EU AI Act Experts in Germany

• Generative AI products for corporate clients, owned from strategy through specification to production.
• Central strategy, local configuration: multi-tenant AI assistant for occupational pension schemes (bAV), delivered as an interactive avatar with text and voice path. Three tenants run on one codebase, each with its own conversation guide, while the knowledge base, guardrails and escalation paths stay central
• Versioned, AI-ready knowledge base composed into a tenant-agnostic voice context and tenant-specific text prompts — the configuration layer that keeps local adaptation from forking the product
• Conversational design: answer limits, scope and off-topic handling, anti-hallucination rules, escalation and lead handover to human advisors
• Five eval suites as a quality gate before any prompt or model change (anti-hallucination, LLM-as-judge failure modes, multi-turn consistency, voice KPIs, action vocabulary with confusion matrix); user test with 10 testers (Hamburg, 07/2026) drove the rework from alpha to beta
• Coordinated external developers, compliance and client stakeholders; GDPR-compliant EU stack, IDD-compliant, EU AI Act classification documented
• Second product line: white-label social media generator for consultancy chilli mind (CH/DE) — one codebase, per-client branding and configuration
• Results: 239+ deployments and a pilot with corporate customers · 108+ deployments for the white-label product · repeatable pattern for multi-tenant AI products in a regulated environment

CXO AI OS is an agent system made up of six building blocks. Instead of using AI as a chat window, it creates a system that understands a company’s context, makes decisions according to its rules, and acts on its behalf.

• For mid-sized companies: a guided sprint followed by operation for a team, department, or prioritized cluster, based on an AI assessment
• For self-employed professionals: a program in which participants build their own agent system
• Sequence in the company: assessment, prioritization, sprint, operation
• Implementation in Claude Cowork or ChatGPT Work, without coding
• Architecture: Chief of Staff, Goals, Advisors, Agents, Context, Catalog

• Repaired a broken “ScrumBan” process, then established a pure Kanban system; increased output in the Kanban flow by 22% within four weeks

• Increased team autonomy and decision-making ability by implementing new decision strategies; resulting in up to 25% better outcomes

• Redesigned retrospectives (including one-to-one coaching and workshops), which led to consistent implementation of the resulting action items

• Intensive coaching of Product Owners (POs) to develop and support “Empowered Teams”, alongside leadership development to place agile frameworks and methods in a realistic context (“de-illusioning”)

• Supported change management processes to promote an agile company culture among management and teams, improving internal communication to increase transparency and effectiveness in agile processes

• Development of an agent-based governance platform for the automated assurance of EU AI Act compliance and ODA-compliant orchestration of AI services in complex enterprise environments.

• Design and implementation of an agent-based "Mission Control" framework (Aletheia Conductor) for autonomous state monitoring and process control.

• Development of "Compliance-as-Code" (CaC) solutions based on OPA/Rego for system-wide enforcement of regulatory guardrails.

• Integration of TM Forum ODA standards (TMF630, TMF622, TMF642) to ensure interoperability and standardization.

• Building a highly available event-driven architecture using Redpanda and CloudEvents v1.0 for near-real-time event processing.

• Implementation of an audit-proof "Evidence Chain" through cryptographic linking of trace logs in preparation for automated audits.

• Tech Stack: Java 21 (Quarkus Native), TypeScript (Next.js), Redpanda (Kafka API), CloudEvents v1.0, OPA (Open Policy Agent) & Rego, TimescaleDB, ZincSearch, Redis, TM Forum ODA, Git, GitHub, Clean Code Development, Like-C4.

Stabilization of an Azure/.NET landscape in live operation.

• Architecture, DevOps, and operational readiness; technical decisions under time pressure
• Azure DevOps, monitoring, ETL/ELT, cloud security, FinOps, and data-mesh-related topics

Technologies: Azure DevOps, .NET, CI/CD, monitoring, FinOps

• Lecturer in an AZAV-certified, one-month training program on AI basics and practical application
• Design and delivery of modules for participants from different professional fields
• Teaching how generative AI works, where it can be used, and where its limits are, as well as prompting and evaluation practice
• Creating training materials and exercise formats
• Trainer qualification according to AEVO

• Industry: mechanical engineering, vehicle manufacturing
• Regulations: Data Act
• Project focus: data governance, legally compliant use of machine data, data platforms
• Assigned by: CFO, platform product owner

Successes/Results (early phase):

• Compliance support for the setup of an internal standardized data usage platform based on Databricks.
• Created the basis for the legally compliant and effective use of machine data, including:
• Technical: gap analysis and closing of gaps in the segmentation and maintenance of collected machine data.
• Technical: consideration of data flows from the platform to users and third parties.
• Organizational: drafting and finalizing the required data usage agreements.

