About us – rameus solutions

Q: Who is behind rameus solutions?

rameus solutions was founded by Thomas Kempf, a certified multi-standard lead auditor with board mandates and a Harvard credential in cyber risk management. He is joined by Lars Brunner, who leads medical and pharma, bringing more than fifteen years in IVD and GxP.

Q: What makes rameus different from a large consultancy?

You work directly with the senior people who do the work, not a team of juniors behind a brand. Most technology advisors speak to engineers and most board advisors do not understand the technology; rameus does both.

Q: Where is rameus based, and where do you work?

We are based in the greater Zurich area and work worldwide, with project experience across Europe, Asia, Africa and North America. We work in German, English and French.

Q: What does "scaled precision technology" actually mean?

It means applying the right method with precision, at the level and to the extent each decision genuinely needs, from the shop floor to the boardroom. Read what scaled precision technology means →

Q: Can you both advise the board and implement the detail?

Yes, and that dual fluency is the point. The same team moves from board-level strategy to certified implementation, and we keep advisory roles separate from certification-audit work so that independence stays real.

Q: What kinds of organisations do you work with?

Organisations in regulated, high-stakes fields, from medical-device and software companies to organisations that must certify their information security or govern their use of artificial intelligence.

rameus solutions is a Swiss consultancy specialising in ISO management systems, information security, medical-device quality and AI governance — from hands-on implementation and certification audits to board-level strategy. The firm pairs two complementary specialists, so clients get technology-and-security depth and life-science regulatory depth from one partner.

The team

Thomas Kempf

Founder / CEO, Harvard Cyber Risk, Various board mandates

Lars Brunner

Senior Consultant Medical & Pharma, 15+ years IVD and GxP

Certified independent lead auditor and board advisor in information security, AI governance and medical-device quality; around 70 audits a year and regular C-level engagement with up to 90 audit and consulting clients.

about Thomas

IRCA-certified lead auditor, Responsible Person (RP) and PRRC for medical devices, IVDs and pharmaceuticals, with deep GxP and life-science quality experience.

about Lars

How we work

We deliver across Switzerland, Europe and beyond, in German, English and French. Whether you need a management system implemented, an audit passed, an interim role filled or strategic guidance at board level, you work directly with a named specialist — not a hand-off chain.

The story of rameus solutions ag

2017 – the journey begins

Founded rameus solutions gmbh
Mandates for medical devices
Auditor certification for ISO 9001 (General Management Systems)
Auditor certification for ISO 13485 (Management Systems for medical devices)

2018 – ramp up

Additional mandates in medical devices in Switzerland and Germany
Mandates in Interim Management
First appearance at the Swiss Medtech Day in Bern
Audit mandates for ISO 9001 and ISO 13485
Membership with SAQ

2019 – the company evolves

Change of corporate form to non-stock corporation
Gained new medical device consulting clients
Auditor certification for ISO 14001 (Environmental Management)
Auditor certification for ISO 27001 (Information Security)
Additional audit mandates for ISO 9001, ISO 13485 and ISO 14001

2020 – making a splash

New presence with revised CI/CD
Second appearance at the Swiss Medtech Day in Bern
Consolidation of existing mandates with consulting clients
Strategic focus on medical device and IT security industry
Additional audit mandates for ISO 9001, ISO 13885, ISO 14001 and ISO 27001
Membership with Schwyz Next
Membership with the Information Security Society Switzerland (ISSS)

2021 – consolidation and performance

Growth in consulting mandates for ISO 27001 and ISO 22301
Strategic focus on clients’ Information Security and Business Continuity challenges
Successfully implemented ISO 9001, ISO 14001 and ISO 27001 management systems for clients

2022 – growth

Officially trained in ISO 22301:2019 Business Continuity
Added knowledge-depth in the pharmaceutical industry by hiring the first employee
Continual growth in the strategic focus areas of Information Security

2023 – Cyber Challenges

Expaned client base in 27001 services
Focus on Cyber Security and Information Security systems
Successful initial certification of various clients in ISO 9001/14001/13485/27001

2024 – Medical meets Cyber

Integration of Privacy Information Management Systems based on ISO 27701
Continued growth in 27001 Information Security
Combination of Medical Devices and Software continues – 13485, 27001, 62304

2025 – stability and added skills

Officially trained in ISO 45001 Occupational Health and Safety
Integration of Environmental, Social and Governance topics (ESG)
Continual education in state of the art technology and methodology – AI, ESG, ethical behaviour

2026 – Expanding skills in new technologies

Expansion skills in ISO 42001 and ISO 50001
Special focus on Software Validation for AI tools in Medical Devices
Implementation of the new ISO 14001:2026 revision
Increased demand for Privacy Information Management Systems based on ISO 27701
Full re-work of the CI/CD in order to adequately depict the extended offer and skills

FAQ

Who is behind rameus solutions?

What makes rameus different from a large consultancy?

Where is rameus based, and where do you work?

What does “scaled precision technology” actually mean?

Can you both advise the board and implement the detail?

What kinds of organisations do you work with?

Let us convince you

we are ready