Strategic Data Advisory for Companies, Leaders and Organisations.

What We Do

Governance & Compliance Maturity Assessment

We benchmark your data governance and EU AI Act readiness across people, process and technology, delivering a maturity map, gap report and prioritized roadmap toward stronger accountability and regulatory alignment.

Privacy & Fairness Evaluation

We independently assess datasets and ML systems for privacy risk and bias, using peer-reviewed methods aligned with EU AI Act Article 10 to support fair, transparent and compliant AI.

Privacy & Data Protection Advisory

End-to-end counsel on GDPR, CCPA/CPRA and global regimes: compliance design, data mapping, cross-border transfers, incident response and regulatory investigations.

Information Security & Governance

We build security and privacy frameworks, incident response plans and internal governance aligned with GDPR, CCPA/CPRA and global regimes, including vendor and data-transfer controls.

EU Regulatory Compliance for Non-EU Companies

Tailored GDPR and EU AI Act programs for organizations outside the EU, providing a structured path to alignment without in-house EU expertise.

AI Governance & Assurance

Technical assurance for responsible AI: model audits, red teaming and vendor due diligence for trustworthy, defensible systems. Independent technical review of AI and ML systems for bias, fairness, robustness and explainability, producing the evidence regulators, boards and procurement teams require for defensible deployment.

AI & ML Advisory

Expert guidance across the model lifecycle, from design and data strategy to deployment and monitoring, drawing on academic and applied machine learning expertise.

Fractional C-suite

Interim executive leadership across core business functions, providing senior-level strategic direction, operational oversight and execution capability on a flexible basis, enabling organizations to scale, transform and deliver complex initiatives without the overhead of permanent C-suite appointments.

DPO as a Service

Your appointed Data Protection Officer under GDPR Article 37: supervisory authority liaison, DPIA guidance, breach management and ongoing compliance monitoring—full independence, predictable cost.

Training services

Role-based workshops enabling business and technical teams to identify, build and navigate modern business complexity

Why GovernData

Boutique

Independent

Practical

European

How We Work – Our Methodology

Our People

Beniamino Santoro

Beniamino Santoro

Founder, AI Governance, Data Protection & Privacy Law

Founder, AI Governance, Data Protection & Privacy Law

Beniamino Santoro is the founder of GovernData, where he advises organizations on data protection, artificial intelligence, and information security. His work spans complex regulatory frameworks, including the GDPR, ePrivacy Directive, EU Data Act, EU AI Act, US CCPA/CPRA, and China’s Personal Information Protection Law (PIPL), with a particular focus on matters involving significant legal, regulatory, and operational consequences. He advises on high risk processing, international data transfers, AI governance across the system lifecycle, regulatory risk, incident response, and privacy due diligence in M&A transactions.

He advises on high risk processing, international data transfers, AI governance across the system lifecycle, regulatory risk, incident response, and privacy due diligence in M&A transactions.

Beniamino has been selected as a Legal Expert in New Technologies for the European Data Protection Board’s Support Pool of Experts. In this capacity, he provides the EDPB and national supervisory authorities, on an ad hoc basis, with legal and technical analysis on the data protection implications of artificial intelligence, cloud services, and digital platforms.

He serves as Group Data Protection Officer and AI Legal Lead at EveryMatrix, where he leads the Group’s privacy and AI governance framework across EMEA, APAC, LATAM, and North America, with independent reporting to the Board of Directors. His responsibilities include the review and sign off of high risk processing activities and new AI use cases prior to deployment.

Previously, Beniamino played a key role in developing and implementing the group wide data protection framework for Hili Ventures, a diversified holding group that holds the developmental licence for McDonald’s across six European markets and operates businesses in shipping, logistics, oil and gas, and engineering. Across twenty-five operating companies, he established standardized processes for international data transfers and audits, brought more than 100 vendor contracts under a common review standard, and implemented a unified methodology for assessing high risk processing activities.

