Accountability, not retainer.

The AMC is not a retainer. It does not give you guaranteed development hours. It is the structure that keeps the studio responsible for what it built — security patches, dependency updates, uptime monitoring, and a 48-hour SLA on Critical Bugs.

Three tiers — priced on system complexity, not project value.

Starter · ₹15,000 / year

Marketing site or single-purpose application. Low integration count, single-tenant data model. One deploy target, a handful of external dependencies.

Storefront · ₹16,500 / year

Storefront with checkout. Payment gateway and shipping integrations, single-tenant data model with order and customer state. More moving parts, more monitoring coverage.

Custom Platform · ₹18,000 / year

Multi-tenant SaaS, complex integrations, custom auth flows, internal admin tooling, audit logging, regulated-data handling. The most surface area, the highest monitoring overhead.

What the AMC covers — in writing.

Security patches within fourteen days of public CVE disclosure (thirty days for high-severity advisories). Quarterly dependency audits with non-breaking updates and test runs. SSL renewal verification and DNS management. External uptime monitoring at five-minute intervals. Critical-Bug response: four-hour acknowledgement, twenty-four-hour root-cause assessment, forty-eight-hour fix or documented workaround. Four consultation hours per quarter. Monthly uptime reports, quarterly dependency audit summaries, annual security advisory log.

What the AMC does not cover — also in writing.

New feature development, design changes, content updates beyond two per month, third-party API migrations, and performance optimisation beyond original launch state. These are scoped separately as defined change orders or new engagements. The full breakdown lives in the journal. What an annual support contract actually buys you →