KioptraSECURE
// AI Architecture · Digital Transformation · Operational Excellence · Regulatory Framework

We make regulated organisations digital and AI-powered, all the way to a measurable business result.

For pharma, medtech and regulated mid-sized companies. Across Germany, based in Bernau near Berlin.

Strategy, architecture and delivery from one team. We combine AI and IT architecture with commercial and operational leadership and take digital initiatives in regulated industries from the first analysis into live operation.

[ 01 ]

AI Architecture

The Solution
  • Claude / Claude Code
  • Azure OpenAI
  • Microsoft Copilot
  • Azure AI Foundry
  • GraphRAG
  • Lokale KI (Ollama)
  • MCP / Agentic
[ 02 ]

Digital Transformation

The Delivery
  • ERP Implementation
  • Cloud Transition
  • Modern Workplace
  • Process Harmonisation
  • Project Steering
  • Product Management
  • Change Management
[ 03 ]

Operational Excellence

The Value Creation
  • Market Entry & GTM
  • P&L Management
  • Product Cost Optimization
  • Lean & Process Efficiency
  • OKR / KPI Frameworks
  • BI & Reporting
  • Pricing & Margin
Regulatory frameworks
DSGVONIS2ISO 27001BSI IT-GrundschutzEU AI ActDORAMaRiskGMPAnnex 11

Innovation in regulated industries does not take an appetite for risk.
It takes precision and clearly aligned solutions
that deliver today and still hold tomorrow.

/* our name */

The dioptra was an instrument for measuring and sighting, with which people explored the sky and aligned their buildings as far back as antiquity, long before the modern age. Kioptra carries that mindset into the AI era: measure, align, deliver.

Our name Ki-op-tra holds three disciplines: AI architecture, transformation and operational excellence. All of them point to the same place: your business result.

[ Services ]

Multiple disciplines, one result

AI architecture, transformation, operational value creation and compliance work together. The markers show which disciplines apply.

[01]

Digital Transformation & ERP

End-to-end migration of a regulated pharmacy to Dynamics 365 Business Central as a single source of truth: integrated finance, inventory and batch management, e-commerce integration and event-driven automation on an AI-ready, EU-hosted data foundation. Industry- and data-protection-compliant, from P&L transparency to go-live.

#Dynamics 365 BC#ERP migration#P&L & Margin#Automation
AI ArchitectureTransformationOperational ExcellenceCompliance
[02]

Market Entry & Scaling

Go-to-market and growth in regulated markets, from strategy to market success.

#MarketEntry#GTM#Scaling
TransformationOperational Excellence
[03]

Operational Excellence & Cost Optimization

Efficiency, margin and cost control in regulated processes. Creating value without breaking compliance.

#P&L#CostOptimization#OKR
Operational ExcellenceCompliance
[04]

GMP-Compliant Digitalisation

Digital production systems for cleanroom and regulated manufacturing, fully audit-ready documented.

#GMP#Cleanroom#Audit Trail
AI ArchitectureTransformationCompliance
[05]

Data Protection & DPIA

Audit-ready Data Protection Impact Assessments as a repeatable procedure, including data processing in third countries and KDG.

#GDPR#DPIA#KDG
AI ArchitectureCompliance
[06]

AI Architecture & Agentic Engineering

AI solutions and agents we run ourselves, from Azure AI Foundry through local inference to knowledge-graph integration.

#Azure OpenAI#GraphRAG#Agentic
AI ArchitectureCompliance
[07]

Information Security & OpSec

ISMS and operational security for regulated industries, from NIS2 and ISO 27001 to DORA, through to audit sign-off.

#NIS2#ISO 27001#DORA
TransformationCompliance
[ Approach ]

One path in four stages, from analysis to business result

Most stop after the concept. We support all four stages, from process analysis to live operation, and stand behind the result.

STAGE 01

Regulatory Framework · The Foundation

We make initiatives audit-proof from day one, whether EU AI Act, NIS2, GDPR, GMP or DORA. In regulated industries, that’s not the last step but the first.

STAGE 02

AI Architecture · The Solution

We operate AI ourselves, from Azure AI Foundry through local inference to knowledge-graph integration. Regulatory safety is part of the architecture, not an add-on.

STAGE 03

Digital Transformation · The Delivery

We steer the delivery of complex, multi-stakeholder projects, from architecture to go-live, and make sure the system actually runs in the end.

STAGE 04

Operational Excellence & Value Creation · The Result

We don’t stop at a clean system. From market entry, cost and margin we create measurable business value.

[ References ]

Selected engagements

We are most at home in regulated pharma and healthcare environments, from ISMS and GMP production to the ERP migration of a large mail-order pharmacy. Experience beyond that: financial services, social economy and industry.

