kmail.at
contact

elsewhere

EnglishEN

advisory · agentic ai & knowledge systems · vienna, at

advisory

Agentic AI and knowledge systems engineering is the lead. The environments where the work is real — regulated, standards-driven, public-sector — are the anchor. EU compliance is what makes the claim admissible here: dated, sourced, and written to be handed to a supervisor.

AI, compliant and production-readyI make AI in organisations compliant and production-ready. Independent of vendors, EU-native from Vienna.

what an engagement is

A definition, then the artifact

An engagement here has three parts: one bounded scope agreed in writing, one artifact named before I start, and a handover so the result runs without me. That is the whole model — there is no second phase you discover later.

what I do

Four ways to work together — from a bounded examination to a standing role. Each ends in a written artifact you keep and own.

01

AI Readiness Check

Two to three weeks to know exactly where AI is used in your organisation, what it touches, and which duties already apply.

2–3 weeks, fixed scopeopen the format page
02

Agentic Systems Review

A two-week technical second opinion on the agent, the LLM feature or the retrieval system you already run — or on the proposal you are about to sign.

2–3 weeks, fixed price, one system per reviewopen the format page
03

Agentic Build Sprint

One workflow, four to six weeks, and it is running — with an eval suite, a run-book, and your team trained to own it.

4–6 weeks, fixed price per artifact, one workflowopen the format page
04

Strategy & Governance

Phased work that ends in a decision you can defend — the roadmap, the target architecture, the governance design, or, for a public body, the FRIA dossier.

phases of 4–8 weeks, fixed price per phase, ends in a plan plus one pilotopen the format page
05

AI Literacy Programme (Art. 4)

The training your staff need — and the record an auditor asks for: who was trained in what, when, with which materials.

role-tiered — all-staff awareness (90 minutes), department practitioners (half a day), leadership briefing. Open cohorts or in-house.open the format page

the short version

Almost every organisation now uses AI somewhere. Very few can show what it changed. The distance between those two sentences is the whole job — and since February 2025 the AI Act makes part of closing it a duty rather than a good intention. The deadlines that carry money are already dated.

89%

of organisations already use AI in at least one function

McKinsey State of AI 2026

37%

report a measurable effect on earnings — unchanged year over year

McKinsey State of AI 2026

~95%

of enterprise GenAI pilots show no measurable P&L impact

MIT Project NANDA

what ignoring it costs

>40%

of agentic-AI projects get cancelled by end-2027 — cost, unclear value, missing risk controls

Gartner, June 2025

€35M / 7%

maximum AI-Act penalties for prohibited practices — above GDPR's €20M / 4%

Reg (EU) 2024/1689, Art. 99

2 Dec 2027

deployer duties and the FRIA fall due for Annex III systems — evidence takes 12–18 months

Omnibus Reg (EU) 2026/1744

how i work

Transform, without the drama

“With ease” is not a slogan here — it is four mechanical commitments, each one checkable before you commit to anything.

  1. 01

    One thing at a time

    one workflow (03), one system per review (02), one artifact per phase (04). The scope is written down, and it does not grow quietly.

  2. 02

    Fixed price per phase

    the number is agreed at the scope call. No day rate without a ceiling, no open meter.

  3. 03

    A kill gate after week one

    the first week of a sprint ends in a decision memo. Stopping there costs nothing, and you keep the memo.

  4. 04

    Handover by default

    everything is written to be used without me in the room. Documentation, evals and a run-book are part of the deliverable, not an extra.

I am vendor-independent: no commissions, no licence resale, and I am not paid by anyone whose product I assess.

Not a software shop, not a body shop, not a legal practice, not a vendor channel. Regulatory statements here are dated and sourced; this page describes services, not legal advice.

what is in this section

the five formats

The ladder — from the first question to a running system

Five formats, in the order they are usually bought. Card links open the format page; every card also has an anchor, so a link into it keeps working.

01AI Readiness Check

2–3 weeks, fixed scope

Two to three weeks to know exactly where AI is used in your organisation, what it touches, and which duties already apply.

You receive: a scorecard report — the AI inventory including the tools your staff signed up for themselves, a risk class per use, the data-protection triggers, and an action list ranked by exposure: keep, scale, kill.

who it is for
first purchase for an SMB, an enterprise or a public body — the trigger is a board question, an upcoming audit, a supplier promise, or a pilot nobody owns.
not for
not a strategy — the strategy comes after the inventory.

public administration15 working days, fixed price, written German deliverable, worded so it can go into a direct-award justification.

