.svg "kloia.png"){kind=logo}
The Problem
No company context
AI tools write code without knowing your codebase, your specs, your stored procedures, your standards. Generic in, generic out.
Zero audit trail
Nobody knows what changed, by whom, against which spec, at what cost. When something breaks, the log is empty.
Knowledge stays siloed
The senior engineer's head is still the source of truth. The pipeline learns nothing. That person leaves, the knowledge walks out.
Pilot never becomes default
The shiny demo works. Then adoption stalls. The new way of working never replaces the old one.
Why AIDLC?
Faster delivery
Tens of dollars per feature, hours of elapsed time. Not weeks.
Built-in compliance
Every action audited. Every dollar attributed to an issue.
Institutional memory
The pipeline learns. The org's knowledge stops walking out the door.
Faster onboarding
New engineers ramp on a pipeline that already knows the codebase.
A pipeline that improves
Each cycle's retro feeds the next cycle's configuration.
Humans stay in control
Agents propose. Humans approve. Every merge is gated.
Problems
No company context
Zero audit trail
Knowledge stays siloed
Pilot never becomes default
Why AIDLC?
Faster delivery
Built-in compliance
Institutional memory
Faster onboarding
A pipeline that improves
Humans stay in control
OpenTelemetry:
Baked in, not bolted on
Auto-instrumentation of .NET and Java services → ADOT collector sidecars on EKS → AWS X-Ray for distributed tracing → CloudWatch for metrics and logs → custom dashboards and SLO alerting. All traces, metrics, and logs flow through a single OTel pipeline, swap backends without re-instrumenting.
VM → Container replatforming
Move off bare VMs onto EKS with proper orchestration, autoscaling, and workload isolation.
Custom metrics
Business and technical KPIs exported via OTel metrics SDK to CloudWatch and Managed Prometheus.
Structured logging
JSON-structured logs with trace correlation IDs, shipped to CloudWatch Logs Insights.
SLO alerting
Composite alarms and SLO burn-rate alerts wired from day one not as an afterthought.
What changes in your architecture
AWS Landing Zone & multi-account governance
AWS Control Tower
Security baseline
Identity & access
Network architecture
FinOps & cost governance
Compliance as code
Measurable results our clients achieve
60-80%
infrastructure cost reduction vs on-prem VMs
10x
faster deployments via GitOps pipelines
99.9%+
availability through EKS self-healing & multi-AZ
<5 min
MTTR with full OTel trace-to-log correlation
Privacy Policy
Last updated: September 2026
1. Who We Are
Kloia ("Kloia," "we," "us," or "our") provides DevOps, cloud, observability, QA, and AI consulting services. We operate offices in London (UK), Istanbul (Türkiye), Amsterdam (Netherlands), Dubai (UAE), Delaware (USA), and Hyderabad (India), and we work with customers and partners across 19+ countries.
This policy explains what personal data we collect, why we collect it, how we protect it, and what rights you have. It applies to visitors of kloia.com, customers, prospects, job applicants, and anyone who otherwise contacts us.
Data controller contact: Kloia Software and Consulting Ltd, 167-169 Great Portland Street, 5th Floor, London W1W 5PF, United Kingdom. Privacy contact: Burak Koyuncu, Managing Partner
EU contact: For individuals in the European Union, you may also contact our EU entity, Kloia B.V., 11 Wall St, Kabelweg 57, 1014 BA Amsterdam, Netherlands.
2. Scope and Applicable Law
Because Kloia operates across multiple regions, more than one legal framework can apply to your data depending on where you are located and how you interact with us, including:
- UK GDPR and the Data Protection Act 2018 (United Kingdom)
- EU General Data Protection Regulation (GDPR) (European Union / Netherlands)
- KVKK (Kişisel Verilerin Korunması Kanunu) (Türkiye)
- UAE data protection law (Federal Decree-Law No. 45 of 2021, as applicable to our Dubai office)
- India's Digital Personal Data Protection Act (DPDP Act, 2023)
- Applicable US state privacy laws (relevant to our Delaware entity)
Where these laws differ, we apply the standard that gives you the stronger protection wherever reasonably practicable.
3. What Data We Collect
- Contact and identity data: name, email, phone number, job title, company name, submitted via forms, email, or calls.
- Website usage data: IP address, browser type, device information, pages visited, referral source, collected via cookies and analytics tools.
- Communications: records of emails, meeting notes, and support or sales correspondence.
- Recruitment data: CV/resume, cover letter, work history, and interview notes, if you apply for a role via our Careers/Jobs pages.
- Customer/contract data: information provided in the course of a service engagement, handled under the terms of the relevant client contract.
We do not knowingly collect special categories of data (e.g., health, religion, biometric data) unless voluntarily provided by you and necessary for a specific, lawful purpose.
