Prove it works · 5 services
Security & Compliance
The credentials that decide whether you are allowed to bid. We are going through ISO 27001 ourselves, in the order that costs least — 27001 first because European RFPs almost always require it, then ISO 42001 which reuses most of the same groundwork, and SOC 2 only when a specific US deal demands it.
Services in this practice
The certifications enterprise buyers ask for before they sign anything.
ISO 27001 implementationThe information-security certification European RFPs treat as table stakes.12–16 weeksSOC 2 readinessFor material US enterprise deals. Roughly 70–80% of the controls overlap with ISO 27001.9–14 months including observationDPDP Act complianceIndia's Digital Personal Data Protection Act, applied to systems you already run.3–8 weeksGDPR & data-protection advisoryFor EU customers and EU data, including the transfer mechanism question.3–8 weeksvCISO retainerPart-time security leadership for companies that need the function but not the salary.Monthly
Every engagement is quoted against a written scope. Indian clients are billed in INR plus 18% GST; service exports are zero-rated under a filed LUT.
How the work runs
Five stages, and you can stop after the first.
Decide
We tell you what is worth doing
Design
The architecture is agreed before the first sprint
Build
Small senior teams, shipping weekly
Assure
Evidence, not assurances
Run
We stay on only if there is something to look after
Other practices
Most engagements cross more than one.
Advisory & ArchitectureTOGAF-grade judgement without hiring a full-time architect.6 servicesAI & DataAssessment, governance, and AI systems that survive production.8 servicesSoftware EngineeringWeb, mobile, APIs, MVPs and modernisation — code you would inherit happily.7 servicesCloud & DevOpsMove it, ship it daily, run it, and stop overpaying for it.6 servicesQuality & TestingEvidence that it works, before your customers find out it doesn't.5 servicesSupport & Managed ServicesSomeone answers when it breaks, on a contract that says how fast.4 servicesDigital & AI SearchBeing found by the models people now ask instead of Google.7 servicesTalent & RecruitmentEngineers screened by an engineer, not by a keyword filter.7 services
Not sure which practice you need? Describe the problem and StackHog will tell you — including when the answer is that you do not need us.