Data & Compliance
Data platforms plus EU AI Act and GDPR readiness — the foundation that makes enterprise AI safe and legal in Europe.
AI is only as trustworthy as the data and governance beneath it. I build the data foundation and the compliance posture that European regulators — and your customers — expect.
Where I help
Data platforms
Modern, EU-resident data infrastructure: ingestion, warehouse/lakehouse, governance, and the quality controls AI depends on.
EU AI Act readiness
Classify your systems by risk tier, identify obligations, and build the technical documentation, logging, and human-oversight controls the Act requires.
GDPR / DSGVO
Lawful-basis review, data-minimization, retention, and DPIAs for AI processing — so personal data is handled correctly from ingestion to inference.
Governance
Model cards, audit trails, and approval workflows that make AI decisions explainable and defensible.
EU AI Act, in brief
The EU AI Act tiers systems by risk. Most enterprise AI lands in limited or high risk:
| Risk tier | Examples | Core obligations |
|---|---|---|
| Unacceptable | Social scoring | Prohibited |
| High | Hiring, credit scoring | Risk mgmt, docs, human oversight, logging |
| Limited | Chatbots | Transparency / disclosure |
| Minimal | Spam filters | None |
I map each of your systems to a tier and a concrete checklist — early, before it becomes a launch blocker.
Not legal advice
I deliver the technical controls and documentation that support compliance. Pair me with your legal counsel for binding interpretation.
Back to about nicojahn · Talk to me