Sitemap

Complete overview of all pages on this website.

Start

Clear IT decisions, transparent costs and genuine digital self-determination through open standards, clean delivery and controlled AI.

Expertise

Vendor-neutral technology decisions, development, integration, operation and sovereign use of AI. Open software as the foundation, proven in-house since 2011.

Industries

Industry-fit IT architecture, project management and delivery: proven technologies and methods adapted to each domain's systems and requirements.

E-Commerce and Marketplaces: Reliable online retail with stable releases, performant platforms and precise ERP and marketplace integration for controlled daily operations.
SMEs and Trades: Clearer IT landscapes for SMEs and trades: vendor-independent assessment, reduced complexity and predictable costs for sound decisions.
NGOs and Associations: Sovereign IT for NGOs and associations: transparent tools, controlled data flows, sound open alternatives and predictable costs.
Agencies and IT Service Providers: Predictable agency delivery through stable release processes, complementary technical leadership and clearer project direction for margin and quality.
Accounting, Tax and Audit: Reliable fiduciary and audit work with clear access, auditable systems and data flows for digital accounting, dossiers and reporting.
Real Estate Management: Connected real estate data for properties, contracts, tenants, owners and providers, with clear responsibilities and data protection.
GovTech and Public Sector: Sovereign public sector IT with traceable data handling, EMBAG-ready guardrails, open architectures and procurement-ready operations.
Medical and Care Providers: Available, confidential and traceable healthcare IT for patient data, client dossiers, medical devices and operational communication.
Recruitment and Staffing: Reliable recruiting IT with high-quality candidate data, protected access and automation across fast search processes and external platforms.
Law Firms and the Justice System: Confidential IT for law firms and justice organisations, with traceable technical protection for client data, access and data flows.

Solutions

The le dot solutions catalogue: clearly scoped consulting steps, ordered from advisory through steering and delivery to operation.

Cloud FinOps Check: Cloud spend becomes transparent in AWS, Azure or GCP: value-driving infrastructure, budget binders and optimisation priorities become clear.
Enterprise RAG Proof-of-Concept: AI applications run in-house: a platform on existing infrastructure, using controlled data, supports RAG, automation and research.
Independent Software Evaluation: Business software selection becomes neutral and portable: data ownership, fair cost structures and open-source alternatives shape the shortlist.
Make-or-Buy Consulting: Make-or-Buy decisions gain a neutral basis: lifetime costs, vendor claims, SaaS dependencies and product fit are compared transparently.
Legacy Modernisation: Legacy systems gain a viable renewal path: dependencies are mapped and a step-by-step strangler-fig migration plan guides the replacement.
Service and Delivery Management Assessment: Delivery becomes measurable and predictable: requirements flow, releases, quality and margin are assessed with a prioritised action plan.
SBOM and Supply Chain Security Audit: Software components become audit-ready: complete SBOMs show third-party libraries, security findings, EOL status and licence risks.
Security, Compliance and OSPO as a Service: Software governance becomes continuous: automated compliance checks, pipeline guardrails and evidence readiness for regulated delivery.
Interim Program and Project Management: Strategic IT initiatives get temporary programme leadership: vendor governance, stakeholder steering and orderly handover through critical phases.
Project Rescue: Stalled IT projects regain a deliverable path: neutral audit, rapid stabilisation, 100-day recovery plan and orderly handover.
Delivery Engineering: Delivery capability becomes measurable and reliable: the path from code commit to production is optimised with DORA metrics and CI/CD.
Digitalisation Support for Fiduciary Firms and Their Clients: Fiduciary firms work leanly and securely: client portals, automated data flows, integration and operating model support controlled digitalisation.
Adoption and enablement: Introduced systems, platforms and AI become productive in everyday work: enablement, coaching, metrics and process anchoring support adoption.
Modern Service Management: Day-2 operations become stable and measurable: service structures, automation, SLOs, incident handling and learning cycles keep systems reliable.
Platform and FinOps Management: Kubernetes clusters and IDPs stay operable while cloud costs remain steerable: platform operations and FinOps become one continuous process.
Pro Bono: Non-profit organisations gain focused technical depth: pro bono support targets the bottleneck that matters most to their social utility.

Neuland

Neuland, the handbook for technology, organisation and digital transformation: concepts, decision criteria and the methods behind how le dot works.

Culture: Digital initiatives become sustainable when structure, leadership, and workflows support engineering culture and scalable collaboration.

