
Frequently asked questions
The questions buyers ask before an engagement, answered directly. The ten below are the orientation questions; the directory further down points to the 91 answers published across the rest of the site, each kept on the page that owns it.
About NovuLabs
Start here if you are working out whether we are the right kind of firm for your problem.
What does NovuLabs specialise in?
Is NovuLabs a software house in Islamabad?
Does NovuLabs build custom enterprise software, or sell products?
Which industries does NovuLabs serve?
Can NovuLabs work with our existing engineering team?
What technologies does NovuLabs work in?
Does NovuLabs provide support after launch?
How does an engagement with NovuLabs start?
Does NovuLabs work with clients outside Pakistan?
How do I know which NovuLabs service is right for my project?
Software companies in Islamabad
General questions about the market here, answered without ranking anyone. We are not in a position to verify which firms are currently staffed or hiring, so this does not pretend to.
What is the difference between a software house and an IT company?
Is a multinational technology company a better choice than a local software house?
What services do software houses in Islamabad typically offer?
Why is Islamabad considered a technology hub in Pakistan?
Where can I find a reliable list of software houses in Islamabad and Rawalpindi?
Related: what we do as a software house in Islamabad, our practice areas, and the sector constraints behind them.
Internships and entry-level work
We do not currently run an internship programme. These answers are here because the questions are asked constantly and deserve a straight answer, not because we are recruiting.
Does NovuLabs offer software development internships?
Which software houses in Islamabad offer internships?
What should a student actually look for in a software internship?
What skills should I have before applying for a software internship in Islamabad?
Can fresh graduates get software development jobs in Islamabad?
Which software houses in Islamabad are good for freshers?
If you want to understand the kind of work this team does before reaching out, the engineering articles are written by the people who build the systems, and the case studies describe how each one was architected.
Questions by topic
Each answer lives on the page it belongs to, so it stays in context. Follow a topic to read the full answers there.
Working with us
How engagements start, who you deal with, and what we will tell you not to build.
- Where is NovuLabs based?
- What kind of projects does NovuLabs take on?
- Do you work with clients outside Pakistan?
- Who takes the first call?
- Will you tell us if we should not build custom software?
- Is NovuLabs ISO 27001 or HIPAA certified?
Scope, contracts and NDAs
Minimum project size, contract models, and what is protected before the first technical call.
- What is the minimum project size NovuLabs works with?
- Do you sign NDAs before discussions?
- Can you work alongside our existing in-house team?
- What compliance frameworks do you work to?
- Do you offer fixed-price or time-and-material contracts?
Platforms and deployment
Choosing between NovuShield, NovuPay, NovuERP and NovuCRM, and where each can be hosted.
- What is the difference between NovuShield, NovuPay, NovuERP and NovuCRM?
- Can these platforms be deployed in our own infrastructure?
- How long does a platform deployment take?
- What usually goes wrong in a migration?
- When is one of these platforms the wrong choice?
Regulated industries
What AML/CFT, HIPAA and government integration demand of a system.
- What do banking, healthcare and government software have in common?
- What does AML/CFT compliance require from a system?
- Do you build HIPAA-compliant healthcare software?
- Can you integrate with NADRA, FBR or RAAST?
- Why does explainability matter more than machine learning accuracy here?
Case studies and references
Why clients are unnamed, what the figures mean, and how to get a reference.
- Why are your clients not named?
- Are the product names in these case studies real products?
- Are the metrics in these case studies verified?
- Can you provide references?
- What does a case study on this site actually tell me?
The team
Who does the work, whether any of it is subcontracted, and talking to an engineer first.
- Who will I actually work with?
- Do you subcontract development work?
- What experience does the team have in regulated delivery?
- Can I speak to an engineer before committing to anything?
Our published research
Who writes the technical articles, how regulatory claims are sourced, and how current they are.
- Who writes these articles?
- How are regulatory claims in these articles sourced?
- How current is this material?
- Can I use this material to scope a project?
Getting started
The short answers on industries, support, compliance and working alongside your team.
- What industries does NovuLabs specialize in?
- How do I start a project with NovuLabs?
- Do you offer post-launch support and maintenance?
- Are your solutions compliant with FMU Pakistan regulations?
- Can you work alongside our existing team?
AML/CFT Compliance
Screening, transaction monitoring and goAML-conformant regulatory reporting, engineered into core banking, EMI and wallet platforms for institutions answerable to SBP and FMU.
- Do you integrate with the FMU goAML portal directly?
- Can you work with our existing core banking system?
- How do screening, monitoring and reporting fit together as one programme?
- How long does an AML/CFT implementation take?
- Which regulations does your work cover?
Fintech & Payments
Core banking modernisation, card payment switching, RAAST and 1LINK connectivity, and digital wallet infrastructure for licensed institutions and EMIs.
- Can you integrate RAAST into an existing wallet or core?
- Are you PCI-DSS certified?
- Do you support Mastercard and Visa certification?
- Can you modernise a legacy core banking system incrementally?
- What does a payment integration actually involve?
Healthcare IT
Electronic health records, telemedicine and clinical integration platforms engineered to the HIPAA Security Rule and to real HL7 FHIR interoperability.
- Are your healthcare platforms HIPAA certified?
- Can you add FHIR support to an existing EHR?
- Do you handle HL7 v2 to FHIR migration?
- Who does the clinical terminology mapping?
Enterprise Systems
ERP, CRM, multi-tenant SaaS and legacy modernisation for organisations whose workflow is their competitive advantage instead of a cost of doing business.
- How do you decide whether we should build or buy?
- Can you modernise a legacy system without a big-bang cutover?
- Do we own the intellectual property?
- What happens after launch?
- What actually counts as enterprise software development?
- How is this different from just building a bigger application?
Mobile Apps
Native and cross-platform applications for regulated environments: digital wallets, telemedicine, and field operations where connectivity is unreliable.
- Should we build cross-platform or native?
- Can the app work offline?
- Do you handle app store submission?
- What does a mobile project involve beyond the app itself?
- Should we build one cross-platform app or two native ones?
Cloud, AI & Automation
Cloud migration, Kubernetes platform engineering, and applied machine learning for organisations with data residency and auditability constraints.
- Can regulated financial data go to the cloud in Pakistan?
- Will migrating to cloud reduce our costs?
- Do you use AI in compliance systems?
- Do we need AI, or do we need automation?
Web Platforms
Customer portals, admin consoles and public platforms built server-rendered, accessible, and fast, including for the AI crawlers that do not run JavaScript.
- Why does server-side rendering matter so much now?
- Do you handle accessibility compliance?
- Can you improve an existing site's Core Web Vitals?
- What is the difference between a website, a web application and a portal?
SaaS Development
Multi-tenant SaaS built with tenant isolation, billing and the enterprise security questionnaire designed in from the first release, not retrofitted after customer one.
- What does SaaS development cost?
- How do I build a SaaS product if I do not have a technical team?
- How long does a SaaS MVP take?
- Which tenant isolation model should we choose: shared schema or dedicated infrastructure?
- Can you turn our existing single-tenant application into a multi-tenant SaaS product?
- Do you build the admin and tenant-management tooling, or only the customer-facing product?
- Are you a SaaS development company in Islamabad, and can you work with clients abroad?
- Will the product pass an enterprise security review?
- What is SaaS development, and how does it differ from building a normal web application?
Still not answered
Anything not covered here is worth a conversation rather than a longer page. The discovery call is 45 minutes, carries no commitment, and is taken by an architect who would be accountable for the technical outcome, not a salesperson.
Prefer to read first? See what we build, how past engagements were structured, or what clients say about working with us.