Article 4 changed on 27 July 2026. Amended, not deferred. See what that means for you
Vito Solutions logo Vito Solutions
EU AI Act Compliance Programme
Join the next cohort →
Founder-led Built for Irish SMBs · One week · Live, not a video library

Build your complete AI Evidence Pack in 7 days

Live guidance, all week. Real documentation with your company's name on it. Ready for the customers, procurement teams, insurers and regulators who are starting to ask.

One-time payment · Next cohort 17 August 2026 · 30-day money-back guarantee

You leave with a finished file, not notes

By the end of Day 7 you hold a completed AI Evidence Pack. One person does about four and a half hours across the week. Everyone else does ninety minutes, once.

The product

One dated file with your company's name on it

The complete AI Evidence Pack: thirteen artefacts exported as a single dated PDF. This file is what you are buying. Everything else on this page exists to produce it.

Hour one

Your file exists by the end of the first hour

A live 60-minute kickoff. We settle whether you are a provider or a deployer, and build your AI Tool Register together on the call.

Clarity

Know every AI system your business actually uses

Every tool, who uses it, what data it touches, including the AI hiding inside software you already pay for. Most owners expect two and find closer to eleven.

In writing

Know which obligations bind you, and which do not

Your provider-or-deployer determination, recorded with reasons. Getting this wrong is the costliest mistake in the file, so it is settled first.

Guardrails

Rules your business will actually follow

A one-page AI Use Policy plus plain data handling rules: what never goes into an AI tool, and what to do when it already has. Signed, not just circulated.

People

Training matched to each person's role

Ninety minutes, once, for everyone who uses AI at work. Built around how these tools fail and what each role risks, in the tools you already have.

Evidence

Every person leaves a signed record

An Individual Literacy Record for every person who uses AI in your business: dated, role-specific, and filed in your pack. This is Article 4's core evidence.

Rehearsal

Answer the questions before anyone asks them

The Day 7 Regulator Question Drill, live: what AI do you use, what did you do, show me. Scored, and logged in your file.

Internally

Something you can show internally

A Record of AI Literacy Training for each person. A private attestation, clearly labelled, because no official certificate scheme exists under the Act.

Support

A person, not a portal

Seven days of direct WhatsApp access to the founder who built the programme. Questions answered within one working day.

Sample Record of AI Literacy Training, marked as a private attestation
The Record of AI Literacy Training, issued to every person who completes the programme. Sample shown; clearly labelled a private attestation, because no official certificate scheme exists under the Act.

How it works

Virtual instructor-led, with a bounded 7-day support window - not an evergreen download, not an open-ended subscription.

Day 0

Live kickoff, 60 minutes

We work out whether you are a provider or a deployer, then build your AI Tool Register live on the call. You leave the first hour with section one of your file already done. Recorded if you cannot attend.

Days 1 to 6

Five steps, one file

Each step produces a section: what you use, what is off limits, your rules, your people, then assemble. One Builder does about four and a half hours; everyone else does ninety minutes, once. A one-person business runs the streamlined Solo Track: both paths combined, about six hours.

Day 7

The Regulator Question Drill

A live 45 minute rehearsal of the questions you could be asked, scored green, amber or red. Then the room archives and the file is yours permanently.

Don't wait until someone asks for it

The best time to document your AI governance is before anyone asks. Questions about how your business uses AI increasingly arrive from every direction: a customer running due diligence, a procurement questionnaire, an insurer at renewal, a board looking for governance answers, an investor or partner, or in time a regulator. Whoever asks, it is far easier to hand over a complete, dated AI Evidence Pack than to assemble policies, registers and training records under pressure with a deadline attached.

This is business readiness, not just compliance. The file you build in seven days stays yours to keep, review and update as your use of AI evolves. When someone wants to understand how AI is governed in your business, you answer with a document rather than a scramble, and that changes the tone of the whole conversation.

Pieter Human, founder of Vito Solutions

Founder-led, start to finish

Pieter Human, Founder, Vito Solutions

I run every part of every cohort myself: the live kickoff, the WhatsApp room, the Day 7 drill. I built every template in the pack and both training sessions. When you ask a question this week, the person who wrote the material answers it.

Before this I spent 25 years in technology inside large corporates across media, retail, financial services and fintech, where evidence had to survive being asked for.

See my background on LinkedIn

Pricing

Per person, one-time payment - no subscription. Built for businesses with one to ten people: freelancers, consultants, accountants, solicitors, developers, agencies. This first cohort is capped at 15 seats so every business gets real attention. When it is full, it is full.

Solo
The Solo Track: you are both Builder and participant, about six hours across the week. Same file, streamlined path.
€299
Per person, one-time
  • Live kickoff + 7 days of WhatsApp support
  • Your AI Tool Register and provider or deployer determination
  • AI Use Policy and data handling rules
  • Your signed training record
  • The full AI Evidence Pack, exported as a dated PDF
Get started, solo

More than 10 people? Get a quote - we'll split you across cohorts so the support group stays useful.

The Completed File Guarantee

Attend the kickoff and complete the guided steps during the seven days. If your evidence pack is not complete and exported by the end of Day 7, we work with you one to one until it is, at no extra cost. If you still do not have it, we refund you in full and you keep everything.

A 30-day money-back guarantee runs from the day you pay, either way.

90-second scope check The first page of your file

The three questions a regulator would ask first.

Answer them the way you would answer the Central Bank or the DPC: honestly. If the Act does not apply to you, we will say so and you keep your money.

1. Is anyone at your business using ChatGPT, Copilot, Gemini or Claude at work - including personal accounts you never approved, and AI features switched on inside software you already pay for?

2. Does anything you sell have AI in it - a chatbot on your website, an AI feature in your product, a tool built on top of someone else's model?

