Work with us
Governance that's been practised, not just advised.
A boutique advisory firm based in Dublin, working with clients across Ireland, the UK, the EU, and the US.
Upcoming · 17 November 2026
Riskwise is delivering the Future Edge Creative Sector AI & Privacy Toolkit with Cultural & Creative Industries Skillnet: a one-day online session led by Sana Khan and Eoghan Nihill. Applications close 27 October 2026 at noon.
Riskwise GRC helps organisations manage privacy, AI governance and compliance in a practical way. We work with growing technology companies, regulated businesses and international organisations, bringing experience from DPO, compliance and governance roles to the work we deliver. Our support ranges from building governance frameworks and reviewing privacy programmes to providing ongoing advisory and DPO support.
Generative AI · EU Market Entry
Privacy framework and DPO oversight in place for EU launch
Financial Technology · Ongoing DPO
Senior privacy oversight embedded across an international operating environment
Payments & Financial Services · Programme Review
16 specific compliance transition points identified, plus practical remediation actions
We work with organisations across technology, pharmaceuticals, financial services, publishing, energy, insurance and AI, including listed companies, established international businesses and growing startups from Series A to Series D.
Our training is led by an experienced governance practitioner, academic lecturer and ACAMS External Faculty member, and can be delivered in person, online or through your LMS.
We also develop organisation-specific training using your own policies, procedures and regulatory requirements. Our training platform is in development, and you can explore it through the working demo.
Ready-to-use governance documents and frameworks, written by a practitioner who has held the DPO, MLRO, and Compliance Officer roles.
Our regular round-up of privacy and AI developments is published on LinkedIn.
Whether you're preparing for the EU AI Act, responding to a DPC enquiry, or building a compliance programme for the first time, we can help.
Work with usAI governance programmes, from risk classification and conformity assessments to governance documentation and EU AI Act compliance roadmaps.
GDPR compliance programmes, CCPA/CPRA support, data protection impact assessments (DPIAs), and ongoing privacy operations for regulated technology businesses.
Independent audits benchmarked against regulatory standards. We identify gaps, prioritise remediation, and provide clear implementation roadmaps.
Third-party risk frameworks, vendor due diligence programmes, contract review, and supply chain governance.
Remediation after regulatory findings, DPC enquiries, or internal audits, with clear ownership of each action and progress you can measure.
AI and privacy governance frameworks, policies, and procedures, written to fit how your organisation actually works, so that people follow them.
Our platform
Our own compliance training platform, currently in development. It is designed to deliver training built around your policies, with completion tracking and records you can show regulators. You can try the working demo now.
Not sure where to start?
Most engagements start with a short conversation about your regulatory position, deadlines and priorities.
Work with us →For creative sector organisations preparing for the EU AI Act: policies, risk registers, and ethical AI frameworks written for creative use cases.
Enquire →A readiness assessment, risk classification matrices, conformity documentation, and an implementation roadmap aligned to the EU AI Act timeline.
Enquire →A combined privacy and AI governance framework for regulated fintech businesses subject to GDPR and financial services rules.
Enquire →Structured due diligence questionnaires, risk scoring matrices, and contract governance templates for managing third-party risk.
Enquire →A set of GDPR documents: RoPA templates, consent frameworks, DPIA processes, data subject rights workflows, and breach response procedures.
Enquire →Role-specific governance playbooks for leadership, product, and legal teams, turning AI governance obligations into practical steps for each team.
Enquire →Provided DPO support and built the privacy documentation — policies, notices and governance materials — translating GDPR requirements into practical safeguards for a fast-moving consumer product launch.
Privacy framework and DPO oversight in place for EU launch
Acting as DPO for an international business serving enterprise clients worldwide, providing continuous oversight across governance, contracts and day-to-day operations.
Senior privacy oversight embedded across an international operating environment
Reviewed governance documentation spanning payments, fraud, analytics, marketing and vendor management, including a dedicated assessment of a youth-focused product.
16 specific compliance transition points identified, plus practical remediation actions
Client confidentiality is central to how we work.
We work with organisations across technology, pharmaceuticals, financial services, publishing, energy, insurance and AI, including listed companies, established international businesses and growing startups from Series A to Series D.
Because many of our engagements are confidential, we do not publicly identify clients without permission. Further references and additional case studies are available on request, subject to appropriate confidentiality arrangements.
Ask about references →Our own compliance training platform, currently in development, is designed to deliver training built around your organisation's policies, procedures, and regulatory obligations.
In the working demo: courses built around your policies and procedures · completion tracking and progress reporting · training matrix, audit trail, and compliance reports · admin dashboard.
Training on AI governance, EU AI Act obligations, GDPR, and data privacy, led by practitioners and delivered in person or live online, tailored to your industry and team.
For boards, product teams and compliance functions – mapped to EU AI Act obligations and your risk profile.
Role-specific privacy training from legal foundations to operational procedures – tailored for your industry.
Sessions for senior leaders and boards on accountability, liability, and strategic risk under AI and data protection law.
Training for all staff that explains what the rules mean in their day-to-day work, so people understand them rather than just ticking a box.
Women in Tech Ireland Award Winner
Sana Khan is a Barrister-at-Law, IAPP-qualified privacy professional, and governance practitioner with over 15 years of experience across AI governance, privacy law, anti-money laundering, and regulatory compliance.
She is one of Ireland's leading voices on AI governance, and the youngest person to have practised as a barrister in Ireland during her time in private practice. She has held statutory roles, including Data Protection Officer, Compliance Officer, and MLRO, at publicly listed US technology companies, social media companies, fintech firms, and international financial services organisations.
Sana is an Associate Lecturer at Griffith College Dublin, ACAMS External Faculty, and faculty at the London Governance & Compliance Academy. She is a sought-after speaker on AI policy, ethics, and regulatory implementation across Ireland and the UK.
Selected speaking & events
Wande
Privacy & AI Governance Analyst
LLB · LLM International Business & Law · CIPP/E
A privacy and AI governance professional with a background in law and regulatory compliance, Wande supports organisations with privacy compliance implementation, AI governance frameworks, remediation planning, and governance documentation. Her research at Griffith College Dublin focused on GDPR accountability and privacy governance within large technology platforms.
Focus: Privacy Audits · GDPR Compliance · Vendor Risk · AI Governance
LinkedIn →
Eoghan
Strategic Advisor
Solicitor (Irl & E&W) · MBA · CTA · TEP · CAMS · CIPP/E · CIPM
A dual-qualified solicitor in Ireland and England & Wales, Eoghan has international experience across governance, compliance, risk management, data protection, and financial crime. He has held senior MLRO and DPO responsibilities across Irish and international organisations, and is an experienced lecturer and conference speaker on AI governance, AML, and blockchain regulation.
Focus: Financial Crime · MLRO · Governance · Virtual Assets
LinkedIn →A weekly round-up of AI regulation, data protection, and privacy news, with a practical view on what each development means for organisations.
Speaking & programmes
A programme from Cultural & Creative Industries Skillnet with Screen Ireland and Coimisiún na Meán, helping creative-sector leaders put ethical AI and data protection into practice. Sana delivered the two-day Foundation Workshop and led the AI & Sustainability session.
Programme details →Teaching & faculty
Looking for a speaker or a training session?Sana speaks and trains on AI governance, data protection and compliance.
Get in touch →Work with us
Whether you're preparing for the EU AI Act, responding to a DPC enquiry, or building a compliance programme for the first time, we can help. Every engagement is led by a senior practitioner and shaped around how your organisation works.
Need a toolkit?
Our governance toolkits are available on their own. Choose "Governance Toolkits" in the form and we'll send you the details.