Earlier in his career, as Head of Data Privacy, Data Protection Officer, and Chief AI Officer of an international technology group, Beniamino established an AI governance framework aligned with ISO/IEC 42001, led the resulting conformity assessments, and directed the group’s EU AI Act readiness programme, serving as its principal liaison with supervisory authorities.

Beniamino also teaches privacy law to postgraduate students and has lectured at institutions including Goethe University and the Leibniz Institute. His experience spans SMEs, startups, multinational groups, and privacy technology providers, giving him a broad perspective across regulatory strategy, governance, and implementation. He combines cross jurisdictional compliance experience with international standards to strengthen governance, manage regulatory risk, and support effective implementation.

He holds an LL.M. from Maastricht University and works professionally in English, Spanish, and Italian.

Fabrizio Di Stefano

Fabrizio Di Stefano

Co-Founder, Data Governance & Digital Transformation

Co-Founder, Data Governance & Digital Transformation

Fabrizio Di Stefano is co-founder of GovernData, where he advises organisations on data governance, digital transformation and operational excellence. Over more than a decade he has turned fragmented, manual workflows into governed, scalable systems across global automotive, institutional research data infrastructure and cross-sector AI engineering delivery.

As CTO of CodXHub Solutions, he leads the engineering team behind IT solutions for regulated and data-intensive industries, including automotive, insurance, consumer goods and manufacturing. His delivery record spans a production-optimisation and waste-reduction platform for a Fortune 500 manufacturer, a proof-of-concept AI legal assistant for a European insurance group, and, most recently, a multi-tenant transport quotation and fleet management platform built for the logistics sector, work that pairs technical build with the governance and compliance demands each sector carries.

He also advises Maastricht University as Product Owner for Research Data Collection and Storage, where he manages three research data platforms, and is leading the introduction of further tools while coordinating multiple teams across the full research data lifecycle. Earlier, as Business Intelligence Advisor at the university, he led the overhaul of student recruitment and performance reporting and guided the Marketing and Communications function towards data-driven decision-making, implementing customer data platforms, automated reporting and CRM improvements.

Before this, as Business Process Consultant at Mercedes-Benz, he co-led a global CRM harmonisation and master data management programme spanning 56 countries, aligning fragmented local processes and data standards into a single governed model.

Fabrizio holds an MSc in Management and Economic Development and a BA in Sociology, both from the Università degli Studi di Chieti-Pescara, and is completing an MBA in Digital Economy at Maastricht University. He is a certified Data Protection Officer, trained at the European Centre on Privacy and Cybersecurity at Maastricht University, and holds the IBM Cybersecurity Analyst Professional Certificate alongside Lean Six Sigma (Green Belt), Business Process Management and Scrum Master certifications. He is fluent in Italian, English and Dutch.

Daniele Di Mitri

Daniele Di Mitri

Principal Technical Expert, AI, Learning Analytics & Multimodal Technologies

Principal Technical Expert, AI, Learning Analytics & Multimodal Technologies

Daniele Di Mitri is Professor of Multimodal Learning Technologies at the German University of Digital Science, where he leads the Augmented Feedback research group and coordinates the MSc in Advanced Digital Realities. He is also an associated researcher at the DIPF Leibniz Institute for Research and Information in Education.
He holds a Master’s degree in Artificial Intelligence from Maastricht University and a PhD in Learning Analytics from the Open University of the Netherlands. His expertise lies in designing and developing intelligent data-driven systems and informatics architectures that leverage machine learning, data science, and multimodal analytics.

His work focuses on collecting, integrating, and analysing complex data sources, including sensor data, to build predictive models and actionable insights. He has extensive experience in developing end-to-end solutions, from data pipelines and machine learning models to interactive dashboards and visualisation systems that support decision-making in educational contexts.

His research also encompasses deep learning and generative AI, with a particular interest in how advanced models can be responsibly integrated into human-centred learning environments. This includes designing AI-assisted feedback systems that are scalable, interpretable, and aligned with emerging data governance and ethical AI frameworks in Europe.

