Software that still runs in five years on AereA GmbH — Software that still runs in five years

EcoPulse — platform for energy monitoring and load control

info@aerea.de (AereA GmbH) — Mon, 01 Jan 0001 00:00:00 +0000

Starting point #

Energy and charging infrastructure rarely grows to a plan. It grows in steps: first the photovoltaics, then the storage, later the wallboxes, at some point a second meter for the new part of the building. Every device brings its own interface, every manufacturer its own data model.

The result is an operation with plenty of numbers and still no basis for decisions: the inverter knows its generation, the wallbox knows its charge state, the meter knows the grid draw — but nobody knows the whole picture at the same point in time.

Industrial automation

info@aerea.de (AereA GmbH) — Mon, 01 Jan 0001 00:00:00 +0000

What is technically different in this industry #

Service life. A production line runs for twenty years, and the software on it is expected to survive ten of them. That shifts every technology decision: not what is most elegant today, but what will still be maintainable in eight years.

Heterogeneity as the norm. Controllers of different generations and manufacturers sit side by side. Some speak OPC UA, some Modbus, some a proprietary protocol documented only on paper. We have built our own transport implementations for such cases several times.

Site Notice

info@aerea.de (AereA GmbH) — Mon, 01 Jan 0001 00:00:00 +0000

Information pursuant to Sect. 5 DDG #

AereA GmbH
Wüstenstein 18
91346 Wiesenttal
Germany

Commercial Register: HRB 10446
Registration court: Amtsgericht Bamberg

Represented by: Frau Franziska Sprenger

Contact #

Phone: +49 36424 760823
E-mail: info@aerea.de

VAT ID #

Sales tax identification number according to Sect. 27 a of the Sales Tax Law: DE267912425

Software development & architecture

info@aerea.de (AereA GmbH) — Mon, 01 Jan 0001 00:00:00 +0000

What we actually do #

Architecture design and technology evaluation — microservices, event-driven design, API-first, or deliberately a monolith when that is the right answer. The decision is argued and documented, not asserted.
Implementation across the whole stack — embedded systems, desktop software (Qt/QML), backend services (C#/.NET, Java, Go, Python), web interfaces (TypeScript/Angular) and mobile applications.
Interfaces and system integration — REST/OpenAPI, gRPC, GraphQL, WebSocket and SignalR, plus connectivity to existing ERP, MES and specialist systems.
Modernisation — analysis and stepwise refactoring of mature systems, migration of legacy stacks, performance optimisation.
Architecture governance — reviews, guardrails for the development team, documentation to arc42.

Clean Code, SOLID, Clean Architecture #

These three terms appear on many websites. Here is what they mean day to day for us:

Team

info@aerea.de (AereA GmbH) — Mon, 01 Jan 0001 00:00:00 +0000

Editorial note: Names and direct lines live in data/ansprechpartner.yaml and are currently placeholders. Once filled in, they appear automatically on all service, industry and project pages. Remove this block afterwards.

Software architecture & technical project management #

Over 15 years of experience in the development and integration of complex software, communication and IIoT systems, specialised in distributed architectures, secure data communication and energy management. Responsible for architecture design, technology evaluation, security concepts and leading interdisciplinary development teams; introduces agile processes, code quality assurance, CI/CD workflows and AI-assisted development practices.

AI engineering

info@aerea.de (AereA GmbH) — Mon, 01 Jan 0001 00:00:00 +0000

1. AI in the product #

Forecasting and time series analytics #

Predictive models for electricity price, generation and consumption as the basis for automated load decisions — trained and evaluated on high-resolution time series with Python, Pandas, NumPy and scikit-learn against TimescaleDB.

Anomaly detection and predictive maintenance #

Analysis of machine and sensor data for early detection of failures, with Kafka as the basis for real-time event streaming, detection and alerting logic.

