Munich: built to survive a security questionnaire
Munich buyers ask how the thing is built before they ask what it costs. We answer with access rules, an audited secrets vault and tests that run on every build, not with adjectives.
What we do for Munich companies
Munich runs on industry, engineering, insurance and a dense layer of mid-sized companies that sell to very demanding customers. Those companies rarely need a new brand site; they need the working software around it. We build the product front end, the customer or partner portal, the native app and the backend that holds the data, on React, TypeScript, Tailwind and Supabase, deployed on Vercel, with apps on Capacitor and over the air updates.
The clock
Munich and Madrid share a time zone. There is no overlap to calculate and no handover to schedule: the whole working day is common ground, which is why the German market is the easiest one on this list to serve well from Madrid.
Languages
The project language is English. We also work in Spanish and Dutch. We do not work in German, so German user-facing copy is written by your team or a native writer while we own the structure, the metadata and the review pass.
Why a Munich business would choose us
Because the questions your procurement and security people ask have answers here. Tenant data sits behind row level security on the tables that carry a tenant identifier. Secrets live in one encrypted vault with every access logged, never in the repository and never in the browser. Isolation is not a promise in a slide: it is exercised by tests that run in continuous integration, on a dated run you can ask to see, and the same discipline applies to our own systems before it applies to yours. We will also tell you what is not in place: there is no ISO 27001 or SOC 2 certificate behind this studio, and we would rather write that sentence than let you find out in a review.
What we do not claim
We have no German client to point to yet, and no staff in Munich: the workspace we keep there, at Design Offices on Mies-van-der-Rohe-Strasse, is a contracted one, and POLARGATE, S.L. is registered in Madrid. We operate in the German market and serve it in German hours.
Questions, answered
Are you certified to ISO 27001 or SOC 2?
Who owns the backend and the code?
Start the engine
Tell us what you are building in a few short questions. A senior engineer answers in writing within 48 business hours, with a first take on scope, timeline and price.