Data privacy · AI governance
Govern your data and AI with the rigor regulators expect.
Aethicor helps organizations build privacy programs and AI governance that hold up under scrutiny, and that their teams can actually run.
- UK GDPR & DPA 2018United Kingdom
- EU GDPREuropean Union
- EU AI ActEuropean Union
- CCPA & State Privacy LawsUnited States
- ISO/IEC 42001AI management system
- NIST AI RMFAI risk management
01 — Services
Senior expertise, scoped to where you are.
From a first gap assessment to an embedded, fractional privacy lead, every engagement is delivered directly by a certified practitioner.
- 01
Privacy program build
Design and stand up a privacy program: governance, policies, records of processing, DPIAs, data subject rights and vendor oversight.
- 02
AI governance
AI inventories, risk classification, policies and controls aligned to the EU AI Act, ISO/IEC 42001 and the NIST AI RMF.
- 03
Fractional privacy lead
Senior privacy leadership on a part-time basis, embedded with your team and accountable to your leadership.
- 04
Assessments & audits
Gap assessments, DPIAs and AI impact assessments with a prioritized, practical remediation plan.
- 05
Privacy by design
Work alongside product and engineering so new features and models ship with privacy built in, not bolted on.
- 06
Training & enablement
Role-specific training for boards, legal, product and data teams on privacy and responsible AI.
02 — Approach
Compliance that becomes part of how you operate.
- Step 1
Assess
Understand your data, AI use and regulatory exposure, and benchmark where you stand.
- Step 2
Prioritize
Turn findings into a risk-ranked roadmap your leadership can approve and fund.
- Step 3
Build
Implement policies, processes and controls that fit how your teams already work.
- Step 4
Sustain
Embed ownership, metrics and reviews so the program keeps pace with change.
03 — About
Led by a practitioner, not a pitch team.
I’m Nitin Gupta, Principal at Aethicor. I’m a privacy and AI governance leader who has built and run privacy and AI programs for global consumer brands, a media agency network, and several consulting clients.
I started Aethicor because, as a practitioner, I saw how under-resourced privacy teams are. Having worked in-house, I know how to make real progress with limited time, budget and headcount, and how to build a program the business will actually adopt.
I advise on the EU AI Act, GDPR, UK GDPR and the Data Protection Act 2018, the CCPA and other US state privacy laws, GLBA and HIPAA, and Canada’s PIPEDA and provincial privacy laws. I’m also hands-on with the technology, including OneTrust and other privacy and AI governance program management tools.
IAPP certifications
- AIGP
- CIPP/E
- CIPP/US
- CIPM
- CIPT
- FIP
04 — Free resources
Practical toolkits you can use this week.
Choose a resource and we'll email it to you.
On its way
Check your inbox for the .
It should arrive within a few minutes. If not, check your spam folder.
05 — Contact
Start with a 30-minute conversation.
Tell us where you are with privacy or AI governance. You'll leave with a clear view of your priorities, whether or not we work together.
Ready to pick a time? Book straight into the calendar.
Book a consultationMessage sent
Thanks, there. We'll reply within one business day.
If you'd like to talk sooner, book a time directly.