02Agentic Systems Review

2–3 weeks, fixed price, one system per review

A two-week technical second opinion on the agent, the LLM feature or the retrieval system you already run — or on the proposal you are about to sign.

You receive: a written decision memo — an architecture decision record, an eval-rig specification, and a remediation list ranked by severity, where every finding names the cheapest test that proves it. Plus a 90-minute walk-through with your team.

who it is for
enterprises and SMBs with a pilot, a proof of concept or a vendor offer; startups after their first build; non-technical organisations whose provider promised something.
not for
not a rebuild and not a takeover — the review does not become maintenance.

public administrationthe technical annex to your procurement decision, in German.

03Agentic Build Sprint

4–6 weeks, fixed price per artifact, one workflow

One workflow, four to six weeks, and it is running — with an eval suite, a run-book, and your team trained to own it.

You receive: the working system, its eval suite, a run-book, a handover session for your team, and — with your approval — a short public build log with the measured number.

who it is for
SMBs and non-technical organisations that need something working rather than a strategy; startups that need speed; enterprises with one bounded, high-value workflow. One named internal owner is required — no owner, no sprint.
not for
not a software house and not a maintenance contract.

public administrationa bounded unit description at fixed price, with the documentation the supervisory file expects.

04Strategy & Governance

phases of 4–8 weeks, fixed price per phase, ends in a plan plus one pilot

Phased work that ends in a decision you can defend — the roadmap, the target architecture, the governance design, or, for a public body, the FRIA dossier.

You receive: one fixed artifact per phase — the roadmap (use cases with effort, value and a twelve-month sequence), the target architecture (a diagram plus a decision record, bounded to interfaces and the local-versus-cloud posture), or the governance design (an AI register, an acceptable-use policy, a risk classification, a named owner, and a lightweight management layer aligned to ISO/IEC 42001 — a voluntary standard, not a legal requirement). Public-sector variant: the FRIA dossier.

who it is for
enterprises and regulated groups; SMBs that have just finished a readiness check; public bodies with uses in the high-risk class; boards that have to show a defensible decision.
not for
not a slide deck and not an open-ended retainer.

standing-role tierFractional AI Lead — fixed monthly days, documented architecture and governance decisions, owns the eval bar, reviews vendor claims, no commissions. Six-month minimum, quarterly review, defined days per cycle, written exit terms.

public administrationthe FRIA dossier (the seven elements of Art. 27, the data-protection bridge, notification preparation) plus the deployer procedures — supervisory-ready documentation, written in German.

05AI Literacy Programme (Art. 4)

role-tiered — all-staff awareness (90 minutes), department practitioners (half a day), leadership briefing. Open cohorts or in-house.

The training your staff need — and the record an auditor asks for: who was trained in what, when, with which materials.

You receive: the evidence package — a role-specific curriculum, participation records, and a policy snippet naming who was trained in what. The teaching is the smaller half; the documented coverage is the deliverable.

who it is for
HR, L&D and compliance owners in enterprises and public bodies; non-technical organisations that have to be able to show competence.
not for
not a keynote and not a certificate — no certificate is issued, because Art. 4(1) sets no statutory level; what you get is evidence of coverage.

public administrationaligned to the administration's own AI guidance, with participation records over certificates-for-CVs.

This page describes services, not legal advice; regulatory statements reflect the law as of late 2026, with sources on request.

who it is for

Four kinds of organisation

The formats do not change with the organisation. The language, the size of the artifact and the first purchase do.

Startups & scale-ups

Weeks, not quarters: one workflow defined on Monday, running and evaluated before the next board meeting — and your engineers own the code from day one.

first purchase · 02 · Agentic Systems Review, or 03 · Agentic Build Sprint

SMB / KMU

No AI department needed: I start with what your team already does by hand, one process at a time, and everything you get back is in plain language and stays yours.

first purchase · 01 · AI Readiness Check

Enterprises & regulated groups

It fits the process you already have: fixed-price phases, decision records your architects can file, governance artifacts your auditors accept — and nothing that requires you to adopt my stack.

first purchase · 02 · Agentic Systems Review, or 04 · Strategy & Governance

Non-tech organisations

No jargon and no new tools to learn: I begin with the work your team already does, in your language, and the result is a document you can hand to a board or a supervisor.

first purchase · 05 · AI Literacy Programme (Art. 4), or 01 · AI Readiness Check

Public administration

Same five formats, procurement-shaped: fixed, describable units, written German deliverables, dated duties, and an on-premise option that is a first-class answer rather than a footnote. I work with the supervisory authority, not against it.

the public-administration block →

Any organisation using AI now has a position to show — to the board, to an audit, to a supervisory body. I turn scattered AI usage into an inventory, a risk classification and a working governance structure, then build the first real use case on top of it.

