IATF 16949 · CSRD · ESPR DPP · NIS2 · AI Act

Software development for manufacturing

Custom MES, ERP-MES integration, OPC UA / MQTT shop-floor connectivity and ESPR Digital Product Passport pipelines for Hungarian OEMs and Tier 1-2 suppliers. IATF 16949 traceability, CSRD ESRS data module, NIS2 important-entity compliance in one codebase. Last updated 2026-05-04.

TL;DR

  • The Hungarian automotive ecosystem (Audi Győr, Mercedes Kecskemét, Suzuki Esztergom + ~700 suppliers) runs on IATF 16949:2016 traceability across the chain.
  • ESPR (Reg. 2024/1781) full application is 2026-07-19, battery DPP mandatory from 2027-02-18.
  • The post-Omnibus CSRD threshold: 1000+ employees and EUR 450M+ turnover from 2027. Tier 1s usually qualify.
  • NIS2 Annex II places manufacturing under important-entity rules — fines >= EUR 7M or 1.4%.
  • Project ranges: HUF 8-80M depending on scope, EU-region or on-prem deploy.

Pain map — what manufacturing IT directors deal with right now

Concrete, named problems from Hungarian automotive and engineering plants.

OEM kanban signal lags hours behind the shop floor

An Audi / Mercedes / Suzuki order arrives in SAP, but the Siemens S7-1500 PLCs don't see it directly. We build an OPC UA + MQTT bridge so the kanban appears on the line within seconds, with batch-level traceability.

ESPR Digital Product Passport — the data is in 4 silos

After the 19 July 2026 ESPR full application date, item-level material composition, dismantling and repair info has to live behind one QR. PLM (Teamcenter / Windchill), ERP (SAP), supplier declarations (IMDS) sit in separate silos today. We aggregate and emit a GS1 Digital Link-compatible DPP JSON.

IATF 16949 audit traceability incomplete

IATF 16949:2016 demands a PPAP / FMEA / SPC trail down to the per-batch part. An Excel-based process collapses in minutes during a third-party audit. We build an audit-trail layer with immutable change records linked to the production order.

CSRD ESRS data lives in an Excel matrix

ESRS E1 (climate) and E5 (circular economy) data points usually sit in Excel macros today. XBRL Taxonomy submission needs structured backend storage. We deliver that, pulling from line-level energy meters and HVAC (Modbus / BACnet) automatically.

NIS2 OT incident reporting in 24 hours

Hungary's Act LXIX of 2024 and NIS2 Art. 23 require a 24h early warning + 72h incident report on the OT side too — most plants haven't drilled this. We stream SCADA / MES events into the SOC, with auto-classification and a pre-filled report template.

Regulatory landscape for manufacturing software

Only items grounded in official sources (EUR-Lex, IATF, NJT).

Regulation / standardApplicableScopePenalty
IATF 16949:2016In force since 2017-09-14Automotive QMS — full supplier chainLoss of OEM supplier status
ESPR — Reg. (EU) 2024/1781Full application 2026-07-19Ecodesign + DPP (battery from 2027-02-18)Member State sanctions
CSRD — Dir. (EU) 2022/2464Post-Omnibus: 2027 (1000+, EUR 450M)ESRS E1-E5, S1-S4, G1 reportingMember State sanctions
NIS2 — Dir. (EU) 2022/2555HU 2026-01-06 (Act LXIX of 2024)Important entity (Annex II — manufacturing)>= EUR 7M or 1.4%
EU AI Act — Reg. (EU) 2024/16892026-08-02 high-risk AIWorkplace AI, industrial safety AI (Annex III)<= EUR 15M or 3% (Art. 99(4))
GDPR — Reg. (EU) 2016/6792018-05-25Worker data (RFID access, CCTV, productivity metrics)<= EUR 20M or 4%

Integration matrix — what we connect to

Every named system has a documented API and live integrations in production at our manufacturing customers.

SystemProtocolNote
SAP S/4HANA ManufacturingBAPI / IDoc / OData v4Master data on IDoc, real-time on OData; cloud edition uses REST as primary.
Siemens Opcenter ExecutionREST + OPC UADiscrete manufacturing MES, native to S7-1500 PLCs.
Rockwell Plex MESREST + Plex APICloud-native MES, common at Tier 2-3 automotive suppliers.
AVEVA Wonderware (Schneider)OPC UA / MQTT / SuiteLinkClassic process SCADA, also food and pharma.
Siemens S7-1500 PLCProfinet / OPC UA ServerBuilt-in OPC UA Server + PubSub MQTT/UADP for shop floor data.
Allen-Bradley CompactLogix / ControlLogixEtherNet/IP + CIPRockwell PLC, OPC UA Edge Server toward the cloud.
Beckhoff TwinCAT 3ADS / OPC UA / MQTTPC-based control, real-time on Linux and Windows.
IMDS / CDX (material declarations)XML import / web serviceSupplier material data in automotive — basis for RoHS / REACH / DPP.
PTC Windchill / Siemens Teamcenter PLMOData / REST / SOAPItem-level BOM + ECO change management, source of DPP.

Why pick us for a manufacturing project

Live OEM experience

Hungarian Tier 1-2 supplier base, IATF 16949 audit experience, deep OPC UA / MQTT / Profinet stack knowledge.

DPP pipeline ready

PLM + ERP + IMDS aggregation with GS1 Digital Link / DPP JSON output, sync to the EU central DPP registry.

IT/OT segmentation

Purdue-model network zoning, OT-side incident stream into the SOC — NIS2 Art. 23 24h/72h workflow built in.

SAP S/4HANA-tuned

BAPI / IDoc for on-prem ECC, OData v4 for cloud edition, native CDS views from day one.

Pricing for manufacturing projects

Our published project ranges (see /pricing.md), adjusted for manufacturing overhead (about +15-25% for IATF audit). Notified-body and IATF third-party auditor fees are separate.

  • · MES -> SAP middleware with OPC UA: 4-6 months, HUF 18-45M
  • · ESPR Digital Product Passport pipeline: 5-9 months, HUF 30-80M
  • · Custom shop-floor andon / kanban dashboard: 2-4 months, HUF 8-20M
  • · CSRD ESRS data-collection module: 3-5 months, HUF 12-28M
  • · NIS2 Annex II gap audit + roadmap: 4-6 weeks, HUF 3-7M
  • · Compliance + integration retainer: HUF 0.8-2.2M / month

Talk in person, near our office

In a 30-minute scoping call we map the MES / ERP / OT environment and give you a tight estimate. Call +36 30 098 0767 or drop in.

Budapest office: Bank Center, Szabadság tér 7., 1054 Budapest, 1st floor, office 112. Mon-Fri 9:00-18:00 by appointment · balint@appforge.hu
Internal links if you want to go deeper: Industry 4.0 MES/SCADA · WMS · System integration.
GYIK

Manufacturing — frequently asked

The Hungarian automotive ecosystem — Audi Hungária (Győr), Mercedes-Benz Manufacturing Hungary (Kecskemét), Magyar Suzuki (Esztergom), plus Bosch, Continental, ZF, Schaeffler suppliers — runs on IATF 16949:2016 across the Tier 1-2 chain. We build the software layer that takes an SAP order and pushes it through to the shop floor PLC: per-part traceability, real-time kanban over OPC UA, batch-level serial-number tracking. We typically slot in around an existing Siemens Opcenter or Rockwell Plex MES.

Let's start the manufacturing scoping call

In 30 minutes we map the MES / ERP / OT environment and give you a tight time-and-cost estimate.

Start a project