Culture and Mindset: Stable engineering culture lets technology scale: clear communication, constructive error handling, and decisions close to the work.
Blameless Culture: Operational resilience grows when errors become system learning: risks surface earlier, and fixes move faster through Blameless Culture.
Leadership Principles: Scalable decisions come from leadership that sets context and moves authority to the teams with the strongest technical knowledge.
Agile Scaling: Growing organisations stay agile when cognitive load is reduced: clear team interfaces and platform teams keep complexity manageable.
InnerSource: Internal software improves faster with InnerSource: Pull Requests, asynchronous Code Reviews, and open documentation make knowledge reusable.
Product Mindset: Product Mindset keeps software aligned with user value across its lifecycle: decisions focus on outcomes, maintainability, and market fit.
Delivery Management: Software delivery becomes measurable and steerable with DORA metrics: reliable flow data shows where IT organisations can improve.
Developer Experience: Developer Experience raises engineering productivity: stable environments, useful toolchains, and lean processes keep focus on business problems.
Remote and Async Work: Async-first remote work makes knowledge durable and focus time easier: tickets, documents, and recordings keep collaboration traceable.
Stakeholder Management: IT projects gain traction when expectations are managed early: active stakeholder engagement turns transformation into shared success.
Employee Lifecycle and Career Development: IT talent stays where culture and development are clear: a structured Employee Lifecycle gives management and IC tracks equal prospects.
Project Turnaround: Stalled projects return to a workable state through clear diagnosis, stabilisation, decision cadence, realistic recovery planning, and clean handover.

Strategy: IT strategy connects risk, cost and operational independence: open standards, controlled dependencies and FinOps support digital sovereignty.

Business Strategy: IT strategy defines business scalability: software turns business models, customer loyalty and competitive advantage into economic levers.
Digital Sovereignty: Digital sovereignty keeps processes and data controllable: open standards and conscious provider choices support risk management and compliance.
Make or Buy: Make or Buy separates commodity from differentiation: standard solutions for common needs, custom development for value-defining capabilities.
Managed Services: Internal focus stays on strategic stack layers: Managed Services and SaaS shift operation, maintenance and development selectively.
TCO: Realistic TCO makes IT decisions economically sound: procurement, implementation, operation, maintenance, training and replacement count.
Vendor Lock-in: Controlled provider dependencies keep cloud choices economically movable: abstraction and standards make switching costs visible.
Legacy Modernisation: Reliable core systems stay useful through conscious modernisation: legacy applications are retained, rebuilt or replaced according to business value.
Public Code and SBOM: Public Code turns tax-funded software into reusable Open Source, strengthening transparency, trust and digital sovereignty in the public sector.
OSS Business Models: Open Source creates strategic business value: OSPO governance, licensing models and community work support market presence and standards.
Data Monetisation: Data becomes an economic asset through valuation and refinement: Infonomics, process optimisation and data-driven services create value.
Innovation Management: Innovation management turns technology choices into a structured portfolio: core business care and exploration of new technologies stay balanced.
Green IT: Green IT lowers operating costs through efficient architecture, Green Coding and sustainable hosting, while improving the company's ESG rating.
Marketing Automation, CDP and PLG: Scalable sales workflows connect user data, channels and product interactions through Marketing Automation, CDP and Product-Led Growth.
Technical SEO and Core Web Vitals: Technical SEO makes visibility an architectural result: Core Web Vitals, accessibility, semantic structure and performance carry search relevance.
Ecommerce Architecture and MACH: Composable Commerce keeps online retail flexible and scalable: MACH connects checkout, CMS, PIM and ERP through APIs and specialised services.
SAM and FinOps: SAM and FinOps create control over licences, subscriptions and cloud costs, strengthening economic efficiency and compliance in hybrid IT.
OSPO: An OSPO makes Open Source manageable at scale: strategy, licence compliance and team enablement keep OSS use effective across the organisation.
Hardware and Workplace: Endpoint strategy secures productive work: hardware, Endpoint Security and Zero Trust shape performance, access and satisfaction in mobile teams.
Digital Workplace (M365): Structured M365 governance makes digital collaboration reliable: architecture keeps data, security and user experience under control.
Partner Management: Professional partner management secures quality with IT providers, agencies and cloud vendors: clear SLAs, transparency and shared goals.
AI Strategy: AI strategy defines where AI creates value: build, buy or host decisions, risk appetite and investment order are settled before tool choices.
Open and Free Software: Open and free software keeps IT controllable, independent and cost-predictable through inspectable source code and autonomous operation.
Independent Technology Selection: Independent technology selection makes decisions methodical: need fit, lifecycle cost, maturity, exit cost and openness determine the ranking.

Technology: Stable, secure and maintainable digital systems depend on technology decisions that manage scalability, operating costs and Technical Debt.

