About

About

I am a Cape Town-based builder and practitioner in AI governance and privacy. I turn policy into enforced, auditable systems, and write clearly about why most organisations are failing to do the same.

Elvis Tapfumanei

Cape Town · Building globally

Based in Cape Town, South Africa. Building from Cape Town. Thinking globally.

IAPP CIPT(In progress)IAPP AIGP(In progress)NIST AI RMFISO 42001EU AI ActPOPIAGDPR

Builder and practitioner in AI governance and privacy

I am a systems builder at the intersection of technology, governance, and execution.

Everything I do, product work, delivery work, and writing, is the same discipline expressed in different mediums. I am building toward an expertise position that is rare: someone who makes governance enforceable at the technical level, not someone who only writes policies or recommends frameworks.

Colloxa is the proof. It is AI governance infrastructure: the control-and-evidence layer that turns what NIST AI RMF, ISO 42001, and the EU AI Act require into systems that actually run. CIPT and AIGP are the credentials. The Control Plane is the public record of a practitioner thinking out loud, not a thought leader performing expertise. Delivery at Lula is the operational credibility that keeps the work from reading like theory.

What I believe

Execution is the proof. Policy and frameworks only matter if they produce enforced, auditable outcomes in real systems. I build toward that standard in products and in the organisations I work with.

The space is crowded with consultants who write governance policies and advisors who recommend frameworks. I am the person who understands what a framework requires of a system, then goes and builds that system. Most people with governance expertise cannot build. Most people who can build do not have governance depth. I am building toward both.

I am Africa-based, building for a global problem. That is a credibility signal for jurisdictional complexity, infrastructure constraints, and operational realism. As AI regulation matures across African markets, I intend to have been building in that context from the beginning.

Based in Cape Town, South Africa

Open to Colloxa pilot conversations, governance and delivery advisory work, writing commissions

Contact me

Expertise position

Infrastructure, not frameworks alone

The combination that compounds over time: a product, two credentials, a publication, and a delivery track record.

Colloxa

Proof of practice. Governance infrastructure for regulated enterprises: real-time enforcement and regulator-ready evidence, not slide decks.

CIPT and AIGP

Credentials in progress. Privacy and AI governance depth that informs what gets built, not only what gets documented.

The Control Plane

Public intellectual record. Essays from someone doing the work: enforcement, evidence, and why most organisations are further behind than they think.

Lula

Operational credibility. Delivery leadership in a regulated fintech, where execution quality is tied to business and regulatory outcomes.

Credentials and toolkit

Governance, delivery, and craft

Certifications and tools that support building and operating enforceable systems in regulated environments.

Certifications

  • IAPP CIPT, Certified Information Privacy Technologist (in progress)
  • IAPP AIGP, Artificial Intelligence Governance Professional (in progress)
  • CMI Level 6 Diploma in Professional Management and Leadership Practice
  • BCS Practitioner Certificates in Business Analysis Practice
  • BCS Requirements Engineering Certificate
  • BCS Business Process Modelling Certificate
  • Product School Certifications (Strategy, Roadmapping, Product-Led Growth)
  • Certified ScrumMaster (Scrum Alliance)
  • Google Cloud, Innovating with Data
  • Diploma in Communication and Journalism

Tools I use

Strategy and delivery

AsanaConfluenceHubSpotJiraMonday.comMiro

Data and analytics

DataHogMixpanelPostHogSentrySnowflake

Development and cloud

CursorFigmaFirebaseGitHubGoogle CloudNext.jsReactSupabaseVS Code

Design and content

CanvaMediumNotionWordPress

Follow the work.

Colloxa for enforceable governance. The Control Plane for the public record. Delivery at Lula for operational proof.