kmail.at

advisory

AI, compliant and production-ready

I make AI in organisations compliant and production-ready — for companies and for the public sector. Independent of vendors, EU-native from Vienna.

what I do

Four ways to work together — from a bounded examination to a standing role. Each ends in a written artifact you keep and own.

01

AI Readiness Check

A bounded examination of where AI is used, what it touches, and which duties already apply. You keep the scorecard report.

from €4,900 · 2–3 weeks
02

AI Literacy Programme (Art. 4)

Training for the AI Act literacy duty, plus the evidence package that proves who was trained in what.

from €1,500/day · role-tiered, days not months
03

Strategy & Governance

Phased work that ends in a decision, not a deck: the roadmap, the target architecture, the governance design, or the FRIA dossier.

from €7,500 · phases of 4–8 weeks, priced per phase
04

Fractional AI Lead

A standing technical authority on retainer: architecture and governance decisions, with no vendor commissions.

from €2,500/month · ongoing

the short version

Almost every organisation now uses AI somewhere. Very few can show what it changed. The distance between those two sentences is the whole job — and since February 2025 the AI Act makes part of closing it a duty rather than a good intention. The deadlines that carry money are already dated.

89%

of organisations already use AI in at least one function

McKinsey State of AI 2026

37%

report a measurable effect on earnings — unchanged year over year

McKinsey State of AI 2026

~95%

of enterprise GenAI pilots show no measurable P&L impact

MIT Project NANDA

what ignoring it costs

>40%

of agentic-AI projects get cancelled by end-2027 — cost, unclear value, missing risk controls

Gartner, June 2025

€35M / 7%

maximum AI-Act penalties for prohibited practices — above GDPR’s €20M / 4%

Reg (EU) 2024/1689, Art. 99

2 Dec 2027

deployer duties and the FRIA fall due for Annex III systems — evidence takes 12–18 months

Omnibus Reg (EU) 2026/1744

who this is for

Know what you have

A documented inventory of AI in your organisation — including the shadow AI your staff already use — with a risk class per use.

Meet the duties you already carry

AI literacy is mandatory since February 2025; GDPR has applied to AI processing all along. Both are made demonstrable, not just discussed.

Ship one thing that works

Strategy ends in an architecture decision and a first production-style use case with its own eval suite — not another deck.

both entrances end in the same offers — go to the catalogue

what is in this section