A client portal or operational app gives staff a shared record of account changes, maintenance entries and outstanding tasks. Before development, we agree the data protection requirements with your legal team, including access controls, retention and deletion. For financial customers, we can also prepare the technical documentation requested in a DORA supplier assessment.
Agreeing data protection requirements
The Data Protection Act is Chapter 586 of the Laws of Malta, Act XX of 2018, amended in 2021 and 2023. Supervision lies with the Information and Data Protection Commissioner. Transfers of personal data out of the EEA fall under Chapter V of the GDPR: an adequacy decision, standard contractual clauses, binding corporate rules or one of the narrow exceptions.
EEA hosting does not by itself rule out an international transfer. Support access by a processor outside the EEA and onward transfers through subprocessors also need assessment. We document hosting, support access and subprocessors, then agree the relevant transfer safeguards before processing begins. Transfers covered by the European Commission's UK adequacy decision can rely on that decision.
Financial services and DORA
Financial entities within the scope of the Digital Operational Resilience Act, Regulation (EU) 2022/2554, must manage ICT third-party risk. For a Maltese fintech selling to them, this can lead to contractual requirements, supplier questionnaires and requests for evidence. The vendor security review covers this step, whether the questionnaire is already in front of you or expected next quarter.
Sectors and the apps that go with them
Malta Enterprise names advanced manufacturing, aviation, ICT and shared services, life sciences and maritime among its focus areas; financial services, online gaming and payments are well established on the island too. Three examples of the kind of app that comes out of that mix:
- a technical logbook app for an aviation or maritime maintenance team, with signed entries and a full history per aircraft or vessel
- a participant app for a life sciences study, where health data is stored apart from everything else
- a player account or payments companion app for a gaming operator, with strong authentication and an audit trail of account changes
Who this suits
Firms without anyone technical in-house get a single architect who scopes, builds and hands over everything: code, cloud accounts, store listings and documentation. Firms with their own developers can bring me in for the part they do not want to staff, such as the mobile app on top of an existing platform, an architecture review, or the evidence a regulated customer has asked for.
Price and VAT
A First Version (MVP) from $27,800 in two to four weeks, a market-ready app from $83,300; prices on this page are in US dollars. All prices are net; the VAT treatment is clarified before contract and stated in the offer.
Serving Ireland as well? See the page for app development in Ireland.