<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:dc="http://purl.org/dc/elements/1.1/">
  <channel>
    <title>DEV Community: Sanjay Katariya</title>
    <description>The latest articles on DEV Community by Sanjay Katariya (@sanjay_katariya_135839dbe).</description>
    <link>https://dev.to/sanjay_katariya_135839dbe</link>
    <image>
      <url>https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https:%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F4094175%2F18f3f8b2-2380-4d21-a136-63f6473e328a.jpg</url>
      <title>DEV Community: Sanjay Katariya</title>
      <link>https://dev.to/sanjay_katariya_135839dbe</link>
    </image>
    <atom:link rel="self" type="application/rss+xml" href="https://dev.to/feed/sanjay_katariya_135839dbe"/>
    <language>en</language>
    <item>
      <title>Agentic AI in Manufacturing: 5 Processes That Go First</title>
      <dc:creator>Sanjay Katariya</dc:creator>
      <pubDate>Sat, 10 Oct 2026 10:13:05 +0000</pubDate>
      <link>https://dev.to/sanjay_katariya_135839dbe/agentic-ai-in-manufacturing-5-processes-that-go-first-47e6</link>
      <guid>https://dev.to/sanjay_katariya_135839dbe/agentic-ai-in-manufacturing-5-processes-that-go-first-47e6</guid>
      <description>&lt;p&gt;Nobody needs to automate the whole plant at once.&lt;br&gt;
The best place to start is one process where two things are already true: the data exists, and people repeat the same task or question every day.&lt;br&gt;
That is where agentic AI becomes practical.&lt;/p&gt;

&lt;ol&gt;
&lt;li&gt;Order status queries
“How far has my order reached?” is one of the most repetitive questions in manufacturing.
An AI agent can read order records, production stages and dispatch updates from the ERP and answer directly.
What needs to exist first: accurate, regularly updated order data. If the ERP is outdated, the AI will simply deliver the wrong answer faster.&lt;/li&gt;
&lt;li&gt;Quoting with many variables
In many manufacturing companies, quoting still depends on one experienced person.
An agent can read specifications, rates, material data and pricing rules, then prepare a draft quote for human review.
At Utech Waterproofing, once the quoting logic was captured in a system, quote preparation moved from days to minutes.
What needs to exist first: the quoting rules must be documented clearly.&lt;/li&gt;
&lt;li&gt;Production exception alerts
Production issues often appear in the data before they become obvious on the floor.
An agent can compare actual production with planned targets and alert the right person when something goes off track.
That could mean a delayed stage, slower output or an order sitting too long in one step.
What needs to exist first: timely production data and clear thresholds.&lt;/li&gt;
&lt;li&gt;Quality documentation
Quality teams often spend hours combining inspection records, batch data and test results into the required format.
An AI agent can assemble that documentation, identify missing entries and keep the final output consistent.
What needs to exist first: quality information must be captured digitally rather than only in paper registers.&lt;/li&gt;
&lt;li&gt;Dispatch and field coordination
Questions such as “Has the vehicle left?” or “When will it reach?” often create unnecessary phone calls.
An agent can read dispatch records, vehicle details and delivery confirmations, then keep customers or field teams updated automatically.
What needs to exist first: dispatch events must be recorded as they happen.
Why these five come first
All five have the same pattern:
structured data + repetitive work.
That makes them strong starting points for agentic AI.
More complex processes involving subjective judgment or unstructured information can come later.
There is another advantage: you do not necessarily need to replace your ERP.
An AI layer can work with the systems your team already uses, reading from the ERP and helping people get answers or take action faster.
Start with one process
Do not begin with a plant-wide AI programme.
Start with the process where your data is strongest and your team loses the most time.
Prove the value there.
Then move to the next one.
At Accucia Softwares, we see agentic AI in manufacturing as a process-by-process journey, not a single transformation project.
Read full blog - &lt;a href="https://www.accucia.com/blog/agentic-ai-in-manufacturing-5-processes-that-go-first" rel="noopener noreferrer"&gt;&lt;/a&gt;
&lt;/li&gt;
&lt;/ol&gt;

</description>
      <category>ai</category>
      <category>automation</category>
      <category>claude</category>
      <category>development</category>
    </item>
    <item>
      <title>Pharma Mobile Apps: What Keeps Doctors Coming Back?</title>
      <dc:creator>Sanjay Katariya</dc:creator>
      <pubDate>Fri, 09 Oct 2026 12:11:46 +0000</pubDate>
      <link>https://dev.to/sanjay_katariya_135839dbe/pharma-mobile-apps-what-keeps-doctors-coming-back-55pb</link>
      <guid>https://dev.to/sanjay_katariya_135839dbe/pharma-mobile-apps-what-keeps-doctors-coming-back-55pb</guid>
      <description>&lt;p&gt;A pharma brand app competes with every other icon on a doctor’s phone.&lt;br&gt;
Across 250+ pharma mobile and web builds, one lesson has stayed consistent: getting the install is easy compared with earning the second visit.&lt;br&gt;
The apps that survive are not the ones with the longest feature list. They are the ones that help doctors get useful information quickly, without depending on a rep.&lt;br&gt;
What pharma apps are really for&lt;br&gt;
Most successful pharma apps serve three practical purposes.&lt;br&gt;
Brand engagement: They keep the brand useful between rep visits by making product information and updates available when the doctor actually needs them.&lt;br&gt;
Product launches: They give doctors one consistent place to access launch information, clinical content and new product updates.&lt;br&gt;
Doctor communication: They create an ongoing channel for product information, educational content and responses to common questions.&lt;br&gt;
The test is simple: can a busy doctor get value from the app in under a minute?&lt;br&gt;
Installs are not the real metric&lt;br&gt;
A field force can drive installs.&lt;br&gt;
A rep asks. The doctor downloads the app. The dashboard looks good.&lt;br&gt;
But the more important question is:&lt;br&gt;
Does the doctor open it again without being asked?&lt;br&gt;
That is where the difference appears.&lt;br&gt;
Apps built mainly around what the brand wants to communicate often get installed and forgotten. Apps built around what the doctor needs in a working moment have a better chance of being reopened.&lt;br&gt;
That means fewer taps, faster answers and useful content without forcing the user through unnecessary screens.&lt;br&gt;
Our rule is to build the rep-free journey first.&lt;br&gt;
A doctor should be able to open the app with a question, find the answer and leave without needing someone to explain how the app works.&lt;br&gt;
Put AI where users already are&lt;br&gt;
One pharma engagement made this especially clear.&lt;br&gt;
Employees were spending too much time searching for product and process information across company documents. Instead of introducing another tool, we embedded an AI chatbot inside the app they were already using.&lt;br&gt;
The result was:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;75% less time per query&lt;/li&gt;
&lt;li&gt;95% response accuracy&lt;/li&gt;
&lt;li&gt;40% faster onboarding&lt;/li&gt;
&lt;li&gt;8-month payback
The larger lesson was not only about AI.
It was about placement.
Intelligence inside an existing workflow is often more valuable than asking users to adopt another app.
The same principle applies to doctor engagement.
Launch timing matters
A good app can still underperform if it launches at the wrong time.
Launching alongside a product launch gives the app an immediate purpose. The field team has something new to show, doctors have a reason to open it and the content feels current.
Launch in a quiet period and the first experience may feel empty.
That is why the product calendar should influence the app roadmap from the beginning.
Accucia’s view
A pharma app should not be judged by how many people installed it.
It should be judged by whether they came back.
At Accucia Softwares, our experience across 250+ pharma engagement builds has shaped a simple approach:
Build for the doctor’s need first. Make the app useful without a rep. Add intelligence inside the existing experience. Measure return use, not installs.
If you are planning a pharmhttps://&lt;a href="http://www.accucia.com/blog/pharma-mobile-apps-lessons-from-250-doctor-engagement-buildsa" rel="noopener noreferrer"&gt;www.accucia.com/blog/pharma-mobile-apps-lessons-from-250-doctor-engagement-buildsa&lt;/a&gt; engagement app or adding AI to an existing one, start with the workflow doctors or employees already use most.
Read full blog- &lt;a href="https://dev.tourl"&gt;&lt;/a&gt;
&lt;/li&gt;
&lt;/ul&gt;

