Skip to content
Code Colonies

Library

Notes from the work, written to be useful.

58 articles, guides, checklists and research papers on AI, business software, industries, security and compliance. Free to read, with no sign up.

Browse

The full library

58 of 58 pieces

Guide3 min read

How much does custom software cost in India?

Custom software is priced as hours times a rate. Typical hour ranges for websites, web apps, mobile apps, SaaS products, AI agents and integrations, what moves the number, and how to compare quotes.

Business
Explainer3 min read

What is a Global Capability Centre, and do you need your own?

A Global Capability Centre is a team in another country that does technology, operations or analytics work for its parent company. How the captive, build operate transfer and partner models compare, and when a mid-sized company should start with a partner.

Business
Explainer4 min read

DPDP Act penalties: the amounts, how the Board decides and how to reduce your exposure

The DPDP Act sets penalties of up to INR 250 crore per breach. The full schedule of penalties, how the Data Protection Board inquires and decides, the factors it weighs, appeals, and the steps that lower your risk.

Compliance
Guide3 min read

Automating sales and support on WhatsApp: what works and the rules to follow

What the WhatsApp Business Platform allows, the 24 hour service window and template rules, which tasks are worth automating, how to hand over to staff, and how consent works under the DPDP Act.

AI Engineering
Guide3 min read

Integrating with TallyPrime: automating data entry without breaking your books

How software connects to TallyPrime, which entries are worth automating, how to map ledgers and avoid duplicates, and how to read invoices into Tally with document AI and a person approving the exceptions.

Solutions
Guide3 min read

AI agents or RPA: which fits which process

RPA repeats fixed steps on screens. AI agents read messy inputs and choose the next step. How to tell which one a process needs, when to combine them, and how to measure either one.

AI Engineering
Guide2 min read

From AI pilot to production in four steps

Plenty of AI pilots impress in a demo and then go nowhere. Four steps, with a clear gate after each, give yours a better chance of reaching daily use.

AI Engineering
Guide3 min read

Outsourcing software development to India: a practical guide for overseas companies

How overseas companies work with an Indian software partner: engagement models, time zones, contracts and IP, data protection, invoicing and tax, and how to test a partner with one block of work.

Business
Playbook2 min read

The DPDP Act: a practical first 90 days

Consent Manager provisions start in November 2026 and most duties apply from May 2027, as currently notified. A realistic plan for your first three months of work.

Compliance
Article3 min read

BI dashboards that owners read: what to measure first

Most dashboards are built, admired for a week and forgotten. A dashboard an owner reads every morning has a handful of numbers, each tied to a decision, and data that is right.

Solutions
Research paper7 min read

DPDP Act readiness for Indian MSMEs: a phased plan to May 2027

Most DPDP obligations apply from May 2027, as notified. A phased plan that lets a small or mid sized business get ready in steps it can afford, starting with knowing what personal data it holds.

Research
Explainer4 min read

Running DPDP Act compliance as daily operations with TrustOS

DPDP compliance is not a one time project. Consent, rights requests, breaches and audit evidence happen every day. How TrustOS, our DPDP compliance platform, turns those into routine work.

Platforms
Explainer2 min read

What a Forward Deployed Engineer actually does

The forward deployed role is turning up in more and more AI teams. What it means day to day, how it differs from a developer or a consultant, and when it is the right choice.

Forward Deployed
Guide2 min read

Choosing a model: Claude, GPT, Gemini or open weight

No model is best at everything. Choose by the task, how sensitive the data is, what it will cost at volume and where the system has to run.

AI Engineering
Perspective2 min read

Why we ask clients to pay after they accept the work

Most service contracts put the risk on the client. Ours moves it to us. Why we work this way, and how it stays fair without turning into a dispute.

Business
Guide2 min read

Our engineering standards, in plain language

The rules every Code Colonies team works to, from the first commit to production. For clients who want to know what to expect, and for engineers considering joining.

Developers
Playbook2 min read

The Forward Deployed Strategist playbook

How a strategist turns a vague request like 'use AI in finance' into a measured use case that engineers can build and leaders can believe.

Forward Deployed
Guide4 min read

ERP for an Indian MSME: Tally, Odoo, SAP Business One or custom?

