A command centre for organisations using multiple AI agents. It connects business intent, operating boundaries, human decisions, supervised work and outcome records — so accountability does not end with an agent’s claim. Execution ≠ effect: claim ≠ reality.
A decision engine for regulated industries. It turns fragmented sources and team knowledge into one decision case: what changed, what remains unknown, which options exist and what requires approval. Decision, action and later outcome remain one story.
Gap report and roadmap: a compliance gap report and a remediation plan with ready‑made task lists. ITPF, SOC 2, ISO 27001 and identity — IAM / IGA with the full access lifecycle.
A designed AWS environment and a deployed CI/CD pipeline. Deployment in eu‑central‑1, audit‑trail retention, cost control.
A working system with an audit layer and complete documentation — handed over to the client’s team. Mandate, control, outcome: a compliance & audit layer wired into a working artifact.
| Access lifecycle (IGA) | Remediated |
| Audit log retention | Conformant |
| Vendor attestation | In progress |
Fig.01 — delivery model · n = 6+1 domains
This is what an engagement leaves behind — an auditable conformance document wired into a working system. Every artifact carries a reference, a scope and an audit trail.
A method for proving the actual effects of an agent’s actions, verifiable by an independent third party.
An architecture in which the agent, by design, has no ability to perform an action outside the organisation’s control.
Stopping a sequence of small, seemingly permitted actions that would collectively breach limits — before harm occurs.
> Application P.456328 filed with the Polish Patent Office (UPRP) in July 2026. Filing an application is not the same as being granted protection.
> Families A and C remain in preparation — numbers and priority dates will be added once filed.
> Code, models and documentation handed to the client are licensed as set out in the delivery contract.
We speak to people looking for concrete solutions in industries where a mistake costs millions. Professionals talking to professionals. Without needlessly ornate sentences.
We believe AI is not a product — it is a new layer of reality. Thin, invisible, and binding. Our role is to design its frameworks before someone else writes them for us.
We communicate calmly and steadily, without bugs. We work long on a single problem. We turn down projects we do not believe in. Composed does not mean stiff.
— Piotr Kędzierski, founder · PKC / GotIt Lab
For more than 20 years, I have turned new technology into systems that work beyond the slide deck: across fintech, cloud, media, telecommunications, the public sector, and regulated environments.
I am equally comfortable with a small specialist team, an enterprise board, and architecture reaching millions of users.
Selected organisations from advisory and delivery engagements
> These are organisations I advised, designed for, or delivered solutions to through projects and client engagements. This is not a list of employers and does not imply endorsement of PKC or GotIt Lab by any of these organisations.
Selected advisory and delivery engagements alongside own products. Historical roles do not imply current affiliation or responsibility for the later development of clients’ products.
Understanding the problem: data, regulatory constraints, the inside of the organisation. Start with evidence.
Ugly, working, tested on the client’s real data. If the hypothesis does not hold here, it holds nowhere.
Deploying Coord Control or War Room in the client’s environment. Full control of data, access and the audit trail.
A working system, an audit layer and documentation handed to the client’s team. A working artifact, not a deck.
> We reply directly to the address you provide, usually within 24 h
> Data controller: GotIt Lab · legal basis: Art. 6(1)(b)/(f) GDPR
IT governance, cloud and production AI for regulated sectors.
kontakt@gotitlab.eu →Control and proof of the effects of AI‑agent work — pilot or deployment.
coord@gotitlab.eu →> The calendar loads only after your action — no cookies until you click
The calendar loads only after you click. Google may then set its own cookies and process technical data.
By continuing, you use Google Calendar under the Google Privacy Policy.