</description>
      <category>ai</category>
      <category>devops</category>
      <category>web3</category>
      <category>flutter</category>
    </item>
    <item>
      <title>Software Maintenance and Support: Choosing the Right Model</title>
      <dc:creator>Sanjay Katariya</dc:creator>
      <pubDate>Sat, 03 Oct 2026 12:19:14 +0000</pubDate>
      <link>https://dev.to/sanjay_katariya_135839dbe/software-maintenance-and-support-choosing-the-right-model-4hmd</link>
      <guid>https://dev.to/sanjay_katariya_135839dbe/software-maintenance-and-support-choosing-the-right-model-4hmd</guid>
      <description>&lt;p&gt;Warranty, AMC, retained hours or managed service? The right choice depends on what happens after your build team leaves.&lt;br&gt;
The riskiest point in a custom software project may not be launch day. It can be month seven.&lt;br&gt;
The warranty has ended. The delivery team has moved to another project. Nothing appears broken yet, but nobody clearly owns the system.&lt;br&gt;
That is when alerts can go unread, credentials expire, backups remain untested and documentation slowly falls behind the code.    Pasted text&lt;br&gt;
Software Maintenance Is More Than Bug Fixing&lt;br&gt;
Software maintenance services keep a working system working.&lt;br&gt;
The source article separates ongoing work into several categories, including corrective maintenance for discovered problems, adaptive maintenance for changes in the surrounding environment, and work that improves or extends the system.    Pasted text&lt;br&gt;
For a practical support contract, four areas should be clearly separated:&lt;br&gt;
Warranty — defects against the agreed scope during a fixed post-launch period.&lt;br&gt;
Corrective maintenance — faults discovered after warranty.&lt;br&gt;
Adaptive maintenance — updates required because browsers, operating systems, SDKs, payment gateways, certificates or dependencies change.&lt;br&gt;
New features — functionality that was not part of the original handover.&lt;br&gt;
Putting everything under one vague “support” budget is where disagreements begin.    Pasted text&lt;br&gt;
Warranty vs AMC vs Retained Hours vs Managed Service&lt;br&gt;
There is no single support model that fits every application.&lt;br&gt;
Warranty only can work for simple, stable internal systems where downtime has limited business impact.&lt;br&gt;
AMC suits established business systems that need predictable corrective and adaptive maintenance.&lt;br&gt;
Retained hours work well when the application is still evolving and you want a committed block of engineering capacity.&lt;br&gt;
Managed service with SLA is designed for systems where downtime can interrupt critical business processes and monitoring, incident response and defined restoration targets matter.    Pasted text&lt;br&gt;
The simplest question is:&lt;br&gt;
How much downtime can your business tolerate?&lt;br&gt;
If four hours offline is inconvenient, an AMC may be sufficient.&lt;br&gt;
If four hours stops invoicing, operations or field teams, you probably need contractual service levels rather than AMC-level expectations.&lt;br&gt;
What a Useful SLA Looks Like&lt;br&gt;
An SLA should be understandable by the person experiencing the business problem—not only by an engineer.&lt;br&gt;
A practical structure might look like this:&lt;br&gt;
S1 Critical: Core system or process completely unavailable.&lt;br&gt;
First response: 30 minutes, 24×7&lt;br&gt;
Restore/workaround: 4 hours&lt;br&gt;
S2 High: Core process degraded or a department/site blocked.&lt;br&gt;
First response: 2 hours within cover hours&lt;br&gt;
Restore/workaround: 1 working day&lt;br&gt;
S3 Medium: Secondary function unavailable but work can continue.&lt;br&gt;
First response: 1 working day&lt;br&gt;
Restore/workaround: 5 working days&lt;br&gt;
S4 Low: Cosmetic issues, usability problems or minor requests.&lt;br&gt;
First response: 3 working days&lt;br&gt;
Resolution: next scheduled release    Pasted text&lt;br&gt;
And remember: response time is not resolution time.&lt;br&gt;
A vendor acknowledging your S1 ticket quickly does not mean the service has been restored. Both targets should appear in the agreement.    Pasted text&lt;br&gt;
Knowledge Continuity Matters&lt;br&gt;
Support quality often comes down to one question:&lt;br&gt;
Who still understands the system six months after launch?&lt;br&gt;
Good continuity requires current architecture documentation, integration details, environment information, scheduled-job documentation and practical incident runbooks.&lt;br&gt;
There should also be a named engineer who knows the codebase and a backup who has actually worked with the system.    Pasted text&lt;br&gt;
Don't Forget the Exit&lt;br&gt;
A good support agreement should explain what happens when the relationship ends.&lt;br&gt;
That includes current documentation, runbooks, credential handover, knowledge-transfer time and a final backup that your organisation can restore independently.&lt;br&gt;
These terms are much easier to negotiate when signing the agreement than when leaving it.    Pasted text&lt;br&gt;
The Bottom Line&lt;br&gt;
Software support should not begin with the question, “What is the monthly maintenance price?”&lt;br&gt;
Start with:&lt;br&gt;
What needs to stay running? Who owns it? How quickly must it recover? And who still understands it when the original build team is gone?&lt;br&gt;
Once those answers are clear, choosing between warranty, AMC, retained hours and managed service becomes much easier.&lt;/p&gt;

&lt;p&gt;Read full blog &lt;a href="https://www.accucia.com/blog/software-maintenance-and-support-choosing-the-right-model" rel="noopener noreferrer"&gt;&lt;/a&gt;&lt;/p&gt;

</description>
      <category>ai</category>
      <category>programming</category>
      <category>devops</category>
      <category>automation</category>
    </item>
    <item>
      <title>Offshore Development Centre in India: A Practical Setup Guide</title>
      <dc:creator>Sanjay Katariya</dc:creator>
      <pubDate>Thu, 01 Oct 2026 10:26:28 +0000</pubDate>
      <link>https://dev.to/sanjay_katariya_135839dbe/offshore-development-centre-in-india-a-practical-setup-guide-2fj7</link>
      <guid>https://dev.to/sanjay_katariya_135839dbe/offshore-development-centre-in-india-a-practical-setup-guide-2fj7</guid>
      <description>&lt;p&gt;An ODC is not a cheaper contractor. It is a second engineering office that happens to be somewhere else.&lt;br&gt;
The companies that get value from an Offshore Development Centre (ODC) treat it that way from week one.&lt;br&gt;
The ones that treat it as a ticket queue usually get exactly that: a ticket queue.&lt;br&gt;
After running this model from Pune across 730+ projects, 500+ clients and 25+ verticals, here are the practical lessons that matter.&lt;br&gt;
ODC vs Staff Augmentation vs Project Outsourcing&lt;br&gt;
These three models are often grouped together, but they solve different problems.&lt;br&gt;
Staff augmentation works when you need specific skills for a limited period and are prepared to manage those developers directly.&lt;br&gt;
Project outsourcing works when there is a clear scope, milestones and finish line.&lt;br&gt;
An ODC makes sense when the roadmap continues, domain knowledge compounds and you want the same engineering team working on the product 12–18 months from now.&lt;br&gt;
A practical ODC usually starts with four to six people.&lt;br&gt;
For a six-person pod, a useful structure is:&lt;br&gt;
1 Senior Engineer → 3 Mid-Level Engineers → 1 Junior Engineer → 1 QA&lt;br&gt;
And QA should be there from week one—not introduced when the codebase already has hundreds of files and a deadline.    Pasted text&lt;br&gt;
The First 12 Weeks Matter More Than the Sales Deck&lt;br&gt;
Do not expect an ODC to start shipping major features immediately.&lt;br&gt;
A healthy ramp looks more like this:&lt;br&gt;
Weeks 1–2: Accounts, environments, repository access and architecture walkthroughs.&lt;br&gt;
Weeks 3–4: Shadow the existing sprint, map the system and merge the first low-risk pull request.&lt;br&gt;
Weeks 5–7: Establish the definition of done, regression testing and ownership of the first complete sprint.&lt;br&gt;
Weeks 8–10: Introduce written reporting, escalation processes and measure baseline velocity.&lt;br&gt;
Weeks 11–12: Clear documentation debt, review the team structure and create the next 90-day plan.&lt;br&gt;
Weeks one to four producing relatively little visible output is not necessarily a problem.&lt;br&gt;
If an unfamiliar offshore team is shipping major features in week two, ask what discovery work it skipped.    Pasted text&lt;br&gt;
Governance Is Usually Where ODCs Fail&lt;br&gt;
The classic failure is not an engineering team doing nothing.&lt;br&gt;
It is a team that looks busy while the client cannot tell whether that activity is useful.&lt;br&gt;
Four simple things prevent much of this:&lt;br&gt;
One named owner on each side. Someone must be able to answer questions and make decisions.&lt;br&gt;
A written weekly report. What shipped? What slipped? What is blocked? Who owns the next action?&lt;br&gt;
A written definition of done. Code review, testing, documentation and staging deployment should not depend on interpretation.&lt;br&gt;
A real escalation process. “Email us if something goes wrong” is not an escalation path.    Pasted text&lt;br&gt;
Code and IP Should Be Yours From Day One&lt;br&gt;
Your repository should sit inside your GitHub, GitLab or Azure DevOps organisation.&lt;br&gt;
The offshore team should be contributors—not owners of the repository.&lt;br&gt;
IP assignment also deserves attention. Under Section 19 of India's Copyright Act 1957, copyright assignment needs to be written and signed. The agreement should explicitly address the work, term and territory rather than relying on a generic “all IP belongs to the client” sentence.    Pasted text&lt;br&gt;
Timezone Overlap: Use Numbers, Not Adjectives&lt;br&gt;
This is where offshore sales decks often become vague.&lt;br&gt;
Our standard India working day is 09:30–18:30 IST.&lt;br&gt;
That provides roughly:&lt;br&gt;
UK: 4–5 hours&lt;br&gt;
Western/Central Europe: 5–6 hours&lt;br&gt;
UAE: 8 hours&lt;br&gt;
Saudi Arabia/Bahrain: 7 hours&lt;br&gt;
US Eastern: effectively zero on a normal India schedule&lt;br&gt;
US Pacific: zero&lt;br&gt;
Australia Eastern: around 2–3 hours depending on daylight saving&lt;br&gt;
US Pacific deserves particular attention.&lt;br&gt;
A normal Indian workday does not provide useful Pacific overlap.&lt;br&gt;
Getting around four to five hours requires a dedicated evening roster—staffed and paid specifically for that schedule.&lt;br&gt;
Trying to manufacture that overlap by repeatedly asking a normal day team to stay late is not a sustainable operating model.    Pasted text&lt;br&gt;
What Actually Drives ODC Cost?&lt;br&gt;
Headcount alone is a poor way to compare ODC proposals.&lt;br&gt;
Seniority mix usually moves the number most. A senior-heavy pod can cost substantially more than a junior-heavy team of the same size, while potentially costing less per unit of usable software.&lt;br&gt;
Other drivers include:&lt;br&gt;
Skill scarcity: Platform, data and experienced AI engineers generally cost more than general application developers.&lt;br&gt;
Compliance: On-premise deployment, restricted-device policies and external audits add engineering effort.&lt;br&gt;
Contract duration: A longer commitment gives the provider more room to recruit and plan ahead.&lt;br&gt;
So when comparing proposals, compare the team shape and operating model, not just the monthly developer rate.    Pasted text&lt;br&gt;
When You Shouldn't Build an ODC&lt;br&gt;
An ODC is a management commitment before it is a procurement decision.&lt;br&gt;
There are situations where another model makes more sense.&lt;br&gt;
If your roadmap has a clear finish line, consider a fixed-scope project.&lt;br&gt;
If you need fewer than four people, staff augmentation may be simpler.&lt;br&gt;
If your core team operates on US Pacific time and you will not fund an Indian evening roster, the overlap maths may make a nearshore model more practical.&lt;br&gt;
Most importantly, if you cannot name someone on your side who can spend roughly half a day each week owning the relationship, an ODC is likely to struggle.    Pasted text&lt;br&gt;
The Bottom Line&lt;br&gt;
The strongest Offshore Development Centres in India are not treated as collections of inexpensive developers.&lt;br&gt;
They operate like a second engineering office.&lt;br&gt;
The client owns the roadmap. The engineering team builds domain knowledge. Governance is written down. Code stays in the client's environment. Timezone coverage is planned rather than promised.&lt;br&gt;
When those foundations are right, offshore stops being primarily about geography.&lt;br&gt;
It becomes about building a stable engineering capability that can compound over years.&lt;br&gt;
&lt;a href="https://www.accucia.com/blog/offshore-development-centre-in-india-a-practical-setup-guide?utm_source=medium&amp;amp;utm_medium=article&amp;amp;utm_campaign=oct2026_blog&amp;amp;utm_content=dev-centre-india" rel="noopener noreferrer"&gt;Read full blog &lt;/a&gt;&lt;/p&gt;