Most MSMEs outgrow spreadsheets around Tally long before they outgrow Tally itself. How to tell which problem you actually have, and which of the four routes fits it.

Solutions
Research paper7 min read

Why AI pilots stall: a gate based model for taking AI from pilot to production

Most AI pilots that stall do so for reasons that were visible before the first line of code. A five gate model makes those reasons explicit and decides when to stop.

Research
Guide5 min read

How to measure OEE without replacing your machines

Most plants can measure overall equipment effectiveness on the machines they already own. How to connect older equipment, what to measure first and where projects go wrong.

Industries
Guide2 min read

Securing LLM applications: the main risks in plain language

Prompt injection, data leaks and agents with too much power are the usual ways AI applications go wrong. What each risk means and how to reduce it.

Security
Checklist2 min read

RAG done right: a checklist for private knowledge assistants

Retrieval augmented generation is easy to demo and hard to get right. Whether answers can be trusted depends on unglamorous details.

AI Engineering
Checklist3 min read

Checklist: before you sign an ERP or CRM implementation contract

Most implementation disputes trace back to a contract that was vague about scope, data, acceptance or exit. A checklist to work through with your vendor before you sign.

Solutions
Explainer4 min read

Building AI applications from ready parts with AksharAI

Not every AI application needs to be written from scratch. When an application builder such as AksharAI is the faster, safer route, and when custom code still wins.

Platforms
Guide2 min read

A reference architecture for AI powered web applications

A practical layout for adding AI features to a modern web application, from the interface down to evaluation and monitoring, and the reasons for each layer.

Developers
Perspective2 min read

Forward deployed engineering versus staff augmentation

Both put outside people in your team. The difference is what they are accountable for, and that shapes the result more than anything else.

Forward Deployed
Explainer2 min read

DPDP Act and GDPR: what is similar and what is different

Many Indian companies already work to GDPR. How much of that effort carries over to the DPDP Act, and where you will need to do more.

Compliance
Guide2 min read

How to evaluate AI agents before you trust them

An agent takes actions, so a mistake costs more than a wrong answer. A practical way to measure agents before launch and keep measuring after.

AI Engineering
Guide4 min read

Retail POS and inventory across stores and online: getting one stock number

When stores, a website and marketplaces each keep their own stock count, you oversell online and sit on dead stock in branches. How to get to one number everyone trusts.

Solutions
Research paper6 min read

Measuring AI agents: evaluation methods that predict production reliability

Many agent evaluations measure the wrong thing, on the wrong cases, once. A framework for building evaluations whose results actually predict how an agent will behave in production.

Research
Guide4 min read

Proof of delivery, route planning and WhatsApp updates for logistics

Customers expect a live update on WhatsApp and a photo when their goods arrive. How transporters and distributors can add electronic proof of delivery, better route planning and customer messages without a big platform change.

Industries
Guide2 min read

Where MSMEs should start with AI

You do not need a data science team to get value from AI. Five practical starting points for small and mid sized businesses in India.

Business
Checklist2 min read

A DevSecOps baseline for growing teams

The security basics every software team should have in place before it handles customer data at any real scale.

Security
Explainer2 min read

Inside our 500 hour Forward Deployed programme

How we train the engineers and strategists who work on client projects, and why we chose on the job training over classroom courses.

Forward Deployed
Explainer4 min read

One record from first call to signed deal: Synerger for consulting and M&A

Consulting and deal teams lose time and context across email, spreadsheets and shared drives. How Synerger keeps engagements and transactions in one place from the first call to the closed deal.

Platforms
Explainer2 min read

The EU AI Act for Indian technology companies

If your software or its AI output reaches users in Europe, the EU AI Act may apply to you. A short guide to roles, risk levels and first steps.

Compliance
Checklist2 min read

Keeping AI running costs under control

Model usage bills can creep up month after month. A short checklist to keep them predictable without hurting quality.

AI Engineering
Article3 min read

Choosing a CRM when your sales run on WhatsApp and phone calls

Indian sales teams sell mostly on WhatsApp and the phone. A CRM only works if it captures those conversations without asking salespeople to type everything twice.

Solutions
Research paper6 min read

Paying for outputs, not hours: a framework for output based software contracts

Time and materials contracts put delivery risk on the buyer. Output based contracts move it to the supplier, but only work when acceptance is objective. A framework for writing them.

