Great ownership and supportive tech team, but serious SECURITY, DATA INTEGRITY and COMPLIANCE issues
Pros
As a senior with strong technical skills, you have real ownership over the tech stack and architecture from the start. Compensation is average, which is reasonable if your motivation is to grow alongside the company and see it improves for that type of person, the impact is the most rewarding part. The location is convenient, but the benefits don't extend beyond what the Employment Act legally requires so please don't expect anything beyond the statutory minimum.The tech team is a genuine highlight: like-minded colleagues working toward shared goals and supporting each other's development. The founder's personal reputation and network are valuable, and you'll come away with useful connections and an interesting perspective. There was also a period when the team operated as one group, without departmental politics or distinctions, which was a strong working culture while it lasted for months only.
Cons
There's a limit to how openly people here can speak, and that limit tells you something in itself. I'm taking a real risk writing this, so take that as your first data point. If you value security and project integrity, this is a difficult place. Discussions are vague and full of corporate jargon used to deflect accountability. User data integrity isn't a priority. Tasks regularly raise compliance concerns across PDPA, PIPL, GDPR, DMCA and basic SDLC standards, and these persisted even after being raised in writing. There's no real SDLC: requirements go straight from client to developer, and when the client is unhappy post-launch, the developer is deliberately blamed, never management. Many roles appear filled by connections over merit, and the codebase is cluttered as a result. The entire department resigned at once. There was also pressure to dispose and nullify the security and industry standards to suit a relatively third party.