// faq
The questions
we get a lot.
Everything we know clients want to ask before the first call. If your question isn't here, we'll answer it in 24 hours.
// 01
Sales process + pricing
›How does your pricing compare to traditional agencies?
Typically 30–50% lower because there's no agency overhead to recover. You get senior-engineer quality at startup-friendly rates, with no hidden fees.
›What's included in a project quote?
Scope breakdown, milestone timeline, technology recommendations, risk register, and post-launch support terms. We also include alternative approaches and cost comparisons so you can make an informed decision.
›Do you require payment upfront?
We work fixed-price — one number agreed up front, no hourly meter, no open-ended time-and-materials. Milestone-based payments are standard: typically 25% to start, 50% at key milestones, 25% on completion. Smaller projects may use 50/50. We work with your procurement.
›Can you work within our existing procurement process?
Yes — MSAs, SOWs, vendor onboarding, RFP responses, compliance documentation. We've worked inside enterprise procurement and know the drill.
// 02
Technical capabilities
›What technologies do you specialize in?
- frontendNext.js, React, TypeScript, Vue.js
- backendFastAPI, Go, Node.js, Spring Boot
- mobileReact Native, Flutter
- cloudAWS, GCP, Azure, Docker, Kubernetes
- dataPostgreSQL, MongoDB, Redis, pgvector
- aiOpenAI, Anthropic, LangChain, MCP, RAG pipelines
›Can you integrate with our existing systems?
Yes — legacy systems, third-party APIs, enterprise software. We map the current architecture and design integration strategies that minimize disruption and risk.
›Do you handle mobile app store deployment?
Full mobile lifecycle — App Store and Play submission, ASO, ongoing updates, and enterprise distribution channels for internal apps.
›What about AI and machine learning?
We build AI-enabled applications — RAG pipelines, agentic workflows, LLM integrations. We're not ML researchers, but we're excellent at making AI features ship and stay up in production.
// 03
Security + compliance
›What security standards do you follow?
OWASP Top 10 baseline, encryption at rest and in transit, secure authentication (OAuth2, SAML), regular audits, and compliance with GDPR, CCPA, and industry-specific frameworks (HIPAA, SOX, PCI DSS).
›Can you help with compliance requirements?
Yes — HIPAA (healthcare), SOC 2 (SaaS), PCI DSS (payments), and general data-protection regulations. We build compliance into the architecture from day one rather than retrofitting later.
›How do you protect our IP?
Want an NDA? We are glad to sign one — available, never required to get started. By default you get a working, maintained product and you own your data; DVM keeps the underlying IP. Want it outright? A full, unrestricted license plus the complete source code is available as a priced add-on. Strict confidentiality protocols throughout; background checks available on request.
// 04
Project management + timelines
›How long do projects typically take?
Discovery 1–2 weeks. Simple MVP 4–6 weeks. Complex web app 8–16 weeks. Enterprise integration 12–24 weeks. Your first working demo in a dev environment often lands as early as ~2 weeks, whatever the total length.
›How do you handle scope changes?
Agile methodology accommodates reasonable adjustments. Larger changes go through a formal change request with impact assessment before proceeding.
›What if we need to accelerate the timeline?
Often possible by adding resources or parallel tracks. Rush work may incur a 25–50% premium depending on acceleration and current capacity.
›How often will we receive updates?
Async, online-first updates — we stay heads-down building rather than running recurring meetings. You will see your first working demo in a dev environment, often as early as ~2 weeks, plus updates at milestones or surprises.
// 05
Support + maintenance
›What happens after launch?
30-day warranty for bug fixes and minor adjustments. Ongoing maintenance contracts available for security updates, performance monitoring, feature work, and SLA-backed support — all handled online as async question support, with in-app help coming for account holders.
›Can our internal team take over maintenance?
Designed for handover. Comprehensive docs, code comments, ADRs, and knowledge-transfer sessions. We use standard patterns so any competent dev team can pick it up.
›What if we need to add features later?
Applications are designed with extensibility in mind. New features can typically be added efficiently. We maintain ongoing relationships with clients and prioritize feature work by business value.
// 06
Working relationship
›Why can't you disclose your current employers?
Professional confidentiality agreements with current employers. The same discretion protects your project. Our NDA habits demonstrate we work with serious clients who value confidentiality.
›How do we know you won't leave mid-project?
Contracts include project-completion terms, and we hold capacity buffers precisely so commitments stay safe. We take on a deliberately small slate so each project gets full attention through to delivery.
›What time zones do you work in?
Eastern Time (GMT-5), with flexibility for meetings across North American zones. International clients get a regular communication window. Dev work happens outside business hours; comms stay professional.
›Can we meet in person?
For Toronto-area clients we can meet at neutral locations or your offices. For most engagements, video conferencing works well without office overhead.
// still curious
Yours isn't here?
Book a free 30-minute consult with one of our engineers — no sales call, no obligation. Just the answers you need.
// elsewhere on the site