For Australian businesses
Remote AI and Full-Stack Developer for Australian Businesses
I am Shahid Malla, a developer in India who builds AI agents and chatbots, SaaS products and web apps, CRMs and WHMCS systems for Australian businesses. The work is done in India, and I say so up front. Your afternoon is morning in India, your data can stay on Australian servers, and I quote a fixed price or US$55-$65 per hour.
Free scoping call of about 30 minutes · written quote within one business day · two weeks of support after delivery
By Shahid Malla, AI agent and AI chat developer, full-stack developer · Updated
What can you hire me to build?
AI agents and chatbots first, then the software around them. Each line of work has its own page with the scope and the limits.
| Work | Typical project | Details |
|---|---|---|
| AI chatbots | A chatbot on your website or WhatsApp that answers from your own documents and hands off to your staff | AI chatbot development |
| AI agents | An agent that reads inquiries, looks things up in your systems and drafts the next step for a person to approve | AI agent development |
| SaaS and web apps | A subscription product or customer portal on Laravel or Next.js, with billing | SaaS development |
| CRM and automation | A CRM shaped around your sales process, or workflows between the tools you already pay for | CRM development |
| WHMCS | .au domains, Australian gateways and custom modules for a hosting company | Hire a WHMCS developer |
I do not sell small one-off fixes as a separate service. Work starts from a written scope, even when the scope is short.
Where is the work done, and why say so up front?
In Baramulla, in Kashmir, India, by me. Some Australian buyers are wary of offshore work, so I say where it is done before the first call. These are the checks worth making with any developer, and my answers:
- Who does the work? One developer, me, under my own name, with public reviews on Upwork and Fiverr: Top Rated on both, with 580+ five-star reviews on Fiverr.
- Where do the code and accounts sit? In your company's repository and accounts, not mine.
- Where does personal information go? It stays on your systems, on Australian servers if you need that, and the quote says how I handle it.
- Which Australian client can I name? CornerHost: I built the website for this Australian managed WordPress host. The rest of my work is in my portfolio.
How do our working hours overlap?
Your afternoon is morning in India. India stays on UTC+5:30 all year. New South Wales, Victoria, South Australia, Tasmania and the ACT observe daylight saving from 4 October 2026 to 4 April 2027, and Queensland, Western Australia and the Northern Territory do not. This is 13:00 to 17:00 in your city, in Indian time:
| Your city | 13:00-17:00 local, 4 Oct 2026 to 3 Apr 2027 | 13:00-17:00 local, 4 Apr to 2 Oct 2027 |
|---|---|---|
| Sydney, Melbourne, Canberra, Hobart | 7:30-11:30 in India | 8:30-12:30 in India |
| Brisbane | 8:30-12:30 in India | 8:30-12:30 in India |
| Adelaide | 8:00-12:00 in India | 9:00-13:00 in India |
| Darwin | 9:00-13:00 in India | 9:00-13:00 in India |
| Perth | 10:30-14:30 in India | 10:30-14:30 in India |
East-coast mornings fall very early in India, so calls fit best in your afternoon. Perth overlaps the most: its morning is 6:30 to 9:30 in India. We agree a call slot within these hours in the quote. The rest runs on a written update each working day, and a request you send at the end of your day arrives during the Indian working day.
Do you charge GST, and is there anything you need to do?
The ATO's rules answer this for registered businesses. Its guidance for overseas suppliers says GST does not apply when a non-resident sells to an Australian business that is registered for GST, carries on an enterprise in Australia and is not buying for private use. Its worked example is an Australian insurer buying IT services from a supplier in India. A non-resident whose only sales are of that kind does not need to register.
On your side, the ATO says to give the supplier your ABN and state that you are registered for GST. The reverse charge applies only in some cases, such as purchases you could not fully claim a GST credit for, and then the GST is 10% of the price, worked out and paid by you. If you are not registered for GST, the ATO says you pay GST on imported services. Your accountant decides how this applies to you.
Who is responsible for personal information under the Privacy Act?
If the Privacy Act covers your business, you are. The Act covers organizations with an annual turnover of more than A$3 million and some smaller ones, such as health service providers. For those organizations, the OAIC's APP guidelines say that providing personal information to "a contractor located overseas" is, "in most circumstances", a disclosure under APP 8, and that the Australian entity is generally accountable if the overseas recipient does something that would breach the APPs. The guidelines expect an enforceable contract requiring the recipient to handle the information in line with the APPs.
So the quote sets out how I handle personal information. That can include access only to what the job needs, work on your systems instead of copies on my machine, deletion at the end of the project, and prompt notice of any breach, which helps you meet the Notifiable Data Breaches scheme. Your data can stay in Australia:
| Provider | Australian regions |
|---|---|
| AWS | Asia Pacific (Sydney) and Asia Pacific (Melbourne) |
| Microsoft Azure | Australia East (New South Wales), Australia Southeast (Victoria) and Australia Central (Canberra) |
| Google Cloud | Sydney and Melbourne |
Hosting in Australia does not by itself remove your APP 8 obligations, because I still access the systems from India. It does keep the data under your control.
