Modernising Minze’s platform for growth and audit readiness.

Minze’s Homeflow product is used internationally, with growth currently focused on the US. Alongside it, Lutastic is being developed for the German healthcare market. Both draw on shared core services, while bringing different product and regulatory requirements to the platform.

That growth brings connected challenges: adapting the platform, delivering changes reliably and demonstrating how sensitive systems are controlled. Minze was also preparing for BSI and ISO audits. Decisions about architecture, security and engineering practice needed to support those ambitions together.

Robonaut began with an in-depth assessment of the existing systems and how the team worked. We documented the constraints, explored the direction with Minze’s engineers and incorporated their feedback into an agreed roadmap. This gave the modernisation a clear purpose and a phased path from analysis to implementation.

The assessment showed why a substantial rebuild was needed. Infrastructure code had become entangled, important operations still relied on manual setup, and access and security practices needed strengthening. These were structural constraints on the team’s ability to reproduce environments, make controlled changes and support new product needs.

We rebuilt the AWS foundation as modular CloudFormation components, supported by automated workflows. The work brought infrastructure provisioning and software delivery into a consistent process, with clearer boundaries between environments and access tied to specific responsibilities. The migration was planned incrementally so existing services could continue operating as the new foundation developed.

The practical change is greater control over the whole environment. Its configuration and deployed software versions are recorded, changes pass through review and automated checks, and the team can follow how a release reached a running service. Introducing Aikido across the organisation also made security issues visible and connected them to engineering follow-up. This gives the team an ongoing way to assess the platform as it changes.

The same approach guided the compliance work. Minze needed to show how framework requirements were addressed by the systems and practices being implemented. We designed a common set of company controls that connects each obligation to engineering work, supporting evidence and review.

Overlapping requirements can share an implementation and its evidence, while their individual assessment remains visible. This gives the team a consistent basis for preparing multiple audits and incorporating further requirements as the business develops. AI assisted the organisation of source material, with review and approval kept explicit.

Alongside the platform work, we guided the team’s adoption of AI-assisted development through workshops, reviews and practical guidance. We structured the documentation, workflows and automated checks so engineers and AI tools could contribute with shared context and clear review expectations. This gives the team a foundation for increasing AI’s role while keeping changes understandable, verifiable and under their control.

Minze now has a working cloud foundation with repeatable environment and delivery automation, connected security monitoring and a traceable model for controls and evidence. The team has a clearer basis for extending the platform and explaining how its technical responsibilities are met.

Robonaut’s contribution spans the assessment, architecture and hands-on implementation, with Minze’s engineers carrying out much of the application consolidation and product development. The result is a shared technical direction supported by running infrastructure, documented decisions and practices the team can continue to develop.

Work continues. As of September 2026, platform migration and the BSI and ISO audit processes are ongoing. The team is addressing follow-up remarks from the audit workshop.