Tom Vogel's Blog

Compliance isn’t about documents in inboxes—it’s about clarity, proof, and making regulations work in real life.

Read and sign is not compliance. But it’s a start. In the end, it means keeping teams updated, meeting regulations, and impressing auditors.

Here are some real-life examples of features that save users from themselves. They prevent chaos and keep your product frustration-free.

Converting PDF into XML can be maddening. Here’s how to escape messy files and build structured, usable documents that actually work.

It’s incredible how much digital garbage amasses over time, even if you run an orderly organization. Here is how to clean it up.

Learn how to triage customer issues, prioritize bug tickets, and handle bugs effectively with practical, real-world strategies.

A modern approach to organizing and accessing digital information

Think Excel is just for finance? Learn how to use Excel for tech troubleshooting: Spotting misconfigurations, seeing anomalies and patterns.

Learn from our mistakes in upgrading Keycloak — dependency deadlocks and undocumented hacks made us burn in dependency hell

Enterprise customers demand security compliance. Learn why startups must choose ISO 27001, SOC 2, or both — and how to keep costs in check.

Every software company needs a Chief Bug Officer. Learn how bug ownership improves quality, speed, and customer trust.

Digital transformation isn’t just about fast tech, it’s about slow human change. Here are some lessons from war zones and the corporate world.

Automation isn’t a shortcut. Understanding the manual work first is essential to a successful manual to automation process.

Don’t just hire IT guys. A mechanic might be better at helping customers succeed with your software than a software engineer.

Simplify your software product to make refactoring easier and boost sales by reducing complexity, misconfigurations, and apparent bugs.

Many users don’t trust your B2B SaaS product at first. Here’s how to build trust through better onboarding, training, and UX.

SaaS bugs often turn out to be corporate IT configuration issues. Whitelisting, security tools, and authentication services are to blame.

The key takeaway from our ISO 27001 recertification audit was to shift from bottom-up to top-down risk management.

Forget the big-screen dashboards. Laptop-friendly business dashboards improve focus, mobility, and leadership in growing companies.

After 5 years, a Google Workspace to Microsoft 365 migration cleaned up digital clutter and improved collaboration.

The Agile Manifesto isn’t the problem — rigid processes are. Real agility depends on continuous conversation, not dogmatic process rules.

Put somebody in charge of managing JIRA tickets rather than just shifting them around, or you will drown in duplicates and unassigned tickets

Thinking of buying software with ready-made ISO 9001 documents? It’s possible — but beware of audit risks, culture mismatches, and long-term pitfalls.

AI can simplify, clean up, and improve your ISO 9001 documentation. But it falls short in real-world processes and communication.

Whilst building an internal team of developers is certainly not a fast activity, a proper team might churn out productive code way faster than a collection of agency developers.

The price you pay to track your norms effectively is a one-off effort when setting up your ISO 9001 27001 tools.

Most documentation still serves the company or authority. User-centric documentation improves clarity, compliance, and adoption.