AI rollouts in regulated companies stall in two places: the security review, and the people expected to use it. I work both, with 20 years in security and production systems behind it.
I still build software, too. See the builds.
The CEO says go. Compliance says no. Employees use AI anyway.
Pilots sit in security review for months. There is no policy an auditor would accept.
Staff paste customer data into tools nobody approved.
Licenses get bought. Then most people quietly stop using them.
Nobody can tell the board who uses it, what it saved, or why people quit.
Count the AI already in use. Then write the policy, the approved tool list and the data rules from what people actually do.
Put approved tools in the hands of one or two pilot teams in operations, finance, support or compliance. Training, a champion in each team, weekly office hours.
Track who uses it, what it saves and why people stop. Turn that into a report the board can read.
Two weeks, fixed scope. An inventory of the AI in use, a risk review, a gap list, a draft policy and a 90-day plan. If nothing is worth doing, I will say so.
Next steps are a 90-day pilot rollout and ongoing advisory.
What I don't touch: your product AI and engineering roadmap. Those stay with your CTO.
I'm usually the person who says no. That's why I can get you to yes.
Who it's for: Fintech, payments, healthcare-adjacent and insurance companies with PCI, HIPAA or SOC 2 in scope. Usually sponsored by the CEO or COO.
Security and AI by day. Software at 5am. Each build started as a real problem.
An intermittent fasting coach. It learns the hour a fast gets hard for you and checks in just before it. No account. Your data stays on your phone.
Finds the posts on X worth replying to, drafts replies in your voice, and shows which replies actually worked.
Discover aligned business opportunities at the intersection of your strengths, interests, and real market demand.
View productA diagnostic for small fintech companies assessing PCI DSS and SOC 2 readiness of their AWS infrastructure.
View productFind a brand-ready, actually-available domain name in minutes. Built for founders and indie builders who refuse to let naming delay a launch.
View productEvery real change in my life followed the same shape: uncomfortable at the start, boring in the middle, a different person at the end. Building in public at 43 is just the latest rep.
The story isn't about escaping a career. It's about pointing everything I built toward my own ideas.
Security, compliance and AI adoption decisions that have real consequences if they go wrong.
Mornings at 5am, weekends in the margins.
"I don't want freedom from responsibility. I want a life large enough to hold both."Chaminda Delpagodage
Read the newsletter, or book a call about your rollout.