Time-limited interim assignment filling a vacant program leadership position: joint leadership of a complex software project and orchestration of several agile teams (business, development, and DevOps teams), as well as actively driving change processes.

• Program Management & Planning: Responsibility for creating and updating milestone, resource, and budget plans to ensure project objectives using agile and hybrid methods.
• Cross-functional Collaboration: Promoting cooperation and knowledge sharing across teams; resolving blockers through proactive conflict management and targeted facilitation.
• Stakeholder Management & Transparency: Ensuring transparent and audience-appropriate communication within and outside the project organization using modern project management tools.

• Redesign of legal operations: standardised workflows reducing routine effort by up to 80%, with source citation, hallucination check as quality gate, role model, logging and audit trail.
• Compliance-by-design operating model (EU AI Act readiness, GDPR, eIDAS) with documented, releasable process steps.
• Roadmap, sprint planning and release management for an agentic RAG platform with counsel-in-the-loop approval, audit trail and German hosting.
• EU AI Act readiness, GDPR and eIDAS requirements managed as first-class project deliverables; go-to-market for two customer verticals.

• Built and validated SupportPiloten, an AI-powered content operations service; won the first paying pilot customer
• Tested agentic workflows with Claude Code and Codex for analysis, research, documentation, and prototyping
• Continued developing my own AI product; training in AI governance, AI compliance, and the EU AI Act (ongoing)

AI telephone assistant platform

Claude Code, Google AI Studio, Python, LLM / Voice-AI, PostgreSQL

• Conception and hands-on development of an AI-supported telephone assistant platform (voice AI / LLM) – from idea and architecture to MVP/product.
• Built agentic workflows and full automations with Claude Code and Google AI Studio.
• Also delivered AI-supported work in client engagements: used Claude Code for governance documentation, requirement drafts, and automations.

• Project manager for the analysis, implementation, and optimization of digital processes
• Concept, management, and optimization of comprehensive marketing campaigns for lead generation via Paid Social (incl. Meta Ads, TikTok Ads)
• Concept and implementation of content production and marketing activities
• Project management in omnichannel marketing and process automation
• Implementation of digital tools to improve customer acquisition and support
• Internal stakeholder management and coordination of external service providers

AI Agent SaaS

Founded and built an AI agent SaaS for automated customer support and lead qualification, including implementation with pilot customers.

• Service → product transformation: productization from the agency into an independent AI agent SaaS. The starting point was a specific customer problem; the product was developed together with the customer.
• Developed and launched AI agents for website inbound, lead qualification, and customer service, reaching €8K MRR.
• Structured and led a remote team across engineering, LLM ops, and customer enablement.
• Case PTC Auto (e-commerce on Shopify): connected an AI support agent to the store, automated product data & support workflows, reducing workload by ~10–15 hours per week per support employee.
• Set up GDPR-compliant data processing for the AI agents: data processing agreements, deletion policies, and customer data storage locations.
• Assessed agents against the EU AI Act (risk class, transparency requirements) and built them accordingly.
• Addressed customers’ compliance and security requirements (questionnaires, evidence, contracts) to make sales possible in the first place.
• Built technical safeguards into the product to prevent agent misbehavior: hallucinations, escalation to humans, and logging.

• Head of the group-wide, international, and cross-functional IT Governance & IAM department within the central IT division of a large French-German private banking group. Disciplinary management of around 30 employees at five different locations within the group (Frankfurt, Paris, Tunis, Saarbrücken, Düsseldorf). Head of IT committees and key role in direct communication with management, the supervisory board, external stakeholders, and regulators.
• Definition and establishment of a state-of-the-art IT strategy process and related IT governance structures for the group's IT department with more than 600 employees (testified by the German Federal Financial Supervisory Authority and the ACPR) and successful process run.
• Establishment of a new future-oriented process framework for IT and necessary governance structures (process squads) for the continuous improvement of IT processes with regard to new regulatory requirements (including DORA, EU AI Act, etc.).
• Establishment of stringent processes to close a historical backlog of findings (> 100 IT findings, 40 overdue findings in 2022) from internal and external auditors (WP, ACPR, BaFin). Successful reduction of stock of overdue findings to 0 at the end of 2025.
• Supporting more than 20 IT audits per year and establishment of regulatory monitoring processes. Introduction of ServiceNow to revolutionize regulatory change and IT compliance processes with advanced AI functionalities.
• Realignment of IT control processes in conjunction with the newly established ICT risk function under DORA and the three lines of defense concept using the TopEase GRC solution.
• Reduction of the application landscape, by systematically analysing the purpose with application and business owners, identifying duplicates while implementing a One-Tool Strategy throughout the group. Successful reduction of one third of the application landscape within the CMDB.
• Onboarding of all group applications into One Identity's group-wide IAM solution, as well as operation and further development of the solution in connection with segregation of duties (SoD), role-based access management (RBAC), etc.