Services on AereA GmbH - Software that still runs in five years

Software development & architecture

info@aerea.de (AereA GmbH) — Mon, 01 Jan 0001 00:00:00 +0000

What we actually do #

Architecture design and technology evaluation - microservices, event-driven design, API-first, or deliberately a monolith when that is the right answer. The decision is argued and documented, not asserted.
Implementation across the whole stack - embedded systems, desktop software (Qt/QML), backend services (C#/.NET, Java, Go, Python), web interfaces (TypeScript/Angular) and mobile applications.
Interfaces and system integration - REST/OpenAPI, gRPC, GraphQL, WebSocket and SignalR, plus connectivity to existing ERP, MES and specialist systems.
Modernisation - analysis and stepwise refactoring of mature systems, migration of legacy stacks, performance optimisation.
Architecture governance - reviews, guardrails for the development team, documentation to arc42.

Clean Code, SOLID, Clean Architecture #

These three terms appear on many websites. Here is what they mean day to day for us:

AI engineering

info@aerea.de (AereA GmbH) — Mon, 01 Jan 0001 00:00:00 +0000

1. AI in the product #

Forecasting and time series analytics #

Predictive models for electricity price, generation and consumption as the basis for automated load decisions - trained and evaluated on high-resolution time series with Python, Pandas, NumPy and scikit-learn against TimescaleDB.

Anomaly detection and predictive maintenance #

Analysis of machine and sensor data for early detection of failures, with Kafka as the basis for real-time event streaming, detection and alerting logic.

Industrial IoT & automation

info@aerea.de (AereA GmbH) — Mon, 01 Jan 0001 00:00:00 +0000

What we actually do #

Real-time data acquisition - sensor and machine data via OPC UA, MQTT and Modbus, including customer-specific transport protocols for PLCs.
Edge computing - pre-processing, plausibility checking and filtering directly at the machine, before data flows to a cloud or on-premises platform.
Event streaming - Kafka and Redpanda as the backbone for high data volumes, with clean decoupling of acquisition and analysis.
Predictive maintenance and anomaly detection - analysing machine data for early failure detection, with detection and alerting logic on the event stream.
Factory digitalisation - integration with ERP and MES systems, real-time dashboards for operations.
Deployment models - on premises, cloud or hybrid, depending on requirements for data sovereignty, latency and availability.

Why decoupling is the decisive design move #

The most common mistake in IIoT platforms is coupling acquisition and analysis directly. If the analysis fails, measurements are lost - irrecoverably. We therefore insist on an event stream between the two: acquisition writes, analysis reads at its own pace. New analyses can be retrofitted onto historical data later without touching acquisition.

Energy management & e-mobility

info@aerea.de (AereA GmbH) — Mon, 01 Jan 0001 00:00:00 +0000

What we actually do #

Smart energy monitoring - real-time acquisition and visualisation via industrial sensors, solar inverters and smart meters.
Load management - peak shaving, self-consumption optimisation, dynamic balancing between grid supply, storage and generation.
Storage and grid integration - control of battery storage, intelligent switching between grid, storage and renewable sources.
E-mobility - connectivity for wallboxes and charging stations, time- and price-optimised charging including vehicle-side data.
Analytics and forecasting - predictive models for price, generation and consumption, time series analysis on PostgreSQL/TimescaleDB and InfluxDB.
Automation - Node-RED for workflows, custom API integrations for remote monitoring.

The difference between display and decision #

Many energy systems show very well what has happened. The value only appears when a measurement turns into an automated action: charging storage when electricity is cheap and clean; shifting flexible loads before the peak forms; moving charging sessions into the favourable hours without anyone starting the morning without range. That decision logic is exactly the part we build.

