![Guglielmo Boncoddo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2026/07/avatar_72424_1785247872.jpg) Guglielmo Boncoddo # AI Governance & Privacy Engineer Open to offers · Member since 25 Jul 2026 [Message](https://jobicy.com/dashboard-page.md) ShareLocationSicily, ItalyDesired salaryUnspecifiedWork preferenceRemote Only / Full Time, ContractExperience levelSenior * [Overview](#overview) * [Portfolio 0](#portfolio) * [Services 0](#services) ## About Professional summaryI am an AI governance and privacy engineer with a legal background and hands-on experience building production-scale AI systems. My work sits at the intersection of data protection, responsible AI, infrastructure engineering, and regulatory compliance. I hold law degrees with maximum honors and apply legal-grade analytical rigor to technical systems. I advise on GDPR, EU AI Act readiness, privacy-by-design implementation, data governance, and risk management across the full technology stack. I also build and operate AI-driven products and knowledge systems, including autonomous agent architectures, persistent memory systems, retrieval pipelines, and compliance-oriented document repositories. I am comfortable taking projects from concept through deployment. My technical toolkit includes Python, Flask, SQLite/FTS5, Docker, Nginx, React, Vite, Tailwind CSS, and infrastructure automation. I have experience with AI/ML orchestration, observability, secure deployment, and privacy-preserving product design. I bring a cross-functional mindset and can collaborate effectively with legal, engineering, product, and compliance teams. I am especially interested in roles involving AI governance, privacy engineering, data protection, and regulatory technology. I am open to remote work and EU-wide relocation, and I am available for full-time, contract, and advisory engagements. ## Skills 40 capabilities[Access Control](https://jobicy.com/talent/access-control.md)[AI Safety](https://jobicy.com/talent/ai-safety.md)[BASH](https://jobicy.com/talent/bash.md)[CCPA](https://jobicy.com/talent/ccpa.md)[Consent Management](https://jobicy.com/talent/consent-management.md)[Content Moderation](https://jobicy.com/talent/content-moderation.md)[Data Classification](https://jobicy.com/talent/data-classification.md)[Data Minimization](https://jobicy.com/talent/data-minimization.md)[Data Processing Agreements](https://jobicy.com/talent/data-processing-agreements.md)[Firebase](https://jobicy.com/talent/firebase.md)[Flask](https://jobicy.com/talent/flask.md)[GDPR Compliance](https://jobicy.com/talent/gdpr-compliance.md)[GuardRails](https://jobicy.com/talent/guardrails.md)[Internal Controls](https://jobicy.com/talent/internal-controls.md)[ISO 27001](https://jobicy.com/talent/iso-27001.md)[ISO 27701](https://jobicy.com/talent/iso-27701.md)[JavaScript](https://jobicy.com/talent/javascript.md)[MLOps](https://jobicy.com/talent/mlops.md)[Model Governance](https://jobicy.com/talent/model-governance.md)[NIST AI RMF](https://jobicy.com/talent/nist-ai-rmf.md)[NIST Cybersecurity Framework](https://jobicy.com/talent/nist-cybersecurity-framework.md)[NumPy](https://jobicy.com/talent/numpy.md)[Penetration Testing](https://jobicy.com/talent/penetration-testing.md)[Policy Development](https://jobicy.com/talent/policy-development.md)[Privacy By Design](https://jobicy.com/talent/privacy-by-design.md)[Privacy Impact Assessment](https://jobicy.com/talent/privacy-impact-assessment.md)[Prompt Engineering](https://jobicy.com/talent/prompt-engineering.md)[Python](https://jobicy.com/talent/python.md)[React](https://jobicy.com/talent/react.md)[Risk Management](https://jobicy.com/talent/risk-management.md)[Rust](https://jobicy.com/talent/rust.md)[Scipy](https://jobicy.com/talent/scipy.md)[SQLite](https://jobicy.com/talent/sqlite.md)[Standard Contractual Clauses](https://jobicy.com/talent/standard-contractual-clauses.md)[System Hardening](https://jobicy.com/talent/system-hardening.md)[Tauri](https://jobicy.com/talent/tauri.md)[Third Party Risk Management](https://jobicy.com/talent/third-party-risk-management.md)[Threat Modeling](https://jobicy.com/talent/threat-modeling.md)[Vite](https://jobicy.com/talent/vite.md)[Vulnerability Management](https://jobicy.com/talent/vulnerability-management.md) ## Tech stack & tools Working toolkit ### Application Hosting [![Image](https://cdn.jsdelivr.net/gh/devicons/devicon@master/icons/firebase/firebase-original.svg) Firebase](https://jobicy.com/talent?tool=firebase.md)[![Image](https://cdn.jsdelivr.net/gh/devicons/devicon@master/icons/nginx/nginx-original.svg) Nginx](https://jobicy.com/talent?tool=nginx.md)[![Image](https://cdn.jsdelivr.net/gh/devicons/devicon@master/icons/vercel/vercel-original.svg) Vercel](https://jobicy.com/talent?tool=vercel.md) ### Data