Shadow IT Identification
We find unregulated tools like DeepL or ChatGPT and establish secure alternatives (e.g. Azure OpenAI).
Risk Mitigation
ConsultingServices.aiAI Consulting for SMEsRisk Mitigation & Security
EU AI Act & Compliance: Using AI legally.
The unregulated use of AI tools carries liability and privacy risks. We audit your AI usage, uncover Shadow IT, and develop GDPR and EU AI Act compliant guidelines for your team.
⏱ Audit Duration
~ 2 - 4 Weeks
(Analysis & Policy)
Initial Audit
from ~3,500 €
(Consulting)
Running Costs
None
(Fixed Price)
EU AI Act Compliance (Factsheet)
Download management summary as a compact fact sheet (PNG/PDF).
Target Audience
For whom is an AI Audit crucial?
Perfect for:
- Companies already utilizing ChatGPT & Co. (even unofficially).
- Executives looking to proactively minimize personal liability risks.
- Organizations requiring safe guidelines for their employees.
Not for:
- Startups training their own foundational High-Risk Base Models.
- Companies strictly banning any use of AI.
- Pure legal counseling (we are IT strategists, not lawyers).
Application Areas
Where an AI Audit offers maximum leverage
GDPR & Customer Data
We ensure your LLMs do not leak sensitive data into public training sets of global corporations.
Data ProtectionVendor Management
We screen IT third-party vendors for compliance with the AI Act's transparency obligations.
Third-Party RiskYour Benefits
What specifically changes
Liability Protection
You document risks and avoid severe GDPR or EU AI Act fines.
Team Clarity
Through corporate policy, employees know precisely which tools are permitted.
Customer Trust
A transparent AI strategy is a prime competitive advantage during B2B audits.
Room for Innovation
With installed legal guardrails, the team can experiment without fear.
Approach
How the audit works
01
Status-Quo Analysis
Which AI systems are productively or unofficially used? How do the data flows look currently?
02
Risk Classification
Every app is classified according to the EU AI Act. High-risk systems receive strict control protocols.
03
Corporate Guidelines
We draft an AI policy in coordination with your DPO and implement private Enterprise environments.
The Backend
Technical Safeguards
Data Loss Prevention (DLP)
Sensitive material (credit cards, IDs) is blocked or masked by scanners before it ever reaches an AI.
Private AI Enclaves
The safest route: Hosting the AI infrastructure in fully sealed cloud instances (Azure Frankfurt) rather than public endpoints.
Frequently Asked Questions
EU AI Act — clearly answered
Who does the EU AI Act apply to?
Every company offering AI or using it intensively in core processes within the EU – regardless of employee count.
Isn't GDPR enough?
No. GDPR regulates personal data. The AI Act forces additional transparency ("Human Oversight") and risk documentation.
How dangerous is ChatGPT Free?
Extremely dangerous for companies: OpenAI trains on inputs. Confidential company secrets could become globally accessible.
Concrete Offer
What you get, how long it takes, and how risk is reduced.
- Result
- Risk classification, action list, documentation gaps, and a pragmatic implementation roadmap.
- Timeframe
- 1-3 weeks
- Price anchor
- from 1,900 EUR
- Best fit
- Best when AI use needs to become legally and organizationally cleaner.
Risk reduction
- Pilot before rollout
- Human-in-the-loop and fallback rules
- Documented data flow and handover
Proof material
Review sample deliverables before deciding: pilot report, implementation plan, prompt and fallback set, handover documentation.
View work examplesStandard process
- Maturity check and initial consultation
- Scoped pilot with realistic data
- Rollout decision and handover
Not included by default
External licenses, large-scale data cleanup, major ERP/CRM rebuilds, and legal case-by-case advice are scoped separately before project start.