Services
AI compliance that works
My services combine technical AI knowledge with regulatory expertise. I work on a project basis or in interim mandates of 3 to 12 months – remote or hybrid.
Engagement models
Three ways to work together
Assessment
Fast clarity on risks and obligations.
- Risk classification of all AI systems
- Gap analysis against the AI Act (Art. 9–15)
- Compliance roadmap with priorities
- Quick wins for immediate improvements
- Executive summary for management
Framework Design
Build AI governance from zero to one.
- Everything from the assessment
- AI policy & guidelines (MaRisk/BAIT/VAIT)
- Process design & RACI matrix
- Risk management framework
- Stakeholder alignment & board sign-off
Interim Leadership
Operational ownership for a defined period.
- Hands-on project support
- Team enablement & knowledge transfer
- BaFin audit preparation
- Ongoing compliance monitoring
- Sparring partner for leadership & committees
Service pillars
What I specialise in
AI Act Readiness
Your AI systems classified, documented and prepared for the EU AI Act – with a prioritised roadmap instead of busywork.
- Risk classification (high / limited / minimal risk)
- Gap analysis against AI Act requirements
- Technical documentation & conformity assessment
- BaFin / EBA conformity
AI Governance
Policies, roles and committees that hold up in daily operations – aligned with MaRisk, BAIT and VAIT for the financial sector.
- AI policy & guidelines
- Process design (development, approval, monitoring)
- Roles & responsibilities (RACI)
- Risk management framework for high-risk systems
Data Protection for AI
GDPR conformity from the training data through to live operation – as a certified data protection officer.
- Data protection impact assessment (DPIA) for ML/AI
- Legal bases & training data (Art. 6, 9 GDPR)
- GDPR assessment of AI services
- Privacy by design
How I work
How we work together
Intro call
Free and without obligation, we clarify your situation, your goals and the right setup.
Assessment
Inventory, risk classification and gap analysis – a clear picture within weeks.
Implementation
Governance, policies and processes are implemented hands-on – not just documented.
Enablement
Your team is equipped to keep working compliantly on its own after the mandate ends.
Next step
Which model fits your situation?
Let's find out in a short intro call where you stand and what makes sense next.