Educational content

Deep-dive lessons.

Long-form explainers on each framework. Built to be the clearest resource available on these topics, in English and German.

EU AI Act Fundamentals

Four risk tiers, who is covered, what triggers each tier, and when each provision takes effect.

ICT risk management requirements, incident reporting, third-party register, and resilience testing.

NIS2 in Practice

Sector classification, registration thresholds, security measures, and breach notification timelines.

Model risk management under AT 4.3, IT risk under AT 7.2, and how AI-specific guidance is evolving.

IT strategy, operations, outsourcing, and how BAIT interacts with the new AI-related MaRisk addendum.

BaFin AI Supervision

How BaFin examines AI systems in scope, what evidence they ask for, and how to prepare.

ISO 42001 Certification

Building an AI management system, the certification path, and how it complements EU AI Act compliance.

SchutzIQ — EU compliance platform