Know what you have

A documented inventory of AI in your organisation — including the shadow AI your staff already use — with a risk class per use.

Meet the duties you already carry

AI literacy is mandatory since February 2025 (Art. 4) and GDPR has applied to AI processing all along; deployer duties and the fundamental-rights impact assessment (Art. 26/27) fall due on 2 December 2027. Each step is dated and documented, not advisory in the abstract.

Procurement-safe by design

Fixed prices, written deliverables, no licence resale, no vendor commissions — and documented comparison offers from €50,000 upward on request, where the three-offer rule of the 2026 procurement amendment applies.

Sovereign by default

Knowledge systems that run on infrastructure you control: local and open-weight models, retrieval over your own corpus, eval suites that prove quality to auditors rather than to a demo audience.

Ship one thing that works

Strategy ends in an architecture decision and a first production-style use case with its own eval suite — not another deck.

the formats themselves are the same for everyone — go to the catalogue

public administration

Same formats, procurement-shaped

Fixed, describable units with a written German deliverable; duties with their dates; and an on-premise option that is a first-class answer, not a footnote.

Direct award up to €140,000 for federal bodies and €216,000 for other contracting authorities; the three-offer principle applies from €50,000, and a documented comparison is supplied on request.

AI literacy since 2 February 2025 · transparency duties since 2 August 2026 · high-risk obligations (Annex III, including the fundamental-rights impact assessment) 2 December 2027 · Annex I 2 August 2028.

Documentation here is built to be handed over. I work with the supervisory authority, not against it.

request the scope note, in German →

proof

Six claims, each with the thing that proves it

Nothing here is an adjective. Each line names an artifact you can open, count or date.

  1. 01

    The systems are built, not described.

    published tools, several running in the browser; this site is itself the work.

  2. 02

    The thinking is sourced and dated.

    articles where each figure traces to a primary source.

  3. 03

    Competence transfer is already practised.

    reviewed tutorials and full courses, the raw material of the literacy offer.

  4. 04

    Regulatory fluency is dated, not vibes.

    the atlas below, with sourced provisions and their dates.

  5. 05

    Independence is structural.

    no commissions, no licence resale; I am not paid by anyone whose product I assess.

  6. 06

    The rare intersection.

    twenty years of structuring large, semi-structured data under standards-driven governance, then learning to build the systems that query it.

proof of work

Published, open tools — not concepts. Everything here is installable or runs at kmail.at right now.

full registry: /tools · live tool: /omar · writing: /library

the acceleration builds

Two kinds of time saving exist, and mixing them is how AI projects end in disappointment. Assistance speeds a task you still perform — measured honestly, a quarter to a half of the invested time. Delegation hands a whole bounded task to a tool and collapses it — hours of an afternoon to minutes. That second regime is where “up to 90%” belongs, and the honest way to claim it is to build the tool and measure it. That is what these engagements do.

−25.1%

time on realistic consulting tasks with AI — and +40% graded quality

Dell'Acqua et al. 2023 · 758 consultants, RCT

−40%

invested time on professional writing tasks, quality up, not down

Noy & Zhang · Science 381 (2023) · n = 453

−55.8%

completion time on a real coding task with an AI pair programmer

Peng et al. 2023 · 95 developers, RCT

≈4 h → min

manual transcription cost per hour of audio, collapsed to machine minutes

industry transcription-time guidance (Rev)

0%25%50%75%100%invested time removed per task →professional writingNoy & Zhang · Science 2023 (n = 453)−40% timequality +18%a coding taskPeng et al. 2023 (n = 95, RCT)−55.8% time95% CI 21–89%consulting tasksDell'Acqua et al. 2023 (n = 758)−25.1% timequality +40%“up to 90%”90%+whole-taskautomationthe collapse regime, grounded: ≈ 4 h of manual work per hour of audio (transcription, industry estimate)→ minutes machine-side — a >95% reduction of the invested time, on the task as a whole.Sources: Peng, Kalliamvakou, Cihon & Demirer 2023, arXiv:2302.06590 · Noy & Zhang, Science 381 (2023) · Dell'Acqua et al., HBS WP 24-013 · Rev transcription-time guidance.
Fig. I — measured, not promised. Assisted tasks speed up by a quarter to a half under controlled trials; delegating a whole bounded task to a built tool collapses hours to minutes — that is where “up to 90%” lives, and it is testable per tool.

