University spin-outs
Spin-out Product & Data Readiness Review
Controller, processor, data-flow, and infrastructure questions made explicit.
01 · Primary offer
Engineering-led reviews for healthtech, AI, and research-led software teams preparing for customers, funders, regulatory scrutiny, or technical diligence. I help teams understand architecture, data-flow, GDPR/privacy, and AI governance risk, then turn it into practical engineering priorities.
This is engineering-led readiness work, not legal advice. The goal is to help founders and technical teams see risk clearly, prioritize remediation, and work more effectively with legal, security, or regulatory specialists where needed.
University spin-outs
Controller, processor, data-flow, and infrastructure questions made explicit.
Healthtech startups
Data-flow and architecture risks mapped in language founders and engineers can act on.
AI SaaS founders
System boundaries and personal-data flows captured in a form technical and non-technical reviewers can use.
Funding or diligence prep
Top risks prioritized by business impact and engineering effort.
AI-built app operators
Security, privacy, dependency, and ownership risks surfaced before launch.
Each review is scoped around the same practical outputs: data-flow map, risk register, DPIA/data governance gap notes, architecture risk review, integration or discoverability notes where relevant, and a prioritized engineering backlog.
For AI SaaS founders
An engineering-led review for AI teams preparing for customer, procurement, pilot, funding, or regulatory scrutiny. It makes product and data assumptions explicit, identifies missing evidence, and turns the result into work your team can ship.
The €1,200 Diagnostic Audit is the fixed-scope entry point. This is engineering-led readiness work, not legal advice, certification, conformity assessment, or a guarantee of compliance.
Discuss an AI evidence reviewIllustrative output
A review connects the product boundary, evidence gap, risk, owner, and next action. This fictional example shows the level of specificity, not a client finding.
AI-generated customer communication
Application sends customer content to a hosted model provider, then presents an editable draft to an authorised user.
Evidence gap
Disclosure state, model/version record, reviewer action, and retention behaviour are not captured together.
Risk / owner
Customer assurance and traceability
Product + Engineering
Priority
Before pilotBacklog item
Record disclosure version, model/provider version, human-review outcome, and retention rule for each generated communication; expose the record in the internal review view.
Tier 1
€1,200 fixed
The easiest first step when you need a senior technical read on architecture, data flow, privacy, and compliance risk.
Early prospects, founders with a specific concern, or teams deciding whether deeper work is needed.
Book a diagnostic audit callTier 2
€3,000-€6,000
A serious consulting engagement for teams preparing for scale, funding, regulated customers, or investor/client diligence.
Seed to Series B teams, AI or sensitive-data products, and teams that need a concrete engineering roadmap.
Plan a deep auditTier 3
€2,000-€6,000/month
Recurring technical leadership after the audit, so architecture, privacy, security, and diligence work stays owned.
Teams that need ongoing senior judgment without hiring a full-time CTO or staff/principal engineer.
Discuss technical leadershipWe confirm stage, product risk, data sensitivity, and whether an audit is worth doing.
You get a focused read on the main technical and compliance risks plus a 30-day action plan.
If the risk is material, the deep audit turns code, infrastructure, data, and compliance findings into priorities.
For teams that need continuity, I stay involved as a fractional technical leader and steward the decisions that follow.
11+ years shipping production software
Sensitive-data systems for 5,000+ users
Healthcare, AI, education, and SaaS delivery
Architecture, privacy, GDPR, DPIA, and AI governance readiness
Have questions? Email first, or book a diagnostic audit call.