Project NK-26 · Personal practice of Dr. Nabeel A. Khan Issued 2026.06 · Rev C

Architect of defensible AI.

Est. 19992026 — twenty-five years in production

Helping regulated enterprises deploy AI they can defend: strategy, architecture, and governance, from the boardroom to production.

Dr. Nabeel A. Khan — Enterprise AI Architect & Governance Advisor
Sectors — Finance · Healthcare · Government
§ 00ProfileIn brief

A short introduction.

I'm Dr. Nabeel A. Khan, an enterprise AI architect and governance advisor with twenty-five years building data and machine-learning systems at scale, the last several focused on getting AI safely into production. I'm the founder of Simplification and Director, Solutions Architect at iSystematic.

My work sits at an unusual intersection: supervisory regulation, quantitative model risk, and Sharia governance as they apply to automated decisions. I've delivered national census platforms, FDA-cleared clinical AI, and regulated RAG and agentic systems, grounded in TOGAF, DMBOK, ISO 27001, and SOC 2, and informed by a PhD spanning neuro-marketing and computer science. Governance is not compliance. It is coherence made visible, and I architect it that way.

I write as a practitioner. My frameworks are built to be used, contested, and adapted, not merely read. If you're putting AI in front of customers, regulators, or a board, that's the conversation I'm here for.

§ 01ConsultingServices — 6 items

How I can help.

Independent advisory and hands-on architecture for organisations putting AI into production without breaking what governs them.

01

AI Strategy & Roadmap

From board ambition to a sequenced, costed plan. Use-case triage, build-vs-buy, ROI modelling, and a path your CFO will sign.

Boards · C-suite
02

RAG & Agentic Systems

Production retrieval, memory, and multi-agent orchestration: designed, built, and handed over with the guardrails that keep them safe.

Eng · Product
03

AI Governance & Compliance

Governance as architecture: model risk, data governance, and audit trails mapped to ISO 42001, SOC 2, ISO 27001, and regional regulators.

Risk · Compliance
04

Data Architecture & Modernization

Lakes, warehouses, and pipelines that hold up: DMBOK / TOGAF-grounded, cloud-native, and migrated with zero-downtime playbooks.

Data · Platform
05

Model Risk & Validation

Independent validation and assurance for deployed models, including Sharia dual-validation and regulated-industry sign-off.

Model validators
06

MLOps & Platform Engineering

The unglamorous substrate: CI/CD for models, observability, cost controls, and the discipline that keeps AI running after launch.

Infra · SRE

Engagements run as advisory retainers, fixed-scope reviews, or delivery programs via Simplification & iSystematic. → Book a consultation · Start a conversation

§ 02Track recordSelected — three continents

Twenty-five years, in production.

Enterprise AI and data architecture across government, healthcare, finance, and telecoms.

25+
Years architecting
AI & data
200+
Systems & databases
modernized
10M+
Citizen records on
national platforms
99.99%
Uptime on mission-
critical systems
2025 — nowFounder · SimplificationVancouver

AI transformation: compliance-grade LLMs, agentic decision engines, multi-cloud AI infrastructure.

2022 — nowDirector, Solutions Architect · iSystematicToronto

Leads distributed AI engineering teams; clinical NLP, RAG, and regulated-industry deployments.

2021 — 22Senior Architect, Core Services · AppleToronto
2018 — 21Senior Enterprise Architect · GoogleAtlanta
2014 — 18Chief Solutions Architect · Council of MinistersKuwait
2011 — 14Chief Data Architect · Ministry of PlanningKuwait
1999 — 11EarlierGCC

Zain, Tawasul Telecom, Z-Investment, Kuwait Insurance · data & solutions architecture.

40%Cut physician documentation time with fine-tuned clinical LLMs across 200+ clinics.
$5MAnnual ROI from EHR-integrated NLP, FHIR-native and HIPAA-compliant.
Class IIFDA SaMD clearance for an autonomous oncology trial-matching agent.
1.8MSubscribers served at 99.999% availability on telecom data platforms.

Full résumé & CV

§ 03Dispatches2024 — 2026

Dispatches.

Essays, articles, and field notes on cognition, systems, and the parts of AI that don't fit on a slide.

