Skip to content

AI Compliance Officer

Through the AI Act with confidence, before the duties catch up with you

Your external AI officer establishes whether you are affected, builds the AI literacy the law requires, and keeps liability and fines away from you — without a department of your own.

Find out in 20 minutes whether you are affectedHow we work together

No obligation, no sales pressure

EU AI Act

Art. 4 AI ActRisk levels

The reality

Waiting risks more than fines: uncontrolled AI use inside the company creates facts on the ground. Catching up with governance afterwards is expensive and laborious.

The risk of waiting

Up to €35m or 7 % of global turnover. Since 2 February 2025, your staff are required to have AI literacy (Art. 4 AI Act).

The advantage of acting

Governed AI use lets you put AI tools to work productively and lawfully, instead of banning them out of fear and giving away the efficiency.

Which companies does the AI Act apply to?

  • Companies that use AI tools

    Anyone using AI systems such as chatbots or language models in day-to-day work has had to ensure their staff's AI literacy since February 2025 (Art. 4 AI Act).

  • Companies that develop AI or build it into products

    As providers they carry the more extensive duties, for high-risk systems such as those used in HR or lending decisions including risk management and documentation.

  • Companies with high-risk applications

    Anyone using AI to screen applicants or decide on loans has considerably more duties even as a mere deployer, from human oversight to logging.

What you get

Builds on your existing data protection and ISMS foundation — nothing is started from scratch.

  • Applicability reportA written assessment of which AI systems you use and which duties under the AI Act follow from them.
  • Risk-level classificationEvery AI system assigned to a risk level, with the reasoning set out.
  • Roadmap of measuresThe open points with effort and priority, so that you know what to do first.
  • AI policyClear rules for using AI in the company — which tools may be used with which data, for example.
  • Staff training (Art. 4)Training that builds the AI literacy Art. 4 of the AI Act requires, with evidence of completion.
  • A fixed contactSupport when new AI tools arrive and when the regulation changes.
Most companies have been using AI tools for a long time, often without management knowing which ones, or with what data. The first step is therefore almost always an honest inventory, not a policy.
Zarko DodigAI compliance officer, BREDEX

How we work together

  1. Establish whether you are affected

    Which AI systems do you use, which risk level, which duties follow?

  2. Inventory & gap analysis

    What is in place, what is open — with effort and priority.

  3. Measures, training & ongoing support

    Build AI literacy, documentation and processes; a standing contact.

Are you already using AI systems day to day?

Then a quick look at your risk level is worth it.

Have a quick word
  • No obligation
  • No sales pressure

Frequently asked questions

Which risk levels does the EU AI Act define?

The AI Act distinguishes four risk levels. Systems posing an unacceptable risk have been banned since February 2025 — social scoring, for instance. High-risk systems under Annex III (in recruitment, credit or education, for example) are subject to extensive duties on risk management, documentation and human oversight from August 2026. Systems with limited risk, such as chatbots, mainly have to meet transparency obligations, while systems with minimal risk are barely regulated. Regardless of risk level, the general duty of AI literacy under Art. 4 has applied since February 2025 to every provider and deployer working with AI systems. In practice that covers almost any company using language models in its daily work.

Does this affect us if we only use ChatGPT day to day?

Yes — that already counts as using AI within the meaning of the regulation, particularly for the AI literacy obligation.

Do we have to build AI systems ourselves for the AI Act to matter?

No. Simply deploying somebody else's AI system (as a “deployer”) carries duties too.

From our blog

See all posts
  • Praxiswissen

    27. August 2025 · 3 Min. Lesezeit

    AI Compliance without the Headache

    The officer ensures that an overview of the AI tools used is maintained and that each application is subjected to a risk assessment where necessary. Training courses are organized, …

Loading the form …