Frequently Asked Questions
“Isn’t it too early? The regulations are still being drafted.”
AI Act Article 4 (AI literacy) and Article 5 (prohibited practices) have been in effect since February 2, 2025. GPAI rules, governance, and sanctions apply since August 2, 2025. From August 2, 2026 the AI Act is generally applicable, including Article 50 transparency. High-risk obligations were deferred by Regulation (EU) 2026/1744 “Digital Omnibus on AI” to December 2, 2027 (Annex III) and August 2, 2028 (Annex I).
“Too early” was 2024. Now it’s time to implement.
See the regulatory timeline —>
“We can handle this ourselves.”
You can. The question is whether your IT team will realistically get to it — they have their own projects, backlog, and priorities. The L1 governance package gives you a ready-made framework in 2-3 weeks with minimal disruption to your operations. After that, you own and manage it yourselves.
Many companies “handle it internally” and six months later realize they haven’t made progress. A hybrid approach — we deliver the framework, you implement it — tends to be the most effective.
See what’s included in the L1 package —>
“It’s too expensive.”
L1 Managed for a company with 50-99 employees costs CZK 79,900. For comparison: a legal opinion covering 10% of the scope runs CZK 200,000-400,000. A consultant without tools or templates costs CZK 300,000-500,000. A Big 4 audit exceeds one million.
With L1, you get complete governance documentation, templates, training, and consulting. ROI is 3-8x within 12 months — and that’s without counting potential fines (AI Act: up to EUR 35 million / 7% of global turnover).
See pricing by company size —>
“Does the AI Act even apply to us?”
If your employees use ChatGPT, Microsoft Copilot, Claude, Grammarly, or any other AI tool — you’re a GPAI deployer. Deployer obligations apply from August 2025.
78% of employees use AI tools without their IT department’s knowledge. The AI Act doesn’t differentiate by company size — what matters is what you do, not how many people you have.
Check your regulatory exposure —>
“An AI policy is all we need, right?”
An AI policy is 1 of 9 documents you need. Beyond the policy, you’re missing an AI tool inventory, risk assessment, employee guidelines, obligation assessment, training, incident response plan, monitoring, and a regulatory overview.
A policy without processes and tools is just paper in a drawer — it won’t satisfy a regulator.
“Our lawyer will take care of it.”
A lawyer handles legal interpretation — what the law says and what your obligations are. But you also need operational implementation: setting up processes, preparing documentation, training employees, establishing monitoring.
That’s not what a lawyer does. Many of our clients have both a lawyer and us — the lawyer handles the legal side, we handle the practical side.
Let’s discuss your specific situation —>
“Our competitors aren’t doing it either.”
87% of Czech companies use AI tools without any rules in place. Whoever addresses this first gains a competitive advantage — enterprise customers and investors will require compliance as a condition for doing business.
Plus: the NIS2 supply chain effect means that if your clients fall under NIS2, they’ll require compliance from you too.
Get ahead of the competition —>
“How much time will it take?”
L1 Managed governance package: 2-3 weeks with minimal disruption to your operations. We do most of the work — from you, we need a discovery meeting (2 hours), access to stakeholders, and final approval of documents.
For comparison: internal implementation without an external framework typically takes 4-6 months.
Book a consultation and schedule a start date —>
“We don’t need to address all regulations at once.”
You don’t have to. But EU regulations intentionally overlap — GDPR, AI Act, NIS2, Data Act, and DORA share requirements for risk management, incident management, documentation, and training. Addressing them individually means duplicated work.
Our L1 package covers all 5 regulations in a single project. You can start with the highest-priority regulation and address the rest gradually — but the framework is ready for everything.
See how regulations overlap —>
“What exactly do we get?”
9 ready-to-use documents that your company will actually put to work:
- AI Usage Policy — clear rules on what employees can and cannot do with AI tools
- AI Tool Inventory — we map out who uses what (including tools you didn’t know about)
- Risk Assessment — which tools are fine and where action is needed
- AI Tool Obligation Assessment — what you must comply with when employees use ChatGPT, Copilot, etc.
- Regulatory Overview for Your Company — which laws apply to you and what they specifically require
- Employee Training — so your people know how to use AI safely and in compliance with the law
- Status Assessment — where you stand today and what still needs to be addressed
- Next Steps Plan — a concrete roadmap of what to do and in what order
- Consulting Hours — dedicated time for your questions and specific situations
You own all documents — it’s a one-time delivery, not a subscription. Nothing is locked in.