FAQ
Frequently asked questions.
The ten questions every CIO and CTO systematically asks before contacting us.
Why PHP in 2026?
+
PHP 8.3 is fast, typed, tooled (PHPStan, Rector) and still powers nearly 75% of the web. Symfony and Laravel are mature, documented frameworks with a solid ecosystem. The rational choice for a business application meant to last ten years.
How to modernize a legacy PHP codebase without breaking everything?
+
Strangler pattern. We isolate a module, rewrite it behind a facade, and switch traffic progressively. Rector automates part of the syntactic upgrades, PHPStan locks down regressions. Never a 'big bang'.
Why a senior team rather than juniors at half the price?
+
A senior team costs more per day, but delivers an architecture that holds for five years. Juniors produce code that works for six months, then becomes impossible to evolve. Total cost of ownership settles the debate quickly.
What timeline for an MVP?
+
Count on 6 to 12 weeks for a serious B2B MVP: authentication, core domain model, two or three key screens, tests. Below that, it is a throwaway prototype. Above, you need a product, not an MVP.
How does YDH fit into an existing team?
+
We work with your tools (Git, CI, Jira, Slack), your processes, your code reviews. Pair programming when needed, skills transfer by default. The goal is that your team leaves autonomous, not dependent.
Why YDH rather than a large agency?
+
A large agency sells a project manager, three juniors and an architect shared across five accounts. YDH is a focused boutique with senior experts who code themselves, a dedicated technical contact per engagement, and clear contractual responsibility. Fewer layers, more decisions.
Do you handle generative AI projects?
+
Yes, our teams integrate LLMs (Claude, GPT, Mistral) in business applications: RAG on internal data, autonomous agents, cognitively heavy automations. Pragmatic approach: guardrails, continuous evaluation, controlled costs. AI must solve a measurable problem, not follow a trend.
What is your level of commitment on security?
+
Security is a structural axis, not an option. OWASP Top 10 applied by default, systematic application pentest before go-live, secrets management via Vault or equivalent, dependencies scanned in CI. Our practices are ISO 27001 aligned and we provide audit documentation for your own certifications.
Do you offer 24/7 support?
+
Yes, as an option on managed hosting and operations contracts. 24/7 on-call with escalation to a senior expert, SLA-guaranteed response times (15 min, 1 h or 4 h depending on criticality), contracted penalties. For project engagements, we offer a reinforced on-call window during the post-delivery stabilization phase.
How do you guarantee confidentiality?
+
NDA signed before any technical discussion, code access strictly limited to engagement members, auditable access logs, data return or deletion at end of contract on simple request. Our teams are GDPR and ISO 27001 trained, no third-party subcontractor intervenes without your prior written consent.