ABOUT

One team, from concept to production.

A safety-critical programme usually needs three suppliers: one to write the ISO documentation, one to write the firmware, and one to design the board. We do all three ourselves, which removes the two handoffs where programmes lose the most time.

Our engineering work goes back more than fifteen years across automotive and industrial programmes, covering functional safety, cybersecurity, embedded software, and power electronics hardware. Keeping all four in-house is the whole point of this page.

15+
Years Engineering
6
Public Reference Implementations
2
OpenChain Conformances
WHY ONE SCOPE

The safety case gets written by people who watched the product get built.

In a split programme, a consultancy writes the hazard analysis and leaves. Months later a hardware firm lays out the board and a software house writes the firmware, neither having been in the room for the ASIL decisions. At the end the consultancy returns to assemble a safety case for a design it never saw take shape, and every assumption from the first phase has to be re-verified against a product nobody in that room touched.

We run the whole chain instead. The engineer who wrote the hazard analysis reviews the schematic and signs off the test evidence.

  • No requirement gets re-interpreted as it crosses a supplier boundary
  • Hardware decisions are checked against the safety concept while they are still cheap to change
  • One party answers to the assessor, with no gaps between scopes to argue over
PROGRAMME STAGE TYPICAL SPLIT norxs Concept & feasibility HARA / TARA System architecture Hardware design & layout Firmware & software Verification & test Safety case & documentation Assessment support CONSULTANCY HW + SW CONSULTANCY AGAIN HANDOFF HANDOFF ONE ACCOUNTABLE SCOPE
Where the two handoffs sit, and what we remove
SCOPE OF WORK

Three disciplines we carry ourselves.

Safety & Security

Certification engineering

HARA & ASIL determination26262-3
FSC / TSC & safety requirements26262-3/4
FMEDA & hardware metrics26262-5
TARA, CSMS & type-approval evidence21434 / R155
Safety case & assessor support26262-2
Software & Firmware

Code that ships in the product

Bare-metal, RTOS & AUTOSAR CPR25-11
MISRA C / C++ compliant sourceMISRA
Secure bootloader & OTA updateR156
Unit test & MC/DC coverage26262-6
Static analysis & stack usage proof26262-6
Hardware

Electronics design (NRE)

Schematic capture & multilayer layoutNRE
Power stage, motor drive, BMS front-endNRE
Signal integrity & EMC pre-complianceCISPR 25
Prototype bring-up & DFM reviewNRE
Test fixtures & bench validationNRE
WHAT IT CHANGES FOR YOU

You stop being the integrator

Nobody has to carry a requirement between a consultant who cannot read a schematic and a vendor who has not read the standard. That job disappears.

Problems surface at architecture

A safety requirement the hardware cannot meet gets caught while the block diagram is still a block diagram, rather than during validation.

One name on the finding

When an assessor raises a gap there is no discussion about whose scope it fell into.

QUALIFICATIONS

Certification held by the engineers doing the work.

The practice is led by an engineer holding a doctorate in electrical engineering. The certifications below are issued to individuals rather than to companies, which is why they are listed by qualification: credential IDs and issuer verification links are provided during supplier qualification.

AI Safety Professional (SC-AISP)SGS-TÜV Saar2026
Automotive Functional Safety Expert (ISO 26262)SGS-TÜV Saar2026
Automotive Cybersecurity Professional (ISO/SAE 21434)SGS-TÜV Saar2025
Automotive Functional Safety Professional (ISO 26262)SGS-TÜV Saar2024