Member of BISG e. V. · Düsseldorf +49 151 12479963sachverstaendiger@itschulte.deClient login ISMSDEEN

Home / AI consulting

UNDERSTAND AI · SPOT OPPORTUNITIES · SHAPE THE FUTURE

Introduce AI that is audit-proof and economically sound

From status analysis to use cases, technical integration and legal safeguarding under the EU AI Act and Cyber Resilience Act, with an independent auditor’s eye.

Heinrich Markus Schulte explaining responsible AI in a meeting: EU AI Act, risk management, governance, secure integration and practical implementation

APPROACH

Five steps to AI you can take responsibility for

  1. 01

    Lay the foundations

    Status check and maturity with a view to the AI Regulation.

  2. 02

    Find use cases

    Process workshops, quick wins and strategic projects.

  3. 03

    Implement & integrate

    Low-code tools, ChatGPT via Azure, custom algorithms.

  4. 04

    Make data usable

    Data quick checks and intelligent data pipelines.

  5. 05

    Introduce it on a sound legal basis

    Governance, policies, training, AI officer as a service.

EU AI ACT & CYBER RESILIENCE ACT

Two frameworks, one governance

MODULE A

AI compliance under the EU AI Act

Risk classification, compliance roadmap, technical and legal documentation, preparation for conformity assessments, training.

MODULE B

Cyber Resilience Act

Security requirements, vulnerability and patch management, CE marking, technical documentation, supply chain review.

MODULE C

Interfaces & synergies

Common governance and documentation for products under several frameworks, such as AI software with IoT components.

EU AI Act risk classes: unacceptable, high, limited and minimal risk
Four risk classesThe AI Act regulates AI by risk: prohibited practices, high-risk systems with conformity assessment, transparency obligations and systems without specific obligations. Classification is the first step of any AI compliance.

FURTHER TOPICS

AI that takes data protection and customers seriously

AI and data protection

GDPR alignment, secure processing, anonymisation and pseudonymisation.

Chatbot integration

Round-the-clock support, shorter response times, handover of complex cases to humans.

AI policies

Ethics and compliance guidelines for transparent, fair and future-proof use.

AI use cases: forecasting, adaptive manufacturing, facial recognition

FREQUENTLY ASKED QUESTIONS

Good to know

Does the AI Act apply if we only use ChatGPT or Copilot?

Yes. Anyone who uses AI systems professionally is a deployer under the AI Act. Since 2 February 2025, at least the obligation to ensure AI literacy among employees applies (Art. 4). Depending on the use, transparency obligations or obligations for high-risk systems are added.

Which deadlines apply?

Prohibitions and AI literacy since 2 February 2025, obligations for general-purpose AI models since 2 August 2025, transparency obligations since 2 August 2026. High-risk AI under Annex III follows from 2 December 2027, under Annex I from 2 August 2028.

When is an AI system high-risk?

For example, if it is used in HR processes such as candidate selection, in credit scoring, in critical infrastructure or in education, or if it is a safety component of a regulated product. The free AI Act self-check provides an initial classification.

How should we start?

With an AI register and a classification of your applications. This is followed by a policy, training and, where necessary, documentation for high-risk systems. In a free initial consultation we clarify what has priority for you.

How do AI and data protection fit together?

Through a GDPR review before deployment, secure processing, anonymisation or pseudonymisation and clear rules on which data may go into which tools. This belongs in every AI policy.

FREE

EU AI Act Compliance Assessment

Find out in a few minutes which risk class your AI systems fall into and which obligations follow.

Start assessment or arrange an appointment directly