Which Australian rules shape an AI chatbot or agent?
Three, and the first is new law from 10 December 2026.
- Automated decisions in your privacy policy. From 10 December 2026, under the Privacy and Other Legislation Amendment Act 2024, a covered organization that uses a computer program to make, or to do something substantially and directly related to making, a decision that could reasonably be expected to significantly affect a person's rights or interests, where personal information about that person is used, must describe in its privacy policy the kinds of personal information used and the kinds of decisions made. It applies to systems built before that date too. An agent can be documented so that what it decides, what it passes to a person and what personal information it reads is written down.
- Telling people they are talking to AI. The OAIC advises that public-facing AI tools such as chatbots be clearly identified as AI, and recommends against entering personal information into publicly available generative AI tools. The government's voluntary Guidance for AI Adoption, published in October 2025, says customers served by a chatbot "should know this is not a human specialist", and lists six practices, including testing, monitoring and keeping a person in control.
- Accessibility. The Australian Human Rights Commission's 2025 guidelines under the Disability Discrimination Act set WCAG 2.2 Level AA as the minimum to aim for, and they cover websites, SaaS and chatbots. The guidelines are not legally binding, but they describe how to meet the Act. I work toward WCAG 2.2 AA, but I do not certify compliance.
What can I set up for Australian hosting companies on WHMCS?
The Australian parts of billing and domains, on top of modules and integrations.
- .au domains. auDA requires an Australian presence for every .au license, such as an Australian citizen, an Australian company or an entity with an ABN, and the presence must continue for the whole license. WHMCS ships additional domain fields for .au, .com.au, .net.au, .org.au, .asn.au and .id.au, including the registrant ID with an ABN or ACN option and the eligibility type. Its eligibility reasons still include "close and substantial connection" wording that auDA's current com.au rule no longer uses, so I check those fields against the rules and your registrar module, and test a registration in the registrar's test environment where one is available.
- Gateways. WHMCS has built-in modules for eWAY, SecurePay AU and Merchant Warrior, and WHMCS's GoCardless module supports AUD. For a Stripe account based in Australia, BECS Direct Debit and PayTo support recurring payments in custom apps. Afterpay does not fit hosting renewals, because Stripe lists it as not supporting recurring payments.
- Modules and integrations. Custom provisioning, registrar and gateway modules, covered on hire a WHMCS developer. Registrar setup is in my WHMCS domain registrar guide.
When am I the wrong choice for you?
- Your contract or tender requires the work to be done in Australia, or by an Australian business.
- You need calls in your morning every day. East-coast mornings fall in the early hours in India.
- You need a large team at once. I am one developer.
- The cheapest hourly rate decides. My rate buys one senior developer who scopes, builds and supports the work.
Disclosure: I am CTO at ElySpace, a freelance developer for Marmaids LLC, and founder of WHMCSPilot and MagizAI. Tax, privacy, accessibility, domain and payment points on this page summarize the ATO, the OAIC, the Privacy and Other Legislation Amendment Act 2024, the Department of Industry, the Australian Human Rights Commission, auDA, WHMCS, Stripe and the cloud providers as read on 28 October 2026. They are not legal or tax advice.
Who this is for
- Australian businesses that want an AI chatbot or agent working with their own documents and systems
- Australian hosting companies on WHMCS that need .au domains, local gateways or custom modules
- Small and mid-sized businesses that need a web app, a CRM or an automation built and handed over with the code
- Buyers who want to know exactly who does the work and where, before they sign
What is included
- A free scoping call of about 30 minutes in your afternoon, then a written scope and fixed quote within one business day
- Hosting in a Sydney or Melbourne cloud region when your data has to stay in Australia
- Terms on how I handle personal information, written into the quote for your Privacy Act obligations
- Websites and apps built toward WCAG 2.2 AA (I do not certify compliance)
- Cloud, model and payment accounts opened in your company's name
- Code in your repository, deployment notes and two weeks of support after delivery
How the work runs
-
1
Scoping call
About 30 minutes in your afternoon on the problem, the systems involved and where personal information sits. A written scope and fixed quote follow within one business day.
-
2
Quote and terms
The quote lists what is built and left out, the price, the payment stages, who owns the code and how I handle personal information.
-
3
Build on staging
I build on a staging copy, on Australian servers if your data must stay there, review every change myself and send a written update each working day.
-
4
Pilot
Your staff use the chatbot, agent or system on real cases before customers see it, and we adjust the answers and the hand-off points.
-
5
Launch and handover
Production launch, the repository, notes and a walkthrough call, then two weeks of support.
Guides on this topic
All guides →-
How Much Does It Cost to Build an AI Agent or AI Chatbot?
Build hours by cost driver, monthly token bills worked out with Anthropic and OpenAI prices read on 15 October 2026, the costs people forget, a quote checklist and when not to build.