  1. May 2026The Cartography of Memory.On why retrieval-augmented generation is the first floor, not the building, of cognition at scale.6 min
  2. Mar 2026Costing the Agent.A field framework for pricing autonomous workflows when latency, hallucination, and trust are the line-items on your invoice.18 min
  3. Feb 2026What the Hippocampus Knows About Vectors.Six lessons from biological memory consolidation for the people building production embedding systems.26 min
  4. Nov 2025After the Funnel.Neuro-marketing, attention residue, and why the journey metaphor outlived its usefulness around 2017.14 min
  5. Sep 2025DMBOK Eats Your AI Roadmap.A defence of governance, in three acts, with notes on where TOGAF and ISO 27001 quietly do most of the work.21 min
  6. Jun 2025Notes on TOGAF in the Era of Agents.If the architecture is autonomous, what is the architect for? An answer in fragments.16 min

Read the latest dispatch · Subscribe to Field Notes

"The hard problem of enterprise AI is not the model. It is the institution the model is asked to remember on behalf of." From The Cartography of Memory
§ 04BooksAs author

Three books.

The new playbook on regional AI governance, plus two in progress: on systems, and on the people who decide what to do with them.

The Enterprise Playbook · 2026 AI
Governance
&
Compliance
Dr. Nabeel A. Khan
New release · 2026

AI Governance & Compliance Frameworks for the Middle East

The Enterprise Playbook

The first complete operating manual for governing AI inside Middle East financial institutions. It maps the region's regulatory reality (SAMA, CBUAE, SDAIA, DIFC, ADGM, QCB, AAOIFI) and Sharia governance into one discipline a chief risk officer can work from on a Monday morning. Built around the MESA Framework.

MESA FrameworkModel RiskSharia GovernanceHalal DataVendor Risk90-Day Stand-up

More information → · Order on Amazon → · Enterprise licence

Work in progress

Vector Intelligence

A practitioner's atlas for designing memory, retrieval, and reasoning into enterprise-grade systems. Written for the engineer who has just inherited a production RAG stack and the architect explaining it to a board.

In development

Work in progress

The Architect's Mind

A behavioural field guide to decisions made under enterprise constraint. Twelve case studies, four frameworks, and one uncomfortable conclusion about why most transformations fail at the meeting before the meeting.

In development

Other reading · also available on Amazon →

§ 05VenturesActive

What I'm building.

Products and platforms putting the methodology to work in the open.

Simplification

Live

My venture. Its flagship platform, ARIA, is an agentic-RAG intelligence layer that reads, understands, and acts on every customer message across WhatsApp, email, web chat, Telegram, Instagram and contact forms, unifying them into one thread per customer, with an MCP endpoint for Claude, ChatGPT, and OpenAI Agents.

Agentic RAGMCPOmnichannelCX
→ simplification.io

Maxim

Live

From iSystematic: the behavioral-intelligence layer for Claude. 91 specialist agents, 74 peer-reviewed behavioral frameworks, and 14 compliance frameworks, so every output cites a mechanism by author and year, clears an audit gate, and carries a confidence rubric you can hand to a regulator.

ClaudeBehavioral AIComplianceMCP
→ maxim.isystematic.com

FixIt

Live

An AI-matched home-services marketplace. It connects homeowners with vetted local contractors for renovations and repairs across ten cities in Canada, the US, and Australia. Describe the job in 60 seconds; matched pros reach out within hours.

AI MatchingMarketplaceWhatsAppMulti-city
→ fixit.iservices.io

Field Notes

In development

A forthcoming letter on enterprise AI, governance, and the things I notice between releases. Written for the people accountable for what AI decides. Launching soon.

NewsletterRSS
→ Join the early-bird list
§ 06LabExperiments — briefs L-01 … L-04

What I'm testing.

Early-stage experiments: ideas I'm prototyping in the open before they become products. Each has a working brief.

§ 07Field guideFAQ — structured data underneath

Questions I'm asked often.

Written to be quoted, by people and by answer engines.

TL;DR

Dr. Nabeel A. Khan is an enterprise, technology, and data architect: founder of Simplification, Director Solutions Architect at iSystematic, with 25 years delivering systems end to end across enterprise & data architecture, multi-cloud, IT operations, security, Agile, Oracle and ERP, now extending into production AI and AI governance.

