AI development company for Edinburgh fintech, data, NHS Scotland-adjacent & gaming.

There isn't a physical Edinburgh office. We run from a Mohali, India HQ and a Frisco, TX office instead, and Edinburgh clients get a native 4-to-5 hour daily overlap with UK business hours as a result. On-site work — kickoff, milestone reviews, security walk-throughs at Lothian Road, the New Town, the BioQuarter, CodeBase, or the Bayes Centre — happens on a scheduled cadence when the engagement warrants it, rather than us maintaining an under-used local footprint. The senior engineer on your kickoff call is the senior engineer through launch — no swap-outs to a local junior pool, no offshore handoff after week three.

Strong, and honest about how. Indian Standard Time is GMT+5:30, which gives roughly four to five hours of native daily overlap with UK business hours — our 1:30pm IST is your 8am GMT, and our 6:30pm IST is your 1pm GMT. Daily standups, twice-weekly demos, and most ad-hoc problem-solving sessions land inside that window with no late-night calls on either side. For Edinburgh clients who prefer afternoon-onwards working, we extend coverage to 8pm IST (2:30pm GMT) on a planned cadence. Written async updates go out daily before your standup, and the senior engineer on your build is the senior engineer through launch.

Yes. Our engagement defaults are aligned with UK GDPR and the Data Protection Act 2018. DPAs (UK GDPR controller-to-processor or processor-to-processor as appropriate) are signed before any personal data is shared. For engagements processing personal data at scale or involving special category data, we run a Data Protection Impact Assessment (DPIA) aligned with the ICO's published guidance. The UK International Data Transfer Agreement (IDTA) or the EU SCCs with the UK addendum cover any necessary international transfer of personal data. Audit logs on every model and tool call are exportable for ICO inspection.

Yes. NHS Scotland's information governance pattern is recognisably distinct from NHS England's — the NHS Scotland Information Governance Standards, the Caldicott Guardian principles as applied within NHS Scotland, the Scottish Government's data-sharing principles, and the Health and Social Care (Scotland) Act information-sharing obligations all sit alongside the UK GDPR baseline. For NHS Lothian-adjacent and broader NHS Scotland-adjacent healthtech, we map the data flow against the Caldicott seven, document the lawful basis under UK GDPR for any special category processing, and ensure the audit logs on every model and tool call are exportable for IG officer review at the contracting Board. Deployments default to AWS London or Azure UK South inside customer-controlled UK clouds.

Yes. The Edinburgh asset-services cluster operates under FCA Senior Managers and Certification Regime, and we mirror the SM&CR audit-trail patterns so the senior manager accountable for the system has the evidence needed for a Section 166 review or a routine supervisory examination. Every model and tool call is audit-logged with input, output, prompt version, and operator identity. For fund-administration and platform-services workflows specifically, we have shipped document intelligence and compliance copilots that integrate with the customer's existing operational risk framework. Humans approve everything that touches a regulated outcome.

Your call, and we mean that literally. AWS London (eu-west-2), Azure UK South, and GCP europe-west2 are our default regions, but we will run the build entirely inside your UK cloud account if cross-region replication is a non-starter for your DPO. Claude and GPT-4o get routed to a UK or EU inference endpoint where one is available — Azure OpenAI UK South is the standard route for GPT-4o — and Llama 3 self-hosted on vLLM inside your VPC covers the cases where a managed API isn't acceptable at all. Your DPA sets the exact boundary; we don't move UK personal data past it without permission.

Most v1 engagements at Aiinfox land between GBP 20,000 and GBP 100,000 fixed-price for a focused build — an AI agent, a RAG system, a voice pipeline, or a bespoke ML model. Larger multi-quarter engagements with fine-tuning, custom evals, and FCA-aware or NHS Scotland IG-aligned compliance work typically reach GBP 150,000 to GBP 280,000. Pilots are usually GBP 8,000 to GBP 20,000 with acceptance criteria written into scope. Edinburgh clients invoice in GBP via bank transfer or USD by preference. VAT does not apply on B2B services supplied from India to UK clients (general rule; your accountant should confirm against your specific situation).

Yes — this is a routine engagement type for us, not a special case. Step one is always a full read of what exists: the code, the data pipelines, any eval results, the prompts, the cost telemetry. Step two is shipping one small, real, valuable change fast, which tells your team more about whether we understand the system than any audit document would. Step three is agreeing the actual path forward — incremental stabilisation, a parallel rebuild, or a clean shutdown and restart. In our experience, most stalled projects don't need a full rewrite; they need evals, guardrails, observability, and a senior engineer who is still there after the discovery phase ends. We'll say plainly on the first call which of those applies to yours.