The catalogue is deliberately exhaustive — every line below is a build pattern, not a software SKU: the artifact differs per organisation, the loop (Fig. J) does not. Bounded, versioned, owned, measured — each one ships with the number that says what it actually saved.

documents

contracts, briefs, SOPs, policies, technical documentation — drafted from your templates and your corpus, reviewed by a human, version-controlled

presentations

slide decks generated from a written outline or a data pull — brand tokens applied, speaker notes included, regenerate on every source change

meeting protocols

transcript → decisions, action items with owners, the formal minutes your governance requires — produced before everyone leaves the room

reports

weekly ops reports, management summaries, monitoring narratives — assembled from live metrics, delivered on schedule, no compile-by-hand

web scraping

structured extraction from sites and portals — price lists, tenders, registries — deduplicated, differential against the last run, delivered as data

workflows

multi-step processes across systems wired as n8n-class pipelines — trigger, transform, notify — with retries and an audit trail

data pipelines

ingest → clean → validate → load jobs that rerun forever; schema drift caught at the gate, not in the meeting after

automations

the repetitive glue between humans and systems: routing, reminders, follow-ups, filing — quietly eating the 15-minute tasks

dashboards

executive and team dashboards computed from your own operational data — refreshed automatically, one definition per metric, no numbers fought over

email & comms drafting

first drafts of recurring correspondence — status updates, invoices cover notes, tender replies — in your tone, from your facts

QA & evaluation rigs

the harness that grades every other build: golden sets, regression runs, LLM-as-judge with a reviewable scorecard

document parsing

PDFs, scans and forms → machine-readable structured data (Docling-class) — feeding the reports, dashboards and knowledge bases above

knowledge assistants

retrieval over your own corpus with citations to the source artifact — the answer names its evidence, or it does not ship

agentic coding

reviewed code generation for the boring half of the backlog: migrations, boilerplate, glue, tests — PRs, not vibes

schedule & planning aids

rosters, resource plans, capacity scenarios — generated as draft decisions, decided by humans, recalculated in seconds when reality moves

on-call & monitoring summaries

log and alert triage reduced to what changed and who should care — noise collapsed before it reaches a phone

invoicing & back-office

invoice extraction, matching, booking-prep and the forms around it — the paperwork layer of ERP, tamed

research briefs

market, tender and competitor monitoring compiled from public sources into a written brief on a schedule — sources cited in place

your task, not on the list?→ bring it
auditpick the repetitivetasks worth collapsing01specifythe artifact & itsquality bar — in writing02buildtool / agent / pipeline,versioned, owned03eval gatetime saved & qualitymeasured before sign-off04runscheduled, monitored,rerun forever05the handover includes the measurement — what the task cost before, what it costs now
Fig. J — the loop every acceleration build runs: bounded scope, measured at the eval gate, then left running.

The honest arithmetic: assistance buys a quarter to a half; delegation of a bounded task buys far more, and some tasks collapse almost entirely. Nobody honest promises 90% on every task — the engagement's first deliverable is the measured list of yours where it holds.

how engagements look

Custom LLM environments (flagship case, write-up in preparation)

challenge
A client needed their own LLM environment — not an off-the-shelf chat wrapper: model selection, hosting posture, context engineering and integrations, end to end.
approach
Sovereign stack over open-weight models, knowledge-management layer on top, eval suite as the acceptance gate.
result
A running, owned LLM environment with measured quality at handover — documented so the client runs it without me.

Organisational knowledge systems (pattern case)

challenge
Knowledge scattered over silos, tools and heads; retrieval that cannot cite its sources is unusable in sensitive settings.
approach
Retrieval-first knowledge architecture — corpus curation, RAG with citations, knowledge-graph layer where relationships matter.
result
Answers with provenance and a system the organisation can extend itself.