4. Legal Basis for Processing
We process personal data on one or more of the following bases:
- Consent – e.g., when you opt in to marketing emails or accept non-essential cookies.
- Contract – e.g., processing needed to respond to your enquiry or deliver a service you've engaged us for.
- Legitimate interests – e.g., website analytics, fraud prevention, and direct marketing to existing business contacts, balanced against your rights.
- Legal obligation – e.g., retaining records required by tax or employment law.
5. How We Use and Share Your Data
We use your personal data to:
- Respond to enquiries submitted through our contact form or email
- Provide, manage, and improve our services
- Send newsletters or marketing communications (only with consent or an existing business relationship, and always with an opt-out)
- Evaluate job applications
- Analyze website traffic to improve content and user experience
- Comply with legal and regulatory obligations
We do not sell personal data to third parties.
We share personal data only where necessary, with:
- Service providers who process data on our behalf, such as CRM and marketing automation (HubSpot), analytics and advertising (Google), email, hosting, and IT providers
- Kloia group companies, where needed to respond to you or deliver our services
- Authorities or advisors, where required by law or to protect our legal rights
All service providers are bound by contractual obligations to protect your data and use it only for the purposes we specify.
We do not use automated decision-making that produces legal or similarly significant effects on you.
6. Cookies
We use cookies and similar technologies, categorized as:
- Strictly necessary – required for the website to function; cannot be disabled.
- Analytics/performance – e.g., Google Analytics, used to understand how visitors use the site.
- Functional – remember preferences to improve your experience.
- Marketing – used to measure the effectiveness of campaigns.
On your first visit, you will be asked to accept or manage cookie preferences via our cookie banner. You can also control or delete cookies through your browser settings at any time. Details on Google Analytics' handling of data are available in Google's Privacy Policy.
7. International Data Transfers
Given our offices across the UK, EU, Türkiye, UAE, India, and the US, personal data may be transferred between these locations, or to service providers located elsewhere, in order to deliver our services. Where we transfer personal data outside the UK/EEA, we rely on appropriate safeguards such as the UK International Data Transfer Addendum, EU Standard Contractual Clauses, or an applicable adequacy decision.
8. Data Retention
We retain personal data only as long as necessary for the purposes described in this policy, or as required by law or contract.
| Data type | Retention period |
|---|---|
| Contact form / sales enquiries | 12 months from last contact, or until you opt out |
| Marketing contacts (newsletter) | Until consent is withdrawn, or 12 months of no engagement |
| Recruitment data (CVs, applications) | 6 months after the recruitment process ends |
| Website analytics data | 14 months |
| Client/contract data | Duration of contract, plus the minimum period required by applicable tax/commercial law (commonly 6 years in the UK; varies by jurisdiction) |
9. Your Rights
Subject to applicable law, you may have the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete data
- Request deletion ("right to be forgotten")
- Object to or restrict certain processing
- Request data portability
- Withdraw consent at any time (without affecting prior lawful processing)
- Lodge a complaint with your local data protection authority (e.g., the UK ICO, a relevant EU supervisory authority, or the KVKK Board in Türkiye)
We may need to verify your identity before processing certain requests, and we will respond within the timeframe required by applicable law (e.g., one month under GDPR).
10. Data Security
We apply appropriate technical and organizational measures to protect personal data against unauthorized access, loss, or misuse. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
11. Third-Party Links
Our website may contain links to external sites. We are not responsible for the privacy practices or content of third-party websites. We encourage you to review the privacy policy of any site you visit.
12. Changes to This Policy
We may update this policy from time to time to reflect changes in our practices or legal requirements. The "last updated" date at the top of this page indicates when it was last revised.
13. Contact Us
If you have questions about this policy or how we handle your data, contact us write to any of our offices:
London (UK)
Kloia Software and Consulting Ltd
167-169 Great Portland Street, 5th Floor
London W1W 5PF, England, United Kingdom
T: +44 20 8798 3045
Amsterdam (Netherlands)
KLOIA B.V.
11 Wall St, Kabelweg 57
1014 BA Amsterdam, Netherlands
Istanbul (Türkiye)
Kloia Yazılım ve Danışmanlık Ticaret Ltd. Şti.
İçerenköy Mah. Topçu İbrahim Sk. AND Ofis Sitesi No: 8-10D/5
34752 Ataşehir, Istanbul, Türkiye
T: +90 216 225 8382
Dubai (UAE)
KLOIA L.L.C-FZ
Dubai World Trade Center (DWTC), The Offices 1, One Central
Office No: 01.03, Dubai, UAE
Delaware (USA)
KLOIA L.L.C.
300 Delaware Ave., Suite 210
Wilmington, DE 19801, USA
Hyderabad (India)
KLOIA PVT. LTD.
SBH Officers Colony, Mega Hills, Madhapur, Shaikpet
Hyderabad 500081, Telangana, India