Stores [![Image](https://cdn.jsdelivr.net/gh/devicons/devicon@master/icons/sqlite/sqlite-original.svg) SQLite](https://jobicy.com/talent?tool=sqlite.md) ### Development [![Image](https://cdn.jsdelivr.net/gh/devicons/devicon@master/icons/bash/bash-original.svg) Bash](https://jobicy.com/talent?tool=bash.md)[![Image](https://cdn.jsdelivr.net/gh/devicons/devicon@master/icons/docker/docker-original.svg) Docker](https://jobicy.com/talent?tool=docker.md)[![Image](https://cdn.jsdelivr.net/gh/devicons/devicon@master/icons/linux/linux-original.svg) Linux](https://jobicy.com/talent?tool=linux.md)[![Image](https://cdn.jsdelivr.net/gh/devicons/devicon@master/icons/ubuntu/ubuntu-original.svg) Ubuntu](https://jobicy.com/talent?tool=ubuntu.md)[![Image](https://cdn.jsdelivr.net/gh/devicons/devicon@master/icons/vite/vite-original.svg) Vite](https://jobicy.com/talent?tool=vite.md) ### Languages & Frameworks [![Image](https://cdn.jsdelivr.net/gh/devicons/devicon@master/icons/flask/flask-original.svg) Flask](https://jobicy.com/talent?tool=flask.md)[![Image](https://cdn.jsdelivr.net/gh/devicons/devicon@master/icons/javascript/javascript-original.svg) JavaScript](https://jobicy.com/talent?tool=javascript.md)[![Image](https://cdn.jsdelivr.net/gh/devicons/devicon@master/icons/python/python-original.svg) Python](https://jobicy.com/talent?tool=python.md)[![Image](https://cdn.jsdelivr.net/gh/devicons/devicon@master/icons/rust/rust-original.svg) Rust](https://jobicy.com/talent?tool=rust.md) ### Libraries [![Image](https://cdn.jsdelivr.net/gh/devicons/devicon@master/icons/numpy/numpy-original.svg) NumPy](https://jobicy.com/talent?tool=numpy.md) ## Experience Career history ### Independent AI Governance and Infrastructure Engineer · Self-Employed Dec 2025 – PresentI operate as a freelance engineer and consultant designing and deploying production AI applications, autonomous agent systems, and compliance-oriented knowledge pipelines. My work combines end-to-end product delivery with legal and regulatory analysis, including GDPR obligations, EU AI Act readiness, privacy engineering controls, and responsible AI deployment. I support organizations with governance, risk management, and technical implementation across AI and data protection use cases. ### Open-Access Knowledge Library · Styx Mar 2026 – PresentI architected and maintained an autonomously growing document index aggregating authoritative sources such as NIST publications, CVE vulnerability feeds, ISO standards, and academic repositories. I scaled the system to hundreds of thousands of documents with daily automated ingestion, supporting compliance monitoring, regulatory intelligence, and AI training data governance. I implemented data classification pipelines, source provenance tracking, audit trails, and automated document processing workflows for quality, deduplication, and metadata enrichment. ### AI Continuity Journal · Speculae Jul 2026 – PresentI designed a native multi-agent architecture where humans and AI agents share the same schema and privacy guarantees, with identity handled at the schema level. I implemented statistical pattern detection using SciPy to surface emotional arcs, trigger correlations, and cyclical patterns over longitudinal data without external API dependency. I shipped a full-stack application across CLI, REST API, web app, and desktop shell, backed by a substantial automated test suite and privacy-by-design storage architecture. ### Gamified Fitness Application · Shadow-Ascent Dec 2025 – PresentI delivered a full-stack gamified fitness tracker with progression mechanics, engagement systems, payment integration, and cloud deployment. I handled sprite art creation, game-mechanics design, Stripe integration, and secure authentication flows. I implemented privacy-by-default data handling and consent management for user data collection. ## Education Learning history ### Università degli Studi di Messina 2024 – 2026Master of Laws (LL.M.), Innovation and Sustainability Law Graduated with 110/110 cum laude. Thesis focused on democratic participation in the digital era, innovation, sustainability, and governance. Focus areas included digital governance, AI regulation, data protection law, technology policy, sustainability frameworks, and democratic innovation. ### Università degli Studi di Messina 2021 – 2024Bachelor of Laws (LL.B.), Labour Consulting and Private Investigation Sciences Graduated with 110/110 cum laude. Thesis focused on criminal accountability, mental defect, and personality disorders. Focus areas included legal analytical methodology, regulatory interpretation, evidence assessment, compliance frameworks, and investigative procedures. This professional hasn’t added portfolio projects yet. This professional hasn’t listed any services yet.