Experience
Selected work.
A sample of what we have delivered, anonymised where confidentiality requires it. The common thread is complex, regulated, technology-driven work that had to hold up in practice.
What we do
ISO/IEC 27001 & ISMS
Gap analysis, ISMS documentation and certification-audit support.
Outsourced DPO
Your external Data Protection Officer and ongoing GDPR compliance.
Outsourced AML Officer
An external AML function, procedures, monitoring and reporting.
GDPR audits & DPIAs
Data-protection audits and impact assessments across processes and products.
AI Act & AI governance
Compliance architecture for AI and machine-learning systems.
FinTech & payments licensing
SPI, KIP, VASP and payment-institution authorisation and supervision.
MiCA & digital assets
Token structuring, whitepapers and CASP compliance.
DORA & NIS2 readiness
Operational resilience and cybersecurity for regulated entities.
Technology & data contracts
AI-vendor, SaaS and data-processing agreements, IP and liability.
AI Governance · Pharma
Personal-data and AI governance framework for an international pharmaceutical group.
AI Act · HR-tech
AI Act compliance architecture for a generative-AI product in the HR-tech sector.
Data & ML · DSA/GDPR
Transparent data flows in machine-learning solutions, with DPIAs and data cards aligned to the DSA and GDPR.
Cybersecurity · Energy
Prepared an energy-sector organisation for ISO/IEC 27001 certification.
ISO 27001 · Technology
End-to-end ISO/IEC 27001 implementation: gap analysis, ISMS documentation and certification-audit support.
Outsourced DPO · Healthcare
Ongoing GDPR support and outsourced Data Protection Officer for a healthcare provider.
Compliance Audit · Automotive
ESG, GDPR and human-rights compliance audit across a Europe-wide automotive group.
AML & KYC · VASP/SPI
Comprehensive AML and KYC implementations within SPI and VASP structures.
Supervision · Payments
Prepared payment institutions for inspections by NBP, KNF and GIIF.
Crypto · Regulatory
Opinions on the legal status of tokens and operating models under AML, MiCA and domestic law.
Digital Assets · Real Estate
Advised on the tokenisation of shares in a real-estate company.
Cross-border · Embedded Finance
Advised on cross-border structures involving white-label and embedded-finance models.
DORA · FinTech
Delivered digitalisation projects aligned with DORA for financial-sector clients.
Technology Contracts · AI Vendors
Negotiated technology and data-processing agreements with AI vendors, including IP and liability terms.
AML · Procedures & Training
Built internal AML, compliance and risk procedures and delivered team training programmes.
Regulatory Engagement · EU/UN
Active in EU and UN regulatory initiatives (UN IGF, EuroDIG) and the Ministry of Digital Affairs AI Working Group.
References available on request.
Trusted by
Experience
Have a matter like these?
Whether it is AI in production, a token structure, a licence application or a factory going digital, we help you build it on solid legal ground.