Software architect, ICT integrations, applied AI
Viktor Sundberg
I’m Viktor Sundberg, a software architect in Finland. I work where operations meet software: I spent five years driving cranes and container handlers in Finnish ports before moving into IT management and full-time software. My CV tells the longer story.
I hold two leadership positions. At a greenfield deep-water container terminal I’m ICT Integrations Manager (contract), reporting to senior management. I built the terminal’s ICT from the ground up as its first ICT lead, and through the build phase its only one. A dedicated IT manager now runs day-to-day IT, and my role focuses on integrations: the terminal operating system, the ERP, and the data flows between them. I lead the procurement of both systems, and I’m responsible for maintenance of the terminal’s heavy-equipment fleet.
I’m also co-founder and CEO of GoSoft Oy. I run the business side, from pricing and partner channels to contracts and data processing agreements, and I took our AI assistant from prototype to production. It answers from each customer’s own documents through tool calls and hybrid search, with embedding and reranking models running on our own servers. Models are chosen by an evaluation suite that stays in the codebase as a regression test. We use AI agents internally too, in development and day-to-day work.
As an independent consultant, I work on ICT infrastructure, security and applied AI for ports, logistics and industry. The essays here are field notes on networks, email, security, retrieval, and architecture.
Selected work
- case studyGreenfield terminal - ICT from fiber to software
First ICT lead of a greenfield deep-water container terminal. Now its ICT Integrations Manager: TOS, ERP and the data flows between them.
- case studyVenekeskus - winter storage CRM
A small, purpose-built CRM that runs the winter storage side of a Finnish boat business.
- case studyGosoft Connect - AI chat grounded in customer documents
A multi-tenant widget SaaS whose AI chat answers from each customer’s own knowledge base - the entire retrieval stack self-hosted on one CPU-only node.
Latest essays
- STARTTLS is a suggestion
Mail between servers is encrypted only if nothing interferes, and an attacker counts as interference. What MTA-STS, DNSSEC and DANE actually promise, in the order they have to be deployed, with the failure modes met along the way.
- p=none is not monitoring
A DMARC record in monitoring mode with no rua tag is monitoring with nothing monitoring. What enforcement actually checks, what it breaks, and the hole it does not close.
- This site
Prerendered SolidStart in plain JavaScript, zero third-party requests, HTTP/3 from a Hetzner box. What that costs, what it buys, and what I would change.