Why Spriggun?
Founder-led. From regulatory strategy to practical delivery - across AI governance, privacy, and web.
What we bring isn't just knowledge of the regulatory landscape - it's the experience of having implemented it, at strategic and delivery level, across AI, privacy, and web. That's what lets us build solutions that hold up when they meet reality.
Spriggun exists because the gap between regulatory advice and real-world delivery is where most organisations get stuck.
We bridge it - with senior regulatory expertise and practical delivery experience, across AI, privacy, and web.
There's a difference between advising on AI governance, GDPR compliance, or digital transformation - and having actually run it. Between recommending a cookie consent strategy and having built and shipped one that had to hold up to regulatory scrutiny. Between knowing the frameworks and knowing what breaks when you try to implement them at scale.
That's the experience we bring to every client engagement. Not at arm's length. Not from a generic playbook. From having sat in the roles our clients are in now - facing the same scrutiny, navigating the same trade-offs, and building the solutions they're now being asked to implement.
Who we are.
Emma Di iorio - CEO & Co-founder
Emma has over 15 years' experience across technology, banking, financial services, and consumer goods - including in-house roles as a senior lawyer, and early career work in international policy. She has led enterprise-wide AI governance and data protection programmes, held board-level accountability for data and privacy strategy across global organisations, and advised executive and regulatory stakeholders. Emma is a regular speaker at international AI and data forums, including the London AI Summit, Brussels AI Regulation Forum, and IAPP London Summit, and contributed a chapter to Shaping AI Without the Hype (2025).
Nick Bushby - CTO & Co-founder
Nick is a senior technologist with experience delivering enterprise-scale digital platforms across agencies and within a FTSE 100 technology company. He specialises in websites, performance, cookie and web compliance audits, and engineering-led delivery in complex, regulated environments. Nick brings deep technical expertise to the regulatory challenges Spriggun solves - designing and building digital products that are fast, accessible, and compliant from the ground up, not retrofitted after the fact.
What makes us different?
We sit at the intersection - genuinely
Regulatory and technical expertise rarely exist in the same team, let alone the same leadership. At Spriggun they do. We cover the full picture - from AI governance strategy and GDPR compliance through to technical implementation, web delivery, and WCAG accessibility - without the client having to manage the gap between them. For organisations navigating AI, privacy, and web compliance in a world where all three are increasingly interconnected, that matters.
We go end-to-end
Most advisory firms stop at the recommendation. Most delivery partners don't understand the regulatory context they're working in. We do both - from diagnosis and strategy through to implementation, assurance, and ongoing improvement. For organisations that need sustained senior input without a full-time hire, we also provide fractional support across AI governance and privacy - embedded in how you work, not parachuted in for projects. Going slow to go fast runs through everything we do. It's not a model. It's how we work with every client.
We bring genuine sector breadth
Our experience spans technology, financial services, FMCG, banking, insurance, travel-tech, workforce solutions, media, and more. The same regulatory challenge - EU AI Act readiness, GDPR compliance, a web estate audit - looks different depending on the sector, the operating model, and the regulatory relationships involved. We advise from experience of that complexity, not from a generic playbook applied regardless of context.
What this means in practice
When you work with Spriggun you get senior, cross-functional leadership throughout - not a team removed from the expertise you engaged. Privacy strategy, AI governance, and web compliance built in from day one, not retrofitted. Delivery tested against real-world implementation, and regulatory readiness that does commercial work at the same time - standing up in due diligence, opening doors in procurement, and compounding as the business grows. The regulatory and governance golden thread runs through every engagement, from the first diagnosis through to ongoing assurance.
We work with a focused number of clients at any given time. That’s deliberate - it’s what keeps the work senior and the advice genuinely useful. Where engagements need additional specialist resource, we draw on a trusted network of experts, always under our direct leadership. You get broader capacity without losing the senior oversight that defines how we work.
Regulatory confidence. Built for growth.
If what you've read here resonates - and you’re ready to talk about what that looks like in practice - we'd like to hear from you.