The Company

A European company for European AI governance.

OneCompliant s.r.o. is registered in the Slovak Republic and built EU-first: AI governance, security, and compliance for regulated European enterprises — designed and delivered from inside the regulatory environment it serves. OneCompliant methodologies and governance capabilities — the AI Risk Assessment (OASAT), AI Governance Architecture (OASF) and AI Awareness Programme (OASAP) — have been deployed within a tier-one European telecommunications environment. AYJIS extends this operating model into runtime enforcement.

OneCompliant™ is founder-led, platform-enabled, and designed to scale through specialised delivery partners. Clients work directly with senior expertise on every engagement — supported by documented methodology, reusable control libraries, and repeatable governance processes so delivery does not depend on one individual.

OneCompliant s.r.o. Registered in the Slovak Republic EU-based · EU-focused Deployed within a tier-one European telecom

Kevin Wade Stout — Founder, OneCompliant s.r.o.

Available for briefings

Founder & Managing Director

Kevin Wade Stout

Founder & Managing Director — OneCompliant s.r.o.

Kevin Wade Stout is a cybersecurity and AI security executive with more than two decades of experience across multinational enterprises, telecommunications, pharmaceuticals, aviation, defence, and government. He is the Founder and Managing Director of OneCompliant s.r.o. and Chief Architect of the OneCompliant platform, where he has developed the AI Governance Architecture (OASF), AI Risk Assessment (OASAT), AI Awareness Programme (OASAP), and AYJIS runtime governance and enforcement.

CISM — Active DoD / DHS US Air Force Top Secret / SCI EU Permanent Resident Based in the European Union

Request a Briefing LinkedIn — 12,800+ connections

Career & Experience

20+ years at the front line of regulated enterprise security.

Kevin's career spans global enterprise security leadership, defence and government, and AI security at operational scale. Every product and service OneCompliant delivers is grounded in this lived experience — not theory.

Built from decades of operational security leadership in organisations where security decisions affected patient safety, national infrastructure, regulatory compliance, and business continuity.

2024 — Present

OneCompliant s.r.o.

Founder & Managing Director — Based in the European Union

Founded OneCompliant s.r.o. to help organisations adopt artificial intelligence securely, responsibly, and at scale. Developed proprietary methodologies including the OneCompliant AI Security Framework (OASF), AI Security Assessment Toolkit (OASAT), AI Security Awareness Programme (OASAP), and AYJIS — an emerging AI governance and control platform providing policy enforcement, risk management, auditability, and runtime governance for enterprise AI environments.

OASFOASATOASAPAYJISAI Governance

2023 — Present

Leading European Telecommunications Operator

Embedded AI Security Executive — Slovakia

Embedded daily as AI Security Executive at one of Europe's leading telecom operators. Production gate authority — no AI capability proceeds to cloud or production without Kevin's security recommendation. Delivered the Agentic AI and Digital Twins security briefing directly to the CISO, which was adopted as the operational standard. OASAP awareness programme adopted across the organisation in multiple languages and published on the operator's official learning management platform.

AI SecurityCISO AdvisoryNIS2OASAP DeployedDigital Twins

Previous Role

Merck KGaA

Head of Global Information Security

Served as Head of Global Information Security at Merck KGaA, leading a global cybersecurity organisation of more than 60 professionals responsible for Security Operations, Incident Response, Vulnerability Management, Application Security, Security Engineering, Governance, Risk & Compliance, and security services supporting business operations across Europe, Asia-Pacific, the Americas, and the Middle East.

Head of Global InfoSec60+ person orgGxPPharmaceuticals60+ countries

Previous Roles

US Department of Defense / Department of Homeland Security

Senior Security & Intelligence Roles

Supported U.S. government and defence missions including assignments supporting the Department of Defense and Department of Homeland Security in the United States, Afghanistan, and Africa. These experiences provided a foundation in operational security, cyber defence, incident response, and risk management under high-pressure conditions. Top Secret/SCI clearance held.

DoDDHSTop Secret/SCICritical InfrastructureIntelligence

Foundation

United States Air Force

Military Service — Security & Operations

Military service in the United States Air Force — providing the operational discipline, security mindset, and mission-critical standards that underpin Kevin's approach to enterprise security and AI governance. The Air Force foundation shaped the conviction that security controls must be operational, not theoretical.

US Air ForceMilitarySecurity Operations

Why OneCompliant

The problem was impossible to ignore.

"AI security is not primarily a technology challenge. It is a governance, risk management, and business leadership challenge. I have spent more than two decades building security in environments where failure has real consequences — lives, national security, regulatory sanctions. When AI arrived, organisations adopted it at speed with zero governance and zero enforcement. OneCompliant exists to close that gap — with controls that work in the real world, not just in framework documents."

Operational Experience

OneCompliant's frameworks and products are built from real enterprise deployments — not academic models. OASF controls are grounded in deployment and security decision-making within regulated enterprise environments.

CISO Perspective

Kevin has led global information security at enterprise scale. OneCompliant speaks the language of the CISO because it was built by someone who has carried that responsibility — for a problem that every CISO in a regulated industry is facing right now.

EU Operational Base

Registered and operating in the Slovak Republic as an EU company. Working daily in EU regulated industries. The EU AI Act is not a distant regulation — it is the operating environment OneCompliant was built for.

Areas of Expertise

The disciplines that built OneCompliant.

AI Governance & AI Security

Runtime AI governance, policy enforcement, AI risk assessments, prompt injection defence, and AI governance programme development across regulated industries.

Regulatory Compliance

EU AI Act, NIST AI RMF, ISO 42001, NIS2, GDPR, DORA, ISO 27001 — practical implementation across the frameworks regulated enterprises are accountable to.

Critical Infrastructure & Telecom

Security of operational technology, national critical infrastructure, telecommunications security, and NIS2 compliance where system failure has safety consequences.

Enterprise Security Leadership

CISO advisory, enterprise security strategy, board and executive stakeholder engagement, security transformation, and global security programme management.

Security Operations & Response

Security operations centres (SOC), incident response, threat detection, vulnerability management, and cyber defence under high-pressure operational conditions.

Cloud Security & Zero Trust

Cloud security architecture, Zero Trust implementation, DevSecOps, identity security, and application security across multinational enterprise environments.

Board & Executive Advisory

Board-level security governance, executive stakeholder engagement, security transformation leadership, and organisational maturity improvement at global scale.

Defence & Government

U.S. DoD and DHS assignments in the United States, Afghanistan, and Africa — operational security, cyber defence, and risk management under mission-critical conditions.