Where we work
AI implementation for European and UK companies
We work with European and UK companies remotely from India. There is no EU or UK entity. What matters more to most European buyers is how a system handles personal data, where it runs, who reviews its output, and whether its behaviour is documented well enough to explain to a regulator. Those are design questions we take seriously.
How the engagement works
Fully remote, with a written scope and a named contact. IST working hours give a substantial overlap with the European working day, which makes European engagements easier to run than US ones.
Data protection in practice
We design so that personal data is minimised before it reaches a model, that the lawful basis for processing is identified before build rather than after, and that retention is bounded and stated. Where you are the controller, we work as a processor under your instructions, documented in the agreement.
Where personal data cannot leave a jurisdiction, that constraint sets the deployment. It is not treated as a preference to be negotiated.
Data location
Systems may run in your cloud, on your infrastructure, or through approved model providers. Where residency is required, provider choice narrows accordingly, and we say which options that removes.
Human oversight and documentation
High-consequence decisions get a named human review point, an escalation path, and logging sufficient to reconstruct what happened. We document intended purpose, tested performance, known failure modes and limits before deployment, because a system nobody can explain is a system nobody should deploy.
Model governance
Which model, which version, what it was evaluated against, what changed and when. Keeping that record is ordinary engineering discipline, and it is also what makes an audit answerable.
What we do not have
No EU or UK entity, office or staff, and no claim to be a local supplier. If your procurement requires one, we are not the right fit.
Questions buyers ask
Are you GDPR compliant?
Compliance rests with the controller and the specific processing. We build to support it: minimisation, documented basis, bounded retention, and processor terms in the agreement. We do not claim a certificate we do not hold.
Can data stay in the EU or UK?
Where that is required, it constrains the deployment and the provider set, and we tell you what that rules out.
How do you handle human oversight?
Named review points and escalation paths, defined before a system goes live rather than after an incident.
Do you have a European entity?
No. We work remotely from India and state that plainly.