Agentic tooling for BIM & AEC (pattern case)

challenge
Planning and construction data lives in document form (IFC, BIM execution plans) that LLMs cannot take in raw.
approach
Bounded parsers and validators — published openly — instead of one-off scripts: bim-parse, plan-diff, bim-execution-plan as reusable artifacts.
result
Open-source tools others now build on; the pattern generalises to any document-heavy domain.

Client-identifying case studies are published only with written approval; the pattern cases above describe the engagement shape without client data.

the record

Eleven topics, sourced and dated

This is the background, not the pitch: what the law requires, when, and what is still moving. Every figure carries the source underneath it. Dates are re-verified before publication — the high-risk deadline has moved once already.

the topics · what an engagement covers

assessment-report format · 11 topics · eight figures · sources cited in place

Advisory work lives or dies on specificity. This band is written like the assessments I deliver: every topic framed as a decision, every figure sourced in place, every engagement end stated before the first call. Where the rest of kmail.at is the editorial voice, this band is the evidence voice — deliberately sharper, because the people who read it are procurement, Audit, IT-Leitung and Datenschutz — the readers who check.

83%no formalAI-system inventory78%no meaningfulcompliance steps74%no designatedcompliance owner61%no technical-documentation processBENCHMARKorganisations already using AI in ≥1 function89%of those reporting measurable EBIT impact37%Sources: Vision Compliance sector assessment 2026 (n = 8 sectors) · McKinsey State of AI 2026.
Fig. A — Wide adoption, thin value, and a readiness floor that has not been poured: this gap is the day-one agenda of most engagements.
EU AI Act01AI training02GDPR / DSGVO03data sovereignty04local AI05knowledge bases06embeddings07PDF → data08analysis & trends09anonymisation10hybrid AI11production-ready,compliant AI11 topics, one practice
Fig. G — the advisory map of this page. Every node links to its section; every section states what an engagement produces.

EU AI Act — obligations mapped, evidence produced

Regulation (EU) 2024/1689 applies to you if you place AI on the market or deploy it in the EU — regardless of where the provider sits. The duties are staged, and each stage has a date.

in an engagement

I classify your uses (Annex III screening), map deployer duties (Art. 26) and the FRIA (Art. 27) where they are due, and produce the evidence file: inventory, risk classes, literacy records. Where a named tool helps understand the law, it already exists — built by me, open source.

TODAY · OCT 20261 Aug 2024Regulation in force2 Feb 2025Art. 5 prohibitions + Art. 4 lite…2 Aug 2025GPAI model-provider duties2 Aug 2026Art. 50 transparency, applied2 Dec 2027Art. 26 deployer duties + Art. 27…2 Aug 2028Annex I product-embedded high-riskfilled = in force (Art. 4 literacy since Feb 2025 — already an enforcement date behind us) · hollow = scheduled. Sources: Reg (EU) 2024/1689; Omnibus Reg (EU) 2026/1744, recital 40.
Fig. B — the obligation clock. Two dates are already behind us; the December 2027 wave needs evidence that takes 12–18 months to build.
02 / 11
AI training

AI training and literacy — competence you can evidence

Article 4 puts an AI-literacy duty on providers and deployers: the staff who operate AI systems, and the people affected by them, must reach a sufficient level of understanding. It has applied since 2 February 2025 — and it is the one obligation that reaches every AI use, not only the high-risk ones.

in an engagement

I run the programme role by role — what a manager, a developer and a caseworker each actually need — and produce the artefact an audit asks for: who was trained in what, when, with which materials. The teaching is the smaller half; the documented coverage is the deliverable.

03 / 11
GDPR / DSGVO

GDPR and DSGVO — compliance you can show an auditor

Every AI use that touches personal data runs in parallel through the GDPR: lawful basis, purpose limitation, DPIA where high risk, processor contracts, transfer rules. Non-compliance costs up to €20M or 4% of turnover.

in an engagement

I translate GDPR principles into deployer checklists that survive contact with reality: what to document per use case, when a DPIA is triggered, how AI-Act and GDPR duties overlap and where they differ — so one file answers both regimes.

0€10M€20M€30MAI Act — prohibited practices€35Mor 7% of global turnoverGDPR — severe infringements€20Mor 4% of global turnoverAI Act — high-risk duties€15Mor 3% of global turnoverAI Act — other obligations€7.5Mor 1% of global turnoverCeilings per undertaking; SME reductions apply. Sources: Reg (EU) 2024/1689 Art. 99 · GDPR (EU) 2016/679 Art. 83.
Fig. H — why the compliance file exists: the fine ceilings a single non-compliant deployment can touch.

