Skip to content

Services

One point of contact for the whole journey.

From design to deployment. Available individually — but strongest in combination.

01 Services

What I do

10 areas

Web design & UI

Design that fits the subject: a law firm at the Federal Court of Justice needs a different tone than a shop for 3D figurines. I design both — from concept to finished interface.

  • Concept and information architecture
  • Screen design and design system
  • Responsive behaviour down to the detail
  • Accessible implementation

Frontend development

Fast, server-rendered interfaces built with SvelteKit and TypeScript. No framework ballast, no loading spinners for content that could simply be there.

  • SvelteKit, TypeScript, modern CSS architecture
  • Multilingual setups and clean URLs
  • SEO: technical foundations, structure, structured data
  • Loading time and Core Web Vitals
  • Interactive components, 3D viewers, wizards

Backend & interfaces

Everything that has to happen behind the interface: APIs, data models, authentication, payment handling and integration with systems that already exist.

  • Node.js and PHP
  • REST interfaces and webhooks
  • Platform architecture for long-lived applications
  • Data modelling and migrations
  • Feasibility studies and proofs of concept
  • Deployment and operations

Information security & GRC

In my day job I am responsible for information security across a group of around 600 people in six countries, taking it through ISO 27001, TISAX, SOC 2 and NIS2. That knowledge feeds into every project — and is available as standalone consulting.

  • Preparing for ISO 27001, TISAX, SOC 2 and NIS2
  • Building an ISMS, policies and processes
  • Internal audits and support during external assessments
  • Governance, risk and compliance
  • Awareness across countries and sites
  • Secure software development from the start

Cloud security (AWS)

A cloud environment is set up quickly — and opened up too far just as quickly. I build and review network architectures in which only what should be reachable actually is.

  • VPC design and network segmentation
  • Security groups and access rules
  • EC2 setup and hardening
  • Permission and role concepts

TYPO3 development

TYPO3 where it belongs: with editorial teams that publish a lot and often. I build site packages that fit the editors — instead of editors having to fit the CMS.

  • Site packages, Fluid, TypoScript
  • Tailored content elements
  • Multilingual editorial structures
  • Relaunch, migration, updates

AI integration

AI systems become useful when they sit inside a process rather than in a chat window. I integrate them so that the result is something someone can actually sell or use.

  • Image, text and model generation
  • Automated processing pipelines
  • Quality control and fallbacks
  • Cost control in day-to-day operation

3D generation & viewers

Images become models, models become products. From the generation pipeline to the rotatable in-browser viewer that actually moves the needle in sales.

  • Photo-to-3D pipelines
  • Interactive web viewers
  • Preparation for 3D printing
  • Preview and approval processes

CRM & automation

An enquiry that lands in a shared inbox is only half an enquiry. I make sure contacts, orders and approvals arrive where people actually work with them.

  • Integration of existing CRM systems
  • Forms, leads, notifications
  • Email templates that work in every client
  • Digital signature workflows
  • Order and status tracking
  • Automating recurring workflows

Shop & conversion flows

The path from curiosity to order is a design problem, not a coincidence. Wizards, previews and checkouts that remove hurdles instead of managing them.

  • Product configurators and wizards
  • Checkout and payment integration
  • Campaign landing pages
  • Measurability without privacy headaches
02 Skills

Capabilities

What sits inside the projects above, broken down — in case you are looking for something specific.

Architecture & development

  • Platform architecture
  • Component-based architecture
  • Backend-for-frontend (BFF)
  • API design, versioning and documentation
  • Custom middleware
  • Authentication and authorisation
  • Data modelling and migrations
  • Backend refactoring
  • Single-page applications and SSR
  • Static site generation
  • Third-party service integration

Performance & findability

  • SEO: technical, structural and content
  • Structured data and rich results
  • Loading time optimisation
  • Code splitting and lazy loading
  • Image optimisation and modern formats
  • Caching strategies
  • Core Web Vitals
  • Multilingual setups and hreflang

Design & usability

  • UI and UX design
  • Design systems and theming
  • Prototyping
  • Responsive and mobile-first design
  • Accessibility to WCAG
  • Usability testing and user research
  • Typography and web fonts
  • Forms and validation

Quality & operations

  • Automated testing
  • Cross-browser and device testing
  • Code reviews and quality assurance
  • CI/CD pipelines
  • Error handling, logging and monitoring
  • Server and system migrations
  • Disaster recovery planning
  • Task automation

Security & compliance

  • Security architecture
  • Secure development lifecycle (SDLC)
  • Threat modelling
  • Vulnerability management
  • Data protection and GDPR
  • ISMS, policies and audits
  • Role and permission concepts
  • Supplier and tool evaluation

Project & collaboration

  • Project management and product ownership
  • Quotations and effort estimation
  • Scrum, Kanban and SAFe
  • Requirements analysis
  • Proofs of concept
  • Technical documentation
  • Onboarding and mentoring
03 Process

How I work

  1. 01

    Understand the actual problem

    Before a single line of code: what should the site achieve, for whom, and how will we know it worked? These questions save the expensive loops later on.

  2. 02

    Design and build as one

    Because design and build sit in the same pair of hands, nothing is lost in handover — and there is no debate about what is "unfortunately not possible".

  3. 03

    Integrate, do not duplicate

    A website is rarely alone. It has to talk to CRM, production, newsletters and accounting — otherwise it creates exactly the manual work it was meant to remove.

  4. 04

    Hand over and stay available

    You get a system your team can maintain itself. And me as the person to call when something needs to be added after all.

Discuss a project