Air Force Veteran · Bethesda, Maryland

We design governance around your vision — compliance and risk built in.

Veteran-owned governance, privacy, and compliance consulting for Maryland agencies, nonprofits, businesses, and the counsel who advise them — built in from the start, so it becomes a source of speed and credibility.

Schedule a Discovery Call View Services

Start here — pick what you need

Maryland businesses & nonprofits

MODPA readiness

Get operationally ready for the Maryland Online Data Privacy Act before the cure period ends April 1, 2027. Fixed-price packages.

Book a call See packages & pricing →

Agencies & organizations adopting AI

AI governance

AI inventories, use and acquisition policies, and risk assessments aligned to NIST AI RMF and Maryland's Responsible AI Policy.

Book a call How it works →

Privacy & technology counsel

Program support for your clients

You make the legal calls; we build the inventories, workflows, assessments, and training behind them. No fee sharing.

Book a call How we work with counsel →

Maryland state & local agencies

Repeat audit finding closeout

Root-cause fixes, control redesign, and closeout tracking so repeat findings don't return in the next report.

Book a call See packages & pricing →

About

We design the governance your vision needs to move fast, stay agile, and endure challenges and changes.

Ulyx Advisory partners with mission-driven organizations, nonprofits, state and local government agencies, businesses, and growing small and veteran-owned companies to design the governance, risk, and compliance infrastructure that carries their vision forward — built in from the start, not bolted on after the fact.

We are client-focused and design-minded: the work starts with what you're building, not with a checklist. Clients succeed because we innovate inside the compliance regimes that apply to them, finding the paths that maximize mission and vision achievement, agility, focus on customer experience, and market opportunity — while making sure the structure holds up when it's actually tested.

Maryland Certified Small Business (CSB), Maryland Veteran-Owned Small Business Enterprise (VSBE), Montgomery County Disabled-Owned Business Enterprise (MFD), certified in Montgomery County's Local Small Business Reserve Program (LSBRP) and Local Business Preference Program, and approved for its Veteran Business Preference Program. SBA SDVOSB certification planned.

Veteran-Owned Deployed in support of Operation Enduring Freedom and Operation Iraqi Freedom; retired Air Force Colonel

CIPP/US · CIPM Certified in U.S. privacy law and in designing privacy compliance directly into program and system architecture

Washington, DC – Baltimore Area Based in Bethesda, Maryland

Services

What we do

Eight focus areas — from the governance structures that carry a growing organization's vision, to the compliance programs that hold up when they're formally tested, to the technology and AI strategy that keeps you moving faster than regulations written for yesterday's tools.

Governance

Board Structure, Governance, and Purpose

We design advisory and governing boards from the ground up — charters and bylaws, voting and reporting procedures, candidate application and vetting processes, and ethics requirements for service — then train members on their obligations. Built for nonprofits, private companies, and state and local government.

Technology

AI Governance & Responsible AI

Governance for the AI your organization uses and buys — AI system inventories, AI use and acquisition policies, vendor AI due-diligence questionnaires, and facilitated risk and impact assessments against the NIST AI Risk Management Framework and, for Maryland public bodies, the State's Responsible AI Policy — designed so innovation and oversight move together.

AI governance in detail →

Growth

AI Enablement for Growing & Veteran-Owned Businesses

We help small and veteran-owned businesses put AI to work — in communications, logistics, and rapid market-opportunity identification — with privacy and compliance designed in from the start, not added after the fact.

Privacy

MODPA Readiness & Privacy by Design

Operational readiness for the Maryland Online Data Privacy Act before its cure period ends on April 1, 2027 — data inventories, vendor registers, consumer-rights workflows, and data protection assessment support, including where AI is used for profiling — delivered alongside your counsel, who makes the legal calls. Privacy, records-management, and institutional ethics programs built into how systems and processes are designed.

MODPA readiness & pricing →

Grants

Grants Compliance Frameworks

2 CFR Part 200 compliance frameworks for state and local agencies, nonprofits, and other grant recipients.

Performance

Governance Frameworks & Performance Standards

Practical governance, strategic-planning, and performance-measurement frameworks tied to how your organization actually operates.

Audit

Audit Remediation & Corrective Action

Root-cause remediation plans for audit findings, with corrective-action tracking built to close out clean.

Repeat finding closeout packages & pricing →

Risk

Enterprise Risk Management & Internal Controls

Internal-control program design for state and local agencies and grant recipients, aligned to COSO and the GAO Green Book and built to withstand independent audit.

Privacy or technology counsel? See how we support your clients while you handle the legal work →

How We Work

From idea to a launch that holds up.

Clients come to Ulyx Advisory with a vision — a new program, a new business, a new technology. They leave with a governance structure built to carry it.

Design the idea

We start with what you're building and who it's for — not with a compliance checklist.

Map the governance

A governance framework — board structure, decision rights, reporting lines — built around how you'll actually operate.

Build the compliance strategy

Risk, privacy, and regulatory requirements designed directly into that structure, so they move with you instead of slowing you down.

Launch and communicate

A rollout and communications plan so the structure is understood and adopted, not just written down.

Credentials

Veteran-owned. Design-minded.

Ulyx Advisory was founded by a principal with a legal, cybersecurity, technology governance, and federal compliance background. That background is the foundation for work that is client-focused and design-minded: we innovate inside the compliance regimes that apply to your organization to maximize mission achievement, agility, and market opportunity, and we build programs that are strong and endure when challenged by audits or business realities.

We do not provide legal representation, legal advice, or assistance with claims before any federal agency — Ulyx Advisory is a governance and compliance consultancy, not a law practice.

Veteran-Owned Small Business

Founded by a retired Air Force Colonel

Maryland Certified Small Business

CSB · eligible for Small Business Reserve and Preference awards

Maryland VSBE & SBA SDVOSB

VSBE certified · disabled veteran verified by Maryland DVMF · SDVOSB planned

Montgomery County MFD — Disabled-Owned

Certified Disabled-Owned Business Enterprise · Montgomery County Minority, Female & Disabled-Owned Business Program

Montgomery County Veteran Business Preference

Approved · disabled-veteran-owned, verified by Maryland DVMF

Montgomery County LSBRP & Local Business Preference

Certified Local Small Business Reserve Program and Local Business Preference Program · through Nov 2029

CIPP/US & CIPM

IAPP-certified in U.S. privacy law and privacy program management