Discuss a challenge →
Legal & business advisory — Gdańsk · EU

Clarity for complex matters.

Governance, risk and technology advisory for organisations navigating regulation, transformation and growth. We help boards, founders, investors and specialist teams turn complex obligations and emerging technologies into practical decisions, operating models and controls.

Discuss a challenge → Explore expertise

EU and Polish core, working perspective across UK, US and APAC — with local counsel where formal opinions are required.

Regulatory & Technology Radar
EU Applicable 2028-01-01

AMLA — the EU AML authority ramps up

Operational in Frankfurt, publishing technical standards and preparing to directly supervise selected high-risk financial entities from 2028.

00
practice areas — one integrated view
00
working languages — English · Polish · German
00
team — law & compliance × software engineering
What we do

Seven areas. One integrated view.

Advisory built around the questions that decide outcomes — regulatory, organisational and technological at once.

01

Compliance & Integrity

We help organisations translate legal, regulatory and ethical expectations into clear responsibilities, proportionate controls, reliable evidence and management information.

  • Compliance risk assessment that reflects the real business
  • Policies, controls and evidence that hold up under scrutiny
  • Third-party integrity and speak-up governance
Explore the area →
02

AML & Financial Crime

We support organisations in designing and improving risk-based financial crime frameworks that connect customer risk, controls, data, escalation and management oversight.

  • Business-wide risk assessment that matches the real model
  • KYC/CDD, screening and monitoring that scale
  • AMLR readiness before July 2027
Explore the area →
03

AI Governance & Digital Regulation

We help organisations identify, govern and evidence the responsible use of AI across strategy, procurement, development, deployment and oversight.

  • AI inventory, ownership and risk classification
  • EU AI Act readiness on the post-omnibus timeline
  • Vendor assessment and human oversight that works
Explore the area →
04

Corporate Governance

We help owners, boards and management teams build decision structures, information flows and accountability mechanisms suited to the organisation’s stage, risk and ownership model.

  • Decision rights and information flows that fit the stage
  • Board packs that support decisions, not archive them
  • Related-party and conflict handling that stands up
Explore the area →
05

Risk Management & Resilience

We help organisations establish practical risk, control and resilience arrangements that support decisions, ownership and recovery — not only reporting.

  • Risk registers that actually change decisions
  • Operational and ICT resilience (DORA / NIS2 aligned)
  • Incident readiness and third-party dependency control
Explore the area →
06

Intellectual Property, Data & Technology

We help organisations understand and strengthen the ownership, contractual, governance and risk foundations of technology, data and intangible assets.

  • Chain of title for code, data and work products
  • Open-source and licence hygiene before diligence
  • Data provenance and rights in AI development
Explore the area →
07

Investments, Startups & Scale-ups

We help investors and growth companies identify material governance, regulatory, IP, data and technology risks before and after investment.

  • Red-flag screening before full due diligence
  • Investment-ready data rooms and governance
  • 100-day post-investment remediation plans
Explore the area →

All expertise areas →

Questions we help resolve

Which AI uses require formal governance in our organisation?

See how we help →
Questions we help resolve

Is our AML framework proportionate to the risk profile we actually have?

See how we help →
Questions we help resolve

Does the board receive information sufficient to oversee technology risk?

See how we help →
Questions we help resolve

Are the rights to our code, data and work products properly assigned?

See how we help →
Questions we help resolve

Are we ready for an investor’s or enterprise client’s due diligence?

See how we help →
Questions we help resolve

How do we translate a new regulation into responsibilities, controls and a realistic timeline?

See how we help →
1 / 6
How we engage

From a two-week diagnostic to standing advisory.

Engagements are scoped precisely — you always know what is in scope, what is out of scope and what you will receive.

Diagnostic Sprint Gap & Maturity Assessment Framework Design Implementation Support Remediation Programme Board & Executive Advisory Transaction Support Training & Simulation

Engagement models →

Who we advise

Built for decision-makers.

Boards & Executives

Decision-ready information, clear accountability and independent challenge — without drowning in paper.

Founders & Scale-ups

Governance proportionate to your stage — enough to pass diligence and win enterprise clients, not enough to slow you down.

Selected engagements

Anonymous by design.

We do not publish client names. Snapshots are generalised, approved before publication and reviewed for re-identification risk.

Client categoryGlobal digital marketplace
Situation & scopeOngoing compliance and financial-crime support across AML controls, platform-abuse response and intellectual-property notices — combining regulatory analysis with hands-on tooling.
OutcomeA repeatable, evidence-based operating routine: documented decisions, faster response times and defensible positions towards authorities and partners.
Certain contextual details have been generalised or omitted to protect confidentiality. The description reflects the nature of the work but does not identify the client.
Client categoryMedical technology company (P.S.A.)
Situation & scopeGovernance and corporate-structure advisory for a growing healthcare business operating under the Polish simple joint-stock company model.
OutcomeA board-ready governance baseline: clear decision rights, documented approvals and a structure investors can read in one sitting.
Certain contextual details have been generalised or omitted to protect confidentiality. The description reflects the nature of the work but does not identify the client.
Client categoryConstruction-technology startup (sp. z o.o.)
Situation & scopeInvestment-readiness support for an innovative construction venture: ownership of work products, contract hygiene and a data room that answers questions before they are asked.
OutcomeA cleaner equity story and a due-diligence file that shortened investor conversations instead of prolonging them.
Certain contextual details have been generalised or omitted to protect confidentiality. The description reflects the nature of the work but does not identify the client.
1 / 3
Client voices

In their words.

Published with documented consent, attribution limited to a non-identifying role and category.

„

They rebuilt our compliance routine so decisions are documented as they happen — audits stopped being archaeology.

Compliance leader · global digital marketplace
„

Rare combination: board-level clarity and the patience to fix the paperwork underneath it.

Board member · medical technology company
„

Our data room went from a liability to an argument. The round moved faster because the questions were already answered.

Founder · construction-technology startup
1 / 3
Insights

Knowledge that stays current.

Briefings, analysis and checklists in three languages — dated, sourced and reviewed as the rules move.

All insights →
How we work

Decision-led. Evidence-based.

01

Frame

We start from the decision you need to make — not from document production. Scope, owners and success criteria come first.

02

Assess

Obligations, risks, evidence and gaps — assessed against what actually applies to your organisation, with sources on the table.

03

Design

Operating models, policies, controls and plans proportionate to your scale — built to be run by real teams, not admired.

04

Embed

Implementation support, documentation, training and handover — the engagement ends with a working arrangement, not a slide deck.

Stay current

One briefing. Three languages. No noise.

A concise update on regulation, technology and governance — sent when there is something worth your time, at most twice a month.

I agree to receive the E-KMC.EU newsletter. Consent can be withdrawn at any time via the unsubscribe link. Details in the Privacy Policy. Subscription is confirmed by double opt-in.

Bring clarity to the next decision.

A first conversation is free of charge, confidential and without obligation.

Discuss a challenge →