Colin Buzoianu

I build AI-integrated software and help European companies navigate the compliance frameworks reshaping how that software gets built — the EU AI Act, ISO 27001, NIS2, GDPR.

My work sits at an unusual intersection: senior full-stack engineering (Next.js, TypeScript, Prisma, Supabase, Stripe), hands-on AI integration via Claude API, MCP servers, and agentic workflows, plus deep regulatory literacy. Most engineers who can ship production SaaS can't read a compliance framework; most consultants who can read the AI Act can't ship. I do both, which matters more each quarter as compliance stops being paperwork and becomes a system-design constraint.

The clearest proof is Buzomed, a multi-tenant SaaS for occupational medicine clinics I built from architecture to launch — GDPR-compliant, AES-256-GCM encryption, security-audited with 32 findings resolved, a public REST API with webhooks, and an in-app AI assistant. In parallel I run application service management at Aumovio (formerly Continental Automotive) for enterprise EHS platforms including ISIS Med, BDS, SafePulse, and CHEMGES, staying close to how large industrials actually adopt software. I also publish worldlegalservice.com, a trilingual site on the EU AI Act and the trajectory of AI regulation.

Engagements range from AI integration in existing products, to EU AI Act readiness (gap analysis, risk classification, technical documentation), to ISO 27001 and NIS2 preparation for SaaS and AI-enabled products, to full-stack builds on Next.js where technical and compliance sides must move in lockstep.

Languages: German (native-level), English (fluent), Romanian (native). For DACH clients this means I read your BSI, BaFin, and BfDI guidance in the original and can run a workshop in München without a translator.

Based in Timișoara. Remote-first, on-site available across DACH for kickoffs, workshops, and executive sessions. Invoicing through Verumsell SRL (EU VAT).