Independent AI advisory · on your side

From AI vision to impact

Zapote is your experienced AI advisory on the client side, with real technical depth. We define vision, priorities and architecture with you, prepare sound build-vs-buy decisions and support delivery: with your team, your vendors or ours.

  • No vendor commissions · transparent interests
  • Strategy to architecture from one source
  • Project start typically 2–4 weeks after commissioning, depending on scope and current capacity
Your AI journey with Zapotein progress
  1. 01Vision & prioritiesWhere should AI make a difference?Strategy
  2. 02Opportunities & roadmapWhat first, what never?Strategy
  3. 03Solution design & architectureHow do we build it right?Design
  4. 04Build · Buy · PartnerWho is best placed to deliver it?Decision
  5. 05Delivery & quality gatesSteering all the way to productionDelivery
Your in-house teamYour vendorsZapote team
Where are you right now?

Every AI initiative starts from a different place.

Pick the situation that fits best. You will see where we typically start and what you have in hand after a few weeks.

Recommended starting point

AI Vision & Roadmap Sprint

2–4 weeksCEO · CIO · COO

Together with management and business units, we translate your corporate goals into an AI vision with clear priorities, rather than a list of tools.

  • AI target picture and focus areas, aligned with management
  • Prioritized 12–24-month roadmap with business cases
  • Decision paper: budget, roles, first delivery steps
Discuss the sprint
Recommended starting point

AI Opportunity Discovery

2–3 weeksBusiness units · Digital · IT

We collect, structure and assess your ideas by value, feasibility, data availability and risk, and often find the opportunities nobody has written down yet.

  • Opportunity map with transparent scoring
  • Top 3 candidates with business case and feasibility check
  • Clear recommendation for the first use case, including stop criteria
Discuss discovery
Recommended starting point

AI Process Automation Assessment

2–3 weeksCOO · Operations · Business unit

Not every process needs an AI agent. We assess where classic automation is enough, where AI should assist people and where controlled autonomy creates real value.

  • Process selection by effort, value, data availability and risk
  • Target process with a clear split of tasks between human and machine
  • Business case and recommendation for the first pilot
Discuss the assessment
Recommended starting point

Pilot-to-Production Review

2–3 weeksCTO · CIO · Head of Digital

We review your pilots for value, architecture, data quality, evaluation and operability, and tell you honestly which ones should scale and which should not.

  • Portfolio assessment: scale, sharpen or stop
  • Production-readiness gaps and quality gates
  • Delivery plan, with delivery steering by us if you wish
Discuss the review
Recommended starting point

Product / Process Vision & Solution Design

3–4 weeksProduct · Operations · CTO

We design what your product or process looks like with AI: from the perspective of users, data and architecture. The result is an MVP scope your team can build.

  • Product or process vision with measurable success criteria
  • Solution design and target architecture, including clickable mock-up or prototype
  • Delivery backlog and build-vs-buy recommendation
Discuss your initiative
Recommended starting point

Governed Agentic AI Blueprint

2–4 weeksCIO · CISO · Business unit

Agents that operate systems and prepare decisions need more than a good prompt. We clarify where agents make sense, how autonomously they may act and which controls stand in front of them.

  • Assessment of how well your processes suit agents
  • Target architecture with identity, policies, human oversight and audit
  • Recommendation for a first production pilot
Discuss the blueprint
Recommended starting point

Build vs. Buy vs. Partner & Vendor Review

2–3 weeksProcurement · IT · Business unit

We assess proposals, platforms and agencies with technical rigor. We receive no commissions or referral fees from vendors. We disclose our own delivery proposals.

  • Evaluation matrix, proposal comparison and reference check
  • TCO, lock-in risk and time to value compared
  • Decision paper and negotiation arguments
Discuss the evaluation
Recommended starting point

Fractional AI Lead

typically 3–12 months, depending on the initiativeTypically 1–3 days per week, depending on the phase

External technical leadership of agreed AI initiatives: We coordinate technical workstreams with your teams and vendors and build up your internal capability.

  • Develop AI roadmap, portfolio and budget planning, with the decision on your side
  • Safeguard architecture and quality decisions
  • Define capability needs and role profiles, support selection from a technical perspective, hand over to your internal leadership
Discuss the mandate
Recommended starting point

Architecture & Governance Review

2–3 weeksCIO · CISO · Risk & Compliance

Governance belongs in the architecture, not in a slide deck. We review how your AI systems handle identity, permissions, data flows, human oversight and traceability.

