A small engineering studio in Munich and Baghdad.

We have spent over ten years on production software: streaming platforms, connected-device fleets, security systems and applied AI. We have built systems at national scale in Iraq, and delivered on large projects for companies in Germany and across Europe.

What we build
Start a conversation
Streaming & media IoT & connected devices Security Applied AI
Our engineers have shipped production systems at
Earthlink
HalaSat
Sawadland
Limehome
VoiceLine
OUR WORK

What we do

All four came out of shipping something real, under load, with someone waiting on it.

Streaming & Media

Ingest, transcoding, packaging and playback. The whole delivery path, including the telemetry that tells you which sessions are failing and why.

More

IoT & Connected Devices

Provisioning, over-the-air updates you can roll back, and telemetry that stays affordable when the fleet grows an order of magnitude.

More

Security

Authentication, authorisation and audit trails built to be queried later. Plus on-premise and hybrid deployment where data cannot leave the country.

More

Applied AI & Automation

Speech and document pipelines in Arabic and English, wired into systems that already exist, with evaluation so you can tell when quality moves.

More
What we build

The four areas we work in

We are a small studio, so we are deliberately narrow. These are the areas where we have shipped enough to know where the problems hide.

01 Streaming & Media
Typical work
Standing up or untangling a delivery pipeline; cutting rebuffering; getting startup time down on poor connections.
Constraints we plan for
Mobile networks, constrained bandwidth, wide device spread, live and on-demand in the same stack.
What you get
A path from ingest to player you can reason about, and the numbers to see it working.
Streaming & Media

Video and audio delivery that holds up

Playback breaks in specific, boring ways: a transcode ladder that does not match the audience’s bandwidth, a CDN caching the wrong manifest, a player that gives up on the first 5xx. We work the delivery path end to end, not one box in it.

  • Ingest, transcode ladders and packaging for HLS and DASH
  • CDN behaviour, cache keys and origin shielding
  • Player integration and playback telemetry that shows where sessions actually fail
02 IoT & Connected Devices
Typical work
Bringing a fleet under one control plane; making updates safe to ship; finding out why a subset of devices went quiet.
Constraints we plan for
Intermittent connectivity, devices you cannot physically reach, hardware revisions in the field at once.
What you get
A fleet you can update on a Tuesday afternoon without holding your breath.
IoT & Connected Devices

Fleets that stay reachable

A device you cannot reach means sending someone out to it. So provisioning has to work first time, updates need a way back when they go wrong, and history has to be kept without paying to store all of it forever.

  • Provisioning and device identity for hardware shipped to the field
  • Over-the-air updates with staged rollout, health gates and rollback
  • Telemetry ingestion, retention tiering and alerting on device health
03 Security
Typical work
Replacing an access model that has accumulated exceptions; adding real audit; preparing for a security review.
Constraints we plan for
Data-residency rules, legacy systems that cannot be replaced, teams that need access without a ticket for everything.
What you get
A permission model somebody can explain, and logs that answer questions.
Security

Access, identity, and the record of what happened

Most incidents come down to a stale credential, a permissive default, or an audit trail nobody can query. We build and harden the access layer, and make what happened afterwards reconstructable.

  • Authentication and authorisation models that survive a reorg
  • Audit trails designed to be queried, not merely written
  • On-premise, private-cloud and hybrid deployment where data cannot leave the country
04 Applied AI & Automation
Typical work
Turning an unstructured pile of calls, forms and scans into something queryable; automating a step a person currently does by hand.
Constraints we plan for
Bilingual input, messy source data, outputs that need a human in the loop, cost per document at volume.
What you get
An automated step that fails loudly, not silently.
Applied AI & Automation

Models wired into systems that already exist

Most of the effort goes into the pipeline around the model, not the model itself: pulling clean input out of source systems that were never designed to hand it over, handling the cases the model gets wrong, and noticing when the output has drifted.

  • Speech and document pipelines, Arabic and English
  • Retrieval and extraction over existing databases and file stores
  • Evaluation and monitoring, so a quality regression is visible before a customer finds it
About us

We know both markets from the inside

Nisaba was the Sumerian goddess of writing and record-keeping, the one who kept the accounts straight. That is roughly the job.

Why we stay narrow

We have spent over ten years on production software in Germany and Iraq. In Europe that meant large projects for companies where a bad release is measured in revenue per minute. In Iraq it meant building the systems themselves, at national scale, under constraints most vendors never have to design around. Nobody reads that market from a slide deck; we built inside it, and very few teams know it the way we do.

So we take a small number of engagements at a time, and the people you talk to are the people who write the code. There is no bench, no account layer, and nothing is handed to someone junior once the work is won.

NISABA, in short
Team
Senior throughout, all hands-on.
Where
Munich, Germany · Baghdad, Iraq.
Markets
Iraq · Germany and the rest of Europe.
Experience
10+ years shipping software that other people depend on.
Domains
Streaming and media, IoT, security, applied AI.
Working languages
English and Arabic.
Principles

How we work

We say what we do not know

If a problem sits outside what we have actually shipped, we will tell you and point you elsewhere. Learning on a client’s budget is a bad trade for both sides.

