AI development company for Edinburgh fintech, data, NHS Scotland-adjacent & gaming.

We do not operate an Edinburgh office. Aiinfox runs from our Mohali, India HQ and a Frisco, TX office, and we deliver to Edinburgh clients with native 4-to-5 hour daily overlap with UK business hours. For on-site engagements at Lothian Road, the New Town, the BioQuarter, CodeBase, or the Bayes Centre (kickoff, milestone reviews, security walk-throughs), we travel to Edinburgh on a scheduled cadence rather than maintaining a sub-scale local presence. The senior engineer on your kickoff call is the senior engineer through launch — no swap-outs to a local junior pool, no offshore handoff after week three.

Strong, and honest about how. Indian Standard Time is GMT+5:30, which gives roughly four to five hours of native daily overlap with UK business hours — our 1:30pm IST is your 8am GMT, and our 6:30pm IST is your 1pm GMT. Daily standups, twice-weekly demos, and most ad-hoc problem-solving sessions land inside that window with no late-night calls on either side. For Edinburgh clients who prefer afternoon-onwards working, we extend coverage to 8pm IST (2:30pm GMT) on a planned cadence. Written async updates go out daily before your standup, and the senior engineer on your build is the senior engineer through launch.

Yes. Our engagement defaults are aligned with UK GDPR and the Data Protection Act 2018. DPAs (UK GDPR controller-to-processor or processor-to-processor as appropriate) are signed before any personal data is shared. For engagements processing personal data at scale or involving special category data, we run a Data Protection Impact Assessment (DPIA) aligned with the ICO's published guidance. The UK International Data Transfer Agreement (IDTA) or the EU SCCs with the UK addendum cover any necessary international transfer of personal data. Audit logs on every model and tool call are exportable for ICO inspection.

Yes. NHS Scotland's information governance pattern is recognisably distinct from NHS England's — the NHS Scotland Information Governance Standards, the Caldicott Guardian principles as applied within NHS Scotland, the Scottish Government's data-sharing principles, and the Health and Social Care (Scotland) Act information-sharing obligations all sit alongside the UK GDPR baseline. For NHS Lothian-adjacent and broader NHS Scotland-adjacent healthtech, we map the data flow against the Caldicott seven, document the lawful basis under UK GDPR for any special category processing, and ensure the audit logs on every model and tool call are exportable for IG officer review at the contracting Board. Deployments default to AWS London or Azure UK South inside customer-controlled UK clouds.

Yes. The Edinburgh asset-services cluster operates under FCA Senior Managers and Certification Regime, and we mirror the SM&CR audit-trail patterns so the senior manager accountable for the system has the evidence needed for a Section 166 review or a routine supervisory examination. Every model and tool call is audit-logged with input, output, prompt version, and operator identity. For fund-administration and platform-services workflows specifically, we have shipped document intelligence and compliance copilots that integrate with the customer's existing operational risk framework. Humans approve everything that touches a regulated outcome.

Your call. We default to AWS London (eu-west-2), Azure UK South, or GCP europe-west2, and we will run the entire build inside your UK cloud account if your DPO requires no cross-region replication. For inference, we pin Claude or GPT-4o to a UK or EU endpoint where available (Azure OpenAI UK South is the standard route for GPT-4o into a UK boundary), or we self-host Llama 3 on vLLM inside your VPC for zero third-party inference. No UK personal data silently crosses to non-UK endpoints unless your DPA explicitly permits it.

Most v1 engagements at Aiinfox land between GBP 20,000 and GBP 100,000 fixed-price for a focused build — an AI agent, a RAG system, a voice pipeline, or a bespoke ML model. Larger multi-quarter engagements with fine-tuning, custom evals, and FCA-aware or NHS Scotland IG-aligned compliance work typically reach GBP 150,000 to GBP 280,000. Pilots are usually GBP 8,000 to GBP 20,000 with acceptance criteria written into scope. Edinburgh clients invoice in GBP via bank transfer or USD by preference. VAT does not apply on B2B services supplied from India to UK clients (general rule; your accountant should confirm against your specific situation).

Yes — takeover audits are routine. Step one is reading the code, the data pipelines, the eval results (if any exist), the prompts, and the cost telemetry. Step two is shipping the smallest valuable change to prove we understand the system in a way the previous vendor did not. Step three is the longer-term plan — incremental stabilisation, a parallel rebuild, or shutting it down and starting over. Most takeovers we have seen did not need a full rewrite; they needed evals, guardrails, observability, and a senior engineer who stayed on the build past the discovery phase. We will be honest on the first call about which is the right move.