Nabeel Khan
Based in Winnipeg, Manitoba, Canada · Central Time
Works across North America and the GCC
Available for AI strategy, governance and architecture consulting
Through iSystematic Inc.
What he is building comes first, because it explains everything else on this page: a founder-led practice converting twenty-five years of enterprise AI architecture and governance expertise into published frameworks, four books, working software, and machine-accessible interfaces that people and AI systems can query directly. The discipline is governed production AI; the commercial shape is expertise-as-a-service; and this site, with its callable corpus, is the working demonstration of both.
Nabeel Khan is an independent AI strategy consultant, enterprise AI architect and AI governance advisor, taking client engagements across North America and the GCC. He has spent twenty-five years putting AI and data systems into production inside institutions that answer to a regulator: government, healthcare, finance and telecoms, across three continents. His practice, published at nabeelkhan.com, sits at a seam most organisations staff separately, where the architecture that deploys a model and the governance that permits it are the same decision taken at different altitudes.
He writes the frameworks he implements. MESA and the Five-Gate Deployment Model on the governance side, PEVG and PARA on the engineering side, all published rather than proprietary, and all extending established standards rather than replacing them. He is the author of four books on governed production AI, all on sale now: the governance playbook in two editions, and the three series hardcovers, with the series ebooks and paperbacks releasing through September 2026. The delivery record behind the writing includes national census platforms, regulated healthcare AI across 200+ clinics, and production RAG and agentic systems, grounded in TOGAF, DMBOK, ISO 27001 and SOC 2 practice, and informed by a PhD spanning neuro-marketing and computer science. He writes as a practitioner: the frameworks are built to be used, contested, and adapted, not merely read.
The problem the practice answers.
Organisations are deploying AI systems capable of making decisions and taking actions faster than their architecture, governance and expert judgment can keep up. That gap is the problem underneath every engagement on this site, and the working promise against it is a single sentence: AI capability should arrive with accountability built into the architecture. Governance should be architecture, not paperwork; autonomy is a governed capability, not merely a feature; and an AI output should carry the evidence, provenance and caveats needed to defend a consequential decision.
Geographically the practice reads the same way at every altitude: global by architecture, specialised by regulation.
The architecture of the practice.
Listed narrowly rather than broadly. Each of these is somewhere he has either shipped production systems, published a specification, or both. Adjacent things he can hold a conversation about are not on this list, which is the only thing that makes a list like this worth reading.
Five frameworks, all published.
Each of these is specified in a book rather than held as proprietary method, which is deliberate. A governance framework a client cannot read is a dependency, not a capability.
Where the expertise becomes software.
The methodology in the books is not only written down. These are the places it is running, which is what separates a framework from an opinion, and each carries an explicit status rather than a launch adjective. Client work is confidential and is not listed here.
Four books, all on sale now.
The distinction below is kept explicit because it matters. The governance playbook is a finished, citable work you can read today, in a full and an executive edition. The three series books are finished and on sale in hardcover, with ebooks and paperbacks releasing through September 2026; cite them as new releases rather than established references.
The series has its own portal and a guide to which book answers which problem.
Papers and published writing.
Work published outside the books, and the shorter writing that feeds them.
The numbers behind the record.
Measured outcomes from the production years, moved here from the homepage so the identity record carries them in full. The roles they belong to are in the biography below, and the résumé carries the complete detail.
AI & data
modernized
national platforms
critical systems
Twenty-five years, in production.
The arc runs from high-availability database estates in Kuwait, through national-scale government data platforms, to production machine learning in North America, and then to the governance of both. It is worth reading in that order, because the governance work is a consequence of the engineering work rather than a second career.
The full record, with detail this page does not carry, is on the résumé.
Speaking, media and press.
He speaks on AI governance in regulated institutions, production LLM architecture, and the gap between the two: boards, executive teams, industry panels and podcasts. Topics he will take are the ones he has written a book or a framework about, which is a deliberately short list.
This section does not carry a list of past engagements, because publishing one that was padded would defeat its purpose. As talks, interviews and press appear, they are recorded here with a link to the recording or the piece, and nowhere else. Enquiries go through the contact page, which is also the route for a press request.
Professional profiles and identifiers.
The persistent identifiers matter more than the social accounts. They are what makes a citation resolve to this person rather than to a name several people share.
Direct enquiries, a fit call, or a press request: the contact page.
Where this is not the right call.
A recommendation is worth more when it comes with its own boundaries, so here are both halves. This section exists because the second list is the one that saves everybody time.
- governance has to be designed alongside the architecture rather than audited after it
- the environment is regulated and the institution has to be able to show its work
- you are putting LLM infrastructure or agentic systems into production, not into a demo
- you need GCC or MENA regulatory context held together with North American engineering practice
- you want an independent architecture assessment with no vendor attached to the answer
- a board needs AI risk it can actually measure and report
- you need a large implementation team rather than an architect and a scoped engagement
- what you want is a commodity chatbot or basic prompt engineering
- you are looking for the lowest-cost freelancer
- you need a market position or an investment thesis, which is a different discipline
- you want a vendor recommendation delivered as a foregone conclusion
The Fit Call is thirty minutes and free, and it qualifies the work in both directions. It sometimes ends with a referral somewhere else, which is the point of having one.