</description>
      <category>ai</category>
      <category>devops</category>
      <category>automation</category>
      <category>seo</category>
    </item>
    <item>
      <title>What ISO 27001 Really Costs an Indian Software Company</title>
      <dc:creator>Sanjay Katariya</dc:creator>
      <pubDate>Wed, 30 Sep 2026 13:45:32 +0000</pubDate>
      <link>https://dev.to/sanjay_katariya_135839dbe/what-iso-27001-really-costs-an-indian-software-company-1c3b</link>
      <guid>https://dev.to/sanjay_katariya_135839dbe/what-iso-27001-really-costs-an-indian-software-company-1c3b</guid>
      <description>&lt;p&gt;When companies budget for ISO 27001, they often focus on one number: the certification body’s fee.&lt;/p&gt;

&lt;p&gt;That is usually not the biggest cost.&lt;/p&gt;

&lt;p&gt;The real investment is the time your engineering, security, management, and operations teams spend building an Information Security Management System (ISMS), closing control gaps, collecting evidence, and preparing for audits.&lt;/p&gt;

&lt;p&gt;For a mid-sized Indian software company, understanding that internal effort before starting can prevent a major budgeting mistake.&lt;/p&gt;

&lt;p&gt;The Five Costs Behind ISO 27001&lt;/p&gt;

&lt;p&gt;ISO 27001 certification costs generally fall into five areas:&lt;/p&gt;

&lt;ol&gt;
&lt;li&gt;&lt;p&gt;Gap assessment&lt;br&gt;
This identifies where your current security practices fall short of ISO 27001 requirements.&lt;/p&gt;&lt;/li&gt;
&lt;li&gt;&lt;p&gt;Building the ISMS&lt;br&gt;
Policies, risk assessments, access controls, supplier reviews, incident processes, secure development practices, and other controls need to be documented and operational.&lt;/p&gt;&lt;/li&gt;
&lt;li&gt;&lt;p&gt;Tooling&lt;br&gt;
ISO 27001 does not require specific software. However, gaps may require better asset management, centralised logging, endpoint controls, or access-review systems.&lt;/p&gt;&lt;/li&gt;
&lt;li&gt;&lt;p&gt;Stage 1 and Stage 2 audits&lt;br&gt;
This is the certification body's direct cost. ISO/IEC 27006-1:2024 determines audit time based largely on the effective number of people within scope.&lt;/p&gt;&lt;/li&gt;
&lt;li&gt;&lt;p&gt;Surveillance audits&lt;br&gt;
Certification runs on a three-year cycle, with surveillance audits after the initial certification.&lt;/p&gt;&lt;/li&gt;
&lt;/ol&gt;

&lt;p&gt;A useful rule: ask the certification body for the audit-day count before asking for the final price.&lt;/p&gt;

&lt;p&gt;The Cost Most Proposals Leave Out&lt;/p&gt;

&lt;p&gt;The biggest hidden cost is your own team’s time.&lt;/p&gt;

&lt;p&gt;ISO/IEC 27001:2022 contains 93 Annex A controls. Each needs to be considered and justified through the Statement of Applicability.&lt;/p&gt;

&lt;p&gt;For a software company with roughly 60–150 employees, our working model estimates:&lt;/p&gt;

&lt;p&gt;Scoping and gap assessment: 5–10 person days&lt;/p&gt;

&lt;p&gt;Risk assessment and treatment: 10–15 days&lt;/p&gt;

&lt;p&gt;Policies and procedures: 20–30 days&lt;/p&gt;

&lt;p&gt;Engineering and control-gap remediation: 30–60 days&lt;/p&gt;

&lt;p&gt;Evidence collection: 10–20 days&lt;/p&gt;

&lt;p&gt;Internal audit and corrective actions: 5–10 days&lt;/p&gt;

&lt;p&gt;That puts the internal workload at roughly 80–145 person days, spread across the implementation period.&lt;/p&gt;

&lt;p&gt;For many companies, that internal effort can cost more than the certification audit itself.&lt;/p&gt;

&lt;p&gt;What Makes ISO 27001 More Expensive?&lt;/p&gt;

&lt;p&gt;The biggest variable is scope.&lt;/p&gt;

&lt;p&gt;A company certifying one product and its supporting delivery team will usually face a smaller implementation than one putting every department, office, application, and employee into scope.&lt;/p&gt;

&lt;p&gt;Other major cost drivers include:&lt;/p&gt;

&lt;p&gt;Headcount: More people within scope generally means more audit time.&lt;/p&gt;

&lt;p&gt;Multiple offices: Additional locations can increase audit complexity.&lt;/p&gt;

&lt;p&gt;Cloud vs on-premise infrastructure: Cloud providers may already provide evidence for certain infrastructure controls, while on-premise environments put more responsibility directly on your organisation.&lt;/p&gt;

&lt;p&gt;Existing processes: Companies already performing access reviews, change management, incident logging, backups, and supplier assessments have less work to build from scratch.&lt;/p&gt;

&lt;p&gt;Narrowing scope can therefore reduce cost—but it should be done deliberately. The certification scope appears on the certificate, and enterprise procurement teams can check whether it actually covers what they are purchasing.&lt;/p&gt;