Daniele Di Mitri actively contributes to European research and innovation initiatives on AI in education and data governance. He is a member of the Society for Learning Analytics Research (SoLAR), contributes to the CrossMMLA community, and serves as Chair of the Special Interest Group on Multimodal and Immersive Learning Experiences (MILES) within the European Association for Technology-Enhanced Learning (EATEL). In 2021, he was recognised as an “AI Newcomer” by the German Informatics Society.

Emmanuel Yamil Fajouri

Emmanuel Yamil Fajouri

Head of Engineering & Technology

Head of Engineering & Technology

Emmanuel Yamil Fajouri is a Systems Engineer and technology leader with international experience across Argentina, Uruguay, Spain, the United States, Italy, Malta and Estonia.

Throughout his career, he has worked on technology and digital transformation initiatives for global companies, public institutions and international organisations, including projects involving Deloitte, Fox International, YOOX, Mercadona and Betsson, as well as public-sector institutions such as the Prosecutor’s Offices of Rome and Salerno.

His professional experience spans the design, delivery and modernisation of business-critical systems, digital platforms and technology-enabled services. Over the course of his career, he has led engineering initiatives, coordinated multidisciplinary teams, supported organisations through complex technology decisions, and translated business and operational requirements into solutions that can be effectively implemented, governed and scaled.

Working across large multinational organisations, regulated industries, public institutions, startups and growing technology businesses has given Emmanuel a broad understanding of the factors that shape technology decisions. His experience combines technical considerations with an appreciation of organisational structures, regulatory requirements, risk, data governance, operational constraints and business priorities.

Today, at GovernData, Emmanuel leads Engineering & Technology, supporting clients across technology strategy, solution architecture, digital transformation, AI adoption, system modernisation, technical due diligence, and the development and delivery of new digital products and services.

A central part of his work is helping organisations move from strategy to execution. This includes assessing existing technology environments, identifying risks and opportunities, defining realistic transformation roadmaps, and ensuring that new systems and solutions can operate effectively in real-world business and operational contexts.

He also advises organisations on the practical adoption of artificial intelligence, helping them identify meaningful use cases, integrate AI into existing processes and establish the technical and organisational foundations necessary for responsible, sustainable and scalable deployment.

Pedro Hernández Serrano

Pedro Hernández Serrano

Technical Expert, Research Data Governance & Architecture

Technical Expert, Research Data Governance & Architecture

Pedro Hernández Serrano serves as Technical Expert at GovernData. His work covers research data management, data architecture, and regulatory compliance in research organisations. His background combines the technical and regulatory aspects of data management.

Pedro served as Coordinator of Data Stewardship Services at Maastricht University, where he coordinated the university’s research data management support programme. His work included the implementation of a university-wide Data Management Plan template, guidance on research compliance workflows, and the development of several technologies to aid compliance, such as the Research Data Compliance Self-Assessment tool. He also worked on the implementation of GDPR Article 30 in research; he is a certified Data Protection Officer and worked 9 years for Maastricht University.

Since 2020, Pedro has been Data Architect for the European Trade Union Institute, where he is responsible for the data architecture and cloud infrastructure of the European Works Councils Database and the Cross-border Company Mobility Database. Earlier in his academic career, he worked as a Research Data Scientist at interdisciplinary research institutes, particularly on projects that combined law, policy, and data science. His work included research databases, computational methods, research software and technical support for academic research. Before moving into academia, he worked in data science roles in the Mexican public, banking and insurance sectors.

Pedro has published on data governance, legal informatics and computational methods applied to law and policy. His publications include work on computational analysis of European case law and legal and research data infrastructures. He has also taught data science, computational methods and data protection, and has participated in the Research Data Alliance plenaries since 2022.

He holds an MSc in Data Science from the Instituto Tecnológico Autónomo de México and a BSc in Actuarial Science from the Universidad Autónoma de Yucatán. He works in Spanish, English and Dutch.

Silvia Fallone

Silvia Fallone

Technical Expert, AI & Machine Learning

Technical Expert, AI & Machine Learning

Silvia Fallone serves as Technical Expert at GovernData, where she brings applied machine learning expertise to model validation, algorithmic assurance and the technical review of AI systems operating under regulatory and quality constraints.

