ASTrio

Choosing a custom software development house in Singapore turns on three tensions: where the code actually gets built, who owns it when it ships, and how post-launch support is priced. Settle these in writing before you compare quotes.

How to evaluate a custom software development house in Singapore

• Decide where the work gets built before comparing quotes, and map exactly which roles are local versus offshore in a hybrid pod — same-timezone product leads with an offshore build team is common, but ask who sits where.
• Pin down IP assignment and source-code escrow in writing: insist on full assignment of foreground IP on payment, repository access throughout (not just at handover), and an escrow clause for business-critical builds if the vendor defaults.
• Map PDPA accountability if the build touches personal data — you stay accountable for data the developer processes, so require purpose limitation, breach-notification timelines that meet the PDPC window, and controls on sub-processors and third-party APIs.
• Probe engineering practices, not just the portfolio: ask how they run CI/CD, automated-test coverage, code review, security scanning, and handover documentation, since a demo only proves a feature shipped once.
• Match the engagement model to the project — fixed-price for stable scope, time-and-materials for evolving products, a dedicated team for ongoing roadmap — and settle SLAs, acceptance criteria, and maintenance pricing before kickoff, not after.
• For public-sector or grant-funded work, ask whether they deliver to GovTech and IM8 security expectations, and check whether your spend qualifies for PSG (pre-approved solutions) or EDG (bespoke build and consultancy).

Verify for ASTrio

• Confirm key details directly with the vendor — this listing isn't vendor-managed yet.
• Ask for two recent Singapore client references you can speak with.
• Ask for a written scope of services before comparing quotes.
• Request evidence of relevant certifications and their current validity.

Questions to ask

• Will you assign all foreground IP on payment and give us source-code and repository access throughout the engagement, including an escrow clause for critical systems?
• What does your CI/CD, automated testing, code review, and handover documentation look like in practice?
• Can you share two Singapore clients in my sector and size that I can speak to?
• What are your post-launch support, SLA response times, and maintenance pricing, and what happens to the code and access if the relationship ends early?