Skip to content
7 engagements live · NIS2 q-deadline 142d

Strategythat ships.

One contract. One team. One delivery. The director who scopes the audit also signs off the go-live — and the certification, and the support contract.

HQ
Hamburg · Munich
Practices
4 named directors
Cert. authority
PECB partner
SOS-KINDERDÖRFER WELTWEIT200Windows laptops in Intune greenfield scope·POWER AI90%NL query resolution rate·SOS-KINDERDÖRFER WELTWEIT72%test coverage · 06/2026·VERMO40%reduction in manual processing·SOS-KINDERDÖRFER WELTWEIT7carve-out workstreams coordinated·INTERNAL6PECB-certified internal auditors·EU AI ACTAUG 26GPAI obligations — already in scope·SOS-KINDERDÖRFER WELTWEIT200Windows laptops in Intune greenfield scope·POWER AI90%NL query resolution rate·SOS-KINDERDÖRFER WELTWEIT72%test coverage · 06/2026·VERMO40%reduction in manual processing·SOS-KINDERDÖRFER WELTWEIT7carve-out workstreams coordinated·INTERNAL6PECB-certified internal auditors·EU AI ACTAUG 26GPAI obligations — already in scope·

// partners + clients

Microsoft
OTRS
PECB
Punic Systems
SOS-Kinderdörfer weltweit
iterise consulting GmbH
POWER AI
Vermo

// measured impact

Numbers, not adjectives.

Named-client outcomes. Counted, not modelled.

metric_010

Windows laptops in Intune greenfield scope.

// src · SOS-Kinderdörfer weltweit

metric_020%

Test coverage as of 06/2026.

// src · SOS-Kinderdörfer weltweit

metric_030%

NL query resolution rate.

// src · POWER AI

metric_040

Carve-out workstreams coordinated.

// src · SOS-Kinderdörfer weltweit

// services · 7

1 contract / 1 team / 1 delivery

What we deliver.

Practice / aiactive
>

AI & Software Development

Custom AI platforms, data integration, and engineered software for regulated environments.

Agents · Data platforms · AppsPDPL · EU AI Act
read more →
Practice / secactive
>

Cybersecurity & Penetration Testing

Security audits, pen testing, Zero Trust architecture, and cloud security.

SIEM · Pen-test · Red-teamISO 27001 · NIS2
read more →
Practice / isoactive
>

ISO 27001 Audit Readiness

ISMS structure, evidence, and audit preparation for ISO/IEC 27001:2022 certification.

ISMS · Annex A · AuditISO/IEC 27001:2022
read more →
Practice / nis2active
>

NIS2 Compliance Readiness

Cyber risk, incident reporting, supplier security, resilience, and management accountability.

Incident reporting · SuppliersNIS2 readiness
read more →
Practice / otrsactive
>

OTRS Services

Consulting, SaaS implementation, and training services aligned with the OTRS service catalogue.

Consulting · SaaS · TrainingOTRS service catalogue
read more →
Practice / trnactive
>

PECB Training Courses

Accredited PECB courses are handled through the dedicated FairPlay Digital training storefront.

PECB courses · ExamsTraining storefront
read more →
Practice / dgtactive
>

Digital Transformation

IT strategy, process optimisation, operating models, and roadmaps that survive delivery.

Legacy → modern · RoadmapOperating model
read more →

// ai & software · what we build

shipped this year · production · named clients

We don't deck-ware AI. We ship it.

Three production systems built by the same team that wrote the strategy. Real codebases, real model cards, real on-call rotations — handed over to your engineers.

LLM-OPSBUILD 01
90%
NL query resolution
Natural-language query layer
POWER AI

Production LLM routing across legacy databases. Eval-gated releases; deterministic fallbacks for regulated queries.

stackpython · vLLM · postgres · pgvector
PLATFORMBUILD 02
40%
reduction in manual processing
Process-automation gateway
VERMO

API-first gateway over five disconnected back-offices. Type-safe contracts, six deploys a day, zero rollbacks in Q4.

stacktypescript · nestjs · kafka · postgres
M365-OPSBUILD 03
72%
test coverage · 06/2026
Intune rollout cockpit
SOS-KINDERDÖRFER WELTWEIT

Autopilot rollout structure for 200 Windows laptops: app assignments, certificate Wi-Fi, BitLocker escrow, VPN/EDR coexistence, and test tracking.

stackIntune · Entra ID · Autopilot · Windows 365

// client reference

Mission-first security, without vendor theatre.

Michel Kunze

Michel Kunze - Head of IT

SOS Kinderdörfer weltweit

“As a mission-driven organization, we partner with Fairplay Digital for vendor-agnostic guidance that keeps our programs front and center. Their team understands the realities we face—and the need to do more with less—pairing deep technical expertise with a practical grasp of how nonprofits operate. Recommendations match our pace and priorities, not a vendor's roadmap. They strengthen our security posture across diverse environments, keeping systems protected and dependable without locking us into costly commitments. With hands-on support and strategic guidance, we stay secure while directing maximum resources toward our mission.”

Mission-first ISO 27001 assuranceMicrosoft 365 security hardeningISMS implementation with automated evidence

// case studies

References with real infrastructure weight.

Current references across endpoint platforms, organisational IT separation, and a reference implementation for industrial AI energy intelligence.

Additional references under NDA in AI, transit operations, and regulated infrastructure.
Microsoft infrastructureIntuneTenant carve-outPlant Copilot

CASE 01

SOS-Kinderdörfer weltweit

Intune Greenfield for 200 endpoints

A dedicated endpoint platform as the foundation for strategic independence.

200 Windows laptops · about 25 managed applications

Q1 2026 -> Go-live Q3 2026

Windows Autopilot User-Driven

Ongoing · 72% test coverage as of 06/2026

72%
test coverage
Read case

CASE 02

SOS-Kinderdörfer weltweit

IT carve-out from the parent tenant

Full separation of IT infrastructure as the prerequisite for organisational autonomy.

AD, M365 tenant, application estate, third-party accounts, 200 endpoints

Kickoff Q2 2026 -> summer 2026 cutover

Big-bang cutover on one date

In implementation

7
documented workstreams
Read case

// engagement model

Define · Build · Hand over · Maintain.

Phase 1 is fixed-price, below the no-tender threshold for ME engagements. Phase 1 cost credits Phase 2 if signed within 30 days.

phase_01

Define

1–4 wks

Audit, scope, fixed price.

phase_02

Build

8–16 wks

Architecture, implementation, transfer.

phase_03

Hand over

Week N

PECB-trained internal team owns it.

phase_04

Maintain

Optional

Support contract, not lock-in.

// engage

Security startswith a conversation.

24/7 incident response. 1–4 week audits. Fixed-price first phase.

Privacy settings

Necessary only

Cookie settings

We use necessary storage for security and consent management. Analytics and marketing stay off unless you allow them.

Optional processing runs only after your consent under GDPR Art. 6(1)(a). You can change this choice at any time. Privacy policy