Data sovereignty — decide where every byte lives

Sovereignty is not one thing: model weights, inference compute, embeddings of your corpus, and the raw documents each live somewhere — and each location carries a different exposure.

in an engagement

I build the location map first, then the posture: what stays in-house, what leaves to a processor, what is masked before it leaves. The slider model below shows the decision logic I put in your governance file.

posture 01 / 05
HIGHdata exposure

everything leaves: raw text, embeddings, context

fits: non-sensitive general work

LOCAL—GATEnoneCLOUDraw promptlocal reliance
cloud reliance
dots are schematic (qualitative), not measured benchmarks
1 / 5

Fig. F — the sovereignty ladder: five postures between cloud frontier and air gap; the engagement ends with your organisation placed on it.

Local AI — open-weight models on your own hardware

Open-weight models (llama.cpp ecosystem, quantised, MLX on Apple silicon) now cover most assistant, retrieval and extraction workloads without sending a byte anywhere.

in an engagement

I size the workload to your hardware, pick the model class, and hand over a running stack you operate — with the eval suite that proves it answers well enough for your use, before anyone signs off.

Knowledge bases from your existing data

The corpus you already own — files, wikis, archives, PDFs — becomes a queryable knowledge base: chunked, embedded, indexed for retrieval with citations back to the source.

in an engagement

Retrieval-first: I build the curation pipeline (what enters, how it is chunked, where it is indexed) and the citation layer. Every answer names its source, or the system does not ship.

RUNS ON INFRASTRUCTURE YOU CONTROLsourcesfiles · wikisarchives · mail01parselayout · tablesDocling-class02curatechunking rulesdedupe · ACLs03embedmodel per languagere-index policy04indexlocal vector store+ graph layer05answerscitations tothe source artifact06The gate between 02 and 03 is an eval set: if citations stop matching sources, the pipeline stops — it does not ship.
Fig. C — knowledge base from existing data: the corpus you already own, parsed locally, retrieved with provenance.
07 / 11
embeddings

Embedding strategy — the invisible layer that decides quality

Embeddings are how your content becomes machine-matched meaning: model choice, dimension, language coverage, update strategy and index re-builds silently bound retrieval quality.

in an engagement

Model selection against your language mix (German legal/administrative text behaves differently than English marketing pages), re-indexing policy, and the retrieval metrics that tell you the layer is healthy.

08 / 11
PDF → machine-readable

Reading PDFs — documents into machine-readable data

Most organisational knowledge is stuck in document form: PDFs, scans, forms. Modern document AI parses layout, tables, formulas and reading order into structured, model-ready text.

in an engagement

I run the real pipeline — Docling-class parsing into structured output, quality checks per batch, then the parsed corpus flows into the knowledge base. Sensitive documents are parsed on local hardware only.

this topic runs as stage 01–02 of the knowledge pipeline — see Fig. C under topic 05.

09 / 11
data analysis, trends

Data analysis, trends and statistics

AI-assisted analysis turns the organisation’s own operational data into trend lines, segment statistics and anomaly flags — with the statistics kept honest (samples, uncertainty, what is not in the data).

in an engagement

Pipelines for recurring analysis: cleaning → feature building → model-assisted interpretation → a written result. The deliverable is the dashboard or report you rerun, not a one-off slide deck.

10 / 11
anonymisation

Anonymisation for cloud AI — use the frontier, protect the source

When strong models are cloud-only, the disciplined route is masking: names, identifiers and sensitive fields are removed or pseudonymised before a prompt leaves, and re-linked in-house on return.

in an engagement

I design the masking pipeline and its rules per data class — what is safely maskable, what must stay local — and wire it so the anonymisation step cannot be skipped under deadline pressure.

internal dataclassify perdata classmaskinggatewayenforced in pipelinemasked text→ cloud modelfrontier qualityresponse→ re-link insideidentification never leaveslocal inferencenothing leaves — stays in-houseThe gate is technical, not a policy memo: the prompt cannot leave unmasked, even under deadline pressure.
Fig. D — anonymisation for cloud AI: use frontier quality where it is legal and safe; keep the unmaskable residue at home.

