A strategic operator across legal, risk and technology transformation: I take the exposure end to end — own the legal and regulatory position, redesign the operating model around it, and write the software that makes the control real. Six working platforms run live on this page — financial-crime forensics, AI-governance and export-control screening, cross-border data transfer, forecasting and delivery — alongside board-level ownership of an eight-site operating model through restructuring, funders and regulators. LL.M. in international law (dissertation 100%), ~6 years owning legal, compliance & operations, Python/SQL, and a Swiss B permit — work-authorised, no sponsorship needed.
Sharpest where the risk is regulatory — sanctions and financial-crime exposure, cross-border data transfer and audit-ready control frameworks — built as an enabler, not a blocker. One CV covers the whole picture; the case studies and publications carry the specialist depth behind it.
For a RegTech or legal-engineering team, this is the part of the portfolio that carries the weight: working tools where I own both the regulatory reasoning and the code that runs it — FRIS, Frontier and Sentinel are the compliance-tech proof; Meridian, Vantage and Helm extend the range. Each opens right here in the page — click a card to launch it, read a short “How it’s built” note, or pop it out to a new tab.
Architected and built by me — AI-assisted, never AI-designed; the analysis engines, data models and interfaces are mine. All six run client-side — everything (including a locally-vendored React where it is used) computes entirely in your browser, so no subject data ever leaves the page. All data is synthetic or a dated, frozen local dataset.
A forensic workbench for financial-crime investigations — 23 analysis engines spanning beneficial-ownership tracing, sanctions & adverse-media screening, crypto peel-chain tracing and an insolvency-recovery waterfall. ~20,000 lines of JavaScript, authored by me.
A market tracker that flags the regulatory changes most likely to hit a company — matching new rules, amendments and sanctions moves to each issuer's actual business and pipelines, then showing whether the exposure could move the share price, and why. Provenance-first: every figure carries its own source and as-of date, and gaps are shown, never invented.
A multi-industry demand-forecasting sandbox — brewery, DTC, education, manufacturing and SaaS — with a dependency-free engine (Holt-Winters, ETS, Croston, OLS) back-tested on rolling origins and planned over operationally sensible weekly or monthly horizons. Load a worked scenario or bring your own numbers.
A project-management platform that turns a written brief into a live schedule — dependency graphs, capacity and critical-path planning, editable tasks you can split, reorder and re-scope, blocker tracking, and a multi-project portfolio view. Log a delay and every view re-plans around it.
Determines the lawful basis for moving personal data across a border — EU GDPR Chapter V, the Swiss FADP and UK GDPR — runs a Schrems II-style Transfer Impact Assessment on the destination, lists the supplementary safeguards you need, and exports an audit-ready record. Handles electronic and physical transfers alike; positions are labelled legal-fact vs assessment and dated, with a “verify current lists” caveat.
Describe an AI / autonomous-system deployment; Sentinel returns its EU AI Act risk class (prohibited / high-risk / limited / minimal) with the obligations triggered, a dual-use export screen — EU Reg. 2021/821 cyber-surveillance catch-all, Wassenaar Cat 3/4/5, with an honest US ITAR/EAR flag — the meaningful-human-control and auditability controls needed, a clear verdict, and an audit-ready control record. Positions are dated and labelled legal-fact vs assessment.
A production system built end-to-end for a UK construction firm — public site, a ten-step range-based build-cost estimator with confidence bands and server-side PDF export, and a client portal for milestones, client decisions and change control with a running approved-cost total. Confirmed-facts-only content governance: unverified claims stay unpublished by rule.
Deep-dive case analyses — governance-led operational pivots, deficit recovery, and regulator- and audit-ready crisis response.
Illustrative documents on synthetic data. These are constructed case studies built to show the form and rigour of what I deliver under operational hardship — pandemic continuity, director incapacitation, regulatory pressure. They are not redacted real matters: no former employer's, client's or funder's confidential information appears here.
