
Tolga Aktaş
Over 15 years of experience in ISO management systems and accredited certification processes. Delivers end-to-end consulting for ISO 42001, ISO 27001, and EU AI Act compliance.
Areas of expertise
- ISO 42001
- ISO 27001
- EU AI Act
EU AI Act
EU AI Act penalties are expanding. For the most serious violations, fines can reach €35 million or 7% of global turnover. The real risk is realizing too late which obligations apply to you.
Get Gap AnalysisAI projects move quickly while records, ownership, controls, and evidence trails lag behind. Before audit pressure arrives, the critical step is making those gaps visible.
If classification is unclear, your regulatory obligations are unclear too.
Policy, logging, human oversight, and data governance gaps stay invisible.
ISO 42001 alignment must be shown through traceable evidence, not intent.
Responsibility spreads across leadership, legal, technology, and operations.
Your AI usage is mapped against ISO 42001 and EU AI Act expectations.
Missing policies, processes, records, and technical controls are prioritized.
The records and documents required before an audit become clear.
First actions, owners, and certification path become manageable.
After the form, the output is an actionable view of your audit exposure, not just a callback request.
AI governance aligned with ISO standards and international regulations.
End-to-end roadmap from strategy to audit.
AI vision, risk appetite, and governance model are defined.
Technical, regulatory, and operational risks are assessed.
Data protection and AI control mechanisms are established.
Alignment with EU AI Act and international regulations.
ISO 42001, 27001, and 22301 processes are structured.
Audit preparation and continuous improvement are applied.
From organizations we partner with on ISO certification and AI governance programs.
Finance and BankingDeliverable
ISO 42001 roadmap and control gap map
“During ISO 42001 and EU AI Act compliance, AION gave us a clear roadmap through complex regulation. Our AI systems are now ethical, transparent, and auditable at an international level.”
Health TechnologyDeliverable
Secure data architecture and AI operations control set
“They built our ISO 27001 secure data infrastructure and integrated AI operations into the same architecture. We now have a clear framework for data security.”
Software and SaaSDeliverable
Prioritized gap analysis and certification plan
“The gap analysis clarified our current state and delivered a strategic plan that saved both cost and time on our certification journey.”
Manufacturing and LogisticsDeliverable
Business continuity scenarios and resilience targets
“Through AI Designed for Continuity, we ensured critical systems keep running safely during disruptions. Our operational resilience improved significantly.”
E-Commerce and RetailDeliverable
Responsible AI principles and board-ready briefing pack
“Beyond technical compliance, they helped integrate a responsible AI vision into our company culture. AION is a true business partner, not just another consultancy.”
Consultants who partner with you on ISO standards, EU AI Act, and enterprise AI governance.

Over 15 years of experience in ISO management systems and accredited certification processes. Delivers end-to-end consulting for ISO 42001, ISO 27001, and EU AI Act compliance.

Specialist in managing enterprise compliance programs from strategy to execution. Leads client teams through risk assessment, gap analysis, and audit preparation.

Responsible for building AI governance platforms and compliance automation tools. Designs technical infrastructure, data security architecture, and process digitization solutions.
In 5 minutes, map the first view of your AI risk class, control gaps, and certification roadmap.
No commitment. No sales pressure. Your data is protected under KVKK and ISO 27001 standards.