&lt;p&gt;How Long Does ISO 27001 Take?&lt;/p&gt;

&lt;p&gt;For a first certification with a meaningful scope, nine to twelve months is a realistic planning window.&lt;/p&gt;

&lt;p&gt;The reason is not simply documentation.&lt;/p&gt;

&lt;p&gt;Stage 2 examines whether controls are actually operating. Auditors need evidence such as access-review records, training records, incident logs, supplier reviews, internal audits, and management reviews.&lt;/p&gt;

&lt;p&gt;You cannot create months of operational evidence overnight.&lt;/p&gt;

&lt;p&gt;That is why adding more consultants does not necessarily turn a nine-month implementation into a three-month one.&lt;/p&gt;

&lt;p&gt;ISO 27001 vs SOC 2&lt;/p&gt;

&lt;p&gt;Both help customers evaluate security, but they work differently.&lt;/p&gt;

&lt;p&gt;ISO 27001 results in certification against an international information-security management standard. It uses 93 Annex A controls and includes Stage 1, Stage 2, surveillance, and recertification audits.&lt;/p&gt;

&lt;p&gt;SOC 2 produces an auditor's report under AICPA standards. Organisations define controls against selected Trust Services Criteria, and a Type 2 report examines their operation over a defined period.&lt;/p&gt;

&lt;p&gt;Which one matters more depends heavily on what your customers and procurement teams actually request.&lt;/p&gt;

&lt;p&gt;Doing both simply because they are well-known security frameworks can consume substantial engineering time without necessarily helping sales.&lt;/p&gt;

&lt;p&gt;What ISO 27001 Does Not Solve&lt;/p&gt;

&lt;p&gt;ISO 27001 is an information security management system certification.&lt;/p&gt;

&lt;p&gt;It is not CERT-In empanelment.&lt;/p&gt;

&lt;p&gt;It also does not automatically establish Indian data residency.&lt;/p&gt;

&lt;p&gt;If a tender specifically requires an audit by a CERT-In empanelled organisation, ISO 27001 does not replace that requirement.&lt;/p&gt;

&lt;p&gt;Similarly, data residency depends on your hosting architecture and contractual requirements—not simply whether your organisation holds an ISO certificate.&lt;/p&gt;

&lt;p&gt;Should a Mid-Sized Software Company Pursue It?&lt;/p&gt;

&lt;p&gt;Start with your sales pipeline rather than the certificate.&lt;/p&gt;

&lt;p&gt;Look at your last 8–12 enterprise opportunities.&lt;/p&gt;

&lt;p&gt;How many were delayed or lost because of a security certification requirement, security questionnaire, or procurement requirement?&lt;/p&gt;

&lt;p&gt;If ISO 27001 repeatedly appears as a buying requirement, certification can become a commercial enabler.&lt;/p&gt;

&lt;p&gt;If customers are not asking for it, committing nine months and potentially more than 100 internal person days deserves much closer scrutiny.&lt;/p&gt;

&lt;p&gt;Accucia’s Current Position&lt;/p&gt;

&lt;p&gt;Accucia is currently implementing an ISO 27001 information security management system.&lt;/p&gt;

&lt;p&gt;An auditor has been appointed, with certification targeted for Q1 2027. Accucia is not ISO 27001 certified today, and ISO 9001 is also currently in progress.&lt;/p&gt;

&lt;p&gt;That distinction matters.&lt;/p&gt;

&lt;p&gt;ISO 27001 should not be treated as another logo for a website footer. It is an operating system for information security—and the largest investment is often not the certificate.&lt;/p&gt;

&lt;p&gt;It is the work required to make the organisation ready to earn it.&lt;/p&gt;

&lt;p&gt;&lt;a href="https://www.accucia.com/blog/iso-27001-cost-in-india-audit-days-and-timeline-2026" rel="noopener noreferrer"&gt;Read full blog &lt;/a&gt;&lt;/p&gt;

</description>
      <category>ai</category>
      <category>productivity</category>
      <category>programming</category>
      <category>automation</category>
    </item>
    <item>
      <title>One Elevator Service ERP. Three Gulf Markets. No Local Office.</title>
      <dc:creator>Sanjay Katariya</dc:creator>
      <pubDate>Tue, 29 Sep 2026 12:41:58 +0000</pubDate>
      <link>https://dev.to/sanjay_katariya_135839dbe/one-elevator-service-erp-three-gulf-markets-no-local-office-57im</link>
      <guid>https://dev.to/sanjay_katariya_135839dbe/one-elevator-service-erp-three-gulf-markets-no-local-office-57im</guid>
      <description>&lt;p&gt;What we learned rolling out ElevatorPlus across the UAE, Saudi Arabia and Bahrain—from Pune.&lt;br&gt;
Most software case studies start with a percentage.&lt;br&gt;
“40% faster.”&lt;br&gt;
“30% more productive.”&lt;br&gt;
“50% fewer errors.”&lt;br&gt;
We are not doing that here.&lt;br&gt;
We cannot evidence those numbers for these three operators to a standard we would defend in front of their customers.&lt;br&gt;
What we can show is what actually changed during the rollout—and what the field forced us to change.&lt;br&gt;
Three operators. Three countries. One platform.&lt;br&gt;
The same elevator service platform now supports:&lt;br&gt;
EPIC ME Technical Works LLC in the UAE&lt;br&gt;
Triolift in Saudi Arabia&lt;br&gt;
Gulf Integrated Vertical Solutions in Bahrain&lt;br&gt;
Accucia delivered the platform from Pune, India. We have no Gulf office, trade licence or local delivery team.    Pasted text&lt;br&gt;
That made the implementation question more interesting:&lt;br&gt;
Can one system support technicians, AMCs, breakdowns and service operations across three different Gulf markets remotely?&lt;br&gt;
Yes—but the software itself was not the hardest part.&lt;br&gt;
The difficult part was adoption&lt;br&gt;
The platform creates one operational record around each lift.&lt;br&gt;
That includes the asset register, AMC and warranty details, complaints, technician scheduling, spare parts, preventive maintenance and customer-facing job status.    Pasted text&lt;br&gt;
But a good feature list means very little if technicians do not use it.&lt;br&gt;
We therefore trained supervisors first using real jobs from their own operation. Those supervisors then trained their technicians.&lt;br&gt;
That produced much more useful feedback than sending an outside trainer into the field.    Pasted text&lt;br&gt;
We deliberately ran two systems for a month&lt;br&gt;
For the first month, the old and new processes ran together.&lt;br&gt;
Paper job cards and spreadsheets stayed active alongside the app.&lt;br&gt;
It was slower. It created duplicate work. Nobody particularly enjoyed it.&lt;br&gt;
But it exposed problems before the old system disappeared.&lt;br&gt;
By week three, the field had already forced three important changes. By week six, spreadsheets were retired from daily work.    Pasted text&lt;br&gt;
Three things technicians changed&lt;/p&gt;

&lt;ol&gt;
&lt;li&gt;We simplified the reason codes.
The original closure screen used a long dropdown written in engineering language. Technicians often selected the first available option.
We shortened it, rewrote it in plain language and used mandatory photos instead of relying heavily on free text.&lt;/li&gt;
&lt;li&gt;We made job cards offline-first.
Machine rooms are often in basements or roof plant rooms where mobile signal is unreliable.
The app now stores the job locally and syncs when the device reconnects.&lt;/li&gt;
&lt;li&gt;We moved final closure confirmation to supervisors.
The technician marks the work as done. The supervisor confirms closure.
That made the complaint-to-closure history more trustworthy.    Pasted text
None of these changes were in the original scope.
That became one of the biggest lessons from the rollout:
When implementing field-service software, budget for a change window in month one. Treat field feedback as part of the build, not rework.&lt;/li&gt;
&lt;/ol&gt;

