Taking new projects · remote across EU, on-site in Nuremberg

Cloud platforms that ship fast and pass the audit.

Bunch is a Nuremberg cloud engineering company. We build and fix Kubernetes, Terraform and CI/CD setups for teams that can’t afford downtime or compliance surprises, including fintech, payroll, healthcare and other regulated software. Every project is delivered by our founder, Lis Louise, so you always work with a senior engineer.

9+years in DevOps & cloud
3regulated industries
DE · EN · ESworking languages
Lis Louise, founder of Bunch Cloud Engineering
Lis LouiseFounder · Senior Cloud Platform Engineer
Stack we work in:KubernetesTerraformArgo CDGitHub ActionsGitLab CIAWSSTACKITvSphereGrafana LGTMOpenTelemetryPython
Services

What we take off your plate.

Six areas where companies in Germany and the EU are hiring senior help right now. Each one is something we’ve done in production, not only in a lab.

01

Kubernetes & Platform Engineering

An internal platform your developers actually like: self-service deployments, sensible defaults, safe by design.

  • Cluster design, hardening & autoscaling
  • GitOps with Argo CD
  • Network policies, RBAC & multi-tenancy
  • Golden paths & developer experience
For: teams outgrowing hand-made clusters
02

Infrastructure as Code

Every environment reproducible, reviewable and auditable, with no more snowflake servers or console clicking.

  • Terraform modules & landing zones
  • Multi-cloud: AWS, STACKIT, on-prem
  • IAM least privilege & secrets management
  • Architecture decisions recorded as ADRs
For: drift, slow provisioning, audit findings
03

CI/CD & DevSecOps

Pipelines that are fast, trustworthy and secure, from commit to production.

  • GitHub Actions, GitLab CI, Jenkins
  • SonarQube gates, dependency & CVE scanning
  • SBOMs for the Cyber Resilience Act
  • Locked-down pipeline credentials
For: slow builds, flaky tests, supply-chain risk
04

Observability & Reliability

Know something is wrong before your customers do, and have the data to prove what happened.

  • Grafana LGTM: Loki, Tempo, Mimir
  • OpenTelemetry instrumentation
  • SLOs, alerting & on-call runbooks
  • Batch & high-throughput job monitoring
For: blind spots, alert fatigue, long incidents
05

Sovereign Cloud & VMware Exit IN DEMAND

Move off rising VMware licence costs or non-EU hyperscalers without a big-bang rewrite.

  • vSphere → Kubernetes / cloud migration plans
  • EU-resident setups on STACKIT & AWS EU
  • GDPR-aligned data flows & encryption
  • Portability & exit strategies
For: licence shocks, data-residency requirements
06

Compliance Engineering NIS2 · DORA

Turn ISO 27001, NIS2 and DORA requirements into technical controls and evidence, not just policy documents.

  • Gap analysis against ISO 27001 Annex A
  • Audit logging, access control, retention
  • Incident-reporting readiness
  • Evidence your auditor can follow
For: newly regulated companies, upcoming audits
Also available: MLOps & AI infrastructureCloud cost reviewsTest automationTeam mentoring
How to work with us

Three ways to start.

Start small with a fixed-scope review, or bring us into your team for a longer stretch. Rates depend on scope and duration. Ask and you’ll get a clear quote within a day.

FIXED SCOPE · 5 DAYS

Platform Health Check

Fixed price · written report
  • Review of cluster, IaC & pipelines
  • Security & reliability risks ranked
  • Cost & quick-win findings
  • A 90-day roadmap you can act on
Request a health check
MOST COMMON · 4–12 WEEKS

Project Delivery

Fixed scope or time & materials
  • A defined outcome: migration, platform, pipeline
  • Hands-on implementation, as code
  • Docs, ADRs & handover to your team
  • Weekly progress you can see
Discuss a project
ONGOING · RETAINER

Fractional Platform Lead

2–8 days per month
  • Senior platform ownership without a full-time hire
  • Architecture reviews & decisions
  • Mentoring for your engineers
  • Vendor & auditor conversations
Ask about availability
Selected work

Proof, not promises.

Our own product, and the kind of client work our founder has delivered. Client names are withheld where contracts require it.

A product by Bunch

BunchAudit

A SaaS platform that automates ISO 27001:2022 gap audits with AI. Companies upload their security documents, and the platform checks them against all 93 Annex A controls, scores each one pass / partial / fail, maps the evidence and suggests fixes.

