Skip to content

AI Agents Munich · 6 Industries · 1 Architecture

Enterprise AI Agents in Munich - Decision Layer for Germany's densest DAX corporate landscape

Engineering head office Hallerstraße 8 Hamburg. Workshop optional at Munich Urban Colab or at your corporate site in Schwabing / Maxvorstadt / Allach. Decision-Layer architecture for regulated AI agents. Source code stays with the client. 4-6 weeks to productive pilot.

Gosign · Decision-Layer architecture for regulated AI agents · 108 engineers · Engineering head office Hallerstraße 8 Hamburg · Workshop on-site in Munich

Six Munich compliance worlds - six Decision-Layer patterns.

Each sector has its own regulations, its own decision steps, its own audit requirements. We split the use cases into dedicated deep-dive analyses with decision-record examples per sector.

Petuelring · Greater Munich

Automotive (BMW + Tier1)

ASPICE + ISO 26262 + EU AI Act

BMW Tier1 supplier chain (Bosch, Continental, ZF, Brose, Webasto) with ASPICE Level 2-3 + IATF 16949. Ramp-up decisions for model launches in 6-12 months lead time. Konzern-BR-experienced.

View use case →

Schwabing (Königinstraße)

Insurance (Solvency II + IFRS 17)

BaFin MaGo VAG + VAIT + EIOPA

Munich Re + Allianz in the Schwabing insurance cluster. 740+ QRT data points per quarter. MaGo VAG + VAIT for insurers (separate from bank-MaRisk). Internal Model Approval per Solvency II Art. 112-127 every 2 years.

View use case →

Maxvorstadt · Neubiberg

Industrial-IoT (Siemens + Infineon)

Cyber Resilience Act + IEC 62443

Siemens Maxvorstadt + Infineon Neubiberg (Campeon). CRA EU 2024/2847 in force since 11.12.2024. IEC 62443 SL-Target. NIS2 + EU AI Act Annex III for Industrial AI.

View use case →

city-wide · BetrVG + UK Equality Act

HR personnel decisions (DAX Group BR)

Works council co-determination + KI expert right

Munich group works council density is Germany's highest. § 80 (3) BetrVG KI expert right consistently exercised. KBR chairs with 18-24 years tenure. Group works agreement mandatory before pilot. UK Equality Act + ACAS Code parallels.

View use case →

Allach-Untermenzing

Aerospace Engine MRO (MTU)

EASA Part-145 Engine Maintenance

MTU Aero Engines Allach - engine maintenance (GE, CFM, Pratt & Whitney, Rolls-Royce). Engine MSN mapping vs. Aircraft MSN. EASA Part-145 engine specifics + Form 1 for engine modules. UK CAA post-Brexit parallel lane.

View use case →

Bogenhausen (Arabellapark)

Banking (BaFin + ECB)

BaFin MaRisk + ECB SSM + ESG reporting

UniCredit Bank GmbH (HVB) in Arabellapark. ECB SSM direct supervision + BaFin MaRisk + ESG reporting CSRD. AI risk model governance + automated credit decisions under GDPR Art. 22. UK PRA SS1/23 parallel.

View use case →

The Decision-Layer architecture

A control layer between AI agent and target system. It decomposes every business process into individual decision steps and defines for each step in advance: HUMAN for discretion and co-determination. RULES when deterministic (collective agreement, IMDG class, deadline). AI AUTONOMOUS when confidence is above threshold.

Every decision is documented with rule version, input hash, confidence score and escalation path. During an HmbBfDI audit or an EASA finding, what crosses the table is not the result, but the path. Decision Layer in detail.

Gosign GmbH - Engineering head office Hamburg, Munich workshop on-site.

25 years of software engineering. Around 108 employees (as of 2026). Over 5,000 completed projects for houses like Airbus, Volkswagen, Shell. Engineering head office Hallerstraße 8 in 20146 Hamburg. Munich workshop optional at Munich Urban Colab (Freddie-Mercury-Straße 5, Kreativquartier) or directly at your corporate site in Schwabing / Maxvorstadt / Allach / Bogenhausen.

Source code, prompts and rule sets transfer to the client by repository handover, contractually. After 12-18 months you operate your agents without us.

Trademarks mentioned remain the property of their respective owners. The reference is made for descriptive purposes and does not imply partnership or endorsement.

  1. 1

    Discover · 1 week

    Discovery workshop at Grindelberg. Process analysis, understanding rule sets, prioritising use cases. Below EUR 10,000.

  2. 2

    Build · 3-4 weeks

    Productive pilot. One agent, one process, live in your infrastructure with Decision-Layer and audit trail.

  3. 3

    Scale · continuous

    More agents, more processes. Same governance, same auditability. Self-service after 12-18 months.

Short answers for the first questions.

