KI-COMPLIANCE · KI. ABER SICHER.

EU AI Act. Pragmatic, not panicked.

The EU AI Act applies - but not every obligation applies to every company. We first determine which risk class your AI systems fall into and which obligations actually follow. Then we implement exactly that: literacy proof, AI policy, governance. No more, no less.

Which obligations apply since when?

SinceWhat applies
02 Feb 2025Prohibited AI practices (e.g. social scoring) and Article 4: companies using AI must ensure sufficient AI literacy among their staff.
02 Aug 2025Obligations for providers of general-purpose AI models (GPAI), governance and penalty rules.
02 Aug 2026General applicability: transparency obligations under Article 50 (label AI chatbots, disclose deepfakes) and obligations for high-risk systems under Annex III.
02 Aug 2027High-risk obligations for AI in regulated products (Article 6(1)).

As of 09/2026. Deadlines may shift through ongoing EU legislation (Digital Omnibus). Factual summary - not legal advice.

The four risk classes

The EU AI Act regulates by risk. The first step of any compliance work is therefore classification: which of your AI systems fall into which class?

Risk classExamplesConsequence
Unacceptable riskSocial scoring, manipulative systemsProhibited (since 02/2025)
High riskAI in recruiting, credit scoring, critical infrastructureExtensive obligations: risk management, documentation, human oversight
Limited riskChatbots, generative AI, deepfakesTransparency obligations (labeling under Article 50)
Minimal riskSpam filters, simple assistance systemsNo specific obligations - Article 4 (AI literacy) still applies

We classify your AI systems and derive the concrete obligations - as part of the KI-CHECK or as standalone compliance consulting.

Our compliance services

AI literacy proof (Article 4)

Structured, documented training with a certificate - the cleanest proof of the literacy obligation. AZAV-compliant and fundable up to 100% via § 82 SGB III.

Go to KI-AKADEMIE

Compliance package

Training plus AI policy plus data protection impact assessment (DPIA): the organizational baseline for using AI in your company.

Check funding

AI governance & ISO 42001

Governance structures, risk analysis, and documented processes - aligned with the international standard for AI management systems (ISO/IEC 42001).

Start with the KI-CHECK

Compliance AI technology

AI agents that audit other AI systems - our award-winning technology approach for continuous control instead of one-off audits.

View KI-EXPERT

Frequently asked questions

Does the EU AI Act apply to small and mid-sized companies?

Yes. The regulation has no general SME exemption. Article 4 (AI literacy) has applied since 02 Feb 2025 to every company using AI - regardless of size. The scope of the remaining obligations depends on the risk class of the systems used, not on company size.

What are the penalties for violations?

Fines of up to €35 million or 7% of global annual turnover for prohibited practices; up to €15 million or 3% for other violations. In addition, there is liability risk if literacy and documentation obligations cannot be demonstrated in case of damage.

Is internal training sufficient proof of AI literacy?

Article 4 does not prescribe a curriculum - it demands organizational responsibility. What matters is demonstrability: a structured, documented training with a certificate is the simplest evidence. Our AZAV-compliant programs deliver exactly that - partly up to 100% government-funded.

What is a high-risk system?

AI systems in the areas listed in Annex III - such as recruiting, credit scoring, critical infrastructure, or access to education - as well as AI as a safety component of regulated products. They carry the most extensive obligations: risk management, data quality, documentation, human oversight.

Does your consulting replace legal advice?

No. We advise on the technical-organizational side: risk classification, literacy building, policies, governance processes. For binding legal questions we work with your law firm or recommend specialized partners.

Where do you stand on the EU AI Act?

In a free initial consultation we clarify which of your AI systems are affected and which obligations follow - and whether training and consulting are fundable for you.

Request a free initial consultationGo to funding check