She is Senior Data Scientist at Altoida, a medical technology company developing AI for the early detection of cognitive decline. There she leads the design of the production inference pipeline and its integration with cloud infrastructure, heads the speech-processing pipeline applying large language models to voice diagnostics, and built a foundation model trained on sensor data for downstream classification of cognitive decline. Her work is conducted under strict data integrity and quality management standards, the kind of controlled, auditable environment that responsible AI deployment demands. Earlier at Altoida, as Data Scientist, she refined machine learning models estimating cognitive decline in patients at risk of Alzheimer's disease, improving diagnostic performance materially through algorithm optimisation and speech feature extraction.

Before Altoida, she developed natural language processing models for multi-label classification in financial services at Ohpen, and implemented time-series clustering to assess trauma severity at hospital intake during a research placement at Amsterdam UMC. She also contributes her skills to public-interest work, building satellite-imagery flood detection systems for the Red Cross and leading data analytics for a European political movement.

Silvia holds an MSc in Information Science: Data Science from the University of Amsterdam and a BSc in Data Science and Artificial Intelligence from Maastricht University, with Erasmus study in computer science at Reykjavik University. She works in Italian, English, Spanish and French.

Want to get started? Click here to book a meeting.

Say hello
Let's talk
Start today
Call us

Insights and News

Survey Tools: Expert Reviews
Survey Tools: Expert Reviews for Corporate, Universities and Public-Sector OrganisationsReviews

Survey Tools: Expert Reviews for Corporate, Universities and Public-Sector Organisations

Read More
AI in the Workplace 1
AI in the WorkplaceFrameworksResources

AI in the Workplace

Read More
Autonomous Data Observability Platforms
Autonomous Data Observability Platforms: From Reactive Monitoring to Proactive GovernanceInsights

Autonomous Data Observability Platforms: From Reactive Monitoring to Proactive Governance

Read More

Trainings: GDPR, AI Act & Process Management

“Compliance starts with your people.” Delivered in-house or online, our role-based training sessions on GDPR, the EU AI Act and process governance are designed for employees, managers and decision-makers alike. Every programme includes a practical compliance toolkit, templates, checklists and reference materials, so your team can maintain standards and stay compliant long after the training ends.

Data Governance Maturity Assessment

“You can’t improve what you don’t measure.” We benchmark your organisation’s data governance practices across people, processes and technology, mapping your current maturity level and charting a clear roadmap towards stronger data quality, accountability and regulatory alignment.

EU Regulations for Non-EU Companies

“Operating globally, subject to EU law, we help you bridge the gap.” If your organisation is based outside the EU but processes data, deploys AI systems or offers services to EU residents, European regulations apply to you. We provide tailored compliance programmes covering GDPR, the EU AI Act and broader data governance requirements, giving non-EU businesses a structured, efficient path to full regulatory alignment without the need for in-house EU legal expertise.

Trainings: GDPR, AI Act & Process Management

“Compliance starts with your people.” Delivered in-house or online, our role-based training sessions on GDPR, the EU AI Act and process governance are designed for employees, managers and decision-makers alike. Every programme includes a practical compliance toolkit, templates, checklists and reference materials, so your team can maintain standards and stay compliant long after the training ends.

EU Regulations for Non-EU Companies

“Operating globally, subject to EU law, we help you bridge the gap.” If your organisation is based outside the EU but processes data, deploys AI systems or offers services to EU residents, European regulations apply to you. We provide tailored compliance programmes covering GDPR, the EU AI Act and broader data governance requirements, giving non-EU businesses a structured, efficient path to full regulatory alignment without the need for in-house EU legal expertise.

GDPR Compliance Audit

“Turn compliance from a burden into a competitive advantage.”

We review your data processing activities, policies and records against GDPR obligations, identifying gaps and providing actionable remediation steps. Walk away audit-ready, with documented accountability your stakeholders can trust.

Fractional Support

We embed as your part-time advisor, ensuring sustained implementation, regulatory updates, and evolution of your governance practices over time.