Frequently Asked Questions
“Isn’t it too early? The regulations are still being drafted.”
AI Act Article 4 (AI literacy) and Article 5 (prohibited practices) have been in effect since February 2, 2025. GPAI rules, governance, and sanctions apply since August 2, 2025. High-risk AI systems will be fully regulated from August 2, 2026.
“Too early” was 2024. Now it’s time to implement.
See the regulatory timeline —>
“We can handle this ourselves.”
You can. The question is whether your IT team will realistically get to it — they have their own projects, backlog, and priorities. The L1 governance package gives you a ready-made framework in 2-3 weeks with minimal disruption to your operations. After that, you own and manage it yourselves.
Many companies “handle it internally” and six months later realize they haven’t made progress. A hybrid approach — we deliver the framework, you implement it — tends to be the most effective.
See what’s included in the L1 package —>
“It’s too expensive.”
L1 Managed for a company with 50-99 employees costs CZK 79,900. For comparison: a legal opinion covering 10% of the scope runs CZK 200,000-400,000. A consultant without tools or templates costs CZK 300,000-500,000. A Big 4 audit exceeds one million.
With L1, you get complete governance documentation, templates, training, and consulting. ROI is 3-8x within 12 months — and that’s without counting potential fines (AI Act: up to EUR 35 million / 7% of global turnover).
See pricing by company size —>
“Does the AI Act even apply to us?”
If your employees use ChatGPT, Microsoft Copilot, Claude, Grammarly, or any other AI tool — you’re a GPAI deployer. Deployer obligations apply from August 2025.
78% of employees use AI tools without their IT department’s knowledge. The AI Act doesn’t differentiate by company size — what matters is what you do, not how many people you have.
Check your regulatory exposure —>
“An AI policy is all we need, right?”
An AI policy is 1 of 9 documents you need. Beyond the policy, you’re missing an AI tool inventory, risk assessment, employee guidelines, obligation assessment, training, incident response plan, monitoring, and a regulatory overview.
A policy without processes and tools is just paper in a drawer — it won’t satisfy a regulator.
“Our lawyer will take care of it.”
A lawyer handles legal interpretation — what the law says and what your obligations are. But you also need operational implementation: setting up processes, preparing documentation, training employees, establishing monitoring.
That’s not what a lawyer does. Many of our clients have both a lawyer and us — the lawyer handles the legal side, we handle the practical side.
Let’s discuss your specific situation —>
“Our competitors aren’t doing it either.”
87% of Czech companies use AI tools without any rules in place. Whoever addresses this first gains a competitive advantage — enterprise customers and investors will require compliance as a condition for doing business.
Plus: the NIS2 supply chain effect means that if your clients fall under NIS2, they’ll require compliance from you too.
Get ahead of the competition —>
“How much time will it take?”
L1 Managed governance package: 2-3 weeks with minimal disruption to your operations. We do most of the work — from you, we need a discovery meeting (2 hours), access to stakeholders, and final approval of documents.
For comparison: internal implementation without an external framework typically takes 4-6 months.
Book a consultation and schedule a start date —>
“We don’t need to address all regulations at once.”
You don’t have to. But EU regulations intentionally overlap — GDPR, AI Act, NIS2, Data Act, and DORA share requirements for risk management, incident management, documentation, and training. Addressing them individually means duplicated work.
Our L1 package covers all 5 regulations in a single project. You can start with the highest-priority regulation and address the rest gradually — but the framework is ready for everything.
See how regulations overlap —>
“What exactly do we get?”
9 ready-to-use documents that your company will actually put to work:
- AI Usage Policy — clear rules on what employees can and cannot do with AI tools
- AI Tool Inventory — we map out who uses what (including tools you didn’t know about)
- Risk Assessment — which tools are fine and where action is needed
- AI Tool Obligation Assessment — what you must comply with when employees use ChatGPT, Copilot, etc.
- Regulatory Overview for Your Company — which laws apply to you and what they specifically require
- Employee Training — so your people know how to use AI safely and in compliance with the law
- Status Assessment — where you stand today and what still needs to be addressed
- Next Steps Plan — a concrete roadmap of what to do and in what order
- Consulting Hours — dedicated time for your questions and specific situations
You own all documents — it’s a one-time delivery, not a subscription. Nothing is locked in.