What does Nabeel Khan do?
Dr. Nabeel A. Khan is an enterprise, technology, and data architect with twenty-five years delivering large-scale systems end to end, from initiation and architecture through build, integration, migration, and operations. He is the founder of Simplification and Director, Solutions Architect at iSystematic, working across enterprise & solution architecture (TOGAF, Zachman), data architecture & governance (DMBOK), multi-cloud (AWS, GCP, Azure), IT operations & service delivery, security & compliance (ISO 27001, SOC 2, zero-trust), Agile delivery, ERP and Oracle platforms; and, increasingly, production AI, RAG, and AI governance for banks, insurers, healthcare systems, and governments.
What is Nabeel Khan's background as an enterprise and data architect?
He has led the complete project lifecycle (initiation, planning, build, and operational handoff) on national and enterprise programs: a 10M-record register-based census platform, petabyte-scale cloud data-modernisation, zero-trust security across 200+ databases, and Oracle RAC/Data Guard estates at up to 99.999% availability. His toolkit spans TOGAF and Zachman, DMBOK data governance, AWS/GCP/Azure, ITIL service delivery, ISO 27001 and SOC 2, Agile/Scrum, and ERP & enterprise-systems implementation.
What is the difference between RAG and memory consolidation in AI systems?
Retrieval-augmented generation (RAG) fetches relevant documents at query time and conditions a model's answer on them: recall on demand. Memory consolidation is the slower process of deciding what an agent should retain, abstract, or discard over time, modelled on how the hippocampus replays and stabilises experience. RAG answers "what is relevant now?"; consolidation answers "what is worth remembering at all?" Production systems need both.
How do you deploy agentic AI inside a regulated enterprise?
Treat autonomy as a governed capability, not a feature. In practice that means first-class cost, trust, and observability primitives at the runtime layer; policy-as-code for every tool an agent may call; auditable memory; and a clear blast-radius boundary per agent. Under SOC 2 and ISO 27001, "spin up an agent" is a controls conversation; the architecture has to make those controls cheap to satisfy.
What books has Nabeel Khan written?
One published, two in progress. AI Governance & Compliance Frameworks for the Middle East (subtitled The Enterprise Playbook, 2026) is available on Amazon; it maps ISO 42001, ISO 27001, SOC 2, NIST AI RMF, and the EU AI Act onto UAE, KSA, and Qatar regulation. In development: Vector Intelligence, a practitioner's atlas for designing memory and retrieval into enterprise systems, and The Architect's Mind, a behavioural field guide to decisions made under enterprise constraint. All three are in the Books section above.
How can I book time with Nabeel Khan?
Use the booking calendar on the connect page to hold a 30-minute video slot for advisory work, an architecture review, or a press request, or send a note through the contact form. Replies arrive within two working days.
Where can I read Nabeel Khan's writing?
Dispatches (essays, articles, and field notes) are published here under Dispatches. The fortnightly Field Notes letter is in development; an early-bird list is open now. Topics range from cognitive architectures and enterprise data governance to neuro-marketing and the economics of autonomous workflows.
What is ARIA by Simplification?
ARIA is the flagship platform of Simplification, Dr. Khan's venture. It is an agentic-RAG customer-experience engine that automatically reads, understands, and acts on every customer message across WhatsApp, email, web chat, Telegram, Instagram, and contact forms, unifying them into one thread per customer, with a Model Context Protocol (MCP) endpoint so teams can run it from inside Claude, ChatGPT, or OpenAI Agents.
What is Maxim?
Maxim is a behavioral-intelligence layer for Claude, built by iSystematic. It adds 91 specialist agents, 74 peer-reviewed behavioral frameworks, and 14 compliance frameworks (GDPR, HIPAA, PCI-DSS, SOC 2, and more) so every AI output cites the mechanism it applied by author and year, clears an audit gate, and carries a confidence rubric. It installs on Claude Code, Desktop, and Web.
§ 08ConnectGet in touch

Let's talk.

Advisory, keynotes, architecture & governance reviews, expert-witness work, or a good question.

Open the connect page · find me elsewhere

Fin · Sheet 01