refactors. Judgement costs what it always did, which is why data models, authentication, permissions, payment paths and personal data stay with people. On a Spanish project those boundaries include every query that reaches records covered by the transfer clauses and the invoice records the VeriFactu rules govern. Review gates matter more when a machine writes most of the lines, because an unread line is a line nobody owns.

Contracts, currency and earlier work for clients in Spain

European clients, Spanish companies included, contract with us cross-border. Spain has used the euro since joining the euro area on 1 January 1999, while our one offer is priced in US dollars: AI-accelerated development from $2,000 per month, with scope and capacity agreed in writing after a discovery call. There is no long contract to begin and no lock-in. Repository, database and hosting accounts are opened in your name or connected to ones you already hold, so the code is yours from the first commit. For a client in Spain we built Release Coach AI (releasecoach.ai), private real-time voice sessions guided by AI in any language, on React, Supabase, Cloudflare and LiveKit. Larger engineering work includes the Zing Coach (zing.coach) rebuild for over a million users and the revival of RateItAll (rateitall.com), with more than 12 million reviews.

Questions

The things people ask before starting.

Can a company in Spain outsource software development to Türkiye under GDPR?

It can, provided a transfer tool is in place. Türkiye had no EU adequacy decision as of 2 October 2026, so Spanish personal data that engineers in Ankara can reach, even only on a screen, needs safeguards such as the Standard Contractual Clauses, signed before production access opens.

What is the time difference between Spain and Türkiye?

Ankara is two hours ahead of mainland Spain in winter and one hour ahead in summer, because Türkiye stays on UTC+3 all year. That leaves 7 or 8 shared hours in a standard 09:00 to 18:00 day. The Canary Islands sit one hour behind the mainland, so the gap there is an hour wider.

When does VeriFactu billing software become mandatory in Spain?

Before 1 January 2027 for entities filing Impuesto sobre Sociedades, and before 1 July 2027 for all other obligated taxpayers, after the extension in Real Decreto-ley 15/2025. A test period applies until then, which is the window to adapt an existing billing system.

How much does a monthly software development engagement cost for a Spanish company?

Work runs as AI-accelerated development, starting from $2,000 per month, with scope agreed in writing. There is no long contract to begin and no lock-in, and the code belongs to you from the first commit.

How it starts

What happens after you write to us.

  1. 01

    You describe the product

    One paragraph on what you are building, roughly when you need it, and who it is for. No brief, no form with fifteen fields.

  2. 02

    You get a reply within a day

    From the engineer who would do the work, not a sales team. If we are not the right fit we say so, and where possible we point you somewhere better.

  3. 03

    You get a scoped plan

    Scope, price and timeline in writing before anything is committed. You decide with the numbers in front of you.

No long contract to begin, no lock-in to our tooling, and the code is yours from the first commit.

Start a conversation
Contact

Looking for an engineering partner for the long haul?

A short note about the product, the timeline and who it is for is enough to start. You will hear back from the engineer who would do the work, not a sales team.

Ankara / Türkiye · Working across European and US time zones