.svg)
English
Founder, owner and CEO of Heartland Solutions. Board member of the German Datacenter Association.
Ten years of leadership in fast-growing technology companies, from AI and cloud to critical infrastructure. Today she builds management systems with Heartland for tech companies, systems that scale with the business instead of slowing it down: ISO 27001, SOC 2, ISO 42001 and NIS-2, right inside the tools your teams already use.
Because I have seen what growth really fails on. Not technology and not capital, but structures that don’t scale. At Northern Data we were around 20 people when I started and more than 200 at the end, with 22,000 GPUs across Europe. We rolled out ISO 27001 group-wide during that time, and it was only worth something when it made operations better. That is exactly the standard I wanted to turn into a product: a management system that works as an asset, not as a cost center.
By building the management system into the company instead of next to it. We build it into the systems your teams already use: Microsoft 365, SharePoint, Jira or Confluence. No extra software, no shadow processes, no second source of truth. Then the certificate is the result of a better operation, not the other way round. And at the next security questionnaire, your sales team already has the answers in hand.
“Heartland established a scalable management system and guided us to ISO 27001 certification on schedule.”
One contact who is allowed to decide. I sit in the kick-off, on the steering committee and in the audit. We don’t have to sell anyone software or explain a quarter to an investor. We have exactly one metric: is the client certified on the date we promised? So far the answer has been yes, every time.
For every company that builds AI into its products or processes, and by now that is almost everyone. Customers and regulators want to know how you govern AI, not just that you use it. ISO 42001 makes exactly that verifiable. We integrate it into the same system as ISO 27001: one management system, several standards, one audit rhythm.
“From the very beginning, Heartland defined a clear time-to-certification and consistently met it. The speed and structure of the implementation were a decisive added value for us.”
Every digital product runs on infrastructure, and its requirements flow straight into your customer contracts: NIS-2, the AI Act, digital sovereignty. On the board I see early where regulation and the market are heading. Our clients benefit because we align their management system today with what will be asked for tomorrow.
Hopefully still right in the middle of our clients’ operations. By 2030, Heartland should be the firm that tech companies in Europe call when growth meets regulation. Whether it is ISO 27001 for the first enterprise tender or ISO 42001 for their own AI. I want our clients to stop seeing their management system as an obligation by then, and to see it as the part of their company that keeps working under pressure. And I want us to stay owner-led. Not because growth isn’t worth anything, but because I still want to sit in the kick-off myself. That is the part of the work I founded Heartland for.
How I run projects – and what you get out of it.
We think from operations outward. The starting point is your product, your customers and your growth targets, not the text of the standard.
We take responsibility all the way into day-to-day operations. We name the time to certification up front, and we keep it.
Security, governance and compliance are part of the operating model. They stabilize operations instead of slowing them down.
We build structures that carry growth. Scaling, resilience and cost control from day one, whether you have 20 or 2,000 employees.
Discovery call, project plan, fixed price. We name the time to certification up front, usually under 2 months.