&lt;p&gt;Then came the Gulf working-week problem&lt;br&gt;
Running one platform across the Gulf does not mean running one calendar.&lt;br&gt;
Saudi Arabia operates Sunday to Thursday. Bahrain makes Friday the weekly rest day while the second rest day can depend on the employer. UAE private-sector companies can also set their own working arrangements within applicable rules.&lt;br&gt;
So we stopped thinking in terms of a “Gulf working week.”&lt;br&gt;
The calendar is configured per client, not simply per country.    Pasted text&lt;br&gt;
Timezone overlap helps too.&lt;br&gt;
A Pune team working 9:30 AM–6:30 PM overlaps with 8:00 AM–5:00 PM in Dubai and 7:00 AM–4:00 PM in Riyadh and Manama.&lt;br&gt;
Sunday requires a separate on-call arrangement because it is a working day for Saudi and many Bahrain operations while being a weekend day in India.    Pasted text&lt;br&gt;
So what actually changed?&lt;br&gt;
Not a marketing percentage.&lt;br&gt;
Something more concrete.&lt;br&gt;
Asset records: branch spreadsheets → one register keyed to each lift.&lt;br&gt;
Complaints: phone calls and WhatsApp → timestamped job cards with reason codes and photos.&lt;br&gt;
Preventive maintenance: manually prepared schedules → generated from AMC records.&lt;br&gt;
Stock: month-end reconciliation → parts issued and returned against jobs.&lt;br&gt;
Renewals: price-only conversations → service history available for each lift.    Pasted text&lt;br&gt;
The lesson we would carry into the next rollout&lt;br&gt;
We would build offline-first job cards from day one.&lt;br&gt;
And we would migrate one branch completely before expanding to the others.&lt;br&gt;
Because the biggest implementation risks were not hidden inside the code.&lt;br&gt;
They were in basements with no signal, spreadsheets with duplicate lift records, technician habits, different working calendars and workflows that looked perfectly reasonable until someone actually tried to use them.    Pasted text&lt;br&gt;
That is what implementing field-service software actually looks like.&lt;br&gt;
Not installing software. Changing how the work moves.&lt;br&gt;
&lt;a href="https://www.accucia.com/blog/elevator-service-erp-across-the-uae-saudi-and-bahrain" rel="noopener noreferrer"&gt;Read full blog &lt;/a&gt;&lt;/p&gt;

</description>
      <category>ai</category>
      <category>webdev</category>
      <category>programming</category>
      <category>productivity</category>
    </item>
    <item>
      <title>Software Maintenance and Support: What Happens After Go-Live?</title>
      <dc:creator>Sanjay Katariya</dc:creator>
      <pubDate>Mon, 28 Sep 2026 12:09:22 +0000</pubDate>
      <link>https://dev.to/sanjay_katariya_135839dbe/software-maintenance-and-support-what-happens-after-go-live-nec</link>
      <guid>https://dev.to/sanjay_katariya_135839dbe/software-maintenance-and-support-what-happens-after-go-live-nec</guid>
      <description>&lt;p&gt;The software is live. The build team has moved on. Now, who owns it?&lt;br&gt;
The riskiest point in a custom software project may not be launch.&lt;br&gt;
It may be month seven.&lt;br&gt;
The warranty has expired. The delivery team is working on something else. Nobody has clearly decided who owns the live system.&lt;br&gt;
Nothing has failed yet.&lt;br&gt;
That is what makes it dangerous.    Pasted text&lt;br&gt;
Maintenance Is More Than Fixing Bugs&lt;br&gt;
Software maintenance keeps a working system working.&lt;br&gt;
Corrective maintenance fixes discovered problems. Adaptive maintenance keeps the system compatible as browsers, operating systems, APIs, SDKs and other dependencies change. Perfective and preventive work improve the system or address issues before they surface.    Pasted text&lt;br&gt;
Your software can need maintenance even when nothing appears broken.&lt;br&gt;
Which Support Model Fits?&lt;br&gt;
There are four common approaches:&lt;br&gt;
Warranty — Covers defects against the agreed scope for a fixed period after launch.&lt;br&gt;
AMC — Provides ongoing corrective fixes, dependency updates and agreed minor changes.&lt;br&gt;
Retained hours — Gives you a monthly engineering block that can be directed toward fixes or improvements.&lt;br&gt;
Managed service with SLA — Adds monitoring, incident response, on-call coverage and contractual response and restoration targets.    Pasted text&lt;br&gt;
The simplest test is downtime tolerance.&lt;br&gt;
If four hours offline is inconvenient, an AMC may be enough.&lt;br&gt;
If four hours offline stops invoicing, orders or field operations, you need clearly defined SLA coverage.    Pasted text&lt;br&gt;
What Should an SLA Actually Tell You?&lt;br&gt;
A useful SLA should define severity in business language.&lt;br&gt;
S1 Critical: Core operations cannot continue.&lt;br&gt;
S2 High: A core process is seriously degraded.&lt;br&gt;
S3 Medium: A secondary function fails, but work can continue.&lt;br&gt;
S4 Low: Cosmetic issues, questions or minor changes.&lt;br&gt;
And one distinction matters:&lt;br&gt;
Response is not resolution.&lt;br&gt;
A response means an engineer has acknowledged the incident and started work. Resolution means the service has actually been restored, potentially through a workaround.    Pasted text&lt;br&gt;
AI Needs Another Layer of Support&lt;br&gt;
Traditional application support asks:&lt;br&gt;
Did the software run?&lt;br&gt;
AI operations must also ask:&lt;br&gt;
Was the answer right?&lt;br&gt;
An AI application can be technically healthy while producing the wrong output. That means monitoring needs to extend beyond uptime and error rates to output quality, evaluation results, fallback rates and model behaviour.    Pasted text&lt;br&gt;
The Question to Ask Before the Build Team Leaves&lt;br&gt;
Whatever support model you choose, clarify ownership.&lt;br&gt;
Keep documentation current. Maintain incident runbooks. Have a named engineer who understands the system—and a named backup who can step in.    Pasted text&lt;br&gt;
Because the biggest post-launch risk is not always broken software.&lt;br&gt;
It is software that still works, but nobody owns.&lt;br&gt;
At Accucia, that is why we prefer defining warranty, corrective maintenance, adaptive maintenance and new feature work separately instead of hiding everything inside one support line item.    Pasted text&lt;br&gt;
How does your organisation handle software ownership once the original build team moves on?&lt;/p&gt;

&lt;p&gt;&lt;a href="https://www.accucia.com/blog/software-maintenance-and-support-choosing-the-right-model" rel="noopener noreferrer"&gt;read full blog  &lt;/a&gt; &lt;/p&gt;

</description>
      <category>ai</category>
      <category>programming</category>
      <category>webdev</category>
    </item>
    <item>
      <title>Your Company Has Plenty of Data. The Problem Is Knowing What Matters.</title>
      <dc:creator>Sanjay Katariya</dc:creator>
      <pubDate>Tue, 22 Sep 2026 12:03:41 +0000</pubDate>
      <link>https://dev.to/sanjay_katariya_135839dbe/your-company-has-plenty-of-data-the-problem-is-knowing-what-matters-4f0b</link>
      <guid>https://dev.to/sanjay_katariya_135839dbe/your-company-has-plenty-of-data-the-problem-is-knowing-what-matters-4f0b</guid>
      <description>&lt;p&gt;When spreadsheets, exports and monthly reports stop helping, a BI dashboard can turn scattered numbers into decisions.&lt;/p&gt;

&lt;p&gt;Most companies do not have a data problem.&lt;/p&gt;

&lt;p&gt;They have data everywhere.&lt;/p&gt;

&lt;p&gt;Sales numbers in the CRM. Financial data in the ERP. Customer activity in databases. Operational information in SaaS tools. And, inevitably, several spreadsheets maintained by different people.&lt;/p&gt;

&lt;p&gt;The real problem is getting all of that information into a form that someone can actually use to make a decision.&lt;/p&gt;

&lt;p&gt;That is where a Business Intelligence (BI) dashboard becomes useful.&lt;/p&gt;

&lt;p&gt;A dashboard is more than a collection of charts&lt;/p&gt;

&lt;p&gt;A BI dashboard brings important metrics and KPIs from multiple sources into one interactive view.&lt;/p&gt;

&lt;p&gt;Instead of waiting for somebody to export data, update a spreadsheet and prepare a monthly report, teams can work with live or near-live information and drill into the numbers when something changes.&lt;/p&gt;

&lt;p&gt;But there is an important distinction.&lt;/p&gt;

&lt;p&gt;The dashboard is only the visible layer.&lt;/p&gt;

&lt;p&gt;Behind it sit the databases, APIs, data pipelines, warehouse and BI tools that make those numbers trustworthy. A beautiful dashboard built on unreliable data is still an unreliable dashboard.&lt;/p&gt;

&lt;p&gt;When do spreadsheets stop being enough?&lt;/p&gt;

&lt;p&gt;Usually, the warning signs appear before anyone formally asks for a BI system.&lt;/p&gt;

&lt;p&gt;Your engineering team is repeatedly running SQL queries for management.&lt;/p&gt;

&lt;p&gt;Someone exports CSV files every week.&lt;/p&gt;

&lt;p&gt;Two departments produce different numbers for the same KPI.&lt;/p&gt;

&lt;p&gt;Leadership is making decisions using reports that are already several days old.&lt;/p&gt;

&lt;p&gt;Or your spreadsheet has simply become too complicated to maintain confidently.&lt;/p&gt;

&lt;p&gt;These are signs that reporting has become an operational process of its own.&lt;/p&gt;

