Services
One point of contact for the whole journey.
From design to deployment. Available individually — but strongest in combination.
What I do
10 areasWeb design & UI
Design that fits the subject: a law firm at the Federal Court of Justice needs a different tone than a shop for 3D figurines. I design both — from concept to finished interface.
- Concept and information architecture
- Screen design and design system
- Responsive behaviour down to the detail
- Accessible implementation
Frontend development
Fast, server-rendered interfaces built with SvelteKit and TypeScript. No framework ballast, no loading spinners for content that could simply be there.
- SvelteKit, TypeScript, modern CSS architecture
- Multilingual setups and clean URLs
- SEO: technical foundations, structure, structured data
- Loading time and Core Web Vitals
- Interactive components, 3D viewers, wizards
Backend & interfaces
Everything that has to happen behind the interface: APIs, data models, authentication, payment handling and integration with systems that already exist.
- Node.js and PHP
- REST interfaces and webhooks
- Platform architecture for long-lived applications
- Data modelling and migrations
- Feasibility studies and proofs of concept
- Deployment and operations
Information security & GRC
In my day job I am responsible for information security across a group of around 600 people in six countries, taking it through ISO 27001, TISAX, SOC 2 and NIS2. That knowledge feeds into every project — and is available as standalone consulting.
- Preparing for ISO 27001, TISAX, SOC 2 and NIS2
- Building an ISMS, policies and processes
- Internal audits and support during external assessments
- Governance, risk and compliance
- Awareness across countries and sites
- Secure software development from the start
Cloud security (AWS)
A cloud environment is set up quickly — and opened up too far just as quickly. I build and review network architectures in which only what should be reachable actually is.
- VPC design and network segmentation
- Security groups and access rules
- EC2 setup and hardening
- Permission and role concepts
TYPO3 development
TYPO3 where it belongs: with editorial teams that publish a lot and often. I build site packages that fit the editors — instead of editors having to fit the CMS.
- Site packages, Fluid, TypoScript
- Tailored content elements
- Multilingual editorial structures
- Relaunch, migration, updates
AI integration
AI systems become useful when they sit inside a process rather than in a chat window. I integrate them so that the result is something someone can actually sell or use.
- Image, text and model generation
- Automated processing pipelines
- Quality control and fallbacks
- Cost control in day-to-day operation
3D generation & viewers
Images become models, models become products. From the generation pipeline to the rotatable in-browser viewer that actually moves the needle in sales.
- Photo-to-3D pipelines
- Interactive web viewers
- Preparation for 3D printing
- Preview and approval processes
CRM & automation
An enquiry that lands in a shared inbox is only half an enquiry. I make sure contacts, orders and approvals arrive where people actually work with them.
- Integration of existing CRM systems
- Forms, leads, notifications
- Email templates that work in every client
- Digital signature workflows
- Order and status tracking
- Automating recurring workflows
Shop & conversion flows
The path from curiosity to order is a design problem, not a coincidence. Wizards, previews and checkouts that remove hurdles instead of managing them.
- Product configurators and wizards
- Checkout and payment integration
- Campaign landing pages
- Measurability without privacy headaches
Capabilities
What sits inside the projects above, broken down — in case you are looking for something specific.
Architecture & development
- Platform architecture
- Component-based architecture
- Backend-for-frontend (BFF)
- API design, versioning and documentation
- Custom middleware
- Authentication and authorisation
- Data modelling and migrations
- Backend refactoring
- Single-page applications and SSR
- Static site generation
- Third-party service integration
Performance & findability
- SEO: technical, structural and content
- Structured data and rich results
- Loading time optimisation
- Code splitting and lazy loading
- Image optimisation and modern formats
- Caching strategies
- Core Web Vitals
- Multilingual setups and hreflang
Design & usability
- UI and UX design
- Design systems and theming
- Prototyping
- Responsive and mobile-first design
- Accessibility to WCAG
- Usability testing and user research
- Typography and web fonts
- Forms and validation
Quality & operations
- Automated testing
- Cross-browser and device testing
- Code reviews and quality assurance
- CI/CD pipelines
- Error handling, logging and monitoring
- Server and system migrations
- Disaster recovery planning
- Task automation
Security & compliance
- Security architecture
- Secure development lifecycle (SDLC)
- Threat modelling
- Vulnerability management
- Data protection and GDPR
- ISMS, policies and audits
- Role and permission concepts
- Supplier and tool evaluation
Project & collaboration
- Project management and product ownership
- Quotations and effort estimation
- Scrum, Kanban and SAFe
- Requirements analysis
- Proofs of concept
- Technical documentation
- Onboarding and mentoring
How I work
- 01
Understand the actual problem
Before a single line of code: what should the site achieve, for whom, and how will we know it worked? These questions save the expensive loops later on.
- 02
Design and build as one
Because design and build sit in the same pair of hands, nothing is lost in handover — and there is no debate about what is "unfortunately not possible".
- 03
Integrate, do not duplicate
A website is rarely alone. It has to talk to CRM, production, newsletters and accounting — otherwise it creates exactly the manual work it was meant to remove.
- 04
Hand over and stay available
You get a system your team can maintain itself. And me as the person to call when something needs to be added after all.