-
AI Chatbot Development Company vs Freelance Developer: Which to Hire
An independent developer compares hiring an AI chatbot development company with a freelancer: Clutch rates and minimums read today, continuity, contracts, who owns the accounts and data, and a decision flow.
-
WHMCS Domain Registrar Setup: Modules, Pricing, Sync and Errors
Domain registrar setup in WHMCS, checked against the official documentation: activating a module, TLD pricing and terms, the lookup provider, domain sync, registration on payment, transfers, premium domains and errors.
-
How Much Does a WHMCS Developer Cost? Hourly Rates in 2026
What a WHMCS developer costs per hour: my own rate, three public listings read on 10 October 2026 with their sources, six things that change the price and a quote checklist.
Frequently asked questions
What hours can we talk, given the time difference?
Your afternoon is morning in India. During daylight saving, from 4 October 2026 to 4 April 2027, 13:00 to 17:00 in Sydney or Melbourne is 7:30 to 11:30 in India; for the rest of the year it is 8:30 to 12:30. Brisbane and Perth do not change their clocks, and Perth has the most overlap: its afternoon is 10:30 to 14:30 in India. We agree a call slot in the quote, and a written update each working day covers the rest.
Do you charge GST?
The ATO says an overseas supplier does not charge GST to a GST-registered Australian business that gives its ABN and states it is registered, and any reverse charge is worked out by the buyer. The ATO's own example is an Indian supplier of IT services. Your accountant decides how this applies to you.
Who is responsible for our customers' data if you work from India?
If the Privacy Act covers your business, you are. The OAIC's guidelines say that providing personal information to an overseas contractor is, in most circumstances, a disclosure under APP 8, and that the Australian entity is generally accountable if the overseas recipient does something that would breach the APPs. So the quote sets out how I handle personal information, the work runs on your systems with access limited to what the job needs, and data can stay on Australian servers.
What changes for AI chatbots and agents on 10 December 2026?
From 10 December 2026, an organization covered by the Privacy Act that uses a computer program to make or inform decisions that could reasonably be expected to significantly affect someone's rights or interests, using their personal information, must describe those decisions in its privacy policy. The OAIC also advises labeling public-facing chatbots as AI. An agent can be documented so that what it decides, what it passes to a person and which personal information it uses is written down, which makes that policy easier to write.
Can our data and hosting stay in Australia?
Yes. AWS has regions in Sydney and Melbourne, Microsoft Azure has Australia East, Australia Southeast and Australia Central, and Google Cloud has Sydney and Melbourne. For AI model calls, Amazon Bedrock has AU cross-Region inference profiles, and AWS says to verify every destination Region rather than rely on the prefix in the profile ID. I set up hosting in your company's account. Because I access it from India, APP 8 still applies.
Can you set up .au domains in WHMCS?
Yes. WHMCS ships additional domain fields for .au, .com.au, .net.au, .org.au, .asn.au and .id.au, including the registrant ID with an ABN or ACN option and the eligibility type. auDA requires an Australian presence, such as an ABN or an Australian company, for every .au license, and a com.au applicant must be a commercial entity whose domain matches its name, trademark, or the goods or services it provides. I check the fields against your registrar module and test a registration, in the registrar's test environment where one is available.
Which Australian payment methods can you set up?
For WHMCS, the built-in gateways include eWAY, SecurePay AU, Merchant Warrior and GoCardless, whose WHMCS module supports AUD. For a custom app on a Stripe account based in Australia, BECS Direct Debit and PayTo both support recurring payments. Afterpay does not suit hosting or SaaS billing, because Stripe lists it as not supporting recurring payments.
Why say up front that the work is done offshore?
Because you should know who is doing the work before you sign. I work from Baramulla, India, as one developer, under my own name. You can check my public reviews on Upwork and Fiverr and my portfolio, and the code and data stay in your company's accounts.
Related services
-
Hire AI Developer: AI Agents, Chatbots, RAG and AI Features
Hire AI developer Shahid Malla, a freelance AI developer for agents, chatbots, RAG, MCP servers and AI feature...
-
AI Agent Development: Hire an AI Agent Developer
Agentic AI development for hosting and SaaS teams: AI agents that answer tickets from your knowledge base, upd...
-
AI Chatbot Developer: Chatbots for Websites, WhatsApp and Support
AI chatbot developer behind MagizAI. I build chatbots for websites, WhatsApp and WHMCS that answer from your d...
-
Hire WHMCS Developer: Scope, Safety and Proof
Hire a WHMCS developer with 13+ years and 900+ projects. See which jobs need one, how changes stay upgrade-saf...
-
How I Work: Process, Rates and Payment
How a project with me runs: free 30-minute scoping call, written quote within one business day, $55-$65 per ho...
Ready to talk about your project?
You deal with me personally from the first message to the handover. Choose the way that suits you; I reply within one business day.