Strategy8 min readPerspective
What if the AI hype is misleading and the business model changes?
How open-weight models and private AI infrastructure could reshape enterprise AI economics and create new opportunities for IT consulting.
David UhlmannIT architecture & compliance
Technical Lead Consultant / Solution Architect
I translate EU regulation into working IT architecture: cloud, security and governance for enterprise systems.
I design and deliver Microsoft Dynamics 365, Power Platform and Azure solutions for organisations that must meet EU requirements such as NIS2, GDPR and the EU AI Act. My focus is where architecture decisions, security guardrails and regulatory obligations meet: integration and data migration, application lifecycle management, architecture governance and, more recently, AI readiness.
Typical situations I work on: implementations that need to get back on track, migrations with too much rework, and AI or data initiatives that need an architecture and compliance review before they go live.
Evidence
One profile, four connected areas
Compliance, security, platforms and enterprise IT are parts of the same job: building systems that work and can be defended. Each area links to the experience, case studies, projects and articles behind it.
Compliance & Governance
Translating EU requirements (EU AI Act, GDPR, NIS2) into architecture decisions and design reviews.
Security
Security guardrails in delivery: ALM and CI/CD, access control, and privacy and security by design.
SaaS & Platforms
Building on and with platforms: Power Platform and Dataverse in client work, and my own SaaS products.
Enterprise IT
Cloud migrations, integration and application lifecycle management for international enterprise systems.
- Case studyRecovering a cross-border CRM cloud migration
- ArticleBuilding an Azure AI Foundry Agent based on your own RAG in Azure AI Search to get better answers and minimize hallucinations
- ArticleThe Execution Gap: Why 2026 Enterprise AI Strategies Fail Without an Underlying Governance and Data Architecture Blueprint
Experience
Recent experience
- Technical Lead Consultant / Solution ArchitectAug 2024 – presentHSO Nederland · Technical lead and solution architect on Microsoft Dynamics 365 CE, Power Platform and Azure implementations.
- Senior Power Platform ConsultantJul 2023 – Jul 2024Ilionx · Senior consultant on Power Platform and Dynamics CE projects, including custom development and ALM.
- Technical Consultant / EngineerNov 2020 – Jun 2023ELCA Informatik AG · Technical CRM engineer in the Swiss-German Dynamics CRM team.
Selected work
Case studies and projects
Anonymised client work, written up as short case studies, and personal projects built in my own time.
Professional · client project (anonymised)
Recovering a cross-border CRM cloud migration
Energy · Netherlands and Germany
Professional · client project (anonymised)
CRM modernisation: from stalled requirements to a working prototype in 10 days
Aviation · Netherlands
Personal project
Personal projects
FreeCVTool · Clinical Conformity · Governance Foundry
Writing
Latest articles
A selection of hands-on implementation guides, regulatory analysis and opinion pieces.Articles about regulation are analysis from an IT architecture perspective, not legal advice.
Security8 min readImplementation
What Is RAG Knowledge-Base Poisoning / Data Poisoning Inside Your AI Infrastructure and How to Protect Against It!
An Azure demonstration of how poisoned source documents change a RAG agent's security advice, and practical steps to protect the integrity of your AI knowledge base.
Security6 min readPerspective
Why Companies Say They Want Secure IT Solutions, But Actually Do Not Want Them
The real-life IT project paradox: contrasting paper compliance (ISO 27001) with factory-floor execution debt, over-privileged non-human identities, and AI risk exposure.
Architecture7 min readPerspective
Cloud Architecture Risks: DORA, CRA & Governance
How abstraction masks distributed system complexity, creates compliance blind spots under DORA/CRA, and accumulates compounding technical debt.
Blog
Latest blog posts
AI Privacy19 min readPerspective
You Asked an AI About Your Health. Who Else Was Listening?
A hands-on investigation of advertising trackers, analytics and data flows in major AI chatbots, using browser network captures, TLS-decrypted Wireshark packet analysis, and synthetic sensitive prompts.
AI Security12 min readImplementation
Red-teaming a RAG agent with PyRIT: my first experiment
Testing a fictional security assistant in Azure AI Foundry with PyRIT, and examining what the results reveal about claimed authority and LLM evaluation.
Contact
Get in touch
The quickest way to reach me is a message on LinkedIn. I enjoy exchanging ideas about IT architecture: design choices, trade-offs, security and compliance.