System Architecture: Stable systems emerge from trade-off decisions along quality attributes, from a modularised modulith to services only where the forces require it.
Conway's Law: System architecture reflects communication structures. Conway's Law turns team design into a lever for the desired architecture.
Microservices: Microservices split applications into independently deployable services with bounded business functions, separate scaling and technology choices.
API-First: Accessible data and functions start with API-First design: interfaces become the primary product for web, app and partner integrations.
Event-Driven Architecture: Responsive systems use Event-Driven Architecture: application flow follows events, with asynchronous reactions instead of synchronous waiting.
Tech Stack: A sustainable tech stack supports staffing, maintenance costs and market responsiveness through long-term economic technology choices.
Standard Software: Standard software creates value when SaaS and COTS fit the architecture and integrate cleanly with data flows, identity and operations.
CI/CD: Repeatable software delivery comes from CI/CD pipelines that build, test and release code with traceable validation and minimal manual variance.
Platform Engineering: Developer teams gain autonomy through internal platforms that bundle recurring infrastructure tasks and reduce Cognitive Load in delivery.
Cloud Native: Cloud Native applications use distributed cloud environments for elasticity, resilience and fast iteration cycles beyond simple server migration.
IaC and GitOps: Reliable environments come from Infrastructure as Code and GitOps, with infrastructure defined in code and Git as the Single Source of Truth.
FinOps: Cloud spending becomes visible and steerable with FinOps, linking engineering, finance and management around data-based cost decisions.
Quality Assurance: Confidence in releases grows when Quality Assurance is part of every development step and Shift-Left testing validates changes early.
DORA Metrics: DORA Metrics make software delivery performance measurable through throughput, recovery and failure rate instead of activity alone.
AI Development: AI-assisted development shifts work toward orchestrating assistants and validating generated solutions, with architecture and quality remaining central.
Security Strategy: Digital resilience comes from continuous risk management, Zero Trust principles and explicit verification across connected IT systems.
Offensive Security: Stronger security posture comes from Offensive Security, using Penetration Testing and Red Teaming to identify vulnerabilities early.
Zero Trust: Context-based access control replaces implicit trust with Zero Trust, where every user, device and service is verified before resource access.
Compliance: Compliance becomes a technical discipline when policies turn into automated checks that monitor controls and create audit evidence continuously.
Service Management: Service Management links technology to user value by combining stable ITIL structures with SRE practices such as automation and fault tolerance.
Observability: Operational clarity comes from Observability, using telemetry to understand the internal state and root causes in distributed systems.
SRE: Reliable systems grow from SRE, applying software engineering to operations and balancing reliability with change through SLOs and Error Budgets.
Incident Response: Resilient systems and teams use Incident Response and Chaos Engineering to handle disruptions methodically and test recovery under deliberate stress.
Disaster Recovery: Business operations stay recoverable when Disaster Recovery restores data and systems and Business Continuity keeps operations running.
Post-Mortem: Lasting improvement follows from Post-Mortems that document incidents, responses and measures for recurrence prevention without blame.
Backup and Restore Strategy: Recoverable systems depend on a Backup and Restore strategy that defines data, frequency, media, retention and proves restore through testing.
Virtualisation, Containers and Serverless: Fit-for-purpose compute comes from choosing between virtual machines, containers and serverless by isolation, density, operations and cold start.
API Gateway and Service Mesh: Clear service traffic control separates API gateways for north-south entry traffic from service meshes for east-west communication.
Caching and CDN: Lower latency and load come from Caching and CDN layers that keep finished answers near requesters and handle invalidation correctly.
WebAssembly: Portable execution comes from WebAssembly, a compact sandboxed bytecode format for browser, server and edge with stable host interfaces.
Identity and Single Sign-on: Centralised access control comes from Identity and SSO, with one managed login for connected applications and one point for granting or revoking access.
Software Supply Chain Security: Secure delivery depends on Software Supply Chain Security for dependencies, bought-in libraries and the build pipeline that assembles them.
Non-Human Identity: Scoped and attributable access for machines, workloads and software agents extends Identity/SSO and Zero Trust to non-human actors.

Innovation: Resilient innovation needs operationally viable technology choices. Generative AI, Data Mesh, RAG and Sovereign AI set the architecture agenda.