Converts an early-stage solar pitch deck into an institutional advisory report — navigating cross-border regulation (FDI restrictions, FCPA / PEP controls) and modelling capital-stack structuring to open non-dilutive funding pipelines.
View case studyA critical-infrastructure pivot under COVID-19 pressure: an eight-site, paper-based operation converted to a compliance-led digital model — an automated legal pipeline delivering <1% funding exceptions, <15-minute audit retrieval and no known reportable data breaches.
View case studyA simulated board-grade crisis response: legal mapping, insolvency decision triggers, 13-week cash controls, restricted-funds protection, options appraisal, creditor / standstill strategy, stakeholder comms and governance reform — following a £450k deficit shock in a £3.2m-turnover charity.
View case studyLegal, GRC & policy tooling
Compliance platforms — familiarity / exposure
Build & scripting
AI & automation
Data, BI & delivery
Domain & controls
Additional familiarity (read / edit / adapt, not production development): R, Java, C#.
Confident to own an intake build and CLM rollout end-to-end — templates, intake logic, approval workflows and permissions, playbooks, fallback language and clause libraries — with self-service contracting, legal-review gates and full post-signature auditability, wired over REST/JSON and webhooks into executive dashboards for matter volumes, SLA performance, privacy-risk trends and compliance readiness. I have scoped exactly this kind of rollout: a Streamline intake build and a Juro CLM rollout, with Catylex clause enrichment across ServiceNow, OneTrust and Close. Governing it was a multi-jurisdiction privacy matrix — EU, UK, US, Australia and New Zealand, with EU AI Act role analysis — that maps every data flow to its controlling regime before a record moves. The same regime-by-regime structure extends to the Swiss FADP (nFADP), with its Swiss-specific divergences, for a Geneva deployment.
All portfolio data here is synthetic or public. In client work I operate on least privilege, keep privileged material out of third-party models unless contractually cleared, and gate every automated workflow behind human review — legal professional privilege and data-protection duties sit above delivery speed.
For the record: not a litigator, and not a production software engineer — a legal & operations leader who builds working tools to a professional standard, and knows exactly where that line sits.
My research sits where international law, economic security and computational method meet. My LL.M. dissertation, “Economic Warfare: The Unregulated War” (awarded 100%), argues that economic warfare — cyber-economic aggression, financial terrorism and the strategic manipulation of markets — has become a favoured mode of conflict for state and non-state actors alike, increasingly waged through third-party proxies that evade legal accountability. It shows why instruments such as the Sanctions and Anti-Money Laundering Act 2018 and the Magnitsky Act, though significant, are too narrow and too slow, and proposes the UK Economic Warfare Prevention and Response Act (UK-EWPRA): a deliberately adaptable legislative architecture — UK-anchored but globally extensible — designed to keep pace with algorithmic and cyber warfare.
Doctoral direction (in development). Following the dissertation I was invited to pursue doctoral research (economic & cyber warfare), and am developing my own project on the regulation of AI — building on my work on AI as an autonomous third-party actor — written in Geneva alongside professional work. It is the next step beyond the private military companies and proxies of my dissertation: systems that can act, and cause harm, at arm's length from any accountable principal. My argument is that the answer is not only reinterpreting existing international law, but small, modular internal policies that many states can adopt quickly — in the spirit of the Magnitsky Act — so regulation moves at the speed of the technology it governs.
Research interests
A single CV, deliberately — the depth sits in the case studies and publications rather than in a longer document. Reference letters below; further references on request.
Open to legal, risk and technology-transformation roles in Geneva — legal operations and regulatory change, enterprise risk, controls and resilience, operating-model design and AI governance — and equally to the specialist lanes this portfolio evidences: RegTech / legal engineering and sanctions / financial crime, where owning both the regulatory outcome and the build is the advantage. On the counsel track, Solicitor (England & Wales) — admission January 2027 (qualifying; not yet admitted).