Energy & e-mobility

info@aerea.de (AereA GmbH) — Mon, 01 Jan 0001 00:00:00 +0000

What is technically different in this industry #

Time is the decisive dimension. Energy is a time series problem. What counts is not the instantaneous value but the trajectory — and the forecast. The emphasis is therefore on time series databases, forecasting models and the clean handling of gaps and outliers.

Market data belongs in the control logic. Day-ahead prices from European bidding zones and grid CO₂ intensity are not display values but inputs to the optimisation.

How we work — our playbook

info@aerea.de (AereA GmbH) — Mon, 01 Jan 0001 00:00:00 +0000

What does a quality gate look like here? #

A merge requires: green build, green unit tests, green integration tests against genuinely started dependencies, green E2E tests of the affected paths and a passed static analysis. Plus a review by a second person. There is no exception and no fast lane — not even for hotfixes; there the scope gets smaller, not the gate.

Phonalisa — modular IP telecommunications system

info@aerea.de (AereA GmbH) — Mon, 01 Jan 0001 00:00:00 +0000

Starting point #

A telephony system is not a project with an end date. It is a product that grows over years: new endpoint generations, new multi-tenancy requirements, a changing threat situation at the network border. That duration is the actual requirement.

Platform and core system #

Modular IP telecommunications system based on SIP, RTP and XMPP with CTI functionality
Multi-tenant management of extensions, ring groups, queues and call rules
Automated device integration and provisioning of endpoints
Client and import functions for migrating existing data
Complementary services around directory, presence and call control

Session border controller and security #

The network border is the most exposed component of a telephony platform. We built our own SBC for it: encryption of signalling and media streams via TLS, SRTP and ZRTP, DDoS protection, rate limiting, hardening of the exposed services and certificate management.

Privacy Policy

info@aerea.de (AereA GmbH) — Mon, 01 Jan 0001 00:00:00 +0000

1. An overview of data protection General information

The following information will provide you with an easy to navigate overview of what will happen with your personal data when you visit this website. The term “personal data” comprises all data that can be used to personally identify you. For detailed information about the subject matter of data protection, please consult our Data Protection Declaration, which we have included beneath this copy.

Accessibility statement

info@aerea.de (AereA GmbH) — Mon, 01 Jan 0001 00:00:00 +0000

Scope #

This statement applies to the website at www.aerea.de in both language versions.

Level of conformance #

We designed and built this website to WCAG 2.2 level AA. Purely commercial B2B offerings do not fall under the German Accessibility Strengthening Act; we apply the standard voluntarily, because we offer accessibility testing as a service ourselves — among others in a public administration system.

Industrial data platform for plant engineering

info@aerea.de (AereA GmbH) — Mon, 01 Jan 0001 00:00:00 +0000

Starting point #

An internationally active plant manufacturer operates machines at customers worldwide. Their operating data is valuable for service, optimisation and further development — but it has to travel across factory and national boundaries without creating unsecured channels.

The task #

A platform for industrial data exchange that scales with the number of connected installations, separates data classes cleanly and secures communication end to end. Plus documentation that enables the client’s own teams to operate and evolve it.

Industrial IoT & automation

info@aerea.de (AereA GmbH) — Mon, 01 Jan 0001 00:00:00 +0000

What we actually do #

Real-time data acquisition — sensor and machine data via OPC UA, MQTT and Modbus, including customer-specific transport protocols for PLCs.
Edge computing — pre-processing, plausibility checking and filtering directly at the machine, before data flows to a cloud or on-premises platform.
Event streaming — Kafka and Redpanda as the backbone for high data volumes, with clean decoupling of acquisition and analysis.
Predictive maintenance and anomaly detection — analysing machine data for early failure detection, with detection and alerting logic on the event stream.
Factory digitalisation — integration with ERP and MES systems, real-time dashboards for operations.
Deployment models — on premises, cloud or hybrid, depending on requirements for data sovereignty, latency and availability.

