Transportation
Modern Sales Platform for Deutsche Bahn
DB Fernverkehr AG migrated its Vendo sales platform to a microservice architecture using itemis teams.
View ProjectTailored Software.
Grounded Engineering.
Smart Compliance.
For over twenty years, we have developed custom enterprise applications and tools for compliance engineering and model-based systems and software development. With this experience, we are the reliable partner for leading companies in automotive, medtech, industrial and finance.
Our Services
Three business areas. One engineering culture.
We bring together over two decades of experience in three clearly defined business areas — compliance engineering for safety-critical and connected products, model-based development tools, and custom enterprise applications.
Compliance Intelligence
Tools and consulting for ISO/SAE 21434, EU Cyber Resilience Act, IEC 62443, ISO 26262, IEC 61508, ASPICE and requirements traceability. For CISOs, safety officers and engineering leads in automotive, industrial, medtech and critical infrastructure.
Products
itemis SECURE · itemis ANALYZE
Model-Based Engineering
Tools for model-based systems and software development – itemis CREATE for statecharts and code generation, tools for MBSE as well as custom tooling, DSLs and VSCode extensions. For automotive, medtech, aerospace and embedded.
Product
itemis CREATE
Custom Software Development
Bespoke software development – full-stack, AI-powered, agile. For IT directors, CTOs and enterprise architects in banking, insurance, logistics, energy and the public sector.
Model
Project & Time-and-Material
Trusted by
References
Depth over buzzwords. Tools over presentations.
When I founded itemis over twenty years ago, the idea was simple: engineering not as a commodity, but as a craft. Today we are many times larger — but the same idea still drives us. We stay with what we truly know, keep teams together, and take the word “reliable” more seriously than most people say it.
My benchmark for AI? It multiplies substance. Those without it get nothing but well-formatted emptiness, despite AI. But those who bring experience and expertise can achieve more with it today than ever before. itemis has embodied this since its founding: deep engineering expertise and the discipline to turn innovation into tangible results. With AI, we can multiply exactly that substance — across far more areas than software development alone.
Four promises
What sets us apart
Clients expect more than competitive rates. They want a partner who stays calm under pressure and acts pragmatically when it matters.
Cohesive and motivated
We staff projects with cohesive teams and engineers who are motivated because we take them seriously. Clients notice the difference from the very first sprint.
Resilient under pressure
Audits, release weeks, crisis sprints — we stay calm, maintain focus and deliver under pressure every time. Reliability that goes beyond the contract.
Direct and at eye level
No diplomatic detours, no politics. We communicate directly, listen carefully and speak plainly when something isn't right. A sparring partner, not a supplier.
Performance over sales pressure
We invest in the partnership, not the sales pitch. Those who know us know: at itemis, reliability is not something we promise — it is something we demonstrate.
Insights from our engineering teams
Blog
Cyber security
Item Definition: Why the First TARA Step Decides All the Others
The Item Definition sets the quality ceiling for the whole TARA — what abstraction level is right, why SBOM mapping forces a minimum resolution, and why a living model is the foundation for API and MCP integrations.
Read Article
Jens Bühl
9 min read
Blog
Cyber resilience act
Living TARA: Why the Cyber Resilience Act Changes Your Engineering Process, Not Your Documentation
The CRA doesn't ask for a one-time risk analysis — it demands a permanently demonstrable security engineering process. How a Living TARA and the Security Digital Thread keep your risk picture continuously current and audit-ready.
Read Article
Dirk Leopold
6 min read
Blog
Cyber security
CRA Risk Analysis in Excel: Start, Import, Scale
Excel template for CRA risk analysis: TARA in line with ISO 21434 and IEC 62443 — how to start methodically, what you can import, and when Excel becomes the bottleneck.
Read Article
Jens Bühl
6 min read
Whitepapers
Ai enablement
Local AI That Competes
Compare systems, not models. Whether a self-hosted open-weight model holds up is decided by the context you assemble, the tools it can call, the checks it has to pass and the training data your workflow produces on its own. Christoph Hess sets out five engineering levers and the conditions under which each one pays off.
Download Whitepaper
Blog
Systems engineering
MathWorks System Composer vs. SysML Tools: Which One Fits Your Project?
System Composer or a SysML tool for your architecture modeling? A comparison across requirements handling, simulation, onboarding, stakeholder views, AI integration, and cost — and why the answer depends on your project.
Read Article
Benjamin Alders
7 min read
Webinar
Full stack
Camunda 7 is over
Evaluating Your Migration Options — a joint session with itemis and Haulmont on life after Camunda 7's end of life.
Watch WebinarCertifications
Certified in quality and information security.
We don't just help others meet standards — we live them ourselves. itemis operates externally audited management systems for quality and information security. Anyone outsourcing safety-critical engineering and sensitive data works with a verified partner.
Quality Management
ISO 9001:2015
Internationally recognised standard for quality management and the continuous improvement of processes, products and services.
Valid until 27.04.2027
View certificate
Information Security
ISO/IEC 27001:2022
Internationally recognised standard for information security management to protect data, systems and critical business processes.
Valid until 01.09.2026
View certificate