Industry · Mechanical Engineering

Mobile and Backend Software for DACH Mechanical Engineering

Mechanical engineering is the core domain of the German Mittelstand — and one of the most mature application areas for Industry 4.0. OPC UA with Companion Specifications, driven by the VDMA-umati consortium, is today the cross-vendor standard for machine-to-IT communication. Service apps, MES integrations, and platform solutions plan against it.

Contact

Industry context

DACH mechanical engineering is globally leading and regionally anchored: many manufacturers with 50–500 employees, highly specialised, family-owned. This structure shapes software requirements: pragmatic, long-lived, with service and lifecycle data as differentiator — not a "tech stack showcase".

The umati initiative (universal machine technology interface) by VDMA and VDW has, since 2020, published around 25 OPC UA Companion Specifications — from machine tools through robotics, woodworking, to plastics — with another 30 in development. OPC 40501 for Machine Tools was finalised in late 2025. The specifications are freely available, lowering the entry barrier for Mittelstand manufacturers.

Typical challenges

Two software worlds — IT and OT

Plant IT (ERP, MES) and machine control (PLC, SCADA) are historically separated. Without a clean bridge via OPC UA, every data request costs days — and every service incident doubles the effort.

Remote service with data protection

End customers want fast service but not full access to their plant network. VPN credentials on Post-its are reality — and a GDPR/data-protection liability.

Lifecycle data in Excel

Commissioning, service history, incidents, spare parts — often in per-machine Excel sheets. A unified lifecycle data model is the prerequisite for predictive maintenance and EU-Data-Act-compliant data access.

Regulatory framework

EU Data Act

Glossary →

The Plattform Industrie 4.0 has repeatedly emphasised that the Data Act has far-reaching implications for mechanical engineering: end customers have a data access claim on the telemetry generated by their machines. Manufacturers must technically enable access — typically via a self-service portal.

Applicability: Applicable since 12 September 2025

EU Cyber Resilience Act

Machines with digital elements on the EU market fall under the CRA. Manufacturers must establish vulnerability management, security updates over the typical usage period, and incident reporting.

Applicability: Fully applicable from 11 Dec 2027

IEC 62264 / ISA-95

Glossary →

International standard for integration of enterprise and control systems. Defines the 5-level model (Level 1 control to Level 4 ERP) and the activity model between MES (Level 3) and ERP (Level 4). IEC 62264-2:2026 (3rd edition, published March 2026) is the current edition.

Architecture pattern for B2B apps

Machine edge
OPC UA server · umati Companion Specs · MQTT bridge · edge gateway

An OPC UA layer directly on the machine or at the edge gateway — vendor-neutral, with standardised data models for job management, KPIs, and energy monitoring.

MES integration
ISA-95 Job Control · OPC UA for Machinery (Job Management) · REST/GraphQL

Bidirectional exchange of job data, NC programs, and tool management — based on ISA-95 Job Control. Standardised, not proprietary.

Service & lifecycle backend
NestJS · PostgreSQL · append-only event log · webhooks for third-party systems

Service tickets, maintenance planning, spare-parts ordering in a single platform. Event log for traceable lifecycle history per asset.

Service app & customer portal
Flutter (service technicians) · Next.js (customers) · offline-capable service app

Technician app works offline (factory floors without reception). Customer portal for machine overview, service history, and data export.

Recommended stack

Technology Rationale
Flutter (Service-App)

One codebase for service technicians' iOS and Android tablets/phones. Offline-first with local SQLite.

NestJS auf Fastify

Structured TypeScript architecture, performant OPC-UA-to-HTTP bridge, clear module separation for ISO 9001 audit trails.

PostgreSQL + Prisma

Relational integrity for machine master data and service history, type-safe migrations for regulatory evidence.

OPC UA Stack (open62541, node-opcua)

Open-source OPC UA implementations for server and client side. License-free, maintained by the OPC Foundation.

DigitalOcean / EU-Hosting

EU region for data sovereignty — critical in Mittelstand contexts where plant and machine data are treated as sensitive.

Sources

As of: 2026-04-30

Concrete project in this industry?

We build software that fits the regulatory, technical, and organisational realities of your industry — without excess complexity.

Send email