  • Review report with traffic-light rating and prioritized actions
  • Technical assessment against requirements under the EU AI Act, GDPR and, where relevant, DORA defined by your legal and data protection advisors
  • Governance-by-design blueprint for future initiatives
Discuss the review
Services

Nine things you bring us in for.

From the first vision to steering delivery, from one source. The same person who shapes the strategy with you also owns architecture, vendor selection and quality. There is no gap between slide and code.

01 Vision & strategy

Define AI vision and priorities

We translate your corporate strategy into an AI vision that management, business units and IT stand behind together, with clear priorities and the courage to leave things out.

Questions we answer

  • Where does AI create a real competitive advantage?
  • What is a must, what is nice to have?
  • Which capabilities do we need in-house?

Outcome

  • AI target picture & focus areas
  • Prioritized roadmap
  • Management decision paper
02 Vision & strategy

Identify relevant AI opportunities

Structured discovery with your business units: we find the use cases with measurable value and assess them honestly for feasibility, data availability and risk.

Questions we answer

  • Which processes and products benefit most?
  • Are our data and systems good enough?
  • What is realistic in 3, 6, 12 months?

Outcome

  • Opportunity map with scoring
  • Business cases for the top candidates
  • Recommendation for the first use case
03 Vision & strategy

Develop a product or process vision

What does your product or process look like when AI is used well? We design the target picture from the perspective of users, business and technology, and cut it into deliverable steps. This includes automating existing processes with AI.

Questions we answer

  • Which problem do we solve, and for whom?
  • Where does AI work, where does a human decide?
  • How do we measure success?

Outcome

  • Product / process vision
  • User journeys & target process
  • MVP scope & KPIs
04 Design & decision

Define solution design and AI architecture

We design an architecture that fits your IT landscape, can be operated securely and does not break with the first model change. We prototype ourselves where it speeds up decisions. This includes agentic AI with identity, policies and human oversight.

Questions we answer

  • Which models, platforms and data?
  • Cloud, private cloud or sovereign?
  • How do we safeguard quality, cost and security?

Outcome

  • Target architecture & data flows
  • Security & governance concept
  • TCO estimate, prototype if needed
05 Design & decision

Decide build vs. buy vs. partner

Build it yourself, buy standard software or deliver with a partner? We make the decision transparent: with a robust TCO model. We disclose vendor ties and our own commercial interests.

Questions we answer

  • What differentiates us, what is commodity?
  • What does it really cost over 3 years?
  • How large is the lock-in risk?

Outcome

  • Decision matrix & TCO comparison
  • Risk and dependency analysis
  • Clear, reasoned recommendation
06 Design & decision

Assess internal teams or external vendors

Can your team do it? Will the agency deliver what it promises? We assess capabilities, proposals and solutions with technical rigor, so you start with the right crew.

Questions we answer

  • Which skills are missing in-house?
  • Which vendor fits technically and culturally?
  • Are proposal and effort plausible?

Outcome

  • Capability assessment
  • Vendor shortlist & evaluation matrix
  • Recommendation for team build-up or sourcing
07 Delivery & steering

Review architecture, quality and governance

An independent outside view before a system goes into production or budget is scaled. We review code, architecture, evaluation, security and compliance readiness.

Questions we answer

  • Is the system production-ready?
  • How do we measure quality and hallucinations?
  • Are controls & evidence sufficient?

Outcome

  • Review report with traffic-light rating
  • Quality gates & eval concept
  • Prioritized list of actions
08 Delivery & steering

Steer delivery on the client side

We sit on your side of the table. We coordinate agreed technical workstreams with your teams and vendors and make progress and risks visible.

Questions we answer

  • Are we on track for time, budget and quality?
  • Is what was agreed actually being built?
  • Which decision is due now?

Outcome

  • Delivery governance & milestones
  • Acceptance & quality gates
  • Transparent management reporting
09 Delivery & steering

Fractional AI Lead or independent advisor

External technical leadership of agreed AI initiatives, or a sparring partner for executive management and the board, within the agreed scope.

Questions we answer

  • Who owns AI in our organization?
  • How do we build an AI team?
  • How do we avoid costly wrong decisions?