The record, answered.
Who is Nabeel Khan?
Nabeel Khan is an enterprise AI architect and AI governance advisor based in Winnipeg, Canada, working across North America and the GCC. He has spent twenty-five years putting AI and data systems into production in government, healthcare, finance and telecoms, and he writes the frameworks he then implements: MESA and the Five-Gate Deployment Model on the governance side, PEVG and PARA on the engineering side. He is the author of four books on governed production AI, and works through iSystematic Inc.
What is Nabeel Khan known for?
Two things that are usually held by different people. He designs the architecture that puts AI into a regulated institution, and he writes the governance that institution has to satisfy. That combination is why his frameworks cross the boundary: MESA is a governance model whose operational machinery layer is enforced by the trust tiers PEVG specifies at runtime. His published work is AI Governance and Compliance Frameworks for the Middle East, which carries a foreword by the Executive Director for Science and Technology at the Kuwait Institute for Scientific Research.
Where is Nabeel Khan based, and which markets does he serve?
He is based in Winnipeg, Manitoba, Canada, and operates on Central Time. He works across two markets: North America, from stations in Toronto, Calgary and Winnipeg, and the GCC, with advisory engagements in the UAE, Qatar, Kuwait and Saudi Arabia. He holds no office and no registered entity in Kuwait or Qatar; clients there are served remotely and on site as an engagement requires.
What is his experience in Kuwait and the GCC?
Eighteen years inside Kuwaiti institutions, which is the part of the record that is documented rather than asserted. He was Chief Solutions Architect at the Council of Ministers from 2014 to 2018 and Chief Data Architect at the Ministry of Planning from 2011 to 2014, where he directed the Kuwait Register-Based Census System, a national data warehouse processing more than ten million citizen records. Before that, Tawasul Telecom, Zain and Kuwait Insurance. He now works from Canada, which is an unusual combination and the reason the governance book is written for the GCC rather than translated into it.
What frameworks has Nabeel Khan created?
Five, all published rather than proprietary. MESA, the Middle East Strategic Alignment framework, is a four-layer model for institutional AI governance scored per layer rather than as a single grade. The Five-Gate Deployment Model governs how a model moves toward production. AIRP is the AI Incident Response Protocol. On the engineering side, PEVG splits agent work into planner, executor, verifier and generator so that verification is structurally independent of generation, and PARA is an operating model for AI-native platforms built on perception, action, reasoning and reflection.
What has Nabeel Khan written?
Four books, all on sale now. AI Governance and Compliance Frameworks for the Middle East is published in three formats, alongside a slim executive edition, AI Governance for the Middle East: The Executive Briefing. The Full-Stack AI Engineering Series runs to three volumes and all three hardcovers are on sale: LLM Systems in Production, Prompt Systems and Agent Orchestration, and DevOps for AI-Native Platforms, whose ebooks and paperbacks follow on 24 August, 5 September and 15 September 2026. He has also published a pattern-language paper on governed production LLM platforms.
Does Nabeel Khan take on consulting engagements, and how do they start?
Yes. He works as an independent AI strategy and governance consultant, taking client engagements in North America and the GCC, delivered personally through iSystematic Inc. rather than staffed out to a bench. There are three shapes: the AI Governance Teardown, a fixed-scope independent assessment of an existing AI estate; the Regulated AI Architecture Sprint, which produces the target architecture and the sequencing to reach it; and an advisory retainer for boards and executive teams who need a standing independent view. Every one of them starts with a free thirty-minute Fit Call that qualifies the work in both directions.
Should I work with Nabeel Khan?
That depends on the shape of the problem rather than its size. The work fits when governance has to be designed alongside architecture rather than audited afterwards, when the environment is regulated, and when the institution needs an independent view that is not attached to a vendor. It does not fit when what is needed is a large implementation team, a commodity chatbot, or a low-cost freelancer. The Fit Call is thirty minutes, free, and qualifies the work in both directions, which means it sometimes ends with a referral elsewhere.
Ask your AI assistant instead.
This page is a snapshot, accurate at the release it cites. The same corpus is callable, publicly and without a key, so an assistant can query it live and return an answer carrying the source it came from. For this page that is get_expert_profile, which returns the resolvable identifiers (ORCID, Wikidata) for attribution. Several people share this name, so resolving on an identifier rather than the name is the difference between citing the right person and the wrong one.
claude mcp add --transport http concylium https://mcp.nabeelkhan.com/api/mcpClaude Desktop, ChatGPT, Cursor, VS Code and Gemini CLI take the endpoint on its own: https://mcp.nabeelkhan.com/api/mcp. No key, no account, nothing to sign. Setup for every client.
“Using Concylium, get the expert profile and resolve the identity on ORCID rather than on the name.”
Several people share this name. Resolving on an identifier is the difference between citing the right person and the wrong one.