Hybrid AI systems — local and cloud, one architecture

The production answer in most DACH organisations is not "cloud or local" — it is a routing layer: private data to local inference, general work to cloud models, with fallbacks and an audit trail of which request went where.

in an engagement

I design the routing policy (classification per data type), the fallback behaviour when either side degrades, and the observability that shows cost, latency and data-exposure per route. The flow below is the decision core.

routingpolicyrequest+ data classcloud frontiergeneral work · masked input onlylocal inferenceopen weights · on-prem · private dataAUDIT TRAIL — EVERY ROUTING DECISION LOGGED: COST · LATENCY · DATA EXPOSURE PER ROUTEfallback: local lane takes over when the cloud route degrades — and the other way roundOne architecture, two worlds: the policy decides per request — not per procurement cycle.
Fig. E — hybrid AI: local and cloud are not a decision, they are two routes the same system owns.

All regulatory dates as of October 2026: Art. 4 literacy in force since 2 Feb 2025, Art. 50 transparency applied since 2 Aug 2026, Art. 26/27 (Annex III) due 2 Dec 2027 per Omnibus Regulation (EU) 2026/1744. Figures carry their sources in place; the underlying research files with primary links are kept and can be shared on request. This page describes advisory services, not legal advice.

where the judgment lives

Agent architecture

Agentic systems designed around tools-in-a-loop, context engineering and memory — the difference between a demo and a system that runs unsupervised.

Evaluation & quality

Eval suites and LLM-as-judge patterns that turn "it seems good" into a measurable, reviewable quality statement — my own tools grade themselves.

Knowledge systems

Retrieval over your own corpus: RAG, knowledge graphs and organizational memory — sovereign by design, on infrastructure you control.

EU AI Act & GDPR

Obligation mapping with dates and sources: risk classes, deployer duties (Art. 26), the FRIA (Art. 27), AI literacy (Art. 4) — reconciled with GDPR practice.

Procurement-ready delivery

Written, procurement-compatible formats with fixed prices and documented deliverables — the form an administration and a company can both put through their own procurement.

Build where it counts

Published, open-source tools — from a terminal EU-AI-Act assistant to a local-LLM toolbox — whenever a bounded artifact beats a slideware answer.

Behind it: a career spent at the seam of digital systems and the built world, 27 verified source-based articles, hands-on agent architecture and a published toolchain. The point is not the list — it's that every claim on this page traces to something you can open and read.

This page describes services, not legal advice.

where to start

The check, the call, the written scope

Three steps, in the order they are useful. Only the third one asks for anything.

the five-question AI-use check

Five questions, two minutes, no email address. At the end you know which of your uses are already in a regulated class, and which duty attaches to each.

Five questions, two minutes, an honest reading of your organisation's AI position. Answering "we cannot say" more than once is itself a finding.

the 5-question AI deployment check

runs in your browser — nothing is transmitted
  1. 01Where does AI already touch your organisation?

    Tools staff use on their own count too — shadow AI is the rule, not the exception.

  2. 02Can you state which of your AI uses fall under the EU AI Act — and at what risk class?

    Prohibited, high-risk (Annex III), general-purpose, or out of scope.

  3. 03Have your staff received documented AI literacy training? (Art. 4 — in force since 2 February 2025.)

    The Act sets no fixed curriculum, but the obligation and its documentation are live now.

  4. 04When an AI system errs or leaks data, what happens?

    GDPR applies to AI processing of personal data; deployer duties under Art. 26 apply from 2 December 2027.

  5. 05Who owns AI governance in your organisation?

    One named owner beats a committee without one.

0/5 answered

the 60-minute call

Companies bring inventory questions; public bodies bring their duties. You leave with an assessment and a concrete next step — whether or not it is one of mine.

A 60-minute call is the right first move: say what you have and what you are required to meet, and you leave with an assessment of where you stand plus a concrete next step — whether or not it is one of mine.

book the callplain text welcome · PGP on request · based in Vienna, CET

send a request for information

Tell me what you have and what you need. Eight fields — organisation, your role, the format you are asking about, where you stand today — and the reply is written scope: what the engagement covers, who does what, how long it runs and what you hold at the end.

Answers are written by me, usually within a week — faster when a project is running. There is no autoresponder, no mailing list and no CRM behind this form, and the scope call is where an engagement is shaped: the page carries formats and artifacts, not figures.

plain text welcome · PGP on request · Vienna, CET