I build products
that hold up.
I'm Ramón, a founder and agentic engineer. I take products from first idea to working software, from the screens people touch to the backend behind them.
Selected work ↓Trusted by
Identity check for travel tech NDA
When a card sale looks risky, the cardholder proves who they are and signs the debit authorisation, from a single link on their phone. No account, no app install.
The client is under NDA, so the brand and names here are a mock-up.
Click through the actual flow
This window runs the module's real front end, in Brazilian Portuguese as built for its users. The camera is simulated and the server answers are recorded from a real run, so nothing you do leaves your browser. Any 6-digit code signs.
- Consentbefore any camera opens, versioned and hashed
- Hand-off to phoneby QR code (left out of this demo)
- ID front and backfile type checked by its bytes
- Selfie with the IDface matched on the server
- Card photonumber masked on the phone before upload
- Liveness videohead turns, checked on the server
- Sign with an email codetwo documents in one step
- Sealed PDFdigital seal, public time stamp, verify page
What I built
- The full cardholder journey above, on phone and desktop, as a standalone module the platform can plug in.
- A signed PDF with an evidence page, a PAdES seal and a public time stamp, plus a public page where anyone can check a document.
- An API with signed webhooks, an operator review queue and a demo environment.
- 919 automated unit tests and 10 browser tests, all passing at handover.
Secure, not only pretty
- Evidence can't be edited or deleted. The database itself refuses it, and every event is chained to the one before, so any change would show.
- The full card number and CVV never reach the server.
- Each link works once. The server keeps only a fingerprint (hash) of it.
- Uploads are checked by their real content. Public routes are rate-limited.
- Photos and videos are deleted automatically when their retention period ends.
- Face and text models run from our own server. No third-party scripts.
My role: I specified the flow and built the module end to end with Claude Code. Product and legal rules came from the platform side, and an experienced engineer reviewed the code. Client name withheld.
Next project: PACKED →PACKED
An ethical, community-first travel platform: local strolls, stays, group trips, journals and lists. A chronological feed, no algorithm.
What I worked on
- Trip planning with crew, polls and budget, group trips with bookings and refunds, journals that become a printed book, lists and a chronological feed.
- Trust features: vouches, a trust score, emergency contacts confirmed by link, support chat and a staff console.
- ID check screens for phone and web, sharing the capture engine with project 01.
Secure, not only pretty
- Row-level security on every database table, so a query only sees rows it is allowed to.
- Sensitive fields like emergency-contact phone numbers are encrypted (AES-256-GCM).
- Risky actions, like deleting an account, ask you to sign in again. Staff use two-factor login, and their actions go into an audit log that can only grow.
- Prices are set on the server, payment webhooks are verified, and the same payment can't be charged twice.
- Protection against cross-site request forgery, rate limits per IP, size and type checks on every upload.
My role: Co-founder. I shape the product and build features with Claude Code, working with a designer who created the brand and an engineer who reviews and merges the code.
How I wireframe
Every flow starts as screens in Figma. Before anything gets built, I lay out the whole flow: each screen of a feature in a row, for web and phone, with real copy instead of placeholder text. These are from PACKED's subscriptions feature.
Signy
E-signatures with identity checks, a client CRM, projects and payments, in one place, for freelancers and small businesses in Brazil.
What I built
- Signing with optional identity checks per contract: email code, ID photo, selfie matched to the ID, liveness video.
- A deposit charged right after signing, installments with reminders, and change orders inside the signed contract.
- Client CRM, project boards and a finance overview, plus a provider app for iPhone and Android.
- Final PDFs with a digital seal and time stamp, and a public verify page.
Secure, not only pretty
- What a phone only claims is stored as "declared", never as "verified". Only checks on the server can pass a person.
- Evidence tables are append-only, and a signed contract's fingerprint is locked once sealed.
- Automated tests try every identity route with another company's data and expect "not found".
- Email codes are stored hashed, expire after 10 minutes and lock after 5 wrong tries.
- ID photos open only through short-lived links, and every view is logged. Biometric data is deleted after its retention period.
- No third-party scripts, fonts or trackers in the app.
My role: Founder. I designed the product and built it with Claude Code, with a designer and an engineer on design and code.
Next project: Identity check for travel tech →Agents write the code. I own the decisions.
Spec first
Features start as a written spec: who uses it, what can go wrong, what data it touches.
Directed build
I direct Claude Code screen by screen and endpoint by endpoint, and check it in the running app.
Independent reviews
Several reviewer agents with no shared context attack the work, then a human engineer reviews.
Tests and audits
Automated tests, plus a security checklist before anything ships.
Agents write the code. I own the decisions.
Spec first
Features start as a written spec: who uses it, what can go wrong, what data it touches.
Directed build
I direct Claude Code screen by screen and endpoint by endpoint, and check it in the running app.
Independent reviews
Several reviewer agents with no shared context attack the work, then a human engineer reviews.
Tests and audits
Automated tests, plus a security checklist before anything ships.
Claude setup
Coaching for you or your team: how to set up Claude and work with it every day.
Talk to me →Second brain
Your notes and databases, connected in one place you own. Become independent of any one AI and work with whatever suits you best, no matter what happens.
Talk to me →AI processes
Finding the work in your business that agents can take over, and setting it up.
Talk to me →Services
What I can do for you, from a first idea to a running company, and how to put AI to work along the way.
Products and companies
Iteration
You already have a product. We work through it in short rounds until it does what it should.
Talk to me →Founder experience
What I learned setting up and incorporating companies, applied to yours.
