State-of-the-art AI, advised and shipped.

Two to three weeks to know exactly where AI is used in your organisation, what it touches, and which duties already apply.

You receive: a scorecard report — the AI inventory including the tools your staff signed up for themselves, a risk class per use, the data-protection triggers, and an action list ranked by exposure: keep, scale, kill.

who it is for

first purchase for an SMB, an enterprise or a public body — the trigger is a board question, an upcoming audit, a supplier promise, or a pilot nobody owns.

not for

not a strategy — the strategy comes after the inventory.

public administration15 working days, fixed price, written German deliverable, worded so it can go into a direct-award justification.

A two-week technical second opinion on the agent, the LLM feature or the retrieval system you already run — or on the proposal you are about to sign.

You receive: a written decision memo — an architecture decision record, an eval-rig specification, and a remediation list ranked by severity, where every finding names the cheapest test that proves it. Plus a 90-minute walk-through with your team.

who it is for

enterprises and SMBs with a pilot, a proof of concept or a vendor offer; startups after their first build; non-technical organisations whose provider promised something.

not for

not a rebuild and not a takeover — the review does not become maintenance.

public administrationthe technical annex to your procurement decision, in German.

One workflow, four to six weeks, and it is running — with an eval suite, a run-book, and your team trained to own it.

You receive: the working system, its eval suite, a run-book, a handover session for your team, and — with your approval — a short public build log with the measured number.

who it is for

SMBs and non-technical organisations that need something working rather than a strategy; startups that need speed; enterprises with one bounded, high-value workflow. One named internal owner is required — no owner, no sprint.

not for

not a software house and not a maintenance contract.

public administrationa bounded unit description at fixed price, with the documentation the supervisory file expects.

Phased work that ends in a decision you can defend — the roadmap, the target architecture, the governance design, or, for a public body, the FRIA dossier.

You receive: one fixed artifact per phase — the roadmap (use cases with effort, value and a twelve-month sequence), the target architecture (a diagram plus a decision record, bounded to interfaces and the local-versus-cloud posture), or the governance design (an AI register, an acceptable-use policy, a risk classification, a named owner, and a lightweight management layer aligned to ISO/IEC 42001 — a voluntary standard, not a legal requirement). Public-sector variant: the FRIA dossier.

who it is for

enterprises and regulated groups; SMBs that have just finished a readiness check; public bodies with uses in the high-risk class; boards that have to show a defensible decision.

not for

not a slide deck and not an open-ended retainer.

standing-role tierFractional AI Lead — fixed monthly days, documented architecture and governance decisions, owns the eval bar, reviews vendor claims, no commissions. Six-month minimum, quarterly review, defined days per cycle, written exit terms.

public administrationthe FRIA dossier (the seven elements of Art. 27, the data-protection bridge, notification preparation) plus the deployer procedures — supervisory-ready documentation, written in German.

The training your staff need — and the record an auditor asks for: who was trained in what, when, with which materials.

You receive: the evidence package — a role-specific curriculum, participation records, and a policy snippet naming who was trained in what. The teaching is the smaller half; the documented coverage is the deliverable.

who it is for

HR, L&D and compliance owners in enterprises and public bodies; non-technical organisations that have to be able to show competence.

not for

not a keynote and not a certificate — no certificate is issued, because Art. 4(1) sets no statutory level; what you get is evidence of coverage.

public administrationaligned to the administration's own AI guidance, with participation records over certificates-for-CVs.