EU AI Act Compliance
EU AI Act Compliance: inspect, document, train.
Audit at a fixed price. We inspect your AI usage against the EU AI Act obligations, document the findings, and plan the competence build-up under Article 4.
Scope
What does the Compliance Audit cover?
The EU AI Act entered into force in August 2024 and has applied in stages since February 2025. Article 4 of the EU AI Act has required providers and deployers since 2 February 2025 to take measures supporting the development of AI literacy among their own staff. The Digital Omnibus, Regulation (EU) 2026/1744, has been in force since 27 July 2026 and turned this into a duty of effort: you have to act, but you do not have to guarantee a particular level of competence for any individual. The audit checks your status and delivers the roadmap to meeting it:
- AI system inventory. Which tools are you running? ChatGPT, Copilot, Gemini, AI features inside CRM or ERP. We capture everything that falls under the EU AI Act.
- Risk classification. Per system: prohibited, high-risk, limited risk, or minimal. The classification determines which obligations apply to your organisation.
- Obligation mapping. Per risk class the concrete obligations: transparency, human oversight, robustness, cybersecurity, data quality. We show what you already meet and what you do not.
- Article 4 AI literacy obligations. Which staff groups need which training? Management, business units, IT, external service providers.
- Documentation templates. Records of processing extension, data protection impact assessment for AI systems, training records. Templates you can apply directly.
- Training plan. Which content does which staff group need? We recommend format and depth. The AI Literacy training runs through the minoka Academy as an online module course or in-house workshop.
- Prioritized roadmap. Actions sorted by deadline. What must be done by when, what is optional.
Fit
When does the Compliance Audit fit?
The Compliance Audit is not for everyone. It fits when:
- Your organisation deploys AI tools like ChatGPT, Copilot, or Gemini. That covers practically every organisation doing knowledge work.
- You feel compliance pressure, for instance from data protection requirements, financial audits, or certifications such as ISO 27001 or TISAX.
- You do not have an in-house compliance team but still need to meet the EU AI Act obligations. Classic mid-market situation.
- You carry HR or L&D responsibility and want to set up the Article 4 training obligation in a structured way instead of organising it ad-hoc.
What you receive
What you receive. The same in every engagement.
Written audit report
PDF or Notion workspace with detailed analysis, findings, and evidence per area.
Live discussion, 90 minutes
Live with your team. Findings, roadmap, questions. Recording included.
30 days of follow-up questions
After the live discussion the real questions arrive. Write to us, we answer.
Prioritized roadmap
Actions sorted by effort and impact. You know what to start with next week.
Scope
What determines the scope.
The shape follows your situation rather than a choice of sizes. Four quantities drive the effort. Tell us where you stand, and you receive an offer with a fixed scope and a fixed price.
How much gets examined
One domain or several, one language or several. That is the single biggest lever on the effort involved.
How many competitors sit alongside
One comparison gives you context, three show a pattern. Without a comparison, a finding is only a number.
How deep the content analysis goes
From a sample, through the pages that matter most, to concrete briefs for reworking them.
What should happen afterwards
The report alone, or support while you act on it. Either is fine; it simply changes the scope.
Process and terms
Four steps from conversation to handover.
The path to an offer is the same for every engagement. After the first conversation you know where you stand, and you have the price in writing before anything begins.
Requirements conversation
One session in which we walk through where you stand, your most pressing question, and the sensible shape. Free of charge and without obligation.
Offer with a fixed scope and a fixed price
You receive in writing what gets examined, what you hold at the end, and what it costs. One price, not a choice between sizes you cannot yet judge.
Delivery
Collection, analysis, and the report. If something surfaces that changes the shape, you hear it immediately and not at the end.
Live discussion and handover
Ninety minutes with you and your team, plus the written report in priority order. Followed by 30 days of questions.
Frequently asked
What you should know before requesting.
Legal status: 29 August 2026. These notes are an editorial summary and not legal advice; they do not replace a lawyer’s review of your particular case.
What does Article 4 of the EU AI Act actually require?
Article 4 of the EU AI Act has required providers and deployers since 2 February 2025 to take measures supporting the development of AI literacy among their own staff. Specifically: staff should understand how the AI system works, what risks it has, and how to evaluate and correct its output. The Digital Omnibus, Regulation (EU) 2026/1744, has been in force since 27 July 2026 and turned this into a duty of effort: you have to act, but you do not have to guarantee a particular level of competence for any individual. In practice that means a documented training concept, cut to roles and risks, rather than a certificate for everyone. Whoever trains should be able to show who was trained, on what, and when. It applies regardless of organisation size.
We only use ChatGPT and Copilot. Are we really affected?
Yes. As soon as staff use AI systems, Article 4 applies. Even if the AI tools are not built by you but used as software services, you as employer are responsible for the literacy of your staff. The audit shows how far the competence build-up has to reach in your specific situation.
Does minoka also deliver the training itself?
Yes. The minoka Academy offers the AI Literacy training as an online module course for individual study or as an in-house workshop for your entire team.
What happens after the Compliance Audit?
You receive the written report with the risk classification of your systems, the documentation templates ready for direct application, the training plan, and the prioritized roadmap by deadline. You have 30 days to ask follow-up questions about implementation. Documentation creation and training delivery happen separately, either with your team or as a follow-on engagement.
How does this audit differ from the GEO Audit?
The GEO Audit inspects how AI systems cite your brand in answers (marketing perspective). The Compliance Audit inspects how your organisation deploys AI systems and whether that meets EU AI Act obligations (legal perspective). The two topics rarely overlap; both can be relevant.
Request
Ready for your EU AI Act Compliance?
You see the scope, what drives it, and the fit above. We name the price after the requirements conversation, with a fixed scope. A request through the form is enough; the first conversation begins where many consultancies still end up in their sales phase.
Also relevant
Other audit focus areas
Once it is clear what needs doing
An audit tells you what to do. These services carry it out:
- AI Implementation: From the question of which use case actually carries its weight to the running system.
- Custom Tooling: Browser extensions, AI automations, and WordPress tooling built to fit.
- Overview of all minoka services: audits, implementation, training, and advisory retainer at a glance.
- minoka Academy: trainings on SEO, GEO, and AI literacy under Article 4 of the EU AI Act, as online module course or in-house workshop.