48.14°N 11.57°E
Munich buys AI like machinery.
Specifications, audit trails, clear accountability. Munich companies want documented verdicts and systems that work, not presentations.
- On site for
- Workshops, audits, briefings
- Everything else
- Remote, in your systems
- Language
- German or English
- Contract
- Voidgap UG, HRB 29104 KI
01 · The city
What Munich
runs on.
The industries that shape what we get asked for here.
- Automotive suppliers
- Industrial engineering
- Insurance
- Enterprise IT
The recurring questions: who documents the AI component in the supply chain, who is the provider under the AI Act, and how it survives the next OEM customer audit.
02 · What Munich asks us for
Three things
we hear here.
- asked forISO 42001 gap analysis
On top of the ISO 9001 or ISO 27001 system you already run.
- asked forTechnical documentation
For AI components that ship inside products.
- asked forAutomation in engineering and claims
With human escalation for the exceptions.
03 · The rules
The rules
here.
A snapshot to orient, as of September 2026. Not legal advice: we turn rules into architecture, your counsel signs off.
Most clients already run ISO 9001 or ISO 27001. The efficient path adds ISO 42001 and the EU AI Act as layers on one shared evidence base, instead of a second set of documents.
04 · How we work here
Remote-first.
On site when it counts.
Remote-first, with scheduled on-site days in Munich for audits, workshops and management briefings. German contracting entity, German documentation on request.
On site · your office
- WorkshopsHalf or full day, one team, ends with decisions.
- Audit kick-offsSecurity assessments and ISO 42001 gap analyses start in the room.
- Steering meetingsGo / no-go, roadmap, budget.
Remote · your repo
- Build sprintsTwo to four weeks, idea to production, in your systems.
- Evals in CIEvery prompt, model or retrieval change gets tested.
- Reviews and sparringCode, agents, permissions, architecture.
Always
- NDA and DPA firstSigned before we touch client data.
- Your data rulesProcessing stays where the contract says.
- One German entityVoidgap UG (haftungsbeschränkt), Kiel register.
05 · Services
Asked for most
in Munich.
The six services that come up most often here. All fifteen are on the services page.
- buildAI StrategyRoadmap, use-case priorities, business case.
- buildAgentic AutomationAgents that do the work. With an owner.
- secureAI Security AssessmentWe attack the running system: chatbots, RAG, agents.
- complyEU AI Act ReadinessRisk classes, obligations, pragmatic compliance.
- complyISO 42001Gap analysis, AI management system, audit prep.
- enableAI WorkshopsOne day. One team. One concrete result.
06 · Questions
Asked in
Munich.
Are we a provider or a deployer?
It depends on who places the system on the market under their name, and who uses it. Suppliers that build AI into products are often providers. We classify per system and write down why.
Does ISO 42001 fit our ISO 27001?
Yes. It follows the same management system structure, so much of what you have carries over.
Can you be on site?
Yes, on scheduled days for audits, workshops and management briefings.
What will our OEM customer ask for?
Documentation of the AI component, its classification under the Act, and evidence that it is tested.
07 · Elsewhere
Three countries.
One gap.
- DEGermanycountry
- HAMHamburg17 km from HQ
- BERBerlin263 km from HQ
- MUCMunich629 km from HQ · you are here
- ATAustriacountry
- VIEVienna756 km from HQ
- CHSwitzerlandcountry
- ZRHZurich711 km from HQ
Workshop, audit or steering meeting in Munich?
See you in
Munich.
One call about where AI doesn’t happen yet in your company. No deck. If it isn’t a fit, you’ll hear that too.