Data Architecture: Reliable insights need structured data pipelines. Medallion Architecture and Data Mesh turn raw data into verifiable, scalable foundations for AI.
Modern Databases: Modern applications need the right database for each task. Polyglot Persistence combines SQL, NoSQL, Graph and Vector stores by purpose.
GenAI and RAG: Usable generative AI needs access to internal knowledge. RAG connects language models with company documents while preserving model separation.
Data Governance: Trusted data products need clear rules and live quality signals. Data Governance and Observability define responsibility, standards and lineage.
Data Mesh: Scalable data use in large organisations needs domain ownership. Data Mesh treats data as products managed by the teams closest to each domain.
Tech Radar: Clear technology decisions need shared orientation. A Tech Radar evaluates trends, tools and methods systematically and keeps focus manageable.
Tech Debt: Sustained delivery capacity needs visible technical debt. Planned refactoring keeps maintenance, architecture and development velocity manageable.
OSS Strategy: Stable technical foundations need a deliberate OSS strategy. Contributions, dependencies and upstream responsibility make decisions traceable.
Blockchain and Web3: Decentralised trust needs tamper-resistant records. Blockchain and Web3 support transactions, data ownership and Self-Sovereign Identity.
Edge Computing: Fast IoT decisions need processing close to the source. Edge Computing moves analysis to machines, factory floors and mobile devices.
Privacy and Anonymity: Data insights and privacy can be engineered together. PETs and anonymisation techniques protect sensitive information during analysis.
Digital Ethics: Responsible digital systems need clear accountability. Digital ethics frames AI decisions around responsibility, discrimination and transparency.
Post-Quantum Cryptography: Long-lived confidential data needs crypto-agility today. Post-Quantum Cryptography plans migration from RSA and ECC to quantum-resistant standards.
AI Governance: Controllable AI use needs an operating model. AI Governance defines model, data, oversight and evidence rules as the basis for sovereign AI.
AI Agents and Agentic Systems: Acting AI systems need clear control. AI agents plan, call tools and observe results in a loop, turning chat into goal-oriented workflows.
LLMOps and MLOps: Production AI needs repeatable operations. LLMOps and MLOps version models and prompts, measure quality, and monitor cost, latency and drift.
Prompt and Context Engineering: Better model output often starts with better input. Prompt and Context Engineering shape instructions, retrieved context and tool schemas before fine-tuning.
Vector Databases and Embeddings: Semantic search needs meaning as vectors. Embeddings and vector databases provide the foundation for similarity search, RAG and semantic retrieval.
AI Evaluation and Guardrails: Reliable production AI needs measurement and runtime controls. Evaluation checks quality systematically, guardrails keep inputs and outputs in scope.
Fine-Tuning vs RAG vs Prompting: Efficient AI builds start with the right lever. Prompting, RAG and fine-tuning balance cost, freshness and control across rising levels.
Sovereign AI: AI and data sovereignty need compatible architecture. Sovereign AI runs open models on Swiss or on-premises infrastructure.
Language Models: Sound model choices need visible trade-offs. Language Models range from self-hostable open models to closed frontier models behind external APIs.
Workflow Automation and Data Flows: Useful automation starts with controlled data flows. Workflow Automation connects systems, sets boundaries and keeps human control explicit.
A-Team: Resilient digital operations need open, replaceable building blocks. The A-Team connects sign-on, collaboration, knowledge and AI with existing tools.

Toolkit: Methods, standards, open-source licences and software evaluations as an operational reference: the building blocks that turn technology strategy into delivery.

Methods: Methods turn technology strategy into repeatable practice for architecture documentation, stable operations and agile scaling in growing IT organisations.

Agile Scaling and Descaling: Agile scaling restores team momentum through simpler structures, stream-aligned ownership and end-to-end responsibility for products or features.
Bounded Context: Clear domain boundaries create maintainable models, shared understanding between teams and a solid basis for microservice architectures.
C4 Model and Docs-as-Code: Current architecture diagrams earn trust when C4 Model structure and Docs-as-Code keep services, dependencies and changes aligned with code.
Compliance as Code: Continuous Compliance as Code keeps regulatory controls machine-readable, testable and integrated into delivery pipelines and audit trails.
DDD (Domain-Driven Design): Domain-Driven Design creates clear Bounded Contexts where terms have one meaning and microservice architecture gets a reliable domain basis.
FinOps and Cloud Economics: FinOps makes cloud economics transparent through tagging, right-sizing and operating practices that keep infrastructure spending accountable.
GitOps and Reconciliation: GitOps keeps infrastructure consistent through pull requests, declarative configuration, reviewable changes and fast disaster recovery.
Golden Path: Golden Paths speed up delivery with supported development routes while preserving team autonomy for justified deviations.
InnerSource and Code Openness: InnerSource opens codebases across the organisation for pull-request fixes, smoother delivery flow and broader knowledge sharing.
ITIL vs. SRE: SRE makes ITIL service management executable with software engineering, automated operations and reliability control through error budgets.
Requirements and Functional Specifications: Clear requirements come before implementation: Lastenheft defines the buyer view, Pflichtenheft the supplier solution and delivery scope.
Nearshoring and Vendor Integration: Vendor integration improves delivery quality when service providers use the same GitOps, CI/CD and documentation practices as internal teams.
Blameless Post-Mortems: Blameless post-mortems turn incidents into timelines, systemic analysis and concrete action items for stronger operational resilience.
RASCI Matrix: RASCI matrices create ownership clarity by assigning clear responsibility, accountability, support, consultation and information roles.
Refactoring: Regular refactoring keeps code easier to extend, defects easier to control and technical debt visible while behaviour remains stable.
RFCs and ADRs: RFCs and ADRs make architecture decisions reviewable, searchable and open to expert feedback across teams and time zones.
Strangler Fig Pattern: The Strangler Fig Pattern replaces legacy systems incrementally, letting new capabilities grow around existing production systems.
20% Tech Debt Rule: The 20% Tech Debt Rule keeps delivery speed sustainable by reserving capacity for refactoring, updates and architecture improvements.

