EU AI Act Compliance
EU AI Act Compliance: inspect, document, train.
Audit at a fixed price. We inspect your AI usage against the EU AI Act obligations, document the findings, and plan the competence build-up under Article 4.
Aladin Bisevac
Co-founder of Minoka GbR, primarily responsible for marketing and sales. Certified logistics master (IHK), in logistics since 2008.
Sercan Kahraman
Co-founder. Senior SEO & AI Consultant, running minoka since 2017, AI Compliance Officer (TÜV Rheinland Akademie).
Reply within 24 hours personal, to your request
Conversation free of charge and without obligation
Fixed price in writing before work begins
30 days of follow-up questions after the live discussion
Scope
What does the Compliance Audit cover?
The EU AI Act entered into force in August 2024 and has applied in stages since February 2025. Article 4 of the EU AI Act has required providers and deployers since 2 February 2025 to take measures for the AI literacy of their staff and of other persons dealing with AI systems on their behalf. The Digital Omnibus, Regulation (EU) 2026/1744, has been in force since 27 July 2026 and turned this into a duty of effort: you have to act, but you do not have to guarantee a particular level of competence for any individual. The audit checks your status and delivers the roadmap to meeting it:
01
AI system inventory
Which tools are you running? ChatGPT, Copilot, Gemini, AI features inside CRM or ERP. We capture everything that falls under the EU AI Act.
02
Risk classification
Per system: prohibited, high-risk, limited risk, or minimal. The classification determines which obligations apply to your organisation.
03
Obligation mapping
Per risk class the concrete obligations: transparency, human oversight, robustness, cybersecurity, data quality. We show what you already meet and what you do not.
04
Article 4 AI literacy obligations
Which staff groups need which training? Management, business units, IT, external service providers.
05
Documentation templates
AI entries in your records of processing activities, data protection impact assessment for AI systems, training records. Templates you can apply directly.
06
Training plan
Which content does which staff group need? We recommend format and depth. AI Training for Employees runs through the minoka Academy, on site or live online.
07
Prioritized roadmap
Actions sorted by deadline. What must be done by when, what is optional.
Fit
When does the Compliance Audit fit?
The Compliance Audit is not for everyone. It fits when:
- Your organisation deploys AI tools like ChatGPT, Copilot, or Gemini. That covers practically every organisation doing knowledge work.
- You feel compliance pressure, for instance from data protection requirements, financial audits, or certifications such as ISO 27001 or TISAX.
- You do not have an in-house compliance team but still need to meet the EU AI Act obligations. Classic mid-market situation.
- You carry HR or L&D responsibility and want to build Article 4 AI literacy in a structured way instead of organising it ad-hoc.
What you receive
What you receive.
Written audit report
As a PDF or Notion workspace: the inventory of your AI systems with risk classification and the obligations that follow. Per system with finding and evidence.
Documentation templates and training plan
Templates for the AI entries in your records of processing activities, the data protection impact assessment for AI systems that require one, and training records, plus the plan for which staff group needs which training.
Prioritized roadmap
Actions sorted by deadline. You see what must be done by when and what is optional.
Live discussion, 90 minutes
With you and your team, recording included. Followed by 30 days of questions about implementation.
Effort
What determines the scope.
The effort depends on four questions. Tell us where you stand and you receive an offer with a fixed scope and a fixed price.
How many AI systems are in use
An organisation where everyone uses the same assistant is inventoried faster than one with AI features in CRM, ERP, and specialist software.
Whether a use falls into the high-risk class
If a system is used, for example, to select job applicants or to assess the creditworthiness of natural persons, it usually counts as a high-risk system under Annex III. From 2 December 2027 the high-risk obligations apply, and the audit becomes considerably larger.
How many staff groups need training
Management, business units, IT, and external service providers need different content, because Article 4 requires their knowledge and the context of use to be taken into account. The more groups, the larger the training plan.
What is already documented
Existing records of processing activities or an AI policy shorten the assessment. If documentation starts from zero, more templates are needed, and they go into more detail.
Process and terms
Four steps from conversation to handover.
The path to an offer is the same for every engagement. After the first conversation you know where you stand, and you have the price in writing before anything begins.
Requirements conversation
One session in which we walk through where you stand, your most pressing question, and the sensible shape. Free of charge and without obligation.
Offer with a fixed scope and a fixed price
You receive in writing what gets examined, what you hold at the end, and what it costs. One price, not a choice between sizes you cannot yet judge.
Delivery
Collection, analysis, and the report. If something surfaces that changes the shape, you hear it immediately and not at the end.
Live discussion and handover
Ninety minutes with you and your team, plus the written report in priority order. Followed by 30 days of questions.
Check it yourself first
Our free tools.
Related questions from everyday AI work, as a tool to try yourself.
Frequently asked
What you should know before requesting.
Legal status: 7 October 2026. These notes are an editorial summary and not legal advice; they do not replace a lawyer’s review of your particular case.
What does Article 4 of the EU AI Act actually require?
Article 4 of the EU AI Act has required providers and deployers since 2 February 2025 to take measures for the AI literacy of their staff and of other persons dealing with AI systems on their behalf. Specifically: staff should understand how the AI system works, what risks it has, and how to evaluate and correct its output. The Digital Omnibus, Regulation (EU) 2026/1744, has been in force since 27 July 2026 and turned this into a duty of effort: you have to act, but you do not have to guarantee a particular level of competence for any individual. In practice that means a documented training concept, cut to roles and risks, rather than a certificate for everyone. Whoever trains should be able to show who was trained, on what, and when. It applies regardless of organisation size.
We only use ChatGPT and Copilot. Are we really affected?
Yes. As soon as staff use AI systems, Article 4 applies. Even if the AI tools are not built by you but used as software services, you as a deployer have to take AI literacy measures for your staff. The audit shows how far the competence build-up has to reach in your specific situation.
Does minoka also deliver the training itself?
Yes. The minoka Academy offers AI Training for Employees for your entire team, on site or live online.
What happens after the Compliance Audit?
You receive the written report with the risk classification of your systems, the documentation templates ready for direct application, the training plan, and the prioritized roadmap by deadline. You have 30 days to ask follow-up questions about implementation. Documentation creation and training delivery happen separately, either with your team or as a follow-on engagement.
How does this audit differ from the GEO Audit?
The GEO Audit inspects how AI systems cite your brand in answers (marketing perspective). The Compliance Audit inspects how your organisation deploys AI systems and whether that meets EU AI Act obligations (legal perspective). The two topics rarely overlap; both can be relevant.
Request
Ready for your EU AI Act Compliance?
You see the scope, what drives it, and the fit above. We name the price after the requirements conversation, with a fixed scope. A request through the form is enough; the first conversation begins where many consultancies still end up in their sales phase.
Request an EU AI Act Compliance AuditYour email address is all we need.
Also relevant
Other audit focus areas
Once it is clear what needs doing
An audit tells you what to do. These services carry it out:
- AI Implementation: From the question of which use case actually carries its weight to the running system.
- Custom Tooling: Browser extensions, AI automations, and WordPress tooling built to fit.
- Overview of all minoka services: audits, implementation, training, and advisory retainer at a glance.
- minoka Academy: AI Training for Employees, SEO Training, and GEO Training, on site or live online.