Why does AI Agents Munich need Decision-Layer architecture?
Munich concentrates more DAX corporate headquarters per square kilometer than any other German location: BMW (Petuelring), Allianz and Munich Re (Schwabing), Siemens (Maxvorstadt), MTU and MAN (Allach), HVB (Bogenhausen), Wacker Chemie - each with its own group works council. KBR knowledge spreads within 6 weeks across sister corporates. Anyone introducing AI without Decision-Layer architecture is blocked in the group works council. Anyone arriving with Decision-Layer and planning § 80 (3) BetrVG expert consultation from the start is productive in 4-6 weeks. UK/US/Nordic-headquartered groups: same applies - German subsidiary works council holds equivalent power.
Does Gosign have a Munich office?
No. Engineering head office Hallerstraße 8 Hamburg. We reach Munich by direct flight or 6-hour ICE route. Discovery and stakeholder workshops on-site - typically 2-3 day blocks with works-council session + auditor briefing + internal audit meeting. Workshop can be at Munich Urban Colab (Kreativquartier) or directly at your corporate. Engineering phase remote with bi-weekly on-site days. Architecture reviews and critical co-determination negotiations exclusively on-site. Munich market accepts remote engineering because main work is group stakeholder alignment - not physical engineer presence.
Does Gosign with 108 staff scale for a 12,000-FTE DAX corporate in Munich?
Fair question. Answer differentiates by corporate size. For mid-market and corporate subsidiaries (500-12,000 FTE, one board ressort): 3-day discovery + 4-6 weeks pilot through 4-6 engineers, handover after 12-18 months works. For DAX-30 full-corporate (Allianz ~60,000 FTE Germany, Munich Re ~40,000, Siemens ~78,000): this does NOT work as 3-day discovery for all. Reality: per board ressort or per business line (Allianz has 8 ressorts × 14 lines) a separate discovery path - workshop per line 2-3 days, parallel or sequential over 6-12 weeks. Plus central architecture track with GroupCIO + Group DPO + Konzern-BR. Engineering effort scales with productive agents per line, not total corporate FTE. For DAX engagements we bring co-pilot partners (Sysslogics for automotive depth, Johner Institut for medtech QMS, Big-4 audit trust if procurement requires). Source code stays with client, repository handover per line contractual. Discovery workshop is diligence step, not commitment - sub-10k EUR per line is entry threshold, then fixed price per pilot.
What does BayLDA say about AI systems?
BayLDA published an AI Checklist v0.9 on January 24, 2024 (datenschutz-bayern.de) with four mandatory sections (Classification, Training, Risk Assessment, Deployment) and six protection goals (Fairness, Autonomy, Transparency, Reliability, Security, Privacy). Plus DSK Orientation Guide AI and Data Protection from 06.05.2024 (BayLDA co-author) and TOM-OH June 2025. BayLDA fines are consistently anonymized - the 13th Activity Report 2023 shows EUR 3.2M against a tech company for ad targeting (~85% of annual fine sum). The anonymization raises the risk: any DAX corporate could be affected and no one learns until their own press release. UK parallel: ICO AI Auditing Framework + UK GDPR Art. 22 create comparable exposure but with named-enforcement pattern.
Which regulatory authorities are critical in Munich?
Five run in parallel. (1) BayLDA in Ansbach for the GDPR and AI Act - alongside the HmbBfDI, Germany's most active data protection authority. (2) BaFin for insurers (Munich Re, Allianz) under Solvency II, MaGo VAG and VAIT, separate from banking supervision. (3) ECB SSM with BaFin MaRisk for HVB as a Significant Institution (banking only). (4) Sector authorities by corporate - ASPICE/ISO 26262 for automotive, EASA Part-145 for MTU, the CRA for Siemens and Infineon Industrial-IoT. (5) LAG München with the § 87/§ 80 BetrVG doctrine. The EU AI Act high-risk obligations apply from 2 August 2026 under current law - provisionally postponed to 2 December 2027 under the Digital Omnibus of 7 May 2026 (formal adoption still pending, as of June 2026) - with prohibited practices already banned since 02.02.2025. **For UK-headquartered groups with a German subsidiary, the Decision-Layer documents both UK and German audit trails in one chain.** The UK regulators map closely onto the German ones: the ICO AI Auditing Framework mirrors BayLDA, PRA SS1/23 mirrors MaGo VAG, FCA Consumer Duty and Bank of England operational-resilience rules mirror BaFin, and the ACAS Code on AI is the works-council counterpart - though UK consultation is advisory, not the blocking co-determination of § 87 BetrVG.

Which Munich use case should be your first agent?

Discovery workshop at Grindelberg. 3 days. Concrete deliverable: Decision-Layer sketch for your 3 top use cases, risk assessment, roadmap with pilot path.

Book workshop at Munich Urban Colab

Discovery workshop below EUR 10,000. Pilot fixed price discussed after the workshop.