Skip to content
d.uhlmann (home)

Lead Consultant · Enterprise AI & Compliance

David Uhlmann

Exploring the intersection of European AI and cybersecurity regulations (EU AI Act, NIS2, GDPR) and practical enterprise architecture, with a focus on Microsoft Azure, Dynamics 365 and Power Platform.

As a Lead Consultant specialising in Microsoft Power Platform, Dynamics 365 and Azure, I design and implement enterprise solutions with a strong focus on security, governance and regulatory compliance. My work increasingly involves AI governance, particularly how organisations can integrate AI capabilities into existing enterprise architectures in a controlled, secure and auditable way.

I am particularly interested in non-human identity (NHI) security, structured interfaces for AI agents, validation mechanisms and auditability. These technical considerations become increasingly important as organisations adopt AI while facing regulatory obligations under the EU AI Act, NIS2 and GDPR.

My focus is on bridging technical implementation and regulatory requirements, translating governance and compliance considerations into practical architectural decisions within the Microsoft ecosystem. Combining hands-on Power Platform experience with a growing specialisation in AI governance and compliance, I aim to help organisations build solutions that are technically sound, maintainable and aligned with their regulatory responsibilities.

Eindhoven, Netherlands · CET

01 / Blueprints

Featured Architectural Blueprints

Practical guidance for teams that have to ship AI into regulated, transactional enterprise systems.

All articles

Governance9 min read

We Know the Cyber Risk. So Why Don't We Act?

  • Cybersecurity
  • NIS2
  • Behavioral Economics
  • Risk Management
  • AI Governance

Analyzing psychological distance, cognitive biases, and organizational incentives behind delayed cybersecurity investments under NIS2.

02 / Domains

Core Architectural & Domain Competencies

Microsoft Enterprise Stack

  • Dynamics 365 (CE & F&O)
  • Power Platform
  • Dataverse
  • Copilot Studio
  • Azure Integration Services
  • Azure APIM
  • Logic Apps

AI Governance & Security

  • Non-Human Identities (NHI)
  • Model Context Protocol (MCP)
  • Event Sourcing
  • Azure Sentinel
  • ISO/IEC 27090
  • ISO/IEC 42001

European Regulatory Compliance

  • EU AI Act
  • NIS2
  • Cyber Resilience Act (CRA)
  • GDPR (Art. 6/22/35)
  • EU MDR (GSPRs)

Engineering & Infrastructure

  • Python
  • C#
  • TypeScript
  • SQL
  • IaC (Bicep / Terraform)
  • Git ALM
  • VS Code
  • Postman

03 / Contact

Need to turn regulation into running architecture?

Always happy to connect and exchange perspectives on AI governance, enterprise architecture and regulatory developments within the Microsoft ecosystem.