Standards: Market access and trust rest on clear IT standards: regulatory requirements, technical norms and operating context for engineering teams.

Age Verification: Age checks can satisfy youth protection duties while keeping identity data private: legal drivers, technical options and practical failure points.
Cyber Resilience Act: Market access in the EU now includes cybersecurity duties for digital products: CRA requirements, security by design and manufacturer responsibility.
GDPR: EU data protection stays clear of Swiss law: GDPR reach, processing principles, data subject rights and fines for Swiss firms with EU exposure.
EMBAG: Federal IT tenders gain an open source baseline: EMBAG relevance and duties for providers working with Swiss federal authorities.
EU AI Act: AI obligations become role-specific: EU AI Act risk classes, value-chain roles and why Swiss firms can fall within its scope.
DORA: DORA is clearly separated from DevOps metrics: EU financial regulation for ICT resilience, reporting, testing and third-party risk.
EU Whistleblower and Secure Cryptography: Confidential reporting stays protected by technical and organisational measures: EU whistleblower duties, anonymity rules and Swiss scope.
GraphQL: Precise API responses with one endpoint: GraphQL explains requested data shapes, suitable use cases and limits compared with fixed REST routes.
Green IT and Software Carbon Intensity: Lower IT emissions through efficient code, right-sized hardware and renewable data-centre energy, measured with Software Carbon Intensity.
ISO 27001 and Compliance-as-Code: Information security becomes a managed routine: ISO 27001 links risk-based controls, organisational processes and continuous improvement.
ISO 42001: Auditable AI governance for lasting AI operations: ISO 42001 requirements, PDCA structure and its relationship to the EU AI Act.
MCP (Model Context Protocol): Interoperable AI agents need open tool connections: MCP links LLMs with databases, Git repositories and APIs through servers and clients.
nFADP / DSG and Privacy by Design: Swiss privacy compliance rests on nFADP duties: personal fines, breach notification thresholds, privacy by design and access rights.
NIS2: EU cybersecurity duties become concrete through NIS2: in-scope entities, risk management, staged incident reporting and the Swiss angle.
Open Source Definition (OSI) and SLSA: Open source remains usable and auditable through OSI rights plus SLSA maturity levels for protected software supply-chain builds.
Software Asset Management (SAM): Licence clarity improves audits and cost control: SAM centralises inventory, tracks usage and reconciles software with contract terms.
SBOM (Software Bill of Materials): Software dependencies become traceable with an SBOM: libraries, affected systems and supply-chain requirements stay visible after incidents.
SOC 2: Cloud and SaaS controls become verifiable through SOC 2: an AICPA attestation report for service providers, complementary to ISO 27001.
US Cloud Act and Sovereign Cryptography: Sovereign cryptography strengthens data control under the US Cloud Act, while metadata, support access and lawful orders need separate assessment.
WCAG and the European Accessibility Act: Accessible services rest on two layers: WCAG as the technical norm, EAA as legal duty, with conformance levels and the Swiss angle.
YAML Frontmatter: Markdown pages gain machine-readable fields through YAML frontmatter: titles, publication dates, layouts, publishing state and common YAML pitfalls.

Licences: Clear licence orientation for enterprise decisions: common open source licences and hybrid models are analysed in strategic context.