Why decoupling is the decisive design move #

The most common mistake in IIoT platforms is coupling acquisition and analysis directly. If the analysis fails, measurements are lost — irrecoverably. We therefore insist on an event stream between the two: acquisition writes, analysis reads at its own pace. New analyses can be retrofitted onto historical data later without touching acquisition.

Security & compliance

info@aerea.de (AereA GmbH) — Mon, 01 Jan 0001 00:00:00 +0000

Are you certified to ISO 27001 or TISAX? #

No, and it is not currently planned. We consider it more honest to say so than to argue process maturity that has not been audited. If your procurement mandates a certificate — with automotive OEMs and tier-1 suppliers, TISAX is regularly a hard precondition — we are the wrong supplier at that point. We prefer to say that before the effort rather than after.

Telecommunications

info@aerea.de (AereA GmbH) — Mon, 01 Jan 0001 00:00:00 +0000

What is technically different in this industry #

Real time without a buffer. With voice there is no re-buffering. Latency, jitter and packet loss are immediately audible, which is why QoS optimisation and media path testing are a fixed part of the work.

Exposed components. A SIP network border sits on the open internet and is scanned continuously. DDoS protection, rate limiting and hardened configuration are baseline, not extras.

Automotive

info@aerea.de (AereA GmbH) — Mon, 01 Jan 0001 00:00:00 +0000

What is technically different in this industry #

Data volumes from the vehicle bus. CAN, FlexRay and automotive Ethernet produce very large, densely timed data volumes during measurement. Analysis tools have to cope without delaying the measurement.

Tools with long histories. Analysis and simulation tools have grown over years, often in C++. Modernisation here almost always means stepwise replacement during operation, not a rebuild.

Condition monitoring — migration from C++ to .NET Core

info@aerea.de (AereA GmbH) — Mon, 01 Jan 0001 00:00:00 +0000

Starting point #

The condition monitoring backend had grown over years. Functionally it worked, but every extension cost disproportionate time — mainly because data access was tightly interwoven with the business logic.

The task #

Migration to a current stack, without pausing the product and without carrying the structural problems along.

Approach #

Instead of a 1:1 port to .NET Core, we redesigned the data access layer and built it on Entity Framework. The migration plan follows functional boundaries: after every step the system runs and can be tested. Operation is containerised via Docker against PostgreSQL.

Energy management & e-mobility

info@aerea.de (AereA GmbH) — Mon, 01 Jan 0001 00:00:00 +0000

What we actually do #

Smart energy monitoring — real-time acquisition and visualisation via industrial sensors, solar inverters and smart meters.
Load management — peak shaving, self-consumption optimisation, dynamic balancing between grid supply, storage and generation.
Storage and grid integration — control of battery storage, intelligent switching between grid, storage and renewable sources.
E-mobility — connectivity for wallboxes and charging stations, time- and price-optimised charging including vehicle-side data.
Analytics and forecasting — predictive models for price, generation and consumption, time series analysis on PostgreSQL/TimescaleDB and InfluxDB.
Automation — Node-RED for workflows, custom API integrations for remote monitoring.

The difference between display and decision #

Many energy systems show very well what has happened. The value only appears when a measurement turns into an automated action: charging storage when electricity is cheap and clean; shifting flexible loads before the peak forms; moving charging sessions into the favourable hours without anyone starting the morning without range. That decision logic is exactly the part we build.

