ggor.si
Menu
Write to me

For companies that use AI

AI governance review that shows where customer data goes.

I check which AI tools employees use, whether customer data leaks into public tools, and how the company stands with GDPR and the EU AI Act. You receive a report with risks and recommendations, plus a proposed AI policy.

Write to me What I check

I sell no tools or integrations, so the review is impartial. I take on selected projects, by agreement.

Challenge

AI is already in your company. The rules often are not.

  1. Employees often already use public AI tools. To get work done faster, they paste a customer’s email, a contract or a complaint into the chat.
  2. Without agreed rules, a company struggles to show that it handles data in line with GDPR.
  3. The EU AI Act brings obligations even for companies that only use AI, including AI literacy for employees.

What I check

The review answers four questions.

  1. Which AI tools employees use, and for what.
  2. Whether customer data leaks into public tools.
  3. How the company stands with GDPR.
  4. How it stands with the EU AI Act, including AI literacy for employees.

What you get

At the end, you have it in black and white: what needs fixing.

The review ends with two documents that stay with the company.

  • Report with risks and recommendationsFor each risk: why it matters and what I recommend.
  • Proposed AI policyClear rules for using AI that the company can adopt and share with employees.

I sell no tools or integrations, so the review is impartial.

Write to me
Example diagram: customer data, employees and public AI tools in a company. Risks are marked in red, and the four points the review checks are marked in blue.

Report · sample content

Risks

  1. Customer data in a public tool
  2. No agreed rules for AI use
  3. Employee AI literacy not addressed

Recommendations

  1. 1.1Define permitted tools and purposes of use.
  2. 2.1Specify which data must not go into public tools.
  3. 3.1Train employees in the safe use of AI.

Proposed AI policy

  1. 1Purpose and scope
  2. 2Permitted tools
  3. 3Customer data
  4. 4Employee AI literacy
SubjectAI governance review
Reviewed byGregor Gorjanc
Checked

ToolsCustomer dataGDPREU AI Act

Process

From the first conversation to a proposed policy.

Four steps · scope by agreement

  1. First conversation

    You write to me. We talk about how your company uses AI and what you want to check.

  2. Review

    I check which AI tools employees use, where customer data goes, and how the company stands with GDPR and the EU AI Act.

  3. Report and proposed policy

    You receive a report with risks and recommendations, plus a proposed AI policy.

  4. By agreement

    I take on selected projects. We agree on scope, timing and any further cooperation.

Experience

I build AI in production. So in a review, I know where to look.

About me

As Head of AI at Operanic, I lead the development of artificial intelligence. I have more than six years of experience across the full data science lifecycle, from data to models in production. I like solving concrete problems with creative, efficient solutions. I hold a master’s degree in Informatics and Technologies of Communication from the University of Maribor.

Head of AI · since 2025

Operanic (formerly Workflow AI)

Head of AI, since October 2025

I lead AI engineering at Operanic, an AI platform for frontline teams in manufacturing, logistics and retail. The platform captures operational knowledge, guides workers through procedures, and provides answers and live translation in their language.

operanic.com
  1. The whole AI layerI own the AI layer across our products, from model selection and prompt design to evaluation, deployment and operation in production.
  2. Knowledge ingestionI built knowledge ingestion and indexing pipelines for documents, images, video and voice recordings, with access controls and source tracking.
  3. Search with source referencesI built a search system that gives workers answers grounded in company knowledge, with clear references to the source documents.
  4. Procedures and documentationI developed AI workflows that turn conversations and reference materials into standard operating procedures, work instructions and other operational documentation.
  5. Real-time voiceI integrated real-time voice capabilities for the mobile assistant and live translation.
  6. Model routingI designed configurable routing across AI models and built the backend services that support knowledge management and content generation.

Content Exchange, Ljubljana · 2019–2025

  1. 2023–2025

    Chief Information Officer

    Selecting and implementing technologies, managing priorities and the team, looking after the company’s security policy, IT procurement, hiring, and acting as the bridge between executive leadership and the technical team.

  2. 2019–2023

    Data Scientist

    ETL systems and databases built with data collection compliance in mind, BI and analytics in Tableau, machine learning for user profiles, a data management platform (DMP), website personalisation, and leading the “Cookieless World” project.

Education, University of Maribor

  1. 2020–2023

    Master’s degree

    Informatics and Technologies of Communication, University of Maribor

  2. 2016–2019

    Bachelor’s degree

    Informatics and Technologies of Communication, University of Maribor

Areas of expertise

  • Area 01

    Applied artificial intelligence

    Building AI solutions that work in real working environments.

  • Area 02

    Data science and IT leadership

    From collecting and preparing data to models in production, and leading a technical team as CIO.

  • Area 03

    Safe use of AI

    How companies use AI tools without putting customer data at risk.

  • Area 04

    AI compliance

    GDPR, the EU AI Act and the obligation of AI literacy for employees.

If you want a clear picture of how your company uses AI, write to me.

Write to me

Who it’s for

For companies that already use AI tools or want to introduce them.

Notes

  1. Do you sell tools?

    No. I sell no tools or integrations, so the review is impartial.

  2. Is the review right for our company?

    The review is for companies that want to understand how they use AI and the risks involved. We agree on the scope based on your needs.

  3. We are only starting with AI. Does a review make sense?

    Yes. A proposed AI policy sets the rules before use spreads.

  4. Who carries out the review?

    I do. I have experience building AI in production at Operanic, and with security policy and data collection compliance as CIO.

  5. How long does it take, and what is the scope?

    We agree on that once you describe how your company uses AI.

Contact

Write to me.

gregor.gorjanc@hotmail.com

Write to me to exchange ideas or to work together. For an AI governance review, describe in a few sentences how your company uses AI, and we will arrange a first conversation.

Write to me LinkedIn

The “Write to me” button opens your email program.

SubjectAI governance review
Carried out byGregor Gorjanc
Emailgregor.gorjanc@hotmail.com
LinkedInlinkedin.com/in/gorjancgregor
Sheet8 / 8