</>DEV
Software Development
Software Development
with a process you can audit
Web apps, internal systems and compliance tools, built by the same team that consults on ISO — so the security and the documentation an auditor asks for are designed in from day one.
- Development process to the standard
- 29110
- Security designed in from the start
- 27001
- Our own product
- Evidosa
- Bilingual systems
- TH/EN
Why hire consultants who can code?
Most ISO systems fall apart after certification because everything lives in spreadsheets nobody updates. We build tools that keep the system running — a risk register that reminds owners when reviews are due, or a PDPA data subject request system.
Beyond compliance, we build general business software using the same process we teach under ISO/IEC 29110, so every project has confirmed requirements, test results and an acceptance record.
Deliverables
What every project includes
- Requirements with acceptance criteria agreed before development starts
- A project plan and progress reports you can check
- Source code in Git with full change history
- Test cases and test reports traced back to requirements
- User acceptance testing (UAT) and an acceptance record
- User and operations documentation
Security by design
Security designed in from the start
The same approach as the technological controls in ISO 27001 Annex A.
Access and authentication
Least privilege, separated user roles, and logging of access to important data.
Data and encryption
Encryption in transit, secrets such as API keys kept server-side, and only the personal data that is needed.
Secure development
Code review, testing before release, and tracking vulnerabilities in the libraries we use.
Backup and recovery
Planned backups and tested restores, so there is evidence when you are audited.
FAQ
Frequently asked questions
What should we prepare before talking to you?
Just tell us the current problem, who will use the system and what it should do. We turn that into requirements and acceptance criteria, then propose scope and price before any work starts.
Which technologies do you use?
Mostly React and TypeScript on the front end, PostgreSQL for data, hosted on Cloudflare or Supabase — but we choose what suits the job and your existing systems.
Do you support the system after delivery?
Yes, we offer ongoing support. And because every project comes with full documentation and source code, your own team or another developer can take it over.
Contact
Tell us what you need — the first consultation is free
- Phone
- 086-654-0991
- Address
- 42/135 Chit Aree Ville 5, Lampang–Ngao Highway Rd., Chomphu, Mueang Lampang, Lampang 52100, Thailand
Call or email us and tell us where your organisation stands. We’ll tell you which standard to start with, roughly how long it will take, and what you need to prepare.
- Tax ID
- 0525568001095
- Address
- View map ↗