Where does your company stand?2-minute Quick-Check · free · no sign-up
Start Quick-Check
KlarComply
Free self-assessment for businesses · 10 questions · 2 minutes

Your business already uses AI. Since 2025 the EU expects you to have it under control — we make it something you can show.

From €49 a month: your team trains itself, every certificate is publicly verifiable, and when a customer or an inspector asks, you press print.

View packages Free · no sign-up · instant result

Here as an individual? Go to the personal course — €49 one-off →

No exemption
The AI Act reaches any company placing AI on the EU market or whose AI output is used in the Union — including UK and US firms (Art. 2)
€15M
Penalty range for breaching the transparency duties — Art. 50 is expressly listed in the catalogue of Art. 99(4)(g). Or 3% of turnover; for SMEs the lower amount applies. In practice authorities start not with the maximum but with information requests and orders — the earlier loss is the contract you miss without evidence
since 2 Feb 2025
the AI literacy duty (Art. 4) has applied — not from, but since. It is the one obligation that is already overdue if you have done nothing
CHECKPOINT 1/10
9 CHECKPOINTS + 1 QUESTION FOR YOUTraining (Art. 4) · Labelling (Art. 50) · High-risk exclusion
What the quick check covers
Company is based in:

Would you rather see the paperwork first? The seven templates in the compliance kit are free — in exchange for your e-mail address. (Templates in German.)

RESULT

Indicator of elevated obligations: Your answers suggest AI supports decisions about people in your organisation, or that you offer AI features yourself. These scenarios can trigger extended obligations. We recommend an additional legal assessment — our templates do not replace one.

We'll send your results as a PDF: your gaps, the obligations behind them, and the order to close them in — plain English, no legalese.

Thank you! Your action plan is on its way. Please also check your spam folder.

No spam. You'll receive the action plan and occasional deadline updates. Unsubscribe anytime.

Every gap costs you nothing – until it becomes a problem. A business customer asking for evidence, or an audit, won't wait. The good news: what you just saw is closed faster than you think.
Close your gaps — see plans
Important notice: This quick check and all related materials are for general information and support your own compliance documentation. They do not constitute legal advice and do not replace a legal review of your individual case.
The real risk

Your people already use AI. The only question is whether they know where the line runs.

Nobody pastes a customer list into ChatGPT in order to cause harm. They paste it because the answer is needed faster and nobody told them it was a problem. That is exactly why it is your problem and not theirs. Three situations happening this week in some company somewhere:

In all three cases, someone eventually looks at you.

Not at the employees — at management. Anyone who lets AI run in the business without rules, without oversight and without training, and who then suffers a loss, faces the charge of a failure to organise the business properly. That reaches directors in their personal duty of care, independent of any AI Act penalty range.

And because this is easy to misread: it is not a vote of no confidence in your staff. It is the opposite. People who know where the line runs can respect it. People who do not will eventually make a mistake they never intended — and carry the consequences of a gap that was never theirs. Training protects your people first. Then you.

The honest comparison

Law firm, click-course – or a system that keeps up.

You can get compliance in three places: expensive at a law firm, cheap in a click-through course, or as a maintained system. Here is the unvarnished comparison.

Comparison based on publicly advertised market prices (as of 2026). “partly” = varies by provider and engagement.

Behind KlarComply is a practitioner with a 14-year armed-forces background who implements the AI Act in his own company — not a consulting firm. Who we are and how we work →

12-month minimum term · annual payment: 2 months free

One subscription. Both obligations. Done for good.

The AI Act demands two things from every business — documentation and training records. The KlarComply subscription covers both: your dashboard generates the evidence, your staff train themselves, and everything stays current automatically. One monthly fee, no further costs.

New from 1 October: data protection (GDPR) training with a verifiable training record — in the same subscription. Included from Team Plus; available for Starter and Team as an add-on (+€19 / +€39 per month, twelve-month minimum term, runs with the subscription).
OBLIGATION 1 · COMPANY

The documentation

AI inventory, internal policy, transparency measures — the file a regulator or enterprise customer will ask to see.

