Skip to content
Projects

Do not take my word for it

Anyone can claim four years of compliance experience. Everything on this page is running, recorded, or readable in full, so you can check instead of trusting. Where a client cannot be named, the artefact is rebuilt on an invented company so it can be published rather than described.

Built and shipped · 2026

An automated first pass over an inbound document queue

The problem

Emailed and PDF documents arriving in an unstructured inbox, each one needing extraction, validation against a reference dataset, and a decision on whether a human had to look at it.

What I built

A working system that reads the document, extracts and validates every line, holds back anything ambiguous with an explanation of exactly what is unclear, and drafts the follow up message. Nothing is written to a system of record and nothing is sent without a person approving it.

The evidence

The recording below is the real system running end to end on two documents, one clean and one deliberately messy. It is not a mockup.

Work product · 2026

A full DPIA on an AI system profiling children in schools

The problem

An education technology deployment that scores pupils on their likelihood of falling behind. Children as data subjects, profiling at scale, inferred health data, and a live automated decision making question.

What I built

Nineteen risks assessed, thirty three mitigating measures, and three findings that changed the project: a design feature removed because the legal condition relied on did not exist, an automated decision making analysis redone against case law, and a prior consultation conclusion reversed on review.

The evidence

Written on an invented company so it can be published in full. Every citation was verified against primary source, and the citation table ships with it.

Read the full assessment (PDF)

Built and shipped · 2025 to 2026

An eight module governance platform in n8n

The problem

A compliance programme running on spreadsheets and memory, where evidence of control operation had to be reconstructed after the fact rather than captured as it happened.

What I built

Eight live modules covering intake, routing, inventory, continuous monitoring and escalation, plus six end to end workflows with deadline tracking and an AI triage step that classifies inbound requests, routes by urgency and drafts a first response. A person approves at every decision point.

The evidence

Control operation is now evidenced as it happens. Available to walk through live on a call.