ABOUT DATAAIGIS
DataAigis is a data and AI governance company for highly regulated industries. Not AI bolted onto compliance, but the whole data security and compliance workflow rebuilt with agentic AI. Lawyers and engineers work on one team, from regulatory interpretation to architecture remediation to ongoing compliance.
Clients ultimately need one answer: can we do this, and what exactly do we change? Licensed lawyers interpret multi-jurisdiction requirements and produce work that can be signed and sealed; engineers read architectures, cloud configurations and real data flows. Compliance comes down to three things: which policies changed, which systems changed, and what evidence was kept. The first two take engineering, the third takes ongoing operations, so legal, technical and operations sit on one team.
Who we serve
Where is your data, who accesses it, on what basis, and what evidence can you produce when something goes wrong? Triggers and jurisdictions differ, but every answer comes down to the same three things: which policies changed, which systems changed, and what evidence was kept.
Finance & insurance · Automotive · Energy · Public sector
Regulators set firm deadlines and inspect in depth. The focus is data classification, risk assessment and closed-loop remediation, with deliverables that go straight into regulatory filings.
Automotive · Pharma · Manufacturing · Insurance · Technology
Headquarters frameworks and Chinese regulation both need answers, through regulatory inspections and group audits alike. The focus is cross-border transfer, remote access and localization, delivered bilingually in Chinese and English.
Smart hardware · SaaS · Cross-border e-commerce · Automotive · Embodied AI
Multiple jurisdictions stack up, with fines of up to 4% of global turnover. The focus is multi-jurisdiction assessment, architecture change and evidence retention. Getting the architecture right before launch costs an order of magnitude less than fixing it afterwards.
Law + engineering
What a compliance assessment really has to answer is a chain of concrete technical and business choices. The answers shape system architecture, not just a report.
Data
Which cloud and region host the app back end? How is data residency locked? Do backups, logs or disaster-recovery copies quietly cross borders?
Access
Does R&D in China need production access? VPN, IAM or remote desktop? Which method will the regulator accept, and how is it evidenced?
Components
Can domestic SDKs be used? Can large models be called? Which third-party payment, maps, push and customer-service APIs should you pick?
People
Is the support centre in China or overseas? Do tickets carry personal data? Do outsourcers and operators count as data recipients?
Hardware
Are faulty devices scrapped locally or shipped back to the factory? Do the logs and caches inside a returned unit count as data leaving the country?
Evidence
Access control, operation logs, encryption and residency settings. Once a regulator or a lawsuit starts, evidence cannot be produced after the fact.
The answers determine how systems are built and run, which is why lawyers and engineers answer them together.
How our data compliance consulting worksCORE CAPABILITIES
We connect policies, data assets, system controls, and AI applications around real business scenarios and an operating model that can be sustained.
Manage enterprise data security and cross-border compliance through Classification, Cross-border Monitoring, Smart Assessment, and DSPM.
Govern AI assets, risk, compliance assessment, and the full use-case lifecycle in one operating loop.
Build enterprise agent applications through knowledge bases, agent building and human-in-the-loop review.
How we deliver
Whether gap analysis and remediation advice can actually be implemented is the biggest dividing line in this industry: regulatory interpretation, field-level scanning, architecture-level advice, re-assessment after fixes, traceable evidence.
Law firms tell you whether there is a risk. We help you prove you are fine once the fixes are in.
How we deliver
Interviews, data mapping, gap analysis, remediation support, and re-assessment with evidence retention. 20+ standard deliverables in Chinese and English. The system takes on repetitive work, compliance experts focus on judgment and sign-off, and licensed lawyers review every deliverable.
01
Separate interviews with business, product, IT and legal teams to map the business architecture, system inventory and real data flows.
02
Inventory data assets and tag classification levels; identify cross-border paths, third-party components and sensitive fields.
03
Compare requirement by requirement against the target jurisdictions, with risk ratings, legal basis and remediation priority.
04
Policy and privacy document sets plus architecture and cloud configuration baselines. What we can change for you, we change; the rest comes as an executable plan.
05
Verify and retest the fixes, index the evidence, and assemble a pack that answers inspections and inquiries directly.
Service stages
Stage one gets you right; stage two keeps you right. Most risk comes from a missing stage two. The stages can be bought separately or bundled as an annual service.
Founding team
A core team with nearly two decades of enterprise experience, led directly by the founders.
Chairman
EMBA, Tsinghua PBC School of Finance; EMBA, CEIBS; master's in computer science, Shanghai Jiao Tong University. Former Vice President and CTO of Digital China; founder of Shanghai Yunjiao, acquired by Digital China for RMB 360 million; partner at Xiaomiao Langcheng Fund; author of a book on cloud management.
Founder, CEO & CTO
Master's, University of Manchester; 20 years in IT R&D. Leads agent architecture and agent engine R&D for the DataAigis platform (agent orchestration, RAG, multi-model routing). Former General Manager of the Data Platform Division at Digital China, R&D General Manager at Shanghai Yunjiao, and Senior Manager at Microsoft.
Co-founder, Head of Sales
Information engineering graduate of Nanjing University of Aeronautics and Astronautics, with 20+ years across OT and IT industrial automation, cybersecurity, data security and sales. Leads sales strategy and team management. Former General Manager of Data Security at Jinyuan Power, Head of Key Accounts at Emerson Industrial Automation China, and external cybersecurity and data security expert for PwC.
Founder, COO
LL.M., UC Berkeley School of Law, with 20+ years as a compliance lawyer and in-house counsel. Leads the translation of legal requirements into structured rules that agents can execute. Admitted in China and in New York and California. Former China legal representative and Asia-Pacific Legal Director at Palo Alto Networks.
Co-founder, CPO
Master's, Shanghai Jiao Tong University, with 10+ years in security and AI product ecosystems. Leads product strategy and ecosystem partnerships, and has built a compliance SaaS team from zero to one. Former head of product strategy and ecosystem at Oracle, Nutanix and River Security.
Credentials
COMPANY ENTITIES
DataAigis Info Tech (Shanghai) Co., Ltd. supports mainland China products and projects. DataAigis Information Technology (Hong Kong) Co., Limited supports outbound and cross-border engagements.