→ Included: generated from your dashboard, print-ready
OBLIGATION 2 · STAFF

The training record (Art. 4)

Every employee using AI needs demonstrable AI literacy — this duty has been running since February 2025, so you are not early, you are late.

→ Included: online training + certificate for all staff

This is what the evidence looks like: check a sample certificate live →

Starter

For small teams · up to 10 training seats
€49 / month
12-month minimum term
    Request a quote within 24 h
    Annual billing: 2 months free
    Popular

    Team

    The main plan · up to 20 training seats
    €99 / month
    12-month minimum term
      Request a quote within 24 h
      Annual billing: 2 months free

      Team Plus

      For growing companies · up to 50 training seats
      €199 / month
      12-month minimum term
        Request a quote within 24 h
        Annual billing: 2 months free

        Business

        For larger companies · up to 100 training seats
        €349 / month
        12-month minimum term
          Request a quote within 24 h
          Annual billing: 2 months free

          A question before you subscribe? kontakt@​… — reply within 24 hours, no sales call.

          Seats, not company size: you only invite the people who actually use AI. When someone leaves, the seat frees up — the certificate stays with them.

          Does this count towards our ISO certification?

          Yes — in a place you have to maintain anyway. ISO 9001 requires evidence of competence in clause 7.2, and so does ISO 27001. A certificate with a publicly verifiable ID fits straight in, without opening a second filing system. The reverse also holds: your auditor comes every year, and AI use without a documented rule is a finding they can write without invoking the AI Act at all. If you are working towards ISO/IEC 42001, the standard for AI management systems, then an inventory, a policy, defined roles and training records are exactly the building blocks it asks for.

          In full under frequently asked questions →

          More than 100 training seats?

          At that size we talk first. Setup, roles and the question of who keeps the evidence file at your end are not settled by clicking “Buy” — and we want to know what we are taking on before the invoicing starts.

          Request a quote

          Certificate Course: Your AI Compliance Officer

          Specialist course at your own pace plus an individual expert review of your documents — no appointment, in writing, within 5 working days. Afterwards your responsible person runs everything independently in the subscription. Please note: this course is taught in German only — the employee training included in the subscription is available in English
            €490
            one-off · incl. the course with 8 practical assignments, a written expert review and 30 days of follow-up questions · no further costs · €390 with an active subscription
            To the programme — book directly
            Initial assessment + setup recommendation within 24 hours
            Set up once, stay safe

            How the subscription works day to day — your effort: minutes, not days

            Compliance isn't a one-off project: new tools arrive, people join and leave, the law evolves. The KlarComply subscription keeps everything current and demonstrable — automatically.

              12-month minimum term · annual billing: 2 months free · the duty is fully met in every plan

              What each plan includes

              The first four rows are identical everywhere: booking Starter means the duty is fully met. What is tiered is the work we take off your hands beyond that.

              “In preparation” means announced, not yet available. We say so rather than leave it out.

              All features explained in detail (German) →

              Request a quote — more than 100 training seats

              Up to 100 seats you subscribe directly above — from Starter to Business. Beyond that we tailor the subscription to your size — just answer these few questions. Within 24 hours you receive an assessment of your starting position and a concrete quote by email. No sales call.

              No obligation · reply in 24h · no sales call
              Thank you! You'll receive your initial assessment and setup recommendation by email within 24 hours.

              Note: Our offers are aimed exclusively at companies, self-employed professionals and organisations (B2B). All materials support your own compliance documentation and do not constitute legal advice.

              Included in the subscription

              We read the legal texts so that you do not have to

              Every 14 days we check the official sources — the European Commission’s AI Office, the regulation’s implementation timeline, the supervisory authorities in the member states we serve — and the EU-level bodies that bind all of them. If something changes that affects you, you hear it from us. Preferably before it applies.

              • Not only once it is in force: we also report proposals and drafts while they are still being debated
              • Every entry dated and linked to the primary source — verifiable, not asserted
              • With a subscription you also get what to actually do, by email, with an acknowledgment log for your evidence file
              What has changed so far →

              The overview is freely accessible. What you need to do, and the proof of it, belong to the subscription — that is what an auditor or business customer asks for.

