Prohibited practices & AI literacy
Certain AI practices are banned; companies must ensure sufficient AI literacy among their staff.
Build AI literacy through training and rule out prohibited applications.
AI Governance · EU AI Act · KI-MIG
Make AI responsibly usable
A lean framework suited to mid-sized companies that creates order – with a policy, roles, risk logic and an inventory of your AI applications. With an eye on the transparency obligations from August 2026.
Note: We do not provide legal advice. Our governance and EU AI Act services are structured professional orientation and implementation preparation, subject to legal review in each case.
EU AI Act & KI-MIG
What you need to know now
The EU AI Act applies EU-wide and in stages; Germany's AI Market Surveillance and Innovation Promotion Act (KI-MIG) implements it nationally – designating the competent supervisory/market-surveillance authority and detailing enforcement and fines. The key deadlines – and what to do:
Governance, GPAI & penalties
Obligations for general-purpose AI models (GPAI), supervisory structures and penalty rules take effect.
Clarify responsibilities and start an AI inventory.
Transparency obligations
AI systems such as chatbots must be recognisable as AI; AI-generated content must be labelled.
Label chatbots & AI content, prepare user notices.
High-risk AI
Extended obligations for high-risk systems, e.g. in regulated products (longer transition period).
Check early whether your AI qualifies as high-risk – and plan for conformity.
KI-MIG is still in the legislative process; details may yet change. We keep track of the status for you. This is not legal advice.
Why now
AI is often used without controls, without rules and without risk awareness. The EU AI Act brings staggered obligations – transparency and labelling obligations take effect from 2 August 2026. "Shadow AI" becomes a risk.
What you get
A workable governance framework that you can actually apply – not a paper tiger.
- AI inventory / register of your applications
- AI usage policy (do/don't, data classes, labelling)
- Role & responsibility model
- Risk classification aligned with the EU AI Act
- Approval/review process & awareness briefing
EU AI Act quick check
For acute need to act: a focused risk classification of your AI applications plus a prioritised list of measures – in 1–2 weeks.
Matching packages
How we can work together
Governance On request
AI Governance Starter
A lean, practical framework: policy, roles, risk logic, AI inventory – with an eye on the EU AI Act.
3–5 weeksGovernance On request
EU AI Act Quick Check
A structured risk classification of your AI applications plus prioritised actions – time-critical from August 2026.
1–2 weeksEnablement On request
AI Training Programme
Hands-on, role-specific enablement – from ChatGPT basics and safe tool use to the EU AI Act.
modular, 0.5–6 daysFAQ
Frequently asked questions
Is this a legally binding review?
No. We provide structured technical orientation. The legally binding assessment is made by your legal advisor. We prepare clean input for them.
What happens from 2 August 2026?
Among other things, transparency obligations take effect: AI systems such as chatbots must be recognisable as AI, and AI-generated content must be labelled. The quick check shows your specific need to act.
How EU AI Act-ready is your AI use?
The quick check classifies your applications and shows what needs to be done by when.