Frequently asked questions
Direct answers to what prospective clients ask us most often.
Does my app have to be rebuilt completely?
Not necessarily. The audit decides. Often an app can be cleaned up and secured, but we cannot guarantee that up front. Sometimes rebuilding parts or the whole is cheaper. We tell you either way, honestly and with reasons.
Do you need access to my source code, and does it stay confidential?
Yes, for the audit we need read access, ideally to the repository. Before we see the code, we agree on confidentiality. We only ask for the access the audit requires. If your platform does not allow exporting the code, mention it in the form and we will work out what is possible.
Which AI tools and technologies do you work with?
With apps from tools such as Cursor, Lovable, Bolt, v0, Claude Code, or Copilot. Technically we cover: React, Next.js, and Node (TypeScript); Supabase, Firebase, and Vercel; Python (FastAPI, Django, Streamlit); C#/.NET, PHP (Laravel), and Azure.
What does a project cost?
It depends on the state of the app, which is why there is no price list. You start with an audit of fixed scope; after that you get a quote with a fixed price for the agreed work packages, not open-ended billing without a cap.
How long does a typical project take?
It depends on the size and state of the app. After your inquiry we give you a concrete timeline for the audit before you decide. The same applies to the follow-up work in the quote.
Why don't you show case studies or client references?
Most of our experience comes from projects with confidentiality obligations, so we cannot name specific projects or clients. That is a deliberate choice about discretion, not a statement about experience. You can see how we work on the How We Work page.
Who works on my project?
A small team, deliberately kept small: you talk directly to the people who actually work on your app, with no account-management layer in between. More on the About page.
What region and languages do you work in?
We work with founders and teams worldwide, in German, English, and Turkish.
Is this also legal advice, for example on data protection?
No. We deliver technical measures. For data flows to AI providers, we show where data goes and how to secure it technically. Whether that is legally sufficient is for your data protection advisor to decide.
Do you use AI yourselves when you work?
Yes, as a tool. What matters is what happens next: whatever AI produces is reviewed and tested before it lands in your app. That is exactly what we do with your code, too.
How do I get started?
Through the contact form: a few sentences on what does not work or worries you are enough for an initial inquiry. We usually get back to you within two business days.
Your question is not here? Request an audit