&lt;p&gt;At that point, the question is not whether Excel or Google Sheets are useful. They are.&lt;/p&gt;

&lt;p&gt;The question is whether they are still the right place to run your company's decision-making.&lt;/p&gt;

&lt;p&gt;Not every dashboard should look the same&lt;/p&gt;

&lt;p&gt;An operations manager needs to know what is happening now.&lt;/p&gt;

&lt;p&gt;An analyst may need months of historical data to identify a pattern.&lt;/p&gt;

&lt;p&gt;A CEO may only need a small number of metrics showing revenue, growth, acquisition cost and churn.&lt;/p&gt;

&lt;p&gt;Those are three different jobs, and they should not automatically become one enormous dashboard.&lt;/p&gt;

&lt;p&gt;The best dashboards start with the decisions people need to make—not with a list of every metric the company can technically display.&lt;/p&gt;

&lt;p&gt;And sometimes you do not need a dashboard&lt;/p&gt;

&lt;p&gt;If your reporting requirements are simple and infrequent, spreadsheets may still be enough.&lt;/p&gt;

&lt;p&gt;If you are an early-stage company still validating assumptions, building a full BI layer may be premature.&lt;/p&gt;

&lt;p&gt;And if your underlying data is inconsistent, building a dashboard first can make things worse by giving unreliable numbers a more convincing interface.&lt;/p&gt;

&lt;p&gt;The question we prefer to ask&lt;/p&gt;

&lt;p&gt;Instead of starting with:&lt;/p&gt;

&lt;p&gt;“Which BI tool should we buy?”&lt;/p&gt;

&lt;p&gt;Start with:&lt;/p&gt;

&lt;p&gt;“Which decisions are taking too long because the information we need is scattered across different systems?”&lt;/p&gt;

&lt;p&gt;That question changes the project.&lt;/p&gt;

&lt;p&gt;Because the goal of Business Intelligence is not to put more charts on another screen.&lt;/p&gt;

&lt;p&gt;It is to give the right person a trustworthy answer while there is still time to act on it.&lt;/p&gt;

&lt;p&gt;&lt;a href="https://www.accucia.com/blog/what-is-a-business-intelligence-dashboard-and-does-your-company-need-one" rel="noopener noreferrer"&gt;Read full blog -  &lt;/a&gt;&lt;/p&gt;

</description>
      <category>ai</category>
      <category>programming</category>
      <category>webdev</category>
      <category>python</category>
    </item>
    <item>
      <title>The UAE ERP Cost Most Buyers Miscalculate Before the Project Starts</title>
      <dc:creator>Sanjay Katariya</dc:creator>
      <pubDate>Mon, 07 Sep 2026 12:40:51 +0000</pubDate>
      <link>https://dev.to/sanjay_katariya_135839dbe/the-uae-erp-cost-most-buyers-miscalculate-before-the-project-starts-32m9</link>
      <guid>https://dev.to/sanjay_katariya_135839dbe/the-uae-erp-cost-most-buyers-miscalculate-before-the-project-starts-32m9</guid>
      <description>&lt;p&gt;When a UAE company evaluates an offshore ERP or software vendor, the conversation usually starts with features, integrations, timelines and development cost.&lt;/p&gt;

&lt;p&gt;But two questions deserve to come much earlier:&lt;/p&gt;

&lt;p&gt;What happens to VAT?&lt;br&gt;
And where will our data actually sit?&lt;/p&gt;

&lt;p&gt;Getting either one wrong can distort the vendor comparison before the technical evaluation has even started.&lt;/p&gt;

&lt;p&gt;The 5% VAT that may not be a real cash cost&lt;/p&gt;

&lt;p&gt;One misconception we still encounter is a UAE buyer adding 5% VAT directly to the price of an offshore software build.&lt;/p&gt;

&lt;p&gt;For a taxable UAE business importing relevant services, Article 48 applies the reverse-charge mechanism. The overseas supplier does not charge UAE VAT; the UAE recipient accounts for it. Where the buyer has full input-tax recovery, the output VAT and recoverable input VAT offset each other.&lt;/p&gt;

&lt;p&gt;Take a simple AED 100,000 software project:&lt;/p&gt;

&lt;p&gt;Offshore vendor invoice: AED 100,000&lt;br&gt;
Reverse-charge VAT at 5%: AED 5,000&lt;br&gt;
Input VAT recovered: AED 5,000&lt;br&gt;
Net VAT cash cost: AED 0&lt;/p&gt;

&lt;p&gt;That does not mean VAT can be ignored. Businesses making exempt supplies may have restricted recovery, in which case part of the VAT can become a genuine cost.&lt;/p&gt;

&lt;p&gt;But for a business with full recovery, adding another 5% to an offshore vendor's commercial price can create the wrong comparison.&lt;/p&gt;

&lt;p&gt;The second question is data&lt;/p&gt;

&lt;p&gt;Once the commercial position is clear, the next conversation should be about where the system and its data will live.&lt;/p&gt;

&lt;p&gt;Cross-border transfers of personal data are governed by Article 23 of the UAE's federal PDPL. Depending on the circumstances, transfers can involve adequacy or safeguards such as contractual protections and other permitted grounds.&lt;/p&gt;

&lt;p&gt;This makes several questions worth asking every offshore vendor:&lt;/p&gt;

&lt;p&gt;Where will production data be hosted?&lt;br&gt;
Which subprocessors can access it?&lt;br&gt;
In which countries are those subprocessors located?&lt;br&gt;
What happens to the data when the contract ends?&lt;br&gt;
What are the breach-notification obligations?&lt;/p&gt;

&lt;p&gt;For healthcare, the conversation is different again. UAE health data is subject to a stricter localisation regime, with defined exceptions rather than a general permission to host patient data offshore.&lt;/p&gt;

&lt;p&gt;Ask before you shortlist, not after&lt;/p&gt;

&lt;p&gt;Tax and data questions should not be paperwork left for the final procurement meeting.&lt;/p&gt;

&lt;p&gt;They affect the real project cost, architecture, hosting model, contracts and sometimes the vendor shortlist itself.&lt;/p&gt;

&lt;p&gt;For UAE businesses considering an ERP build with an offshore development team, the commercial position can be more straightforward than expected. Accucia's UAE ERP guidance similarly explains its offshore delivery model and reverse-charge approach.&lt;/p&gt;

&lt;p&gt;The better vendor evaluation question is therefore not simply:&lt;/p&gt;

&lt;p&gt;“How much will you charge to build our ERP?”&lt;/p&gt;

&lt;p&gt;It is:&lt;/p&gt;

&lt;p&gt;“What will this arrangement actually cost us, where will our data sit, and what protections are written into the contract?”&lt;/p&gt;

&lt;p&gt;For a deeper breakdown of UAE VAT, PDPL, offshore ERP delivery, hosting and procurement considerations:&lt;br&gt;
&lt;a href="https://www.accucia.com/blog/erp-software-in-the-uae-vat-pdpl-and-offshore-builds" rel="noopener noreferrer"&gt;Read full blog - &lt;/a&gt;&lt;/p&gt;

</description>
      <category>ai</category>
      <category>programming</category>
      <category>productivity</category>
      <category>python</category>
    </item>
    <item>
      <title>AI Agent Development Company: How to Choose One in 2026</title>
      <dc:creator>Sanjay Katariya</dc:creator>
      <pubDate>Mon, 31 Aug 2026 11:03:44 +0000</pubDate>
      <link>https://dev.to/sanjay_katariya_135839dbe/ai-agent-development-company-how-to-choose-one-in-2026-16k0</link>
      <guid>https://dev.to/sanjay_katariya_135839dbe/ai-agent-development-company-how-to-choose-one-in-2026-16k0</guid>
      <description>&lt;h2&gt;
  
  
  What an AI agent development company actually does
&lt;/h2&gt;

&lt;p&gt;An AI agent development company builds software that decides and acts, then proves it acted correctly. A chatbot returns text. An agent reads a purchase order, checks stock in your ERP, raises a requisition and leaves an audit trail. Write access is where projects come apart.&lt;/p&gt;

&lt;p&gt;Gartner predicted on 25 June 2025 that "over 40% of agentic AI projects will be canceled by the end of 2027, due to escalating costs, unclear business value or inadequate risk controls". It also estimates only about 130 agentic AI vendors are genuine among the thousands using the label. Anushree Verma, Senior Director Analyst at Gartner, said most such projects are "early stage experiments or proof of concepts that are mostly driven by hype and are often misapplied".&lt;/p&gt;

&lt;p&gt;Benchmarks agree. In TheAgentCompany, which sets agents realistic tasks inside a simulated software firm, the most competitive agent completed 30% of tasks autonomously. Scope accordingly: one narrow job, done well, with a human check.&lt;/p&gt;