Research
Guide4 min read

Moving permit to work and HSE incident reporting off paper

Paper permits and incident forms slow work down and hide risk. A practical guide for oil and gas operators on digitising permit to work and HSE reporting without weakening control.

Industries
Checklist2 min read

The code review checklist we use

A short checklist for reviewing pull requests, including code written with the help of AI assistants.

Developers
Article3 min read

Warehouse management: when spreadsheets stop working

A spreadsheet can run a small godown well. The signs that you have outgrown it, what a warehouse management system really adds, and how to roll one out without stopping dispatch.

Solutions
Guide4 min read

RBI digital lending rules: what they mean for your loan software

The RBI's Digital Lending Directions 2025 set clear rules for loan apps, lending service providers and the banks and NBFCs behind them. What your software must do to stay within them.

Industries
Guide2 min read

Measuring AI return on investment

AI business cases are often inflated. A plain, defensible way to estimate the value of an AI use case before you build, and to prove it afterwards.

AI Engineering
Article3 min read

Building a customer portal your customers actually use

Most B2B customer portals are launched with an email and then ignored. The ones that get used answer the three or four questions customers otherwise phone you about.

Solutions
Checklist2 min read

API design checklist for integrations that last

Good integrations start with good APIs. A checklist for APIs that partners, internal teams and AI agents can depend on.

Developers
Article4 min read

Enterprise e-commerce that grows with your catalogue: ShopenUp

As catalogues grow into thousands of variants across warehouses and channels, many online stores start to strain. How ShopenUp handles storefronts, inventory, payments and marketing as you scale.

Platforms
Checklist2 min read

Getting ready for a penetration test

How to prepare so a penetration test spends its days finding real risks.

Security
Guide4 min read

HRMS and payroll in India: PF, ESI, TDS and professional tax done right

Indian payroll mixes central and state rules that change every year. What an HRMS must handle, where payroll usually goes wrong and how to switch systems without a bad month.

Solutions
Research paper6 min read

Forward deployed engineering: an operating model for AI delivery inside client teams

AI systems depend on context that lives inside the client's teams and systems. An operating model for embedding engineers and strategists where the work is, and handing over cleanly.

Research
Guide4 min read

Computer system validation and 21 CFR Part 11 for new software

If your new system touches GxP data, it has to be validated. What 21 CFR Part 11, EU Annex 11 and a risk based approach mean in practice for pharma teams building or buying software.

Industries
Checklist2 min read

Answering security and privacy questionnaires from enterprise clients

Enterprise buyers send long questionnaires. The documents and evidence to prepare so you can answer quickly and honestly.

Compliance
Guide4 min read

Real estate software: RERA disclosures, bookings and the customer app

Developers juggle RERA disclosures, booking paperwork, demand letters and buyer questions across spreadsheets and phone calls. How one system for sales, collections and customer updates can work.

Industries
Guide4 min read

Connecting your software to GST e-invoicing and e-way bills

If your invoices come from an ERP, a billing app or a custom system, it must talk to the IRP and the e-way bill portal reliably. How the integration works and what to watch.

Solutions
Research paper6 min read

Build, buy or compose: deciding between packaged software, low code and custom builds

Packaged software, low code and custom builds each fit different problems. A decision path that helps owners and CTOs choose, and recognise when composing the three is the better answer.

Research
Guide4 min read

What ABDM integration involves for hospital and clinic software

Ayushman Bharat Digital Mission integration lets your HMIS or clinic app link ABHA, share records with consent and register with the national registries. What the work involves and how long it takes.

Industries
Guide3 min read

Field service software for installation and repair teams

When technicians get jobs on WhatsApp and close them with a phone call, you lose track of time, spares and customer promises. What field service software should do and how to introduce it.

Solutions
Guide4 min read

School management software: fees, attendance and parent communication

Schools and coaching institutes often run fees in one tool, attendance in another and parent messages from teachers' phones. How to bring them into one system that staff and parents will use.

Industries

Start a conversation

Tell us what you are trying to build.

Share the problem in a short call. You leave with a clear view of the approach, the team and the cost.

Or get a ballpark proposal in two minutes

A specialist replies within one working day. The first conversation is free.

Chat with the Code Colonies team on WhatsApp