Outcome

  • External technical leadership of agreed initiatives
  • Operating model & capability building
  • Planned handover to internal leadership
Operationalize

You decide who builds.
We support architecture, quality and delivery.

Strategy without delivery stays on the slide. That is why we see your AI initiatives through to production, in the model that fits your organization.

With your in-house team

Your team

builds and operates
  • Development, integration and operations
  • Domain knowledge and process ownership
  • Grows its AI capability with every project

Zapote

supports, enables and reviews
  • Architecture, technical guardrails and code reviews
  • Coaching, pairing and enablement programs
  • Evaluation, quality gates and production readiness

Ideal if you want to build AI as an in-house capability. The goal is that your team gradually no longer needs us.

With your vendors

Agency / system integrator

delivers the build
  • Development according to the agreed architecture
  • Scalable capacity and specialist know-how
  • Delivery against clear acceptance criteria

Zapote

represents your interests
  • Vendor selection, statement of work and proposal review
  • Delivery steering, reviews and acceptance
  • Early warning on quality, cost and schedule

Ideal when capacity is sourced externally. You get a technically versed advisor on your side of the table.

With the Zapote team

Your organization

brings the goal and domain knowledge
  • Product owner and domain contacts
  • Access to data and systems
  • Decisions at the milestones

Zapote

delivers end to end
  • Technically led by Oscar. Depending on scope, an agreed team from our network supports delivery.
  • Prototype, production pilot and integration
  • Documented handover to your operations

Ideal for fast results without an AI team of your own. Zapote delivery is one option. We compare it with alternatives and explain our recommendation.

How we work together

Start small. Prove impact. Then scale.

No large project on speculation. You start with a clearly scoped entry and decide afterwards how to continue.

1

Intro call

30 minutes · free of charge

We understand your starting point, goals and constraints. You get an honest assessment, even if it is: “You don’t need us for this.”

2

Focused entry

2–4 weeks · fixed scope

Vision & Roadmap Sprint, Opportunity Discovery or Architecture & Vendor Review: clearly scoped, with a fixed outcome and low risk for you.

You get: a documented basis for decisions for management and relevant control functions.

3

Delivery support

3–12 months

As Fractional AI Lead, delivery coordination or Architecture & Quality Assurance, we take on technical leadership of delivery for agreed initiatives, with your team, your vendors or ours.

Shared goal: putting AI solutions into productive use – with agreed quality gates, governance and a documented handover.

4

Enable & hand over

ongoing

We build internal capability, processes and roles until your team or your new Head of AI takes over. Afterwards we stay on board as advisor if you wish.

You get: a sustainable AI capability of your own instead of dependence on consultants.

2–4 weeks

AI Vision & Roadmap Sprint

From “we should do something with AI” to a prioritized, fundable roadmap.

  • AI target picture & priorities
  • Opportunity map
  • Roadmap & business cases
2–3 weeks

Architecture & Vendor Review

Independent review of architecture, vendors and build vs. buy, before budget is committed.

  • Architecture & quality review
  • Vendor evaluation
  • Build / buy / partner
project-based

AI Delivery

From prototype to production pilot: with your team, your vendors or the Zapote team.

  • Solution design
  • Production pilot
  • Quality gates & handover
Why Zapote

Senior expertise with technical depth, without consulting overhead.

You have alternatives: large consultancies, AI agencies, freelancers or an internal hire. These criteria help you assess any offer, including ours.

Selection criteria for AI advisory: Zapote and questions to ask other providers
CriterionZapoteCheck with other providers
Senior involvementTechnically led by OscarWho actually works on the project?
Strategy and architectureFrom a single source, from vision to code reviewWho owns strategy and technical delivery, and who connects the two?
Transparent vendor selectionNo vendor commissions; own delivery interests disclosedWhich partnerships and compensation arrangements exist?
Time to startProject start typically 2–4 weeks after commissioning, depending on scope and current capacityWhen and with whom does the project actually start?
Cost & flexibilityAgreed per projectWhat costs and commitments arise over the term?
Knowledge transferPart of the agreed scope, with the goal of building internal capabilityWhich handover and enablement is included?
Hiring a Head of AI internally: when does it make sense?Can make sense when permanent strategic and operational leadership tasks arise. Budget and time to fill the role need to be planned individually.Which role, budget and timeline fit your initiative?

