52.52°N 13.40°E
Berlin ships fast and asks about compliance late.
Product teams with AI already live, and a security questionnaire in the inbox. We review the system before customers or auditors ask the question.
- On site for
- Workshops, audits, briefings
- Everything else
- Remote, in your systems
- Language
- German or English
- Contract
- Voidgap UG, HRB 29104 KI
01 · The city
What Berlin
runs on.
The industries that shape what we get asked for here.
- Start-ups and scale-ups with AI features in production
- Public-sector bodies
- Suppliers to public procurement
02 · What Berlin asks us for
Three things
we hear here.
- asked forSecurity assessments of live AI
Prompt injection, tool abuse and authorization gaps in assistants that already have users.
- asked forAnswers for enterprise questionnaires
AI inventory, risk classification and an AI policy you can reuse for every buyer.
- asked forAudits of AI-generated code
Before a funding round or a customer’s security review.
03 · The rules
The rules
here.
A snapshot to orient, as of September 2026. Not legal advice: we turn rules into architecture, your counsel signs off.
The EU AI Act applies directly, but it usually arrives as a customer requirement. Enterprise buyers and public tenders ask for governance evidence and risk classification. Built once, it unlocks deals instead of becoming a separate compliance project.
04 · How we work here
Remote-first.
On site when it counts.
Remote-first, with on-site days for workshops and audit kick-offs. A German entity for procurement and invoicing.
On site · your office
- WorkshopsHalf or full day, one team, ends with decisions.
- Audit kick-offsSecurity assessments and ISO 42001 gap analyses start in the room.
- Steering meetingsGo / no-go, roadmap, budget.
Remote · your repo
- Build sprintsTwo to four weeks, idea to production, in your systems.
- Evals in CIEvery prompt, model or retrieval change gets tested.
- Reviews and sparringCode, agents, permissions, architecture.
Always
- NDA and DPA firstSigned before we touch client data.
- Your data rulesProcessing stays where the contract says.
- One German entityVoidgap UG (haftungsbeschränkt), Kiel register.
05 · Services
Asked for most
in Berlin.
The six services that come up most often here. All fifteen are on the services page.
- buildAI StrategyRoadmap, use-case priorities, business case.
- buildAgentic AutomationAgents that do the work. With an owner.
- secureAI Security AssessmentWe attack the running system: chatbots, RAG, agents.
- complyEU AI Act ReadinessRisk classes, obligations, pragmatic compliance.
- complyISO 42001Gap analysis, AI management system, audit prep.
- enableAI WorkshopsOne day. One team. One concrete result.
06 · Questions
Asked in
Berlin.
Our AI is already in production. Too late?
No. A live system is the normal starting point.
Can one AI inventory serve several buyers?
Yes. A written inventory and policy can be reused across questionnaires and tenders.
What happens on site?
Workshops and audit kick-offs. The rest is remote.
We supply the public sector. What do we need?
Documented risk classification and the transparency duties that apply to your system.
07 · Elsewhere
Three countries.
One gap.
- DEGermanycountry
- HAMHamburg17 km from HQ
- BERBerlin263 km from HQ · you are here
- MUCMunich629 km from HQ
- ATAustriacountry
- VIEVienna756 km from HQ
- CHSwitzerlandcountry
- ZRHZurich711 km from HQ
Workshop, audit or steering meeting in Berlin?
See you in
Berlin.
One call about where AI doesn’t happen yet in your company. No deck. If it isn’t a fit, you’ll hear that too.