Designed and built end-to-end by Lis Louise: backend, frontend, AI pipeline, payments and a GDPR-compliant architecture with EU data residency.

FastAPINext.jsAI / NLPAWS S3StripeGDPR
Visit bunchaudit.org ↗
FINANCIAL SERVICES · 2025–NOWPlatform · IaC · Observability

Cloud platform for tax & payroll software

CI/CD, Terraform and Kubernetes for cloud accounting and payroll services used by hundreds of thousands of business clients, under strict German data-protection rules.

Reproducible, auditable environments, GitOps deployments with Argo CD, and LGTM observability across monthly payroll batch runs.
MEDICAL / DENTAL CAD · 2021–2025CI/CD · DevSecOps

Secure pipelines for medical-grade software

CI/CD with SonarQube quality gates, dependency and CVE management across several product lines, and sandboxed test environments for C++ desktop software.

Vulnerabilities caught earlier in development, tighter pipeline permissions, and junior engineers mentored in secure coding.
AUTOMOTIVE · 2017–2020CI/CD · Test automation

Build & test infrastructure for automotive software

CI/CD pipelines, static analysis and Python / C++ test automation for safety-relevant automotive products.

Broad automated test coverage across critical components and fewer regressions reaching later stages.
RESEARCH · 2021Machine learning

Deep learning for MRI image segmentation

Designed and trained neural networks for automated medical image segmentation, published at Bildverarbeitung für die Medizin 2021.

The background behind our MLOps and AI-infrastructure work. Read the paper ↗
Process

Simple, transparent, no lock-in.

You keep everything we build: code, docs and knowledge. Our goal is a team that can run it without us.

1

Intro call

30 minutes, free. Your situation, goals and constraints. We’ll tell you honestly whether we’re the right fit.

2

Proposal

A short written scope with outcomes, timeline and price. No vague hourly estimates.

3

Build

Work in your repos, with your team, in small reviewed changes. Weekly check-ins.

4

Handover

Documentation, ADRs and a walkthrough, so your team owns it from day one.

About Bunch

Engineer first, physicist by training.

Bunch was founded by Lis Louise to give regulated companies direct access to senior platform engineering, without agency layers or junior hand-offs. In her words:

“I’ve spent more than nine years building the infrastructure behind software where mistakes are expensive: automotive systems, medical CAD, and financial platforms that run payroll for a large part of the German economy.

My physics background shapes how I work. I measure first, change one thing at a time, and write down why. Clients usually bring me in when things are slow, fragile or about to be audited, and keep me because the result is simpler than what was there before.

Outside client work I built BunchAudit, so I know what it takes to ship and run a product on my own.”

🇪🇸 Spanish: native🇬🇧 English: C2🇩🇪 German: C1🇫🇷 French: A2
  • Software Engineer, Cloud Platform InfrastructureALTEN · financial-accounting & payroll platform
  • Software Engineer, Test Automation & Infrastructureexocad · dental CAD software
  • Machine Learning Research Engineerpi3g · computer vision
  • Software Developer, CI/CD & Test AutomationeSolutions · automotive software
  • BunchAuditAI-powered ISO 27001 audit platform
  • M.Sc. PhysicsFAU Erlangen-Nürnberg · ML in Production certificate (Coursera)
FAQ

Good to know.

Anything else? Just ask in the form below.

Do you work remotely or on-site?

Mostly remote, across Germany and the EU. On-site in the Nuremberg / Erlangen / Fürth area, and elsewhere for kick-offs or workshops when it helps.

Can you start on short notice?

Often within two to four weeks. A Platform Health Check can usually start sooner. Get in touch with your timeline and we’ll give you a straight answer.

Do you take full-time contracts through agencies?

Yes. We work directly with companies and through established IT staffing partners, on fixed-scope or time-and-materials terms.

Which clouds do you support?

AWS, STACKIT and on-prem / VMware vSphere, plus hybrid setups between them. The principles (IaC, GitOps, observability) carry over to other providers.

Will my team be able to maintain what you build?

That’s the goal. Everything lives in your repositories, is documented, and decisions are recorded as ADRs. We finish every engagement with a handover session.

Can we work in German or Spanish?

Yes. We work in German, English and Spanish, so meetings, documentation and code reviews can be in whichever your team prefers.

Contact

Let’s talk about your platform.

Tell us briefly what you’re dealing with. We reply within one business day, usually with a few questions and a time for a free 30-minute call.

Schmalkaldener Straße 1, 90491 Nürnberg · remote across the EU
Our product: bunchaudit.org