              How it works

              From unclear to demonstrable in four steps.

              01

              Quick-Check

              See in 2 minutes which obligations apply to you and where your gaps are. Free, no sign-up.

              2 MINUTES
              02

              Start & set up

              Pick a plan, enter your company details in the dashboard (tools in use, responsible person, rules) – your compliance base is ready in under an hour.

              DAY 1
              03

              Invite your team

              Invite employees by email – they complete the online training at their own pace. Everyone gets a certificate with a check-ID, and you see progress live.

              WEEK 1
              04

              Stay current

              Enter changes in the dashboard, your team confirms with one click. Certificates renew annually and automatically – your evidence stays audit-proof.

              ONGOING

              An individual rather than a company?

              The certificate for individuals is available on its own — with the same verifiable ID as in the company plan.

              To the course for individuals

              Frequently asked questions

              We asked ChatGPT — the AI says the Omnibus means we don't need this.
              Do keep asking, but ask more precisely. General questions get general answers, and those tend to be about high-risk AI — which genuinely was postponed, and which you almost certainly do not build. Ask these four questions instead, verbatim:

              1. “Has Article 4 of the EU AI Act applied since 2 February 2025 to companies that merely use AI?”
              2. “Is Article 50 listed in the penalty catalogue of Article 99(4) of the EU AI Act?”
              3. “Does Article 32 GDPR require technical and organisational measures when employees enter personal data into AI tools?”
              4. “Are large companies now requesting AI compliance evidence in supplier questionnaires?”

              Four times yes. We write these questions out for you because we know how the answers land — a vendor whose argument could not survive a fact-check would not hand you the questions.
              What does KlarComply expressly not do?
              We supply the documentation, not the legal assessment. What you will not get from us: a determination of whether a duty applies in your particular case — such as classification as an essential or important entity under Austria's NISG 2026, or as a provider under Art. 25 of the AI Act —, the classification of a specific system as high-risk AI, contract drafting, works agreements, data protection impact assessments and anything else that turns on a case-by-case judgement. Nor do we implement technical security measures or file notifications with authorities.

              For that you need a lawyer or a specialist adviser — and we expressly recommend one as soon as any of these questions arises. We would rather tell you where our limit is than sell you something we cannot deliver.

              What you do get from us is the part every company needs and nobody enjoys maintaining by hand: inventory, policy, training with a record per person, a verifiable certificate and a file you can produce at the push of a button.
              Does the AI Act apply the same way in every country? And what applies when we operate across borders?
              The AI Act itself applies uniformly. It is a regulation, not a directive — it takes effect directly in every member state, with no national transposition. So there is no situation where an obligation bites in Germany and is redundant in the Netherlands. For a company with sites in several countries, that is the good news: one AI inventory, one policy, one training record — not three.

              What differs is everything around it. First, who enforces: each member state designates its own market surveillance authority. Sell into several and you may deal with several — the duties stay the same, only the contact changes. Second, the adjacent law, and there the differences are substantial: employee representation (co-determination over technical systems in some states, consultation only in others, no standing body at all in others again), employment data protection through the opening clause in Art. 88 GDPR, trade secret protection and directors' liability.

              The rule of thumb for cross-border operations: one set of documents covers the AI Act. For the adjacent law, what governs is the law of the place of employment, not that of your headquarters — and in practice the safest course is to align with the strictest regime among your locations.
              We're ISO certified (9001 / 27001 / 13485). Does that help us — or become a problem?
              Both. Your management system is the easiest place for AI governance to dock: competence and training records are already required under ISO 9001 (clause 7.2) and ISO 27001, and an AI tool inside a process is a process change like any other.

