# Intellectum Lab

> Production AI systems for regulated finance. We turn MiCA, DORA and the EU AI Act into records, controls and monitoring pipelines that pass validation — built for authorised CASPs, banks, asset managers and insurers, and delivered to production, not to slide decks. Founded by Viktor Andriichuk (FSQS Registered Supplier, EU Commission TWG6 Expert, AI Chamber CEE member). Based in the EU, delivering across UK & Ireland and Northern Europe.

## What we do (verticals)

- [Digital Assets / MiCA compliance for authorised CASPs](https://intellectumlab.com/digital-assets.html): Production systems for MiCA counterparty resolution against ESMA's weekly interim register, ESMA JSON-schema order-book records, Travel Rule holds, DAC8/CARF, DORA ICT resilience and EU AI Act governance of AML/monitoring models. Four fixed-fee steps: Snapshot (1 week), Diagnostic (3–4 weeks), Build (by scope), Embedded Run (ongoing).
- [AI Control — control plane for GenAI under DORA](https://intellectumlab.com/control.html): Auditability, reproducibility, per-request audit trails, guardrails and exit readiness for GenAI systems inside regulated financial institutions.
- [Data Intelligence — continuous data preparation for regulated AI](https://intellectumlab.com/data-intelligence.html): Continuous extraction, validation and governance of unstructured enterprise data to make AI outputs audit-ready.
- [RAG Systems — document intelligence that cites its sources](https://intellectumlab.com/rag.html): Defensible AI answers from contracts, policies and regulation, with full traceability and measurable quality for finance, risk and compliance teams.
- [DORA Assessment — vendor and ICT third-party readiness](https://intellectumlab.com/dora-assessment.html): Structured DORA readiness assessment for financial entities and ICT third-party service providers.

## How we engage

- [How we engage — Snapshot · Diagnostic · Build · Embedded Run](https://intellectumlab.com/pricing.html): Four-step, fixed-fee engagement with one accountable senior architect from start to finish. "Done" is defined against an external standard (e.g. NCA validation, ESMA schema) as a written acceptance test in the SOW.
- [Book a 15-minute architecture review](https://intellectumlab.com/review.html): Personalised AI compliance architecture review for a specific institution and stack.

## Track record

- [About Intellectum Lab](https://intellectumlab.com/about.html): FSQS Registered Supplier (Hellios, UK & Ireland + Northern Europe), EU Commission TWG6 Expert, AI Chamber CEE member, TWG6 / AI Chamber affiliations, Baia Mare / FSQS-UK&I dates.
- [Case study — AI Control under DORA at an EU financial services firm](https://intellectumlab.com/case-eu-financial-services.html): GenAI control layer with per-request audit trails, guardrails and exit readiness under DORA.
- [Case study — Investment analysis at scale](https://intellectumlab.com/case-investment-analysis.html): Applied AI for investment analysis with governance and audit trail.

## DORA Library

- [DORA Library — index of primary DORA sources](https://intellectumlab.com/dora-library.html): Human-readable index of the DORA regulation, RTS, ITS, TIBER-EU guidance, and ESA opinions we work against.
- [DORA Regulation (EU) 2022/2554](https://intellectumlab.com/dora/dora-regulation-eu-2022-2554.html)
- [DORA Amending Directive (EU) 2022/2556](https://intellectumlab.com/dora/dora-amending-directive-eu-2022-2556.html)
- [ICT Risk Management RTS (EU) 2024/1774](https://intellectumlab.com/dora/ict-risk-management-rts-eu-2024-1774.html)
- [RTS on ICT Risk Management — final report](https://intellectumlab.com/dora/rts-ict-risk-management-final.html)
- [RTS on ICT Third-Party Policy](https://intellectumlab.com/dora/rts-ict-third-party-policy.html)
- [RTS on Subcontracting (EU) 2025/532](https://intellectumlab.com/dora/rts-subcontracting-eu-2025-532.html)
- [RTS on ICT Incident Classification & Reporting](https://intellectumlab.com/dora/rts-ict-incident-classification-reporting.html)
- [RTS on Major Incident Classification Thresholds](https://intellectumlab.com/dora/rts-ict-incident-classification-major-thresholds.html)
- [RTS on ICT Incident Reporting — Content & Timelines](https://intellectumlab.com/dora/rts-ict-incident-reporting-content-timelines.html)
- [RTS/ITS on Major Incident & Cyber Threat Reporting](https://intellectumlab.com/dora/rts-its-major-incident-cyber-threat-reporting.html)
- [ITS on Incident Reporting Templates](https://intellectumlab.com/dora/its-incident-reporting-templates.html)
- [ITS on Register of Information Templates (EU) 2024/2956](https://intellectumlab.com/dora/its-register-information-templates-eu-2024-2956.html)
- [Register of Information Templates — ITS final report](https://intellectumlab.com/dora/register-information-templates-its-final-report.html)
- [CTPP Designation Criteria RTS (EU) 2024/1502](https://intellectumlab.com/dora/ctpp-designation-criteria-rts-eu-2024-1502.html)
- [List of designated CTPPs](https://intellectumlab.com/dora/list-designated-ctpps.html)
- [RTS on Oversight Harmonisation (EU) 2025/295](https://intellectumlab.com/dora/rts-oversight-harmonisation-eu-2025-295.html)
- [RTS on Joint Examination Teams (EU) 2025/420](https://intellectumlab.com/dora/rts-joint-examination-teams-eu-2025-420.html)
- [Oversight — cooperation and information exchange](https://intellectumlab.com/dora/oversight-cooperation-information-exchange.html)
- [Oversight Fees RTS (EU) 2024/1505](https://intellectumlab.com/dora/oversight-fees-rts-eu-2024-1505.html)
- [ESAs opinion on RoI ITS rejection (JC 2024/75)](https://intellectumlab.com/dora/esas-opinion-roi-its-rejection-jc-2024-75.html)
- [EU Hub Incident Reporting — feasibility](https://intellectumlab.com/dora/eu-hub-incident-reporting-feasibility.html)
- [RTS on Threat-Led Penetration Testing (TLPT)](https://intellectumlab.com/dora/rts-threat-led-penetration-testing-tlpt.html)
- [RTS on TLPT — final report](https://intellectumlab.com/dora/rts-tlpt-final-report.html)
- [TIBER-EU Control Team Guidance](https://intellectumlab.com/dora/tiber-eu-control-team-guidance.html)
- [TIBER-EU Purple Teaming Guidance](https://intellectumlab.com/dora/tiber-eu-purple-teaming-guidance.html)
- [TIBER-EU Service Provider Procurement Guidance](https://intellectumlab.com/dora/tiber-eu-service-provider-procurement-guidance.html)
- [Guidelines on Cost/Loss Estimation](https://intellectumlab.com/dora/gl-cost-loss-estimation.html)
- [ECB Cloud Outsourcing Guide 2025](https://intellectumlab.com/dora/ecb-cloud-outsourcing-guide-2025.html)

## Optional

- [Privacy & cookie policy](https://intellectumlab.com/privacy.html): How Intellectum Lab (Gazolin Production SRL) collects, uses and protects personal data. GDPR, UK GDPR, CCPA and LGPD aligned.
- [Sitemap](https://intellectumlab.com/sitemap.xml)

## Contact

- Email: viktor@intellectumlab.com
- Site: https://intellectumlab.com
- Founder: Viktor Andriichuk — Founder & Lead AI Architect
- Operating entity: Gazolin Production SRL