Talk to me →AI in your work
AI in real workflows
Coaching on how to use AI inside the work you already do. Case study coming soon.
Talk to me →Claude setup
Coaching for you or your team: how to set up Claude and work with it every day.
Talk to me →Second brain
Your notes and databases, connected in one place you own. Become independent of any one AI and work with whatever suits you best, no matter what happens.
Talk to me →AI processes
Finding the work in your business that agents can take over, and setting it up.
Talk to me →Resources
Free things from how I work. I'm starting this collection now, so the shelves below are still empty.
Articles
How I work: building products with Claude Code, step by step.
Coming soonSkills
The Claude skills I use every day, ready to install.
Coming soonFree goodies
Templates, checklists and small tools you can take.
Coming soonImprint
Impressum
Angaben gemäß § 5 DDG
Ramon KäpperAltenhof 3
54655 Densborn
Deutschland
Kontakt
E-Mail: hello@ramonkaepper.com
Kontaktformular: auf dieser Website
Verantwortlich für den Inhalt nach § 18 Abs. 2 MStV
Ramon Käpper, Anschrift wie oben.
Legal notice
The German text above is the binding version. In short: this website is run by Ramon Käpper, at the address above. You can reach me at hello@ramonkaepper.com or through the contact form.
Privacy
Datenschutzerklärung
Verantwortlicher
Ramon KäpperAltenhof 3
54655 Densborn
Deutschland
hello@ramonkaepper.com
Hosting und Server-Logs
Diese Website läuft bei Cloudflare, Inc. (USA). Beim Aufruf verarbeitet Cloudflare technische Daten wie IP-Adresse, Zeitpunkt, aufgerufene Adresse und Browser-Angaben, um die Seite auszuliefern und vor Angriffen zu schützen. Rechtsgrundlage ist mein berechtigtes Interesse an einem sicheren Betrieb (Art. 6 Abs. 1 lit. f DSGVO).
Kontaktformular und E-Mail
Wenn du mir schreibst, verarbeite ich deinen Namen, deine E-Mail-Adresse und deine Nachricht, um dir zu antworten. Die Nachricht läuft über Cloudflare und landet in meinem E-Mail-Postfach bei Apple (iCloud). Die Website selbst speichert sie nicht. Rechtsgrundlage ist die Anbahnung oder Durchführung eines Vertrags (Art. 6 Abs. 1 lit. b DSGVO) oder mein berechtigtes Interesse, Anfragen zu beantworten (Art. 6 Abs. 1 lit. f DSGVO). Ich lösche Nachrichten, wenn sie erledigt sind, außer eine gesetzliche Pflicht verlangt eine längere Aufbewahrung.
Keine Cookies, kein Tracking
Diese Website setzt selbst keine Cookies und nutzt keine Analyse- oder Werbedienste. Schriften liegen auf diesem Server, es wird also nichts von Google geladen. Der Link zu LinkedIn überträgt erst dann Daten an LinkedIn, wenn du ihn anklickst.
Datenübermittlung in die USA
Cloudflare und Apple sitzen in den USA oder gehören zu US-Unternehmen. Dabei können Daten in die USA gelangen. Cloudflare gibt an, nach dem EU-US Data Privacy Framework zertifiziert zu sein (Angemessenheitsbeschluss, Art. 45 DSGVO). Soweit dieser nicht greift, stützen sich die Übermittlungen auf die Standardvertragsklauseln der EU-Kommission (Art. 46 DSGVO).
Deine Rechte
Du hast das Recht auf Auskunft, Berichtigung, Löschung, Einschränkung der Verarbeitung, Datenübertragbarkeit und Widerspruch. Schreib mir dazu an die oben genannte Adresse. Außerdem kannst du dich bei einer Datenschutz-Aufsichtsbehörde beschweren.
Privacy notice
English translation for convenience. The German text above is the binding version.
Who is responsible
Ramon Käpper, at the address above, hello@ramonkaepper.com.
Hosting and server logs
This website runs on Cloudflare, Inc. (USA). When you visit, Cloudflare processes technical data such as your IP address, the time, the address you opened and browser details, to deliver the page and protect it from attacks. The legal basis is my legitimate interest in running the site securely (Art. 6(1)(f) GDPR).
Contact form and email
If you write to me, I process your name, email address and message so I can reply. The message passes through Cloudflare and arrives in my email inbox at Apple (iCloud). The website itself does not store it. The legal basis is preparing or carrying out a contract (Art. 6(1)(b) GDPR) or my legitimate interest in answering enquiries (Art. 6(1)(f) GDPR). I delete messages once they are dealt with, unless the law requires me to keep them longer.
No cookies, no tracking
This website sets no cookies of its own and uses no analytics or advertising services. Fonts are served from this site, so nothing is loaded from Google. The LinkedIn link only sends data to LinkedIn if you click it.
Transfers to the USA
Cloudflare and Apple are based in the USA or belong to US companies. Data may therefore reach the USA. Cloudflare states that it is certified under the EU-US Data Privacy Framework (adequacy decision, Art. 45 GDPR). Where that does not apply, transfers rely on the European Commission's standard contractual clauses (Art. 46 GDPR).
Your rights
You have the right to access, correction, deletion, restriction of processing, data portability and to object. Write to me at the address above. You can also complain to a data protection authority.
Built with a photographer’s eye.
I'm a founder based in Germany with an artistic background as a photographer. I bring that eye to product work, blending visual aesthetic with smooth UX and UI design for products and designs that are tasteful and efficient.
Talk to me →Need a product built?
I'm open to projects, roles and coaching where product thinking and agentic engineering go together.