Engineering for German companies.
German companies do the diligence properly, which is easier to deal with than the alternative. The Article 28 processor agreement, the Standard Contractual Clauses, the transfer impact assessment and EU data residency are all standard here, and all already prepared. What we cannot do is deliver in German.
- Daily overlap
- 09:00–13:30 CET
- Contract currency
- EUR
- Data regime
- GDPR (EU 2016/679), with the BDSG in Germany and the DSG in Austria
- Regulator
- The competent Landesdatenschutzbehörde in Germany, or the Datenschutzbehörde in Austria
- Working language
- English
Hours, money,
and paperwork.
The three things that decide whether a cross-border engagement works, answered before you ask. Everything here is specific to Germany rather than a global average.
Time overlap
09:00–13:30 CET
CET is four and a half hours behind IST in winter and three and a half under CEST in summer. Our working day ends at your 13:30 in winter and 14:30 in summer, so the overlap is four and a half hours rising to five and a half — and it is your morning, not your afternoon. Standups, reviews and stakeholder demos sit inside it. Your afternoon falls outside our day and is carried by written reporting rather than an availability claim we cannot keep.
Currency and tax
EUR
Quoted and invoiced in euros. No Indian tax is levied on services exported from India, so there is no foreign tax line to reconcile. As a non-EU supplier to an EU business, VAT is accounted for by you under the reverse charge — the standard treatment, and one your Steuerberater will process without a query.
Data protection
- Governing law
- GDPR (EU 2016/679), with the BDSG in Germany and the DSG in Austria
- Authority
- The competent Landesdatenschutzbehörde in Germany, or the Datenschutzbehörde in Austria
- Our role
- Processor, on your instructions
Named sub-processors, written consent before any addition.
Engagements run under an Article 28 processor agreement — an Auftragsverarbeitungsvertrag — naming every sub-processor, with your written consent required before another is added. Transfers to India are covered by the 2021 Standard Contractual Clauses with a transfer impact assessment supplied alongside. EU data residency is available and written into the agreement; for engagements where personal data must not leave the EEA, that constraint shapes the architecture from the first phase, including where build and test environments sit.
Answered
before you ask.
The questions we are asked most often from Germany, answered straight. Where we do not hold something, it says so.
Auftragsverarbeitungsvertrag (Article 28 DPA)
Prepared and available before the first technical call, not drafted after a handshake. Includes the sub-processor list, technical and organisational measures, and audit rights.
Standard Contractual Clauses and TIA
The 2021 SCCs with the relevant modules, plus a transfer impact assessment addressing Indian legal access. Supplied together rather than the SCCs alone, which is the more common shortcut.
Technical and organisational measures (TOMs)
Documented against the ISO 27001:2022 control set rather than written freshly for each buyer. That means the answers are consistent, auditable and externally verified.
German-language delivery
We do not offer it. Engineering, documentation and reporting are in English. German-language interfaces are built properly as a localisation architecture, but German copy is authored by a specialist partner and named in the engagement.
Certificate numbers, accreditation status and the verification route are published on our trust page. Check them without asking us.
The problems
that arrive.
The work that comes to us from Germany most often. If one of these is yours, send us the brief.
Industrial and manufacturing data
Plant-floor and machine data that exists but is unusable — production visibility, quality records and the integration layer between systems that were never meant to talk.
Mittelstand platform modernisation
A business-critical system, a decade or more old, that cannot be switched off. Incremental extraction behind stable interfaces rather than a rewrite.
GDPR-first product engineering
Products where data minimisation, retention and consent are architectural rather than a later compliance review. Cheaper to design in than to retrofit.
Why Germany works with us
- The Article 28 DPA, SCCs, transfer impact assessment and TOMs exist as documents before you ask, all anchored to an externally audited ISO 27001 control set.
- EU data residency treated as an architectural constraint from the first phase, including build and test environments — which is where most suppliers quietly leak data out of the EEA.
- Four and a half hours of overlap across your whole morning, rising to five and a half in summer, quoted in your time zone rather than ours.
We do not deliver in German. All engineering, documentation and reporting is in English, and if your stakeholders need German-language delivery we are the wrong supplier. We have no EU entity, so India is the default governing jurisdiction unless we agree otherwise. This record covers Germany and Austria only — Switzerland sits outside the EU and EEA under the revised FADP and uses CHF, so we contract there separately rather than pretending one page covers all of DACH.
Asked from
Germany.
Answers open with the answer. The general set — pricing, process, IP, security — is on the FAQ.
- Do you provide a GDPR Article 28 processor agreement?
- Yes, prepared in advance rather than drafted after a handshake. The Auftragsverarbeitungsvertrag names every sub-processor, sets out the technical and organisational measures, grants audit rights, and requires your written consent before a sub-processor is added. Transfers to India are covered by the 2021 Standard Contractual Clauses, supplied with a transfer impact assessment rather than on their own.
- Can all our data stay inside the EU?
- Yes, and we treat it as an architectural constraint from the first phase rather than a hosting choice at deployment. That includes build and test environments, which is where data most often leaves the EEA unnoticed. EU regions are supported by both major cloud providers and residency is written into the agreement.
- Do you work in German?
- No, and it is worth being blunt about where that bites. Every meeting, every written report, every decision record and every code comment is in English, so a stakeholder who is only comfortable in German cannot participate directly. What we do build is the localisation architecture underneath German-language interfaces: externalised strings, correct declension handling in dynamic copy, DIN date and decimal formatting, and the German compound words that break every layout designed against English. Authorship comes from a specialist partner named in the engagement. If your steering group needs German-language delivery, we are the wrong supplier.
Where else
we work.
Working hours, currency and data protection, covered for every market we serve.
Working with Germany.
Contracted in EUR, governed by GDPR (EU 2016/679), with the BDSG in Germany and the DSG in Austria, delivered inside the 09:00–13:30 CET overlap window.
Cognimit Technologies LLP · Monday to Friday, 10:00–18:00 IST · IST (UTC+5:30)