The people you meet do the work

No bench, no handoff after the pitch. Whoever you speak with is the person writing the code and answering for it later.

Built to be handed over

Documented, tested and deployable by your own team. You should not need us on retainer to change a configuration value.

Who we are

The people behind it

Portrait of Mohammed Salman
Mohammed Salman

Over ten years building production software in Germany and Iraq, across streaming delivery, connected-device fleets, security systems and applied AI. Writes most of the backend and the infrastructure it runs on.

[ Founder / Lead Engineer ] { Munich, Germany }
Portrait of Haidar Emad
Haidar Emad

Interface and interaction design, brand and visual identity. The parts a user actually touches. On every engagement from the first sketch, not brought in to decorate it at the end.

[ Co-Founder / Creative Lead ] { Baghdad, Iraq }
Selected work

Most of this is anonymised

Nearly everything we have built lives inside someone else’s product and is covered by an agreement that says so. What follows is the shape of the work, not the logo on it. It runs in Iraq and across Europe.

01 · Streaming & media

A subscriber video platform

Live and on-demand video going out to subscribers over networks where available bandwidth moves hour to hour. The failure mode that mattered was not total outage. It was sessions that started slowly, stalled once, and never came back.

Work covered the path from ingest through transcode ladders and packaging to the player, plus playback telemetry so a bad session could be traced to a segment and a CDN edge instead of argued about.

HLS / DASH Transcode ladder CDN & origin Playback telemetry
02 · IoT & connected devices

A device fleet in the field

Hardware deployed where nobody can drive out to it, across several revisions live at the same time, on connectivity that drops without warning.

We built provisioning and device identity, an over-the-air update path with staged rollout and rollback behind health gates, and a telemetry pipeline tiered so that keeping history did not become the largest line on the infrastructure bill.

Provisioning OTA & rollback Fleet telemetry Edge
03 · Security

An access and audit rebuild

A permission model that had accumulated years of one-off exceptions, and logs that were written but could not usefully be queried after an incident.

We replaced the access layer with a role model that maps to how the organisation is actually structured, and rebuilt audit so that “who changed this, and when” is a query rather than an investigation. Deployed on infrastructure the client controls, because the data was not permitted to leave the country.

AuthN / AuthZ Role modelling Audit trail On-premise
04 · Applied AI & automation

A bilingual document pipeline

A backlog of scans, forms and recordings in Arabic and English that people were working through by hand, one item at a time.

We built the pipeline outward from the source data: normalising what came out of it, sending anything the model was unsure about to a person, and keeping an evaluation set running so a quality regression showed up before a customer found it.

Arabic & English OCR / ASR Human in the loop Eval harness
If you need detail before deciding whether to work with us, ask. Scale, architecture, what went wrong and what we did about it. We can go much further in a conversation than we can in public, and we can put you in touch with people who worked alongside us.
Get in Touch

Tell us what you are building

A paragraph is enough to start. If it is not something we can help with, we will say so quickly instead of booking a discovery call about it.

How to reach us

Mail reaches the whole team. We are in Munich and Baghdad, so between us there is usually someone at a desk.

  • Where we are
    Munich, Germany · Baghdad, Iraq
  • Email Address
  • Telephone (Munich)
    +49 152 36968148
  • Telephone (Baghdad)
    +964 771 559 4158
We read everything that arrives and reply to anything with a real question in it.

Send a message

Please provide your full name.
Please enter a valid email address.
Please tell us where you work.
A sentence or two about the work, please.
✓ Got it. We will read this and get back to you.
We could not send that from here. Mail it to info@nisaba.uk instead and it will reach us.

Questions

The things people ask before they get in touch. If yours is not here, ask it directly. We would rather answer than have you guess.

Streaming and media delivery, connected-device fleets, security and access systems, and applied AI pipelines. We stay inside those four areas and do not claim everything — they are where we have shipped enough to know where the problems hide.
We tell you before we start. For work that needs a larger team we will say so up front, and where it helps we will introduce you to people we have worked with. Taking on something we cannot staff would waste your time and ours.
More than most, because we built there rather than visited. National-scale systems, on infrastructure that is not always there, with procurement, connectivity and data-residency rules that no European reference architecture accounts for. The engineering standard we hold that work to came from years of large projects for companies in Germany and across Europe.
As a pipeline problem, not a model problem. Most of the effort goes into the input, into a person handling whatever the model is unsure about, and into an evaluation set that keeps running so quality regressions surface early. Arabic and English are both first-class.
Yes. On-premise, private cloud and hybrid deployments are normal for us, and we have built for cases where data is not permitted to leave the country. We will also hand over the deployment so your team can run it without us.
You do. We write it to be handed over: documented, tested and deployable by your own engineers. If you never need to call us again after the engagement ends, that is a success rather than a lost account.
With a conversation about what you are building and where it is straining. If it looks like a fit, we scope a first piece of work small enough to be judged on its own before anyone commits to more. We do not quote a timeline before we understand the problem.

Something not covered?

Ask us directly. Technical questions get technical answers, not a callback from someone who will have to check.