Advisory board
Aegis Firma is built by software engineers, but our regulatory content is shaped by lawyers, DPOs, and compliance practitioners who deal with these frameworks in their day-to-day work. These are the people behind the accuracy of our coverage.
Last updated: April 2026
Dr. Marta Okonkwo
Senior Counsel, EU AI Act & GDPR
Dr. Okonkwo spent eight years as a legal officer at a EU data protection authority before moving into private practice. She advises technology companies on GDPR enforcement risk, AI Act readiness, and the intersection of both frameworks for automated decision-making systems. She holds a doctorate in technology law from KU Leuven.
James Whitfield, Esq.
Privacy & Technology Attorney
James is a US-based privacy and technology attorney with a practice focused on AI hiring tools, biometric information laws (BIPA, NYC Local Law 144, Colorado), and state-level AI regulation. He has represented clients before the FTC and multiple state attorneys general on AI-related matters. He advises on our US regulatory content.
Aisha Al-Rashidi
DPO & Compliance Director
Aisha has served as Data Protection Officer for three technology companies across fintech, healthtech, and B2B SaaS. She brings a practitioner's perspective to our platform — ensuring that the tools we build reflect how DPOs actually work, not how regulators imagine they work. She advises on our DPIA templates, DSR workflows, and training content.
Prof. Kenji Tanaka
AI Ethics & Governance Researcher
Professor Tanaka is a researcher in AI governance and algorithmic accountability at a European research institution. His work focuses on practical implementation of AI governance frameworks — specifically NIST AI RMF 1.0 and ISO 42001:2023 — in industry settings. He advises on our framework crosswalk content, risk register structure, and bias testing methodology.
Fatima Bergström
International Privacy Counsel
Fatima advises multinational corporations on cross-border data transfer strategies, with particular expertise in APAC jurisdictions: Singapore PDPA, Japan APPI, Australia Privacy Act, and China PIPL. She ensures our jurisdictional coverage reflects the real obligations that global companies face when deploying AI across multiple regulatory environments.
How advisory input works
Our advisors review regulatory content before it is published, flag inaccuracies when regulations change, and provide practical input on how DPOs and legal teams actually work. Their involvement does not constitute legal advice — Aegis Firma is a compliance management tool, not a law firm. Always consult qualified legal counsel for jurisdiction-specific advice.