&lt;h2&gt;
  
  
  Three kinds of agent, priced very differently
&lt;/h2&gt;

&lt;p&gt;Most buyers ask for "an AI agent" and mean one of three different things. The gap comes from permissions, not cleverness.&lt;/p&gt;

&lt;div class="table-wrapper-paragraph"&gt;&lt;table&gt;
&lt;thead&gt;
&lt;tr&gt;
&lt;th&gt;Agent type&lt;/th&gt;
&lt;th&gt;What it does&lt;/th&gt;
&lt;th&gt;Relative build cost&lt;/th&gt;
&lt;th&gt;Main risk&lt;/th&gt;
&lt;th&gt;Time to first production use (our delivery experience)&lt;/th&gt;
&lt;/tr&gt;
&lt;/thead&gt;
&lt;tbody&gt;
&lt;tr&gt;
&lt;td&gt;Read-only assistant&lt;/td&gt;
&lt;td&gt;Answers questions over your documents and reports. No writes.&lt;/td&gt;
&lt;td&gt;Lowest&lt;/td&gt;
&lt;td&gt;A wrong answer, contained because no record changes&lt;/td&gt;
&lt;td&gt;3 to 6 weeks&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;Workflow agent&lt;/td&gt;
&lt;td&gt;Runs a defined process and writes back into ERP or CRM&lt;/td&gt;
&lt;td&gt;Middle&lt;/td&gt;
&lt;td&gt;A bad write, plus the work to reconcile it&lt;/td&gt;
&lt;td&gt;8 to 16 weeks&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;Autonomous agent with approval gates&lt;/td&gt;
&lt;td&gt;Plans multi-step work, pausing at checkpoints for a named approver&lt;/td&gt;
&lt;td&gt;Highest&lt;/td&gt;
&lt;td&gt;Silent drift across many small decisions&lt;/td&gt;
&lt;td&gt;4 to 8 months, after a workflow agent is stable&lt;/td&gt;
&lt;/tr&gt;
&lt;/tbody&gt;
&lt;/table&gt;&lt;/div&gt;

&lt;p&gt;A read-only assistant is the right first project for almost everyone. It hands you retrieval quality, access control and adoption in one go, with no risk of a wrong ledger entry. A vendor who pushes you straight to autonomy is selling, not advising.&lt;/p&gt;

&lt;h2&gt;
  
  
  The nine questions to ask an AI agent development company
&lt;/h2&gt;

&lt;p&gt;Send these to every shortlisted vendor in writing. The answer you want is under each one.&lt;/p&gt;

&lt;ol&gt;
&lt;li&gt;
&lt;p&gt;&lt;strong&gt;Which model are you using, and what happens when it changes?&lt;/strong&gt;&lt;/p&gt;

&lt;p&gt;Wanted: the model sits behind an internal interface and is swappable, chosen per task rather than per brand, with the evaluation set rerun on every version change. Vendors locked to one model bill you for a rewrite later.&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;&lt;strong&gt;How will the agent reach our systems?&lt;/strong&gt;&lt;/p&gt;

&lt;p&gt;Wanted: documented, permissioned interfaces, preferably Model Context Protocol servers or existing APIs, with a named owner per connection. Not screen scraping, not direct database writes, not a shared admin credential.&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;&lt;strong&gt;How do you prove accuracy before go-live?&lt;/strong&gt;&lt;/p&gt;

&lt;p&gt;Wanted: a fixed set of real cases from your business with known correct outputs, a scoring method, a pass threshold agreed before build, and a rerun on every change. "We tested it manually" is not an evaluation method.&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;&lt;strong&gt;What do the guardrails block, and where are they enforced?&lt;/strong&gt;&lt;/p&gt;

&lt;p&gt;Wanted: hard limits in code, not in a prompt. Value caps, allowed record types, allowed actions, allowed hours, blocked fields. Prompt instructions are guidance, not control.&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;&lt;strong&gt;Where does a human stay in the loop?&lt;/strong&gt;&lt;/p&gt;

&lt;p&gt;Wanted: a named role approves defined classes of action, the approval is logged with the approver's identity, and the agent stops when approval times out. The India AI Governance Guidelines, released by MeitY in November 2025, state that "humans should, as far as possible, have final control over AI systems".&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;&lt;strong&gt;What gets logged, and for how long?&lt;/strong&gt;&lt;/p&gt;

&lt;p&gt;Wanted: every input, tool call, decision, output and approver, stored in your tenancy, queryable by your team, for a retention period you set. The same guidelines recommend "regular monitoring and testing, audit trails, and reporting protocols". Logs held only by the vendor leave you unable to investigate an incident.&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;&lt;strong&gt;Who owns the code, the prompts and the evaluation set?&lt;/strong&gt;&lt;/p&gt;

&lt;p&gt;Wanted: you own all three, on a written assignment, delivered into your repository from week one. Prompts are the product in agent work. A vendor who keeps them is keeping the part you paid to learn.&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;&lt;strong&gt;What is the exit plan?&lt;/strong&gt;&lt;/p&gt;

&lt;p&gt;Wanted: a documented handover covering repository access, environment variables, deployment runbook, evaluation instructions and a training session for your team. Agree it at contract stage, not at exit.&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;&lt;strong&gt;Who supports this in month seven?&lt;/strong&gt;&lt;/p&gt;

&lt;p&gt;Wanted: a named support model with response times, a change budget for model and API drift, and one person from the build team. Month one is easy. Month seven is when an upstream API changes and nobody remembers why a rule exists.&lt;/p&gt;
&lt;/li&gt;
&lt;/ol&gt;

&lt;p&gt;&lt;em&gt;[Diagram: Agent connected to ERP, CRM and Document Store through a middle MCP layer. See Inline Media Notes for the generation prompt.]&lt;/em&gt;&lt;/p&gt;

&lt;h2&gt;
  
  
  Integration is the real cost, not the model
&lt;/h2&gt;

&lt;p&gt;Model calls are a small line item. The work sits in reaching your systems safely, and in the state of the data you find there.&lt;/p&gt;

&lt;p&gt;Model Context Protocol, released by Anthropic on 25 November 2024, is an open standard for connecting AI systems to the places data lives. It turns integration into a reusable server per system: build one MCP server for your ERP, and every future agent, and every model you swap in, reaches it the same way. In December 2025 it was donated to the Agentic AI Foundation under the Linux Foundation, with reported figures of over 97 million monthly SDK downloads and 10,000 active servers.&lt;/p&gt;

&lt;p&gt;For most Indian mid-market buyers this is the cheaper route: keep the ERP you already paid for and add a controlled interface on top. We set that out in MCP for ERP, and we run MCP integration separately from agent build.&lt;/p&gt;

&lt;p&gt;Data quality is the other half. If your item master holds four spellings of the same part, the agent will not fix that. It will act on all four. Retrieval has the same problem, which is why enterprise RAG work starts with document cleanup, not model selection.&lt;/p&gt;

&lt;h2&gt;
  
  
  AI agent development cost: what actually moves the number
&lt;/h2&gt;

&lt;p&gt;We do not publish price bands, because a band quoted without your system list is a number you will be angry about later. Here are the variables instead. See our cost page.&lt;/p&gt;

&lt;p&gt;Six things drive ai agent development cost, roughly in order of impact.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;Systems touched.&lt;/strong&gt; One system is a project. Four systems is four integration projects plus coordination, each with its own auth model, rate limits, sandbox availability and internal owner.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;Read versus write.&lt;/strong&gt; Read access needs correctness. Write access needs correctness, reversibility, approval design, reconciliation and a rollback path. Adding writes to a working read-only agent is a second project, not a change request.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;Data quality.&lt;/strong&gt; Clean masters and consistent formats make retrieval cheap. Scanned PDFs, inconsistent naming and eight years of free-text notes do not. This is the most common reason a quote moves after discovery.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;Evaluation depth.&lt;/strong&gt; Fifty test cases cost less than five hundred. Five hundred is what you need when a wrong output carries financial or regulatory consequence. Decide that depth deliberately, not in production.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;Compliance review.&lt;/strong&gt; Where the agent touches personal data, the Digital Personal Data Protection Rules, 2025, notified on 14 November 2025 with an eighteen month phased compliance period, govern how you handle it. Where a CERT-In empanelled audit is required, the client commissions the auditor and we implement every finding, which takes calendar time.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;Support commitment.&lt;/strong&gt; A three month warranty costs less than a twelve month retainer with a change budget for model and API drift. The retainer is usually the better buy, because agents degrade quietly when upstream systems change.&lt;/p&gt;

&lt;h2&gt;
  
  
  Engagement models, and what each one suits
&lt;/h2&gt;