AGPL: Source availability for network services: AGPL keeps modified service code under the same licence when remote users access the service.
Apache 2.0: Commercial certainty for proprietary products: Apache 2.0 permits closed source embedding and includes an explicit patent grant.
BSD: Maximum code freedom with few obligations: BSD licences permit broad use, modification and sale without copyleft requirements.
BSL and Fair Source: Shared source with controlled commercial use: BSL and Fair Source restrict managed-service competition and later convert to open source.
GPLv3: Reliable source access for recipients: GPLv3 keeps distributed modifications under the same licence and addresses patents and hardware locks.
MIT: Simple use for commercial software: MIT permits proprietary combinations and broad reuse, with patent coverage handled separately.

Software: Long-term software choices made clearer: evaluations of languages, frameworks, databases and applications for recruiting, maintenance and scalability.

Banana Accounting: Local accounting with full data sovereignty: Banana covers double-entry bookkeeping, income-expense accounting and VAT through local installation.
C# and .NET: Productive enterprise development: C# and .NET combine strong typing, a broad standard library and mature Visual Studio and Azure tooling.
Chatwoot: Centralised customer support with data sovereignty: Chatwoot bundles channels and keeps accounts, conversations and attachments on in-house infrastructure.
Claude Code: AI-assisted development in the local project context: Claude Code can read files, prepare refactorings and work under clear supervision.
Contao: Accessible CMS foundations: Contao provides semantic output, accessible templates and back-end tooling, while editorial discipline remains essential.
Cursor IDE: Faster editor-driven changes: Cursor integrates language models into the IDE context and orchestrates multi-file work through natural language.
Drupal: Structured content for complex portals: Drupal separates content, configuration and presentation and maps rich data relationships through entities.
Duplicati: Sovereign backups with tested restore: Duplicati encrypts data client-side and stores incremental backups on NAS, cloud or other storage targets.
Euro-Office: European office work with open code: Euro-Office is an AGPL fork of ONLYOFFICE, backed by European providers and aimed at digital sovereignty.
Figma: Collaborative product design in the cloud: Figma is the market standard and makes data location a sovereignty question in the Swiss context.
Flutter: Cross-platform UI development from one codebase: Flutter compiles to machine code and shortens development cycles with Hot Reload.
Go: Portable infrastructure services with simple Deployment: Go produces static binaries and combines static typing, garbage collection and goroutines.
Grav CMS: Fast, database-free and Git-managed websites: Grav reduces runtime overhead, keeps SQL injection surface closed and keeps content portable.
Joomla: Flexible portals with built-in access control: Joomla supports hierarchical user groups, access levels, modules and position-based layouts in core.
LAMP Stack: Portable web hosting foundations: Linux, Apache, MySQL and PHP form a proven open-source stack available as standard on many hosting platforms.
Laravel: Standardised PHP application development: Laravel includes migrations, authentication, queue management and full-stack building blocks out of the box.
LibreChat: Shared AI access under organisational control: LibreChat provides one self-hostable interface for many models, keys and data on owned infrastructure.
LibreOffice: Local office work with desktop autonomy: LibreOffice uses OpenDocument natively and serves as a sovereignty reference for Microsoft compatibility.
Matomo: Privacy-compliant web analytics with owned data storage: Matomo stores analytics on Swiss or EU infrastructure and simplifies nFADP and GDPR checks.
Mautic: Centralised campaign automation with open source: Mautic combines landing pages, email workflows and lead scoring in one campaign platform.
Nextcloud: Data, accounts and access rules stay under organisational control with Nextcloud, an AGPL platform for files, collaboration and communication.
Node.js: Scalable real-time services and APIs gain a JavaScript runtime with Node.js, built on an event loop and backed by the broad npm ecosystem.
Obsidian: Knowledge stays local, readable and extensible with Obsidian: Markdown files, strong linking and plugins for notes through project work.
OpenCode: Code work moves into the terminal with OpenCode: an open AI coding agent that reads projects, proposes changes and keeps model choice open.
Open WebUI: Language models gain an independent chat interface with Open WebUI, pooling local and compatible external models for offline-capable use.
Penpot: Design files stay portable and controllable with Penpot: MPL 2.0 open source code, an open file format and browser-based workflows.
PHP: Robust web applications gain a proven scripting language with PHP: simple scaling, shared-nothing execution and modern frameworks like Laravel.
Podman: Container work stays close to Docker workflows with Podman, adding daemonless operation, rootless containers and Kubernetes manifest support.
PostgreSQL: Transactional data and AI vectors share one stable base with PostgreSQL: strict SQL, modern extensibility and extensions such as pgvector.
PostHog: Product behaviour becomes measurable with PostHog: events, funnels, session recordings and feature flags, with a self-hostable open core.
Python: Data work, automation and AI gain a readable language with Python, backed by a broad standard library and early access to new AI models.
Rocket.Chat: Team communication stays on chosen infrastructure with Rocket.Chat, combining real-time chat, Matrix interoperability and plan-based compliance options.
rsync: Large file sets stay aligned efficiently with rsync: delta transfer sends changed data and supports backup, mirroring and distribution routines.
Rust: System software gains performance and compile-time safety with Rust, whose ownership model supports secure infrastructure and WebAssembly work.
Symfony: Large PHP projects gain a stable foundation with Symfony: reusable components, clear design patterns and architecture for long-lived applications.
Syncthing: Files stay current across devices with Syncthing: peer-to-peer synchronisation for sovereign infrastructure and clear backup boundaries.
Tryton: Business processes fit into one modular ERP with Tryton: accounting, sales, warehousing, production and projects on a clean technical core.
TYPO3: Large multilingual portals gain structure and longevity with TYPO3: clear editorial roles, fine-grained permissions and a predictable LTS cycle.
Vtiger CRM: Sales and service processes gain structure with Vtiger CRM: leads, quotes, invoices and project tracking in one integrated PHP application.
Wiki.js: Maintained knowledge becomes machine-readable with Wiki.js: versioned Markdown pages, YAML headers and programmatic access through GraphQL.
WiseMapping: Mind maps stay on self-run infrastructure with WiseMapping: open-source browser mapping, collaborative idea work and a clear view of project maturity.
WordPress: Content-rich websites become manageable with WordPress: editorial workflows, broad plugin extensions and access for non-technical teams.