Technology stack

info@aerea.de (AereA GmbH) — Mon, 01 Jan 0001 00:00:00 +0000

Area	Technologies
Languages	C, C++, C#/.NET & .NET Core, Java, Python, Go, TypeScript, JavaScript, PHP, QML, Objective-C
Frontend & GUI	Qt, Qt Creator, QML, Angular, responsive web interfaces, mobile apps (Android/iOS)
Communication & streaming	MQTT (EMQX, Mosquitto), OPC UA, Modbus/SunSpec, Kafka/Redpanda, REST/OpenAPI, gRPC, GraphQL, WebSocket, SignalR, CAN bus
VoIP	SIP, RTP/RTCP, SRTP, ZRTP, WebRTC, STUN/TURN/ICE, Asterisk, FreeSWITCH, Kamailio/OpenSIPS, CTI, SBC
Data storage	PostgreSQL/TimescaleDB, SQLite, InfluxDB, MongoDB, Redis, LevelDB
AI & analytics	Pandas, NumPy, scikit-learn, time series and forecasting models, OpenCV/OCR, LLM integration, STT/TTS pipelines, MCP tool integration, agent-assisted development
Security & IAM	TLS, PKI/X.509, OAuth2, OpenID Connect, Keycloak, threat modeling, hardening
Test & QA	xUnit, Karma/Jasmine, Cypress, Selenium, Squish, Testcontainers, WebApplicationFactory
DevOps & operations	Git, SVN, GitLab CI, Jenkins, Docker, Podman, Kubernetes, CMake, SonarQube
Observability	Grafana, Prometheus, Loki, OpenTelemetry
Virtualisation	VMware, Proxmox, VirtualBox
Tools & process	Jira, Confluence, Mantis, DOORS, Fisheye/Crucible, Visual Studio, VS Code, JetBrains IDEs, Xcode, Eclipse, Android Studio

Putting it in context #

This list is not a recommendation. Which technology is right depends on the problem and on your existing system landscape — which is why technology evaluation on a solid decision basis is part of our architecture work rather than of the sales conversation.

Careers & training

info@aerea.de (AereA GmbH) — Mon, 01 Jan 0001 00:00:00 +0000

Editorial note: This page does not yet contain concrete job postings. Please add open positions here or remove the section.

Apprenticeships #

We have been a registered training company since 2012 for IT specialists in application development. Training happens inside live project work — not in a separate learning environment, but on the same systems the team works on, under the same quality gates.

Medical technology

info@aerea.de (AereA GmbH) — Mon, 01 Jan 0001 00:00:00 +0000

What is technically different in this industry #

Evidence before speed. What is not documented does not exist in a regulated setting. Test cases, logs and traceability are not overhead but part of the product — which matches how we work anyway.

IEC 62304 shapes the architecture. The standard requires a software safety classification and development and maintenance planning aligned to it. That acts directly on how the software is cut: what is safety-relevant is isolated and evidenced separately.

User interfaces for a medical laser system

info@aerea.de (AereA GmbH) — Mon, 01 Jan 0001 00:00:00 +0000

Starting point #

A laser system in medical use is planned and controlled through its user interface. That interface is therefore not a frontend but a safety-relevant part of the device.

The task #

Development, testing and documentation of the planning and treatment interfaces, plus extension of the associated test tools and implementation of safety-critical updates within the running product lifecycle.

VoIP & real-time communication

info@aerea.de (AereA GmbH) — Mon, 01 Jan 0001 00:00:00 +0000

What we actually do #

Modular IP telephony systems — multi-tenant management of extensions, ring groups, queues and call rules, automated device provisioning.
WebRTC and browser-based communication — voice and video in the browser, multiparty conferencing, NAT traversal via STUN, TURN and ICE.
Session border controller and security — securing the network border, encryption of signalling and media via TLS, SRTP and ZRTP, DDoS protection and rate limiting.
Gateways, SIP trunking and PBX integration — connecting to existing infrastructure, migrating existing data.
CTI clients — cross-platform coupling of workplace and phone system, including a dedicated update mechanism and a mobile companion.
Quality and performance — QoS optimisation for minimal latency and jitter, load and recovery testing.

Approach & collaboration models #

Typical entry point: a scoped subsystem — the network border or a WebRTC component, say — with subsequent expansion. Alternatively long-term product responsibility, as with Phonalisa — since our founding, 17 years by now.

Public administration

info@aerea.de (AereA GmbH) — Mon, 01 Jan 0001 00:00:00 +0000

What is technically different in this industry #

Deadlines come from outside. A change in legislation has a date that is not negotiable. That requires test automation capable of a full regression run in acceptable time.

