Why do I need this?

In almost every company, people in the office now work with AI: rewording quotations, answering complaints, Copilot in Word and Outlook, having a report explained to them. That is a good thing. But it comes with a condition.

Not sure whether and how this applies to your company? Five short questions →

Article 4 of the EU AI Act has applied since 2 February 2025 – to providers and deployers of AI systems, which means every company that uses AI tools, not just software makers. It says: whoever uses AI in their company must take appropriate measures to promote the AI literacy of their people. Since the revision in July 2026 the provision is deliberately soft (“ensure” became “promote”): no prescribed level, no certificate, no fixed schedule of fines for missing records (Article 4 in detail · what else the AI Act regulates for companies). What has not changed: data protection, the duty of care of management, and liability when something goes wrong. And one question that comes sooner or later:

“How did you make sure your people can do this?”

That question can come from your insurer after a data protection incident, from a customer in a supplier questionnaire, from an auditor during ISO certification, from a data protection officer, from a supervisory authority, or from a lawyer after an employee has entered customer data into ChatGPT. Anyone with nothing in hand at that point has a problem. Anyone who can produce traceable records is in a considerably better position.

AI4Cert documents an important building block of AI literacy in your company. One record per employee, showing that on day X this person demonstrated that they know the rules (enter no confidential data, check results, responsibility stays with the human being) and that they can use AI sensibly for their own tasks. Plus a combined record for the company. Valid for twelve months, then renewed. No training course, no consultant, no appointment – an online assessment of around an hour per person, in two parts: Part A (ground rules, 25 minutes in one sitting) and Part B (three tasks with an AI, 15 to 20 minutes each, and they can be done on different days).

Who does it apply to? The people who actually use AI: office, sales, work scheduling, costing, management. The regulation expressly also covers contractors and service providers working with the systems on the company's behalf. Anyone who does not work with AI is not concerned – in many companies the group in question is considerably smaller than the whole workforce.

What belongs in an AI literacy training and how to document that it has sunk in →

How does it work?

For the company

1. You register your company: company name, your name, your e-mail address. You confirm the e-mail and you are in.
2. You enter your employees: name, e-mail and what kind of work they do (office, sales, management, skilled trade, workshop). The practical tasks follow from that.
3. Every employee receives an e-mail with their own link. You see in a list who has not yet taken the assessment, who has passed and who has not.
4. At the end you download the combined record: a PDF with all employees who passed, with dates and validity. That goes into your files. Plus a seal for your website or e-mail signature, if you would like one.
5. Two months before expiry an e-mail reminds you: “Records are expiring.” Your people take the assessment once more, billed the same way as the first time.

For the employee

1. You receive an e-mail: your company has registered you for the AI literacy record. You click the link and choose a password.
2. You can see in advance what will be assessed, how long it takes and what happens if you do not pass. There is no study material: anyone who works with AI day to day and knows the ground rules will pass.
3. Part A – ground rules: 20 multiple-choice questions. Data protection, what you never give an AI, checking results, responsibility. Three of them are mandatory questions; getting those wrong means not passing, whatever the rest looks like.
4. Part B – practice: three tasks from your own work. For example: “A customer is complaining about a scratch, use the AI to draft a reply.” You write your instruction to the AI, see the response, and assess or improve it. One of the three tasks contains confidential data; entering it into the AI means not passing. Questions and practical tasks are reviewed every quarter against new AI developments and updated where needed – so the yearly renewal shows whether the knowledge is still current.
5. The result comes immediately: pass or not, with points per part. If you pass you receive your record as a PDF with a reference number. If you do not pass you can see what was missing, and after 24 hours you have a second attempt at no extra cost. If you consider the assessment wrong, you click “appeal” and a human being takes a look.

For trainers, consultants and associations

Do you train or advise companies on AI and want to give them something solid at the end? Or are your members asking what they need to do about the AI Act? AI4Cert runs as a partner under your name and logo, at your price. You add your companies, everything else works as described above. Talk to us.

Would you rather just refer companies without managing anything yourself? Then you receive a share of the revenue from the companies that come through you – how the partner programme works.

What AI4Cert is not

Not a training course and not a class – only the assessment with a record. Not a state or accredited certification body; the law does not prescribe such a certificate either. The record shows that a person demonstrated ground knowledge and practical skill in working with AI at a given point in time, and it documents that existing knowledge was assessed and identified gaps were addressed. The record is a building block of a company's implementation of Article 4 of the EU AI Act – no more, but no less either.

Frequently asked questions

Is AI training for employees mandatory? Article 4 of the EU AI Act requires companies to take appropriate measures to promote the AI literacy of their staff. The law does not prescribe any particular training course or certificate, and there is no fixed schedule of fines for missing records. The question “How did you make sure?” comes up anyway – from your insurer, your customers, an auditor, a data protection officer. That is when a documented record helps. The short answer in detail →

What does Article 4 of the EU AI Act ask of a company? That employees who work with AI know what it can do, what it makes up, what must never go into it and when it is better not to use it – appropriate to their role. How the company achieves that is left to the company. AI4Cert documents that the employees can do it.

How do I document my employees' AI literacy? With an assessment that records who did what, when and with what result. At AI4Cert: 20 questions on the ground rules and three practical tasks with a real AI. Whoever passes receives a record with a reference number; the company receives a combined record for its files.

Is there an official AI certificate? No. There is no official body that issues one. AI4Cert is neither an authority nor a certification body, but a documented building block of your implementation.

What does the AI literacy record cost? €29 per employee and year, €24 from ten employees, €19 from fifty (excl. VAT). Billing starts only when an assessment begins; no subscription.

Does it make sense for a small business? Especially there. The assessment takes about an hour, in stages, and works on a phone – no seminar, no consultant, no day lost. And the tasks come from everyday working life.

What happens to the data? Assessment answers are personal data and are stored only for the evaluation and the record. Your company sees who passed and who did not; the individual answers are seen only by the employee.

Can someone verify a record? Yes. Every record has a reference number and a public link showing: passed, type of work, valid until. No details.

What if the AI tools change? The tasks are reviewed every three months and replaced or revised where needed. That is why a record is valid for twelve months – after that, a new assessment shows the knowledge is still current.

Do I have to study anything beforehand? No. Anyone who works with AI every day knows the rules from practice. If you are unsure about Part A, the ground rules are in any company data protection leaflet.

What is AI literacy? The term used in Article 4 of the EU AI Act for what this is about: that employees know what an AI can do, what it makes up, and when not to trust it.

Is an internal AI policy or checklist enough? A policy says what is supposed to apply. It does not show whether each individual has understood it. AI4Cert assesses exactly that and documents it per person – the two complement each other.

Do I also need an external AI officer or consultant? That depends on the company. An external officer advises on AI use and risks as a whole; AI4Cert covers a single, frequently requested building block: the documented record of employee competence. The two can be used independently of each other.

Do all employees get the same tasks in Part B? No. For each assessment Part B draws two standard tasks and one borderline task from a pool matched to the type of work and, where available, the industry. Tasks the person has not seen in the past twelve months are preferred. The pool keeps growing; where an industry does not yet have its own pool, cross-industry tasks are used so that nobody is left without a practical task.

Does the record renew automatically, is anything charged automatically? No. Two months before expiry a reminder e-mail says the records are about to expire. The company then decides whether its people take the assessment again; there is no automatic charge and no subscription.