Services: Managed services and cloud platforms in balance: lower operational overhead, preserved digital sovereignty, and the right level of control.

Adobe Creative Cloud: Integrated design workflows with Adobe Creative Cloud: SaaS licensing, cloud services, Stock, Fonts and connected tools across design disciplines.
authentik: Central login, multi-factor and permissions on self-hosted infrastructure: authentik as an open-source identity provider with open core and Enterprise option.
AWS: Highly available, globally distributed cloud architectures with AWS: modular services, strong APIs and automation for scalable operations.
Azure: Hybrid cloud architectures with Azure: on-premises data centres, cloud services and identity management connected through Entra ID.
Backstage: Central developer portals with Backstage: services, software templates and infrastructure status collected in one searchable internal platform.
Bexio: Swiss SME administration in one cloud platform: CRM, order processing, accounting and banking integration with VAT, QR invoice and fiduciary access.
Classic Frontend: Fast, durable websites with Classic Frontend: server-side logic, browser standards and less framework overhead for performance and SEO.
Claude: Long-document analysis and high-quality code generation with Claude: large context windows and precise language model output for complex text tasks.
Cloudflare: Fast, protected web delivery at the network edge with Cloudflare: WAF, DDoS protection, caching and global optimisation near each request.
ERPNext: Open ERP processes with ERPNext: finance, warehouse, manufacturing, sales, HR and projects on the Frappe Framework with Python and JavaScript.
Gemini: Google Workspace automation with Gemini: multimodal models, Drive, Gmail and Docs access in suitable configurations, plus very large context windows.
GitLab: Integrated DevOps with GitLab: planning, Git, CI/CD automation and security scans in one platform, including self-managed operation.
Google Cloud: Data-centric cloud architectures with Google Cloud: BigQuery, GKE, Kubernetes and global network connectivity for cloud-native platforms.
Grafana and Prometheus: Stable observability with Prometheus, Grafana and OpenTelemetry: metrics, visualisation and neutral instrumentation for asynchronous monitoring.
Java and Spring Boot: Stable enterprise backends with Java and Spring Boot: type safety, a broad library ecosystem and production-ready applications by convention.
Keycloak: Central identity management with Keycloak: OIDC, SAML 2.0, Active Directory integration and MFA for modern single sign-on architectures.
Kubernetes: Declared infrastructure state with Kubernetes: cluster orchestration keeps workloads scaled, healthy and self-healing through continuous reconciliation.
Llama: Data-resident language models with Llama: downloadable model weights, self-hosted operation and clear licence boundaries under Meta conditions.
Magento: Complex commerce operations with Magento: multi-store, multi-currency, B2B catalogues and shop architectures as open-source edition or Adobe Commerce.
Microsoft 365: Connected collaboration with Microsoft 365: Teams, SharePoint and Office apps integrated through central identity and governance with Entra ID.
Mistral: European AI model operation with Mistral: EU jurisdiction, open downloadable models, Apache 2.0 options and clear licence boundaries.
NetBird: One encrypted private network across devices, servers, and sites: NetBird uses direct peer-to-peer traffic for simpler distributed access.
Odoo: One shared ERP database for CRM, warehousing, projects, e-commerce, and accounting: Odoo grows through modular apps as needed.
Okta: Centralised authentication as a hosted identity service: Okta shows outsourced IAM, protocols, and data handling with a US provider.
OpenAI: Current language and image models through APIs: OpenAI supports AI functions with model infrastructure operated by the provider.
OpenRouter: Lower integration effort for language models: OpenRouter routes one shared API to hundreds of models from OpenAI, Anthropic, Google, and others.
Pickware: Native shop and inventory flow: Pickware connects commerce and warehouse processes with mobile scanners and shared operational data.
Power BI: Self-service reporting for Microsoft-adjacent BI teams: Power BI connects business reports, Excel data and the Microsoft 365 estate.
Sage: Swiss accounting and payroll compliance: Sage supports bookkeeping and salary processing in classic on-premises and cloud-hybrid setups.
Salesforce: CRM plus cloud application development: Salesforce combines sales, service, marketing, custom apps, and a large extension ecosystem.
SAP S/4HANA Cloud: Standardised enterprise processes with real-time insight: SAP S/4HANA Cloud applies best practices across large organisations.
SAP Commerce Cloud (Hybris): Complex B2B commerce at scale: SAP Commerce Cloud combines PIM, multi-site management, large product catalogues, and high concurrent usage.
Shopify: Hosted commerce operations: Shopify combines payments, security, updates, and a broad app ecosystem for extensions in one managed platform.
Shopware: API-first commerce with high customisability: Shopware 6 adds native AI Copilot features and an MIT-licensed Community Edition.
Squarespace: Curated website design in one platform: Squarespace bundles templates, hosting, domain, SSL, and a simple shop for visual websites.
Tailscale: One encrypted local network across sites, cloud resources, and work devices: Tailscale uses WireGuard and direct peer-to-peer traffic.
Terraform and OpenTofu: Reproducible cloud environments as code: Terraform and OpenTofu create execution plans and control cloud APIs through providers.
TypeScript: Earlier code feedback for JavaScript applications: TypeScript uses static types so editors catch errors during development.
Userback: Reproducible bug reports from visual feedback: Userback captures browser context as screenshots, videos, and console logs.
Vibe Kanban: Manageable AI coding workflows: Vibe Kanban combines task boards, isolated agent workspaces, diff comments, browser previews, and PR creation.
Webflow: Visual development on the CSS box model: Webflow combines code-free design work, integrated CMS, and enterprise-grade AWS-based hosting.
Wix: Fast website creation with flexible layout control: Wix provides built-in operations and apps for booking, shop, events, and other functions.

