Services · AI GDPR & EU AI Act: using AI on solid ground
In shortAnyone using AI has obligations under the GDPR and the EU AI Act. We record which AI systems you use, classify them by risk, check the data flows and create clear documentation with simple rules for your team. Legal questions in individual cases go to your legal adviser.
What we check
- AI inventory: which AI tools does your team use, officially and unofficially?
- Risk classification under the EU AI Act
- Data flows: which data goes where, and where is it processed?
- Contracts: data processing agreements and provider settings
- Transparency and control: where are notices and human review needed?
What you get
- An AI inventory with risk classification
- A short AI policy for your team
- An action plan by priority
- Documentation you can show customers, partners and auditors
Digitalisation with funding: many of these services can be financed with the KfW development loan 511/512, with a grant for IT security and AI.
More on funding Frequently asked questions
Does the EU AI Act apply to small businesses?
Yes. Even businesses that only use AI tools are deployers under the AI Act and have obligations, for example on the AI literacy of their staff.
What is an AI inventory?
A list of all AI systems in the company with purpose, data, provider and risk class. It is the basis for every further measure.
Does the check replace legal advice?
No. We handle the technical and organisational side. Your legal adviser answers legal questions in individual cases.
Want to know whether your use of AI is properly set up?
General information, not legal advice.