Often the best solution is a combination: Zapote supports architecture and quality, a delivery partner implements, your internal leadership decides on priorities and resources, and your future Head of AI is onboarded.

Selected project experience

Experience that connects strategy and implementation.

Examples of technical work from Oscar’s professional career in leadership, CTO and engineering roles, including before his work at Zapote. These are not exclusively Zapote projects. Scope and goals for your project are agreed individually. We only name clients with their approval.

AI enablement · FinTech
Strategy & enablement

Work on AI strategy, governance, prioritization and an operating model. Supported teams through an AI champion program.

Data platform · HR Tech
Semantic search

Work on data quality computation and an architecture using semantic search.

Process automation · HR Tech
LLM classification

Development of an LLM-based classification system to automate manual workflows.

Project experience in
Financial Services & FinTechHealth Tech & MedTechHR TechIT & telecommunicationsManufacturingWholesaleLogisticsAviationAdTechDigital marketplacesVideo production
Governance by design

Trust is architecture, not a disclaimer.

Whether assistant, process automation or autonomous agent: we anchor security, quality and compliance in the architecture from the start. This gives you technical foundations for your approval processes and traceable operation. A particular focus is governed agentic AI: agents in which identity, permissions, policies and human approval are part of the architecture from the start.

Control outside the model

Identity, permissions and policies decide what AI may do. The model only proposes.

Measurable quality

Evaluation, tests and monitoring instead of gut feeling: quality gates before every release.

Implement regulatory requirements technically

We incorporate requirements under the EU AI Act, GDPR and, where relevant, DORA defined by your legal and data protection advisors into architecture, controls and documentation. Legal assessment and clearance remain with your legal and data protection advisors.

EU AI ActGDPRDORAData sovereignty
View the reference architecture for agentic AI
Governed agentic AI architecture An agent proposes an action. An independent control layer validates identity, permissions and policies. Human approval is added where required. Only allowed actions reach enterprise systems through controlled tools. Blocked actions are not executed. GOVERNED AGENTIC AI ARCHITECTURE Intelligence is separated from control. The model reasons. Identity, policies and enterprise controls determine what the agent is allowed to do. User / System Goal, request or event Agent / Orchestration Plans steps, manages state, proposes actions GOVERNANCE CONTROL PLANE Identity & Access Authentication · RBAC / ABAC Policy Enforcement LLM / Model Gateway Reasoning, language, classification, generation Knowledge & Memory Enterprise knowledge, RAG, context and process state Control Layer Validate identity, permissions & policies Action proposed BLOCKED Blocked: no execution CONDITIONAL APPROVAL Human approval, if required Allowed: execute through controlled tools Through the controlled tool / API layer Tool / MCP Layer Controlled APIs, least-privilege access Enterprise Systems CRM · ERP · Core apps CONTINUOUS CONTROLS Audit Tamper-protected audit logs Evals Quality & safety checks Observability Tracing · cost · behavior Human Oversight Risk-based approvals Security Secrets · isolation · DLP Every agent has an identity · Every action is policy-checked Autonomy is risk-based · Every decision is auditable
Schematic reference architecture: proposed actions are checked against permissions and policies before execution. Required human approvals complement these controls.
Action path of the governed agentic AI architecture An agent proposes an action. An independent control layer validates identity, permissions and policies. Human approval is added where required. Only allowed actions reach enterprise systems through controlled tools. Blocked actions are not executed. SCHEMATIC REFERENCE ARCHITECTURE Intelligence is separated from control. The action path from proposal to execution: User / System Goal, request or event Agent / Orchestration Plans steps, manages state, proposes actions Action proposed Control Layer Validate identity, permissions & policies Connected to the Governance Control Plane Rejection BLOCKED Blocked: no execution Conditional approval CONDITIONAL APPROVAL Human approval, if required Allowed: execute through controlled tools Through the controlled tool / API layer Tool / MCP Layer Controlled APIs, least-privilege access Enterprise Systems CRM · ERP · Core apps Every action is checked against policies. Blocked actions are not executed.
Schematic reference architecture: proposed actions are checked against permissions and policies before execution. Required human approvals complement these controls.
AI-generated portrait of Oscar Morillo Victoria
AI-generated portrait
Oscar Morillo Victoria
Founder & Managing Director, Zapote Ventures
EnglishDeutschEspañolFrançais
About Oscar

“For AI to work in practice, technology, priorities and technical leadership need to fit together.”

