About

I am a practitioner in runtime AI governance and privacy for regulated enterprises. I turn policy into enforced, auditable systems and document the work in public.

Elvis Tapfumanei

Microsoft Certified: Info Security Administrator · IAPP AIGP (In progress) · NIST AI RMF · ISO 42001 · EU AI Act · Zimbabwe National AI Strategy · POPIA · GDPR

Builder and practitioner in AI governance and privacy

I build systems that turn governance requirements into operational controls.

I build governance infrastructure. I do not sell workshops about responsible AI.

My work spans Colloxa, delivery leadership in regulated lending environments, and practitioner writing through The Control Plane.

Operating context: South Africa. Design thesis: multi-regime layering across Zimbabwe National AI Strategy, POPIA, GDPR, the EU AI Act, COFI, and emerging African regulation. That complexity shapes an infrastructure-first approach designed for multiple jurisdictions from the start.

Practitioner proof

AI governance without enforcement is theatre →︎

The prompt is not the risk. The policy gap is.

What I believe

Execution is the proof. Policy and frameworks only matter if they produce enforced, auditable outcomes in real systems. I build toward that standard in products and in the organisations I work with.

Colloxa is the product proof: real-time policy enforcement, decision lineage, and regulator-ready evidence. Delivery leadership keeps the work grounded in operational reality. Microsoft Certified: Info Security Administrator and IAPP AIGP (in progress) deepen the security and governance foundation, while The Control Plane documents what I learn through practice.

Based inSouth Africa

Available forColloxa pilot partnerships, enterprise AI governance implementation, senior delivery opportunities, and selected writing commissions

Contact me →︎

Infrastructure that implements frameworks

A product, credentials, a publication, and a delivery track record.

Colloxa

Proof of practice. Governance infrastructure with real-time enforcement and regulator-ready evidence.

Security and AIGP

Microsoft Certified: Info Security Administrator, plus IAPP AIGP in progress. Credentials that inform technical controls and operational decisions.

The Control Plane

Public record. Essays from someone doing the work: enforcement, evidence, and what it looks like when governance fails under real conditions.

Delivery

Operational credibility. Delivery leadership in regulated lending environments, where execution quality is tied to business and regulatory outcomes.

Governance, delivery, and craft

Certifications and tools that support building and operating enforceable systems in regulated environments.

Certifications

  • ·Microsoft Certified: Info Security Administrator
  • ·IAPP AIGP, Artificial Intelligence Governance Professional (in progress)
  • ·CMI Level 6 Diploma in Professional Management and Leadership Practice
  • ·BCS Practitioner Certificates in Business Analysis Practice
  • ·BCS Requirements Engineering Certificate
  • ·BCS Business Process Modelling Certificate
Full credential history on LinkedIn ↗︎

Tools I use

Strategy and delivery

Asana · Confluence · HubSpot · Jira · Monday.com · Miro

Data and analytics

DataHog · Mixpanel · PostHog · Sentry · Snowflake

Development and cloud

Cursor · Figma · Firebase · GitHub · Google Cloud · Next.js · React · Supabase · VS Code

Design and content

Canva · Medium · Notion · WordPress

Work with me.

Frameworks and evidence on this site. Colloxa when you need runtime infrastructure. Direct contact for delivery, advisory, and implementation conversations.