About XSIS
A software engineering company that stays accountable for what it builds
XSIS is a software engineering company with in-house and outsourced teams. Our company, our offices, and how we approach quality and security.
Our company
XSIS is KONG GROUP’s technology company. We design, build, integrate and run software for organisations whose systems have to be right: banks and payment companies, retailers, distributors, manufacturers and public bodies.
We work across the whole life of a system: advice and architecture, design, engineering, integration, testing and support. Fintech is our lead industry, and integration is a practice of its own here: connecting ERP systems to banks, POS and third parties, so that money, stock and data move without rekeying.
In-house and outsourced teams
Our in-house engineers lead every engagement. They set the technical direction, review the work and are accountable for its quality.
When a project needs more people or a specialist skill, we add engineers from outsourcing partners we have vetted. They work to the same engineering standards, security rules and contracts as our own staff, and you always know who is on your team.
- Delivery leads and project managers
- Solution and integration architects
- Software, data and AI engineers
- QA and test automation engineers
- UX and UI designers
- Cloud and DevOps engineers
Our offices
Our headquarters and regional offices are listed here. We agree working hours and meeting times with each client, so the overlap suits your team.
How we approach quality
Quality is a set of habits we apply on every project, not a phase at the end.
- Every change is reviewed by another engineer before it is merged.
- Automated tests run on every change, and a failing test stops the release.
- Acceptance criteria are written down before work starts and checked before work is accepted.
- Releases come from a repeatable pipeline, with a tested way back.
- Documentation and runbooks are delivered with the software, not after it.
- Integrations are tested in our partners’ test environments before they go live.
How we approach security
We apply the same security practices on every engagement and agree them with your security team at the start.
This page describes practices, not certifications. A certification will appear here only once it has been granted.
- Access is granted per person, limited to what the role needs, and removed at the end of the project.
- Multi-factor authentication on every system we use for your work.
- Secrets kept in a vault, never in code, tickets or chat.
- Dependency and container scanning in the delivery pipeline.
- Production data masked before it is used for testing.
- Encryption in transit and at rest, with keys under your control where you prefer.
- Records of who accessed what, kept for your audits.
- Confidentiality obligations for everyone on the team, employees and partners alike.
Where we are
Our team is available 24/7
- HeadquartersSan Francisco, USA
- AsiaHong Kong
- EuropeTallinn, Estonia
- MENADubai, UAE
Tell us what you need to build or connect.
Describe the systems, the timeline and the constraints. The right engineers take it from there.
- Our team will call you within 24 hours during your preferred time slot
- Our team is available 24/7