Oscar combines 12+ years of experience in software engineering and AI with executive strategy and production engineering. As Head of Business Unit Data & AI, as CTO of an AI consultancy and as co-founder & CTO of a digital health startup, he has built and led teams across AI, data, software and hardware.

He knows what a board meeting on AI strategy feels like, and what a deployment at two in the morning feels like. That is why he stays technically hands-on as an advisor: in architecture, prototyping, code reviews, evaluation and quality gates. At Zapote you work with him from the first call to the handover, with no junior layer in between.

  • 2026Head of Business Unit Data & AIFinTech group: data & AI strategy, governance, operating model, prioritization and steering model, use case workshops, team enablement
  • 2024–2026CTO (from 10/2024), AI consultancyFractional CTO mandates and AI projects in sectors including aviation, wholesale and manufacturing, as well as digital platforms; agentic AI architectures, AI strategies and roadmaps, build-vs-buy, TCO model; responsible for IT security policies and their technical implementation within the ISMS, including risk assessment and definition of technical security controls; contributed to audits within the company’s ISO 27001 certification process; technical lead on RFPs and proposals
  • 2021–2025Co-founder & CTO, digital healthAI-powered health product with hardware and a mobile app, built the technology and AI roadmap, built and led an internal and external technical team, architecture designed with GDPR requirements in mind
  • since 2021Founder, Zapote VenturesFractional AI Lead, technology advisory, development of AI strategies and roadmaps, design of agentic AI architectures and delivery of AI projects, including for international clients
  • 2014–2021ML Engineer to Team Lead Data ScienceMedTech, AdTech, marketplaces, HR Tech: development and operation of AI products
FAQ

Frequently asked questions

What exactly does Zapote Ventures do?

Zapote Ventures is an independent AI advisory based in Berlin. We work on the client side: from AI vision, priorities and roadmap through solution design, AI architecture and build-vs-buy decisions to steering delivery, with your team, your vendors or ours. The offer on this website covers technical AI advisory and implementation for businesses.

Are you an agency or a strategy consultancy?

Neither. We combine strategy with technical depth: the same person who shapes the vision with you also owns architecture, vendor selection and quality. Delivery can be done by your team, your vendors or us. What matters is what works best for you.

How does an engagement start?

With a free 30-minute intro call. This is typically followed by a clearly scoped entry of 2 to 4 weeks, such as an AI Vision & Roadmap Sprint or an Architecture & Vendor Review. If it fits, we then support delivery for 3 to 12 months, for example as Fractional AI Lead.

How independent are your recommendations?

We receive no commissions, partner bonuses or referral fees from vendors, platforms or agencies. We justify build vs. buy vs. partner decisions transparently with cost, risk, dependencies and time to value. If we recommend delivery by our own team, we disclose the reasons. Our own delivery creates a commercial interest; you make the sourcing decision.

Which organizations is Zapote a fit for?

Mid-sized companies and corporates with complex processes or digital products that want to use AI seriously but do not yet have established AI leadership or need an independent second opinion. Typical contacts are managing directors, CIO, CTO, COO, CDO or Head of Digital.

What does a Fractional AI Lead take on?

We take on agreed advisory and project services: roadmap, architecture, reviews and technical coordination, over an agreed period. Personnel, budget and operational decisions remain with you. Scope and working arrangements are agreed for each engagement.

When do we need an AI agent and when is automation enough?

Not every process needs an AI agent. We assess where classic, rule-based automation is enough, where AI should assist people and where controlled autonomy creates real value. If we do not recommend an agent, we say so openly.

Do you also advise on governed agentic AI?

Yes, it is a focus area. We design agents so that identity, permissions, policies, human oversight and audit are anchored in the architecture outside the model. The typical entry is a Governed Agentic AI Blueprint of 2 to 4 weeks.

Do you work remotely or on site?

Both. We are based in Berlin and work in Germany, Austria and Switzerland. Workshops and key milestones on site where useful, ongoing collaboration mostly remote.

Let’s talk about your AI vision.

30 minutes with Oscar Morillo Victoria: we discuss your starting point, your goals and the next sensible decision. You leave with an honest assessment, even if we don’t end up working together.

  • Free & no obligation
  • Directly with the founder
  • Reply usually within one business day