AI Consulting in Berlin
Berlin ships fast and asks about compliance late. We work with product teams that already have AI in production and need someone to look at what it is actually doing before a customer, an auditor or a security questionnaire does.
Berlin's AI reality: product teams and public sector
Berlin's demand splits in two. On one side: startups and scale-ups with AI features already live, AI-assisted codebases, and a security questionnaire from their first enterprise customer sitting unanswered. On the other: agencies, associations and suppliers to the public sector, where procurement asks for documented risk classification before anything goes near a citizen-facing process.
Regulatory context: enterprise buyers and public procurement
The EU AI Act applies directly, but in Berlin it usually arrives disguised as a customer requirement: an enterprise buyer or a public tender demanding evidence of governance, risk classification and data handling. Building that evidence once — inventory, classification, policy — is what unlocks the deal, not a separate compliance project later.
What Berlin companies ask us for
Security assessment of a live AI feature
Prompt injection, tool-calling abuse, data leakage and authorization gaps in a shipped assistant, with fixes ranked by exploitability.
Answering the enterprise AI questionnaire
Inventory, risk classification and an AI policy that turns a stalled security review into a signed contract.
Audit of AI-generated code before a funding or security review
What the AI coding tools actually merged: secrets, missing authorization, unvalidated input, dependency risk.
How we work with Berlin teams
Remote-first, with on-site days for workshops and audit kick-offs. Voidgap UG is a German entity, so procurement, AVV and invoicing follow the process your legal team already knows.
Services for this region
The work we most often do here — same team, same deliverables, wherever you sit.
Country overview
Frequently asked questions
We already have AI in production. Is that too late?
That is the normal starting point in Berlin. We assess what is live first — behaviour, data flows, permissions — and then decide what needs fixing, documenting or removing.
Can you help answer an enterprise customer's AI questionnaire?
Yes. Most of those questionnaires ask for an AI inventory, a risk classification and a policy. We produce those as written artefacts you can reuse for the next buyer.
Do you come to Berlin for workshops?
Yes. Workshops, management briefings and kick-offs happen on site; the rest of the work is remote.
Do you work with public-sector suppliers?
Yes. For tenders we focus on documented classification, transparency obligations and evidence that survives procurement review.
Tell us what's running in production.
We'll tell you what we'd check first — and what we wouldn't bother with.
Book a call