              The problem runs the other way: your auditor comes every year, and AI use without a documented rule is a finding they can write up without invoking the AI Act at all. For certified companies the audit date is usually the more realistic trigger than any regulator. And if you are working towards ISO/IEC 42001 — the standard for AI management systems — an inventory, a policy, defined roles and training records are precisely the building blocks it asks for.
              We only use ChatGPT, Copilot & co. — does the AI Act even apply to us?
              Yes. As a professional user you are a 'deployer' under the Act — that is not a matter of interpretation but the definition in Art. 3. The AI literacy duty under Art. 4 has applied to you since February 2025, and once you use AI visibly towards the outside world, so do the transparency duties under Art. 50. The effort is modest — the problem is not difficulty, it is that almost nobody has done it, so it is missing at the moment it counts.
              The Omnibus softened Art. 4 — do we still need the training?
              First, the concession you would find anyway: Art. 4 on its own carries no fine of its own. The penalty catalogue in Art. 99(4) is exhaustive, and Art. 4 is not in it. Anyone selling you “€15 million for missing training” has not read the law.

              That changes little about your position, because the training was never the actual product. What counts is the evidence — and three parties demand it who take no interest in the Omnibus: your business customer in the supplier questionnaire, the data protection authority via Art. 32 GDPR the moment someone types customer data into an AI tool, and, if something goes wrong, your own management under its duty to organise the business properly. The duty itself also remains — 'ensure' became 'support', and doing nothing supports nothing.
              Is your certificate officially recognised? You issue it yourselves, after all.
              No — and that is the right answer, not the embarrassing one. For AI literacy under Article 4 there is no accreditation, no recognised certification body and no official seal. There is simply no authority that could award one; an official EU certificate for AI conformity does not exist. Anyone advertising one is selling you something that isn't there.

              What the regulation asks for is different anyway: you must take measures and be able to evidence them. That is exactly what our certificate is built for — it documents, per person, when they worked through which content and with what result, carrying an ID that any third party can check against our database at klarcomply.com/verify. That is more than a PDF without any means of verification can offer, and precisely what supplier questionnaires and audits ask for.

              To be clear about what we are not: we are not a state-recognised certification body, not an audit body and not a law firm. We do not assess whether your company complies with the regulation. We provide the training and the verifiable evidence of it.
              What does a breach realistically cost an SME?
              The statutory range goes up to €15M or 3% of turnover, and up to €35M / 7% for prohibited practices — for SMEs the lower amount applies (Art. 99(6)). Honestly though: authorities start with orders, not maximum fines, and nobody should be scaring you with market surveillance. The realistic damage looks different and arrives sooner: a tender you cannot enter because one field in the questionnaire stays empty.
              Is a one-off staff training enough?
              The law sets no fixed interval but requires an 'adequate', context-appropriate level of competence. The audit-proof standard: base training, an annual refresher, and onboarding for new joiners within their first weeks — all documented. That is precisely why KlarComply is a subscription rather than a one-off purchase: evidence from the year before last convinces nobody.
              Aren't the deadlines being postponed anyway? (status after the Digital Omnibus)
              Nothing that concerns you was postponed. The 'Digital Omnibus' has been in force since July 2026 and moved the obligations for high-risk systems to December 2027 and August 2028 respectively — that affects companies which build such systems. Unchanged: the AI literacy duty under Art. 4 (in force since February 2025), the Art. 50 transparency duties including their penalty range (in force since 2 August 2026), and the start of national market surveillance on the same day. In short: if you build high-risk AI you gained time. If you merely use AI, you gained nothing.
              We're not based in the EU — are we still in scope?
              Very likely yes. The AI Act applies extraterritorially: it covers companies placing AI systems on the EU market or whose AI output is used in the EU — including UK and US firms. Brexit changed nothing here.
              How quickly are we up and running?
              Access is created the moment you purchase — you receive a sign-in link by email, no password. Entering your company details in the dashboard takes under an hour, after which your evidence file exists and can be printed. Your staff need 35 to 45 minutes each for the training, at their own pace. Realistically you can answer questions the same day and are complete within a week.
              Is this legal advice?
              No. We provide compliance documentation, templates and implementation support. Our materials do not replace a legal review of your individual case — for high-risk scenarios we expressly recommend one in addition.

              Official sources

              When the question comes, the only difference is whether you can show something.

              A two-minute Quick-Check shows you where you stand. The rest is a roadmap – not a drama.