Foundry theme
Edinburgh Worked from Barcelona UK GDPR · ICO One hour behind us

Edinburgh.
Scots law, handled.

Edinburgh is the rare city where the client team often knows the literature better than the agency does. The university has been doing this since before it was fashionable, and a good number of the people running data teams in the fund managers along Lothian Road came through it. That changes the conversation: nobody needs the capabilities explained, they need someone to build the unglamorous part properly.

Last reviewed 5 September 2026 · Engineering guidance, not legal advice.
WHAT IS ACTUALLY DIFFERENT HERE
01

Data protection is UK-wide

Data protection is reserved to Westminster, so an Edinburgh company answers to the ICO under the UK GDPR and the Data Protection Act 2018 exactly as a company in Leeds or Bristol does. There is no separate Scottish data-protection regime to design for. Freedom of information is the thing that does diverge — Scottish public authorities sit under FOI (Scotland) and the Scottish Information Commissioner, which matters if your counterparty is a public body.
02

Scots law is a different legal system

Contract, property and delict work differently in Scotland, and Scottish institutions usually contract under Scots law with jurisdiction in the Scottish courts. That is a paperwork question rather than an engineering one, but it is a real one: we agree governing law before the statement of work, not after. We are engineers, not solicitors, and your legal team owns the drafting.
03

UK-region hosting, London-ish

The cloud providers run UK regions in the south of the country. There is no Edinburgh region and there is no need for one — for residency purposes the UK is the unit, and for document and reporting workloads the extra few hundred miles of fibre is invisible. Self-hosted open-weight models inside your own network remain the option where nothing may leave the building at all.
04

Supervision sits on top of the AI question

Asset managers and life offices here are supervised by the FCA, and where an insurer is involved the PRA as well. Neither regime forbids AI. What they insist on is familiar: an accountable person, a documented model lifecycle, records that let a decision be reconstructed, and outsourcing arrangements that survive scrutiny. Those are design inputs, and they are cheaper to accept in week one.
THE WORK THAT COMES OUT OF THIS CITY

Edinburgh is the UK's second financial centre by a distance, weighted towards asset management and life assurance rather than the trading floors of London. Add the banks, the university's informatics base, and an energy sector shared with Aberdeen, and the mix produces work with an unusual character: heavy on documents, heavy on evidence, and staffed by people who will ask what the evaluation set looks like.

Fund managers and insurers arrive with reporting. Quarterly client reports, fund factsheets, suitability files, regulatory returns — each assembled by a person from numbers that already exist somewhere else, and each carrying a liability if it is wrong. Drafting is the easy part; the value is in the checks around it. The pattern is described in regulatory reporting, and the surrounding control structure in our risk and compliance architecture.

The research connection shows up as a specific request: prove it. Teams here are comfortable with what a language model can do and sceptical about whether a particular system does it well enough to trust, which we regard as the correct posture. Almost every Edinburgh engagement starts with an evaluation harness rather than a demo — see evaluation — because a number everyone agrees on ends the argument that a demonstration only postpones.

Energy work, whether from Edinburgh offices or Aberdeen operations, tends towards asset records and maintenance history rather than language: decades of inspection reports about a small number of very expensive things. That is closer in shape to predictive maintenance than to anything in financial services.

HOW AN EDINBURGH PROJECT ACTUALLY RUNS
01

Discovery in person

Barcelona to Edinburgh is a direct flight of under three hours. The opening workshop is worth doing in a room with your risk people present, because their objections are the requirements. We do not itemise the travel.
02

Remote, an hour ahead of you

We are on Central European time, an hour ahead of Edinburgh. The overlap is the whole working day, and the practical effect is that a question asked in your morning is answered in it.
03

Back for handover

Handover means your engineers running the evaluation suite themselves and getting the numbers we said they would get. That is worth doing face to face. Then the system is yours, in your accounts.
QUESTIONS
QUESTIONS — 5

No. We have one office and it is in Barcelona. We come to Edinburgh for discovery, for handover and for the meetings where being in the room matters. Claiming a Scottish presence we do not have would be the first thing a procurement team caught, and rightly.

Not especially. We sign under Scots law with jurisdiction in the Scottish courts when that is what your legal team wants, and we invoice in GBP or EUR. What we will not do is offer an opinion on Scots law — that is your solicitor's job, and we defer to it.

Yes. UK-region hosting is a configuration choice with every major provider, and open-weight models can run inside your own network where nothing may leave it at all. Where a hosted model is used we document its retention and training position at the time of writing, and you should confirm it against the provider's current terms before relying on it.

Usually the part that is engineering rather than modelling: retrieval that holds up on your real corpus, an evaluation harness with a maintained test set, observability that shows drift before a client does, and the deployment and handover work that internal teams postpone because they have a day job. If the honest answer to this question is that you do not need us, we will say so on the call.

Published ranges on the pricing page, in euros and exclusive of VAT, the same for every city. We do not price by postcode, and we do not charge extra because the client is a fund manager.

Keep reading
30-minute technical call · no deck

In Edinburgh, and
past the demo stage?

Thirty minutes on the problem and the evidence you would need to trust a solution to it.

CASE STUDIES

Shipped work.
Go and check it.

The work we can name, with the live site, our scope and the boundary made explicit. Select a project to see the evidence; each is a full case study, not a logo or a claim.

sonora.com
The Sonora homepage on desktop: a full-bleed dune landscape behind the headline “Transform Your Life with Sound”, with App Store and Google Play download buttons.
sonora.com — homepage, 1440×900 sonora.com →
Live Consumer wellness · Mobile + web

Sonora

Cognitive AI Ltd · 2026

A free sound-wellness app, described by its publisher as AI sound therapy that reads a short vocal sample at the start of a session and generates a soundscape for that moment. We designed and built the website and its backend, produced assets for the iOS and Android apps, and supported the application prototype.

Read the case study →

See every published project →

WHO WE HAVE BUILT FOR

Twenty-one years of applications, platforms and campaigns for names you know.

See all of our work →