Accessibility is mandatory, not optional. BITV 2.0 and EN 301 549 are a precondition for procurement. Accessibility testing therefore belongs in system testing, not in a follow-up project.

Security & cryptography

info@aerea.de (AereA GmbH) — Mon, 01 Jan 0001 00:00:00 +0000

What we actually do #

Secure communication protocols — design and implementation for machine, plant and system communication, including securing the network border.
Encryption and certificates — symmetric and asymmetric methods, PKI, X.509, TLS and TLS client certificates, plus the full certificate lifecycle.
Authentication and authorisation — OAuth2, OpenID Connect and Keycloak, including role and permission models and integration with existing identity landscapes.
Threat modeling and audits — structured analysis along system boundaries, security audits of existing architectures, hardening of network and application components.
Regulated environments — implementation of cyber security requirements, among others for safety-critical updates to a medical laser system.

On certificates #

We hold neither ISO 27001 nor TISAX, and neither is currently planned. We consider it more honest to say so and instead document how we work: Security & compliance describes development location, handling of client data, sub-processors, hosting options and how we use AI tooling on client code — in a form usable as a template for supplier questionnaires.

Vehicle bus analysis platform

info@aerea.de (AereA GmbH) — Mon, 01 Jan 0001 00:00:00 +0000

Starting point #

Vehicle bus data from CAN, FlexRay and automotive Ethernet accumulates in large volumes during measurement. The central analysis platform for it had grown in C++ over years — functionally extensive, structurally hard to change.

The task #

Less additional development capacity than technical leadership: modernise the architecture, evolve how the teams work, and connect both so that it holds after the engagement ends.

Quality assurance & test automation

info@aerea.de (AereA GmbH) — Mon, 01 Jan 0001 00:00:00 +0000

The levels at a glance #

Level	Services
Test strategy	Test design, requirements engineering, acceptance criteria, test management
Manual testing	Black-box and white-box tests, exploratory testing, system integration tests, retesting of fixes
Test automation	Unit tests (xUnit, Karma/Jasmine), GUI automation (Squish, Selenium), E2E tests (Cypress), integration tests against real services and databases (WebApplicationFactory, Testcontainers)
Process anchoring	Test-driven development as team standard, mandatory CI/CD quality gates, continuous increase in coverage and degree of automation
Specialist testing	GDPR, accessibility and usability testing, non-functional tests, validation of streaming and time series data
Documentation	Test case management, test logs and reports, release documentation, manuals, context help, screencasts
Test environments	Reproducible environments via Docker and Testcontainers, VMware, Proxmox, VirtualBox; synthetic test data

Why QA is a role here, not a phase #

In most companies of this size, developers test their own code — with the familiar blind spot — or the client takes on acceptance. Here, an ISTQB-certified test manager owns quality assurance from the management level. That shifts the priorities: tests are a merge gate, not an afterthought; test documentation is part of the product, not decoration.

Tax software of a state finance authority

info@aerea.de (AereA GmbH) — Mon, 01 Jan 0001 00:00:00 +0000

Starting point #

A tax administration system does not change because someone had a better idea, but because a law comes into force. The deadlines are set externally and cannot be moved.

The task #

Further development and quality assurance over several years, with the requirement of having a reliable regression run for every statutory deadline.

Consulting, reviews & training

info@aerea.de (AereA GmbH) — Mon, 01 Jan 0001 00:00:00 +0000

What we actually do #

Architecture reviews — assessment of an existing or planned architecture with prioritised recommendations.
Code reviews — sampled or comprehensive, focused on maintainability, testability and the places where changes typically become expensive.
Training and workshops — Clean Code, SOLID, design patterns, Clean Architecture, refactoring legacy code, test methodology, agile transition and the productive use of AI-assisted development tools.
AI enablement — introducing agent-assisted development into existing teams and toolchains, including safeguards through quality gates.
Technical project leadership — taking technical lead in modernisation or transition programmes.

