Skip to main content
2x First Place IBM AI Challenge Winner
CompTIA Security+ Certified

Enterprise AI Trust and
Compliance Architect

Founder of AuditGuardX · Principal at BroadComms, an IBM Partner Plus Company

AI-native companies do not lose enterprise deals because their product failed to deliver value. They lose momentum when the conversation reaches security review, procurement, audit preparation, or vendor risk assessement. That is where the buyer stops asking what the product can do and starts asking whether the system can be trusted. I design and build the security, compliance and governance infrastructure, with the AI-specific controls that help companies meet these requirements.

Resume

My Work Behind the Trust Layer

I did not arrive at AI compliance infrastructure from theory. I arrived here through years of building software, securing web applications, testing production AI systems, deploying cloud-native platforms, competing on enterprise AI challenges, and eventually seeing the same pattern repeat across industries.

That was the genesis of AuditGuardX, AI Compliance automation.

  • AI system architecture.
  • Production security testing.
  • Cloud-native SaaS delivery.
  • Compliance readiness.
  • AI governance infrastructure.

That path wasn't planned, but the combination turned out to be unusually specific to one of the most expensive unsolved problems in enterprise AI adoption.

AI-native companies are losing deals they should be winning, not because their product fails, but because their compliance infrastructure was never built to match what their stack actually is. The product demo is no longer enough. You can build an impressive AI product, but still lose enterprise momentum when the buyer’s security team starts asking questions. Enterprise buyers now want proof that the system can be trusted, governed, secured, documented, and adopted without creating new risk.

Standard SOC 2 was written for traditional SaaS. The controls don't ask about RAG pipelines, vector databases, LLM API key management, training data provenance, or model access controls. So AI-native companies prepare for the wrong exam, and the gaps appear precisely only when an enterprise procurement team starts asking the right questions.

That is the moment deals stall.

That is the gap AuditGuardX was built to close.

My Approach

The principles that shape how I design AI systems

Compliance Design

Enterprise deals don't stall at the demo. They stall when the buyer's security team starts asking questions. I build the trust infrastructure so you can close the deal without losing momentum.

Embedded Security

Security patched after deployment is a liability. Zero trust principles, IAM, threat modeling, and OWASP LLM controls go in at the design stage before the first line of production code is written.

Controls Mapping

Standard SOC 2 wasn't written for RAG pipelines, vector databases, or LLM API key management. I map governance controls to what AI systems actually are, not what compliance templates assume.

Build to Scale

Every system is designed to pass vendor risk assessment, audit evidence requests, SOC 2 reviews and EU AI Act scrutinty. Whether its serving just 50 employees or 1,000,000 users

Proof from the Field

In March 2025, Meeting Ledger our intelligent meeting productivity assistant built on IBM watsonx.ai, took first place at the IBM watsonx.ai Agent Challenge. Two months later, in May 2025, BrainStormX our intelligent collaborative brainstorming platform built with IBM Granite Models, took first place at the IBM Granite Lean AI Solution Challenge. Back-to-back wins, on two different IBM AI platforms. Both judged against international competition. Both built under sprint conditions.

Through BroadComms, I have designed and shipped 20+ AI-native SaaS applications across Google Cloud, Microsoft Azure, and IBM Cloud, using React, Next.js, Node.js, Python, FastAPI, Flask, and Django. These systems integrate AI cpabilities, authentication, payment workflows, Zero Trust principles, and cloud-native deployment.

In October 2025, I joined Guhuza, to help test and validate their AI-driven recruitement platform operating at a 40,000+ user scale. Through functional testing, security and performance validation across 50+ API endpoints. Automated regression testing, vulnerability assessment, aligned with OWASP Top 10 and platform security recommendations.

Before that, at AppsLogix, I worked across secure coding standards, SAST and DAST integration, CI/CD security checks, code review methodology, and web application security practices that reduce critical defects and security vulnerabilities.

The combination of compliance knowledge, AI system architecture, production security testing and hardening is what makes this work different. Most compliance practitioners have never deployed AI systems. Most AI builders have never navigated the realities of a security audit. This work requires both, and that intersection is where I operate.

Enterprise AI Stack

The technical, security, compliance, and cloud capabilities behind enterprise-ready AI systems.

Engineering

Full-stack development from architecture to production.

  • Python
  • TypeScript
  • JavaScript
  • SQL
  • Bash
  • PowerShell
  • React
  • Next.js
  • Node.js
  • FastAPI
  • Flask, Django

Compliance

Frameworks, governances and control structures

  • SOC 2 Type I / SOC 2 Type II
  • ISO 27001
  • NIST CSF
  • EU AI Act
  • ISO 42001
  • HIPAA
  • PCI-DSS
  • Compliance evidence mapping
  • Vendor security assessments
  • Risk mitigation
  • Control documentation

Infrastructure

Cloud-native deployments and security for scalable AI

  • Microsoft Azure
  • IBM Cloud, watsonx.ai
  • Google Cloud Platform
  • Git
  • CI/CD pipelines
  • Terraform
  • Ansible
  • Docker
  • Kubernetes
  • Zero Trust Architecture
  • Infrastructure and Code

Security

Security testing and validation for AI applications and APIs.

  • OWASP Top 10
  • OWASP LLM risk awareness
  • API security testing
  • Vulnerability assessment
  • Penetration testing
  • Security hardening
  • Incident response
  • Threat modeling
  • IAM, DLP
  • SIEM
  • Automated regression testing

Certifications & Awards

CompTIA Security+ CE

Active till 2029

IBM AI Hackathon Challenge

2× Winner

Career Timeline

Jun 2025 - Present

Founder

AuditGuardX

Building AuditGuardX, an AI-native compliance automation platform for SOC 2, HIPAA, GDPR, ISO 27001, and 35+ additional frameworks.

Oct 2025 - Jan 2026

Back-End Tester / QA Analyst

Guhuza

Testing 50+ API endpoints, achieving 70% automation coverage, and ensuring platform security and reliability.

January 2025 - Present

Principal Architect / Operator

BroadComms.NET

Building AI-powered SaaS applications and providing cybersecurity consulting to clients.

April 2024 - January 2026

Diploma in Information Technology

triOS College

Focused on Infrastructure, Cloud Computing, and Cybersecurity. Graduated January 2026.

Let's Make Your API Enterprise-Ready

If your AI product is moving toward enterprise buyers, vendor security review, SOC 2, ISO 27001, EU AI Act readiness, or procurement scrutiny, the trust layer needs to be built before the deal reaches the risk team.

Services