VoIP & real-time communication

info@aerea.de (AereA GmbH) — Mon, 01 Jan 0001 00:00:00 +0000

What we actually do #

Modular IP telephony systems - multi-tenant management of extensions, ring groups, queues and call rules, automated device provisioning.
WebRTC and browser-based communication - voice and video in the browser, multiparty conferencing, NAT traversal via STUN, TURN and ICE.
Session border controller and security - securing the network border, encryption of signalling and media via TLS, SRTP and ZRTP, DDoS protection and rate limiting.
Gateways, SIP trunking and PBX integration - connecting to existing infrastructure, migrating existing data.
CTI clients - cross-platform coupling of workplace and phone system, including a dedicated update mechanism and a mobile companion.
Quality and performance - QoS optimisation for minimal latency and jitter, load and recovery testing.

Approach & collaboration models #

Typical entry point: a scoped subsystem - the network border or a WebRTC component, say - with subsequent expansion. Alternatively long-term product responsibility, as with Phonalisa - since our founding, 17 years by now.

Security & cryptography

info@aerea.de (AereA GmbH) — Mon, 01 Jan 0001 00:00:00 +0000

What we actually do #

Secure communication protocols - design and implementation for machine, plant and system communication, including securing the network border.
Encryption and certificates - symmetric and asymmetric methods, PKI, X.509, TLS and TLS client certificates, plus the full certificate lifecycle.
Authentication and authorisation - OAuth2, OpenID Connect and Keycloak, including role and permission models and integration with existing identity landscapes.
Threat modeling and audits - structured analysis along system boundaries, security audits of existing architectures, hardening of network and application components.
Regulated environments - implementation of cyber security requirements, among others for safety-critical updates to a medical laser system.

On certificates #

We hold neither ISO 27001 nor TISAX, and neither is currently planned. We consider it more honest to say so and instead document how we work: Security & compliance describes development location, handling of client data, sub-processors, hosting options and how we use AI tooling on client code - in a form usable as a template for supplier questionnaires.

Quality assurance & test automation

info@aerea.de (AereA GmbH) — Mon, 01 Jan 0001 00:00:00 +0000

The levels at a glance #

Level	Services
Test strategy	Test design, requirements engineering, acceptance criteria, test management
Manual testing	Black-box and white-box tests, exploratory testing, system integration tests, retesting of fixes
Test automation	Unit tests (xUnit, Karma/Jasmine), GUI automation (Squish, Selenium), E2E tests (Cypress), integration tests against real services and databases (WebApplicationFactory, Testcontainers)
Process anchoring	Test-driven development as team standard, mandatory CI/CD quality gates, continuous increase in coverage and degree of automation
Specialist testing	GDPR, accessibility and usability testing, non-functional tests, validation of streaming and time series data
Documentation	Test case management, test logs and reports, release documentation, manuals, context help, screencasts
Test environments	Reproducible environments via Docker and Testcontainers, VMware, Proxmox, VirtualBox; synthetic test data

Why QA is a role here, not a phase #

In most companies of this size, developers test their own code - with the familiar blind spot - or the client takes on acceptance. Here, an ISTQB-certified test manager owns quality assurance from the management level. That shifts the priorities: tests are a merge gate, not an afterthought; test documentation is part of the product, not decoration.

Consulting, reviews & training

info@aerea.de (AereA GmbH) — Mon, 01 Jan 0001 00:00:00 +0000

What we actually do #

Architecture reviews - assessment of an existing or planned architecture with prioritised recommendations.
Code reviews - sampled or comprehensive, focused on maintainability, testability and the places where changes typically become expensive.
Training and workshops - Clean Code, SOLID, design patterns, Clean Architecture, refactoring legacy code, test methodology, agile transition and the productive use of AI-assisted development tools.
AI enablement - introducing agent-assisted development into existing teams and toolchains, including safeguards through quality gates.
Technical project leadership - taking technical lead in modernisation or transition programmes.

Grounded in practice #

The training does not come from slide decks but from live projects. Architecture modernisation, agile transition and developer training were delivered among others around a vehicle bus analysis platform for a German premium car manufacturer.