Templates: Reusable contract templates as a neutral reference for IT projects: from work contract and NDA to subcontractor agreement, grounded in Swiss law.

Work Contract: Work contract under OR Art. 363–379: a template for projects with a defined end product, covering scope, acceptance, remuneration and warranty.
IT Services Agreement: IT services agreement (mandate) under OR Art. 394–406: a template for consulting and project support, covering services, fees and duties of care.
Framework Agreement: Framework agreement for long-term collaboration: a template placing recurring individual assignments under shared terms, duration and liability.
Non-Disclosure Agreement (NDA): Bilateral non-disclosure agreement (NDA): a template for mutual protection of confidential information, covering scope, duration and return duties.
Data Processing Agreement (DPA): Data processing agreement (DPA) under DSG Art. 9 and VDSG: a template for processing personal data on behalf of the controller, with duties and security.
Service Level Agreement (SLA): Service level agreement (SLA): a template for measurable support and availability commitments, with response times, metrics and escalation.
Acceptance Protocol: Acceptance protocol under OR Art. 370: a form template that documents acceptance, defects and reservations for a work product.
Subcontractor Agreement: Subcontractor agreement under OR Art. 394 ff.: a template for working with external specialists (freelancers), covering deliverables, fees and liability.

A-Team

A-Team: own data, own knowledge, own AI. An open framework for collaboration and controlled AI, operated under direct control.

Contact

Entry point for project inquiries, callbacks, partnerships and pricing. Direct contact clarifies the next practical steps.

Project Inquiry: Inquiry form for IT projects. A few short questions frame the undertaking correctly from the start, bullet points are enough.
Collaboration: Models for long-term IT support on a mandate basis, with SMEs, agencies and IT teams. Strategic, operational or project-based.
Callback: Request a callback for matters that are quicker to clarify by phone. Name, phone number and a preferred time are enough, timezone Zurich.
Pricing: For undertakings with an open scope: a non-binding price range as a guide, plus the factors that drive the price. Reply usually within two working days.
Request an A-Team Demo: Select the A-Team functions of interest and request a demo. The first cut follows from organisation type, infrastructure and use case.