Grounded in practice #

The training does not come from slide decks but from live projects. Architecture modernisation, agile transition and developer training were delivered among others around a vehicle bus analysis platform for a German premium car manufacturer.

How we develop with AI agents — and the safeguards that turned out to be necessary

info@aerea.de (AereA GmbH) — Wed, 05 Aug 2026 00:00:00 +0000

This text describes a pipeline that runs in production here — on a multi-tenant communication system built on ASP.NET Core, Angular and FreeSWITCH, with self-hosted GitLab. Every finding below comes from a real run and was found and fixed before the merge. We do not name the system, because individual findings would otherwise be traceable back to it.

What is the actual bottleneck in developing with AI? #

Not the speed at which code appears. The bottleneck is trust: code that compiles, whose tests are green and that reads correctly — and is wrong anyway. This class of defect accounts for almost every finding we have, and no standard pipeline sees it.

Build test automation in house or contract it out?

info@aerea.de (AereA GmbH) — Wed, 08 Jul 2026 00:00:00 +0000

Why is the question framed wrongly? #

Test automation is not a project with an end but an estate with a maintenance load. The question is therefore not “who builds it” but “who maintains it in three years”. Skip that and you buy a test suite that is red after two releases, then skipped, then switched off — and you pay for it twice.

The guardrails we set for agents

info@aerea.de (AereA GmbH) — Fri, 19 Jun 2026 00:00:00 +0000

May an agent write code in a regulated project? #

Yes — under the same conditions as a human. What matters is not who wrote the line but whether it is specified, reviewed, tested and released. Anyone who closes that chain can use agents. Anyone who opens it for agents has a problem with humans too.

Custom or standard software in energy management?

info@aerea.de (AereA GmbH) — Thu, 14 May 2026 00:00:00 +0000

When is a standard product enough? #

As long as your installation matches the picture the product was built for: one manufacturer, a manageable scope, an optimisation strategy from the catalogue. Then the manufacturer’s own system is practically unbeatable — available sooner, cheaper to enter, maintained by someone else. The tipping point almost never comes at purchase, but at the third special case.

OPC UA or MQTT for machine connectivity?

info@aerea.de (AereA GmbH) — Fri, 24 Apr 2026 00:00:00 +0000

What is the difference in one sentence? #

OPC UA is an information model with a transport, MQTT is a transport without an information model. OPC UA describes what a value means — type, unit, membership, access rights. MQTT only moves it from A to B and leaves the meaning to your convention. Everything else follows from that single difference.

E2E tests against real databases with Testcontainers

info@aerea.de (AereA GmbH) — Thu, 12 Mar 2026 00:00:00 +0000

Why do we run end-to-end tests against a real database? #

Because a mock confirms the assumption you had while writing it, and a real database contradicts it. The failures that get expensive in distributed systems sit exactly where the mock knows nothing: in transaction boundaries, isolation levels, the ordering of migrations and the time zone behaviour of timestamps. A test against an in-memory substitute measures the substitute, not the system.

Talk to the architect directly.

info@aerea.de (AereA GmbH) — Mon, 01 Jan 0001 00:00:00 +0000

Location and availability #

AereA GmbH, Wüstenstein 18, 91346 Wiesenttal, Bavaria, Germany. Business hours Monday to Friday, 9:00 to 18:00 CET.

Details on reference projects and client-side contacts are provided on request and after approval.

Thank you — your enquiry has arrived.

info@aerea.de (AereA GmbH) — Mon, 01 Jan 0001 00:00:00 +0000

What happens next #

Your message is sitting directly in the inbox of the responsible contact. If you want to add something in the meantime — an architecture sketch, a specification, access to a repository — simply reply to our response.

If it is urgent: +49 36424 760823, Monday to Friday, 9:00 to 18:00 CET.

Back to the home page · View project reports