Bettina Ballin

Bettina Ballin – computer scientist (M.Sc.), freelance IT professional

Software, websites, security. From one source.

I build websites, web applications, backends and integrations for companies that need a developer who also thinks about operations, security and data protection. More than five years in software development, systems integration and AI security research – and as a TÜV-certified security professional (T.I.S.P.) and external data protection officer, everything that comes after launch too.

Portrait of Bettina Ballin

Services

From the first idea to secure operation. You get one person who builds, secures and documents – with nothing lost between agency, developer and consultant.

Websites and web applications

From a one-pager for a small business to a web application with login – fast, accessible and privacy-compliant from day one, including legal notice, privacy policy and hosting setup.

  • Concept, design and implementation
  • Static sites, CMS or custom web application
  • Hosting, domain, email and deployment
  • Performance, accessibility, maintenance

Software and backend

APIs, services and integrations that run reliably – in Java, Python or JavaScript, with proper documentation and tests.

  • REST and SOAP interfaces, Spring Boot, Flask
  • Systems integration and data exchange between applications
  • Databases, automation, scripts
  • Docker deployments and handover to operations

AI and data analysis

Machine learning prototypes and data analyses that answer a concrete question – and an honest assessment of where AI adds nothing.

  • Prototypes with TensorFlow and PyTorch
  • Anomaly detection and analysis of operational data
  • Connecting language models to existing systems
  • Assessment of AI tools, technically and legally

IT security

Security that lives in the architecture and the code rather than in a checklist – drawn from several years of AI security research at Fraunhofer SIT.

  • Security code reviews and threat modelling
  • Vulnerability assessment and hardening
  • ISMS setup oriented on ISO 27001, NIS2 check
  • Customer security questionnaires and audits

Data protection

GDPR implementation that fits the product – on request as an appointed external data protection officer under Art. 37 GDPR.

  • Privacy policies, records of processing, deletion concept
  • Processor agreements and third-country transfers
  • Data protection impact assessments
  • External DPO with fixed availability

Consulting and support

Technology choices, architecture questions, a second opinion on quotes – and ongoing support so the project does not go stale after launch.

  • Technology and vendor selection
  • Architecture reviews and taking over existing systems
  • Maintenance and support agreements
  • Training for teams

Projects

A selection – further references on request.

Wilde Holzschönheiten

Website for a small business: concept, design, implementation and hosting setup – lean, fast and without tracking.

  • HTML/CSS
  • JavaScript
  • Hosting

AI security and anomaly detection

Research at Fraunhofer SIT: detecting anomalies in system data, vulnerability analyses of AI systems, publications on secure system design.

  • Python
  • TensorFlow
  • Threat modelling

Energy flexibility tools

Tools for assessing the energy flexibility of industrial plants at PTW, TU Darmstadt: Python backend, web interface with Flask, Docker deployment.

  • Python
  • Flask
  • Docker

Integration projects at Software AG

Interfaces and API management for corporate clients on the webMethods platform – connecting ERP, CRM and line-of-business systems.

  • webMethods
  • REST / SOAP
  • Java

Smaller experiments and mini games live on GitHub.

Approach

This is how a project typically runs:

  1. Conversation and requirements

    What should be built, what exists already, what are the budget and time constraints? The result is a short, readable quote – not a 40-page specification.

  2. Delivery in short steps

    Show something that runs early, work in feedback, continue. Security and data protection are part of the work from the first line, not an afterthought.

  3. Handover and support

    Documentation, onboarding, all credentials in your hands. Afterwards, if you like: maintenance, further development or the role of external data protection officer.

Background

Career

  1. since 2025
    Freelance IT professional

    Software development, websites, IT security; also external data protection officer for a SaaS company in the energy sector

  2. 2022–2025
    Research associate, Fraunhofer SIT, Darmstadt

    Research on AI security and anomaly detection, vulnerability assessments, publications on secure system design

  3. 2020–2022
    M.Sc. Computer Science, Technical University of Darmstadt

    Focus on machine learning; tutor for first-year students

  4. 2018–2020
    IT consultant, Software AG

    Systems integration and API management for corporate clients on the webMethods platform

  5. 2013–2017
    B.Sc. Computer Science, Technical University of Darmstadt

    Working student at PTW: energy flexibility tools in Python, web applications with Flask

Skills

I work where engineering, organisation and law meet – so the toolbox runs from the debugger to the GDPR.

  • daily tools
  • working knowledge
  • basics

Programming and backend

  • Python
  • Java
  • JavaScript
  • REST / SOAP
  • webMethods
  • Git
  • Spring Boot
  • Flask
  • SQL
  • Docker
  • C/C++

Web

  • HTML/CSS
  • Accessibility
  • Hosting and deployment
  • Angular
  • jQuery
  • WordPress
  • Flutter

AI and machine learning

  • TensorFlow
  • Deep learning
  • Anomaly detection
  • PyTorch
  • Computer vision
  • NLP
  • LLM APIs

Security and data protection

  • Threat modelling
  • Security code review
  • Vulnerability assessment
  • GDPR
  • DPAs and SCCs
  • ISMS
  • ISO/IEC 27001
  • NIS2 / BSIG
  • BSI C5
  • Pentesting
  • EU AI Act

Contact

Need a website, a backend, an integration or an AI prototype – or someone to put your existing system on a solid footing in terms of security and data protection? Send me a message. I usually reply within one working day.

Your details are not stored on my server; they are forwarded to me by email and deleted no later than six months after our correspondence ends. Details in the privacy policy.