&lt;div class="table-wrapper-paragraph"&gt;&lt;table&gt;
&lt;thead&gt;
&lt;tr&gt;
&lt;th&gt;Model&lt;/th&gt;
&lt;th&gt;What it is&lt;/th&gt;
&lt;th&gt;Best for&lt;/th&gt;
&lt;th&gt;Watch out for&lt;/th&gt;
&lt;/tr&gt;
&lt;/thead&gt;
&lt;tbody&gt;
&lt;tr&gt;
&lt;td&gt;Fixed scope pilot&lt;/td&gt;
&lt;td&gt;One agent, one process, agreed evaluation threshold&lt;/td&gt;
&lt;td&gt;A first project needing board approval&lt;/td&gt;
&lt;td&gt;Scope creep. Freeze the process definition first&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;Retained squad&lt;/td&gt;
&lt;td&gt;A standing team running several agents against a roadmap&lt;/td&gt;
&lt;td&gt;Three or more processes queued, with an internal owner&lt;/td&gt;
&lt;td&gt;Paying for capacity you cannot feed. It needs a real backlog&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;Build and transfer&lt;/td&gt;
&lt;td&gt;Vendor builds, documents, trains your team, hands over ownership&lt;/td&gt;
&lt;td&gt;In-house engineers who want the capability&lt;/td&gt;
&lt;td&gt;A handover on paper only. Put the training sessions in the contract&lt;/td&gt;
&lt;/tr&gt;
&lt;/tbody&gt;
&lt;/table&gt;&lt;/div&gt;

&lt;p&gt;Most first-time buyers should take a fixed scope pilot on a read-only assistant. It is the cheapest way to find out whether your data is ready.&lt;/p&gt;

&lt;h2&gt;
  
  
  Red flags
&lt;/h2&gt;

&lt;p&gt;&lt;strong&gt;Accuracy claimed with no evaluation set.&lt;/strong&gt; "It is 95% accurate" means nothing without the test cases, the scoring method and who wrote them.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;No rollback plan.&lt;/strong&gt; If the agent writes to a system of record, there must be a defined way to reverse what it wrote.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;Refusal to hand over prompts.&lt;/strong&gt; Prompts and the evaluation set hold your process knowledge. Withholding them is lock-in, and the second project gets priced that way.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;Pricing per agent rather than per outcome.&lt;/strong&gt; That rewards a vendor for splitting one workflow into five agents. Price the outcome and the systems in scope.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;A demo on the vendor's own data.&lt;/strong&gt; Ask for it on your documents, with your terminology and edge cases. A refusal means the demo does not generalise.&lt;/p&gt;

&lt;h2&gt;
  
  
  How we work
&lt;/h2&gt;

&lt;p&gt;Accucia Softwares was founded in Pune in 2018, so there are eight years of delivery behind this, most of it ERP, workflow and integration work rather than AI demos. Full scope is on our AI agents service page. Our own product Sellora is the working proof: one agent reading and acting on real HR data through MCP, in production.&lt;/p&gt;

&lt;p&gt;On hosting, we deploy in-region on request, on AWS, Azure or GCP with the region chosen to meet your requirement and infrastructure billed to you at cost, or on your own on-premise servers. Our sub-processors are AWS, Azure, GCP and client on-premise infrastructure, and nothing else.&lt;/p&gt;

&lt;p&gt;On certifications we will be exact. We do not hold ISO 27001. Implementation is underway, an auditor has been appointed, and we are targeting certification for Q1 2027, January to March. We do not hold ISO 9001. That is in progress. Where a CERT-In empanelled audit is required, you commission the auditor. We are not empanelled ourselves.&lt;/p&gt;

&lt;h2&gt;
  
  
  Accucia's view
&lt;/h2&gt;

&lt;p&gt;Most organisations asking for an AI agent should buy a data cleanup and a read-only assistant first, and we say so even when it costs us the larger project. We have declined write-access scope on first engagements more than once, because the client's master data could not support it and shipping anyway would have produced a wrong ledger entry with our name on it.&lt;/p&gt;

&lt;p&gt;Second, integration standards matter more than model choice. Pick MCP or documented APIs, keep the model swappable, and you still own something useful in three years. A proprietary connector layer is a rewrite you have not scheduled.&lt;/p&gt;

&lt;p&gt;Third, if a vendor will not give you the evaluation set, the prompts and the logs, the price does not matter. You are renting a black box that touches your systems of record. If you want to argue the point, talk to our team and bring your system list.&lt;/p&gt;

&lt;h2&gt;
  
  
  Frequently Asked Questions
&lt;/h2&gt;

&lt;p&gt;&lt;strong&gt;What does an AI agent development company do?&lt;/strong&gt;&lt;/p&gt;

&lt;p&gt;It builds software agents that act inside your business systems, not just answer questions: process definition, integration to ERP or CRM, guardrails, an evaluation set with a pass threshold, logging and support. Integration and evaluation usually cost more than the model work.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;How is an AI agent different from a chatbot?&lt;/strong&gt;&lt;/p&gt;

&lt;p&gt;A chatbot returns text. An agent acts: it reads records, calls tools, writes updates into systems and leaves an audit trail. That write capability is the whole difference in cost and risk. A wrong chatbot answer wastes time. A wrong agent write creates reconciliation work.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;What drives ai agent development cost?&lt;/strong&gt;&lt;/p&gt;

&lt;p&gt;Six factors: how many systems the agent touches, whether it writes or only reads, master data quality, how many evaluation cases you need, whether a compliance audit is required, and the length of the support commitment. Write access and data quality move it most.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;How long does an AI agent take to build?&lt;/strong&gt;&lt;/p&gt;

&lt;p&gt;In our delivery experience, a read-only assistant reaches production in three to six weeks. A workflow agent writing into ERP or CRM takes eight to sixteen weeks. An autonomous agent with approval gates takes four to eight months, and only after a workflow agent is stable.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;Do we need MCP to build an agent?&lt;/strong&gt;&lt;/p&gt;

&lt;p&gt;No, documented APIs also work. Model Context Protocol is worth choosing when several agents reach the same system, because you build one server per system instead of custom plumbing per agent. Anthropic released it in November 2024 and it moved to the Agentic AI Foundation in December 2025.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;Who should own the code and the prompts?&lt;/strong&gt;&lt;/p&gt;

&lt;p&gt;You should, in writing, from week one, including prompts and evaluation cases, delivered into your own repository. Prompts encode your process knowledge and the evaluation set your definition of correct. A vendor who retains either is building a switching cost you will pay for later.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;How do you measure whether an agent is accurate enough?&lt;/strong&gt;&lt;/p&gt;

&lt;p&gt;With an evaluation set: real cases from your business with known correct outputs, a defined scoring method and a pass threshold agreed before build starts. Rerun it on every change, including model version changes. Any accuracy figure quoted without those three things is not verifiable.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;Should an agent be allowed to write into our ERP?&lt;/strong&gt;&lt;/p&gt;

&lt;p&gt;Only after a read-only version has run in production with stable evaluation scores, and only with hard limits enforced in code, an approval step for defined action classes, full logging and a tested rollback path. Start with the lowest-value, highest-volume transaction type.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;What happens when the agent makes a mistake?&lt;/strong&gt;&lt;/p&gt;

&lt;p&gt;A properly built agent logs every input, tool call, decision and approver, so you can find the mistake, see what caused it, reverse the write using the rollback path and add that case to the evaluation set. No reversal answer means no production readiness.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;Can the agent run on our own servers in India?&lt;/strong&gt;&lt;/p&gt;

&lt;p&gt;Yes. We deploy on your own on-premise servers, or in-region on AWS, Azure or GCP with the region chosen to meet your requirement and infrastructure billed to you at cost. Data residency is decided before build starts, not changed afterwards.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;What is the right first agent to build?&lt;/strong&gt;&lt;/p&gt;

&lt;p&gt;A read-only assistant over a document set or reporting layer that a real team uses daily. It surfaces your retrieval quality, access control and adoption problems within weeks, with no risk to a system of record. Pick a high-volume process with clear correct answers.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;How do we avoid being one of the cancelled projects?&lt;/strong&gt;&lt;/p&gt;

&lt;p&gt;Gartner predicts over 40% of agentic AI projects will be cancelled by the end of 2027 due to escalating costs, unclear business value or inadequate risk controls. Counter all three: scope one process, agree an evaluation threshold before build, and price the support year upfront.&lt;/p&gt;

&lt;p&gt;&lt;a href="https://www.accucia.com/blog/ai-agent-development-company-how-to-choose-one-in-2026" rel="noopener noreferrer"&gt;Read Full blog &lt;/a&gt;&lt;/p&gt;

</description>
      <category>ai</category>
      <category>webdev</category>
      <category>programming</category>
      <category>productivity</category>
    </item>
  </channel>
</rss>