Pharma / Healthcare

AI Use Case Programme: Lean Digital Transformation

Identification → Prioritisation (value × feasibility × regulation) → Implementation in a regulated environment. Company-wide lean-digital program in a fast-growing, regulated environment: 120+ measures prioritized, 50+ implemented in the first year, 20+ paper-based processes eliminated. Result: logistics output +40%, production +20%, revenue tripled without proportional headcount growth.

Pharmacy / Healthcare

ERP transformation on Dynamics 365 Business Central

Overall project lead for the ERP migration of a regulated pharmacy to Microsoft Dynamics 365 Business Central as a single source of truth: integrated finance, inventory and batch management, e-commerce integration and event-driven automation on an AI-ready, EU-hosted data foundation, industry- and data-protection-compliant.

Pharma / Healthcare

ISMS rollout (NIS2 / ISO 27001) & GMP production system

Building a full ISMS for a pharma group classified as an „important entity“, plus design and implementation of a GMP-compliant digital production documentation system (tablet, cleanroom, four-eyes principle). Plus processes and a framework for fully AI-driven specification, development, testing and deployment.

Pharma / Healthcare

Company-wide KPI Steering (Power BI)

A single source of truth across ERP, CRM, web shop and finance; real-time KPIs for management, sales and operations. Result: sales performance +20%, one FTE saved in finance, shadow Excel reporting fully replaced.

Automotive / Industry

Product Cost Optimization & Board Reporting

Integrated cost and action reporting for a large-scale vehicle development program: 100+ financial targets consolidated across five divisions, board presentations fully automated. Result: drastically reduced manual effort, one full-time position eliminated.

Financial sector

OpSec governance & regulatory audit

Operational security governance for an investment bank preparing for a supervisory audit: operationalising the OpSec requirements and anchoring the processes in the written rules of organisation (Schriftlich fixierte Ordnung / SfO).

Social sector

Data Protection Impact Assessments (GDPR / KDG)

Multiple DPIAs for a privacy-intensive social-sector organisation, for Microsoft 365, a specialist CRM and a fundraising platform, set up as a repeatable procedure. AI-assisted research, consolidation and generation of structured DPIA documents using locally operated AI systems, so that data protection is preserved during the drafting itself.

[ About ]

Two entrepreneurs, one mission — from the regulatory framework through architecture to business result

Michael Ludwig

Michael Ludwig

Founder
Michael Ludwig
Dipl. Wirtschaftsmathematik (TU Berlin, University of Florida)Microsoft Cybersecurity Architect (SC-100)TOGAF 9.2 Enterprise Architecture ManagementM365 Security & Compliance ArchitekturScrum (PSM / PSPO)

Over 15 years at the intersection of AI, IT architecture, security and regulation.

Diplom in business mathematics (TU Berlin), most recently Principal IT Architect at a leading German IT consultancy. Engagements include: security governance for an investment bank, internal AI concept designer on Azure OpenAI, enterprise architecture and cloud transformation for corporations with thousands of seats.

Roland Schneller

Roland Schneller

Founder
Roland Schneller
M.Sc. Mechanical Engineering (TU Munich)Ex-COO & Managing Director, CansativaEx-BCGP&L · Market Entry · Cost ExcellenceFundraising & Investor Relations

Over 10 years of commercial and operational leadership in highly regulated industries.

As COO & Managing Director of Cansativa GmbH, built the number 1 in a young, highly regulated pharma segment: growth to >€80M ARR (>100×), full P&L responsibility, GMP transformation and an international supply chain across 10+ countries; alongside fundraising (>€15M) and investor/board communication. Previously strategy consulting at BCG and VW Group Consulting.

Michael owns the technical and architectural side, Roland the commercial and operational one. That lets a small team cover what large companies need several departments for, without anyone having to translate between technology and business.

[ FAQ ]

Short answers

Do you work with mid-sized companies?

Yes. Our focus is regulated organisations, from mid-sized companies to corporate groups, above all in pharma, healthcare and medtech. Experience beyond that: financial services, social economy and industry.

How does an engagement start?

With a conversation about your initiative. From there we work in four stages: regulatory framework, AI architecture, delivery and operational value creation, from the first analysis into live operation.

How do you handle the EU AI Act, GDPR and GMP?

Regulation is our first step, not the last. We make initiatives audit-proof from day one, whether EU AI Act, NIS2, GDPR, GMP, Annex 11 or DORA.

Can you run AI without data leaving the organisation?

Yes. We operate AI ourselves, from Azure AI Foundry with EU hosting to locally run models. For example, we draft data protection impact assessments with local AI so that data protection is preserved during the drafting itself.

> Contact

Let’s talk.

From an AI initiative to ERP modernisation to operational scaling: tell us where it stalls. We sort out the rest in conversation.

Kioptra · Bernau bei Berlin · Germany