Independent advisory across GDPR, the EU AI Act, AML/KYC and commercial contracts. I work with SMEs and scale-ups that need credible, audit-ready frameworks — without the overhead of a traditional law firm or a full-time hire.
From single-document engagements to embedded fractional advisory. Each practice area can be scoped as a project, a sprint, or an ongoing retainer.
End-to-end AI Act preparation: system classification (prohibited / high-risk / limited / minimal), conformity assessment scoping, technical documentation, transparency obligations and governance for GPAI models entering your stack.
Privacy programmes built to withstand regulator scrutiny: notices, DPAs, records of processing, DPIAs, international transfer assessments and DSAR workflows — designed for teams that have outgrown templates.
Onboarding workflows, KYC and KYB checklists, sanctions and PEP screening logic, suspicious-activity reporting frameworks aligned to EU AMLD, FCA and FINMA expectations.
Drafting and negotiation of commercial agreements, NDAs, supplier and reseller contracts, joint-venture frameworks — with clear risk allocation, governing-law and dispute-resolution architecture.
Vendor due-diligence questionnaires, risk-scoring methodology, contract-clause libraries and ongoing monitoring playbooks for partners, suppliers and intermediaries operating across borders.
Embedded retainer for organisations not yet ready for an in-house function: monthly reviews, regulator-watch, internal training, board reporting and a single point of contact for the team.
Trained across three jurisdictions. Operating in seven languages. Built for European cross-border work.
Kerem Beneton — compliance, data-protection and AI-governance advisor based in Switzerland, working with clients across the EU, UK and CH.
My focus is the regulatory layer most growing businesses underestimate: the overlap between GDPR, the EU AI Act, AML obligations and commercial contracts. I translate dense regulation into procedures founders, finance leads and operations teams can actually apply.
I've built compliance frameworks inside firms in The Hague, London and Lausanne — across data privacy, financial-crime prevention, and contractual risk for cross-border operations. The result is the same in each: regulator-ready documentation, defensible controls, no theatre.
Regulation isn't a brake. Done well, it's the operating manual that lets a business deploy AI, enter new markets and close enterprise deals — with fewer surprises.
A snapshot of in-house and consulting engagements across CH, UK, NL and the EU.
Trained in Italy, Spain and Switzerland. Operating across Western and Southern Europe.