3. Are the people on the other end of your business - customers, staff, suppliers - in Ireland or anywhere else in the EU?

Why businesses are doing this now

The people asking first are not regulators. Enterprise customers in Ireland and the EU now ask for AI registers and training evidence in procurement. Insurers are starting to ask at renewal. The commercially painful questions arrive long before any authority does, and they all resolve to the same thing: show me the document.

A free awareness course leaves you with notes. This leaves your business with documentation. Watching videos does not produce evidence. Building your own file does, and the free courses, good as they are, do not build one line of it.

And yes, the obligation itself is real and current. The legal detail is further down this page, dated and sourced, for when you want it.

What actually changed on 27 July 2026

If you have read that the EU AI Act was postponed, you read correctly, but about a different part of it. Here is the separation that most coverage missed.

What was deferred

Obligations for stand alone high risk AI systems under Annex III moved to 2 December 2027. Obligations for high risk AI embedded in regulated products under Annex I moved to 2 August 2028. The deadline for national regulatory sandboxes moved to 2 August 2027.

What was not deferred

Article 4, the AI literacy obligation, was not deferred by a single day. It was amended. From 27 July 2026 you are required to take measures supporting the development of AI literacy among your staff and others operating AI on your behalf, rather than to ensure a sufficient level of it.

An obligation of effort is harder to prove, not easier

The old wording asked what level your people had reached. The new wording asks what you did. That sounds lighter, and in one sense it is, because there is no measurable standard to hit for any individual. But it moves the entire question onto ground where the only admissible answer is documentary. You cannot demonstrate an effort you did not record.

There is a second point that almost nobody has noticed. The stricter version of Article 4 was in force from 2 February 2025 to 26 July 2026. That is roughly eighteen months during which the higher standard applied to your organisation. The softening is not retrospective. If you did nothing during that window, the softening does not clear it.

Regulation (EU) 2026/1744 of 8 July 2026, published in the Official Journal on 24 July 2026, in force 27 July 2026, amending Regulation (EU) 2024/1689.

What happens if you do nothing

Enforcement is not a future abstraction. From 2 August 2026, Ireland's fifteen designated regulators begin actively supervising Article 4. Here is what doing nothing actually exposes you to.

From 2 Aug 2026

A regulator can ask for your file

The fifteen sectoral authorities, including the Central Bank, the Data Protection Commission and Coimisiun na Mean, can request documentation of the measures you took. An empty folder is also an answer, and it is the one that invites a closer look.

The multiplier

Everything else gets worse without a record

The Act tells regulators to weigh the measures you took when setting penalties in any wider investigation. If untrained staff misuse a chatbot or a high-risk tool, the missing training record does not stay a separate problem. It counts against you on the main one.

Before any regulator

Deals and cover start asking first

Enterprise buyers in Ireland and the EU already require AI registers and training evidence in procurement, and insurers are starting to ask at renewal. The commercially painful questions arrive long before any authority does.

The one-way door

You cannot backdate evidence

A record created after the letter arrives is dated after the letter arrived. The entire value of your file is that it existed before anyone asked. That is the one thing money cannot fix later.

Not deferred

The prohibitions already apply

Article 5's banned practices have applied since February 2025, and the transparency duties arrive 2 August 2026. Neither was softened in July. If a tool you already pay for is quietly scoring your staff's emotions, that is not a paperwork problem.

The honest limit

What a file cannot do

No training or document guarantees you will never be fined, and anyone promising that is lying to you. What the file does is make you the business that took the obligation seriously, with dates to prove it. Regulators, buyers and insurers all treat that differently.

Why this can't wait until next quarter

This isn't a countdown someone invented to sell you a course. It's the actual regulatory timeline.

  • 1 Aug 2024 - The EU AI Act enters into force
  • 2 Feb 2025 - Article 4 becomes law. No SME exemption. No headcount threshold.
  • 25 Jul 2025 - Ireland designates 15 sectoral regulators to enforce the Act, including the Central Bank of Ireland, the Data Protection Commission, and Coimisiún na Meán
  • 2 Aug 2025 - The Act's penalty provisions become active
  • 2 Aug 2026 - National regulators begin actively supervising and enforcing Article 4

Sources: Regulation (EU) 2024/1689; S.I. No. 366/2025 - European Union (Artificial Intelligence) (Designation) Regulations 2025; DETE General Scheme of the Regulation of Artificial Intelligence Bill 2026; European Commission AI Office Q&A on AI Literacy (7 May 2025).

Common questions

Hasn't the AI Act been delayed?

Partly, and not the part that affects you. Regulation (EU) 2026/1744 deferred the obligations for high risk AI systems to 2 December 2027 and 2 August 2028. Article 4, the AI literacy obligation, was not deferred at all. It was amended, and the amendment took effect on 27 July 2026. If anything the amendment makes documentation more important, because the test is now what measures you took rather than what level your people reached.

There's a free course out there - why pay for this?

Take a free overview too if you haven't already - genuinely good. But it's built to be generic across every sector and role. Article 4 itself asks for training tailored to your technical knowledge, your actual tools, and who they affect. This kit is built to close exactly that gap, with a documented record a free overview doesn't produce.

Will this guarantee we won't be fined?

No training can guarantee that, and anyone who tells you otherwise is lying to you. Here's the honest picture. Article 4 itself doesn't carry its own fine in the regulation text yet - Ireland is still legislating the exact penalty through the Regulation of Artificial Intelligence Bill 2026, and no Irish enforcement action has tested "sufficient" yet. But untrained staff using AI systems that fall under other parts of the Act - customer-facing chatbots, high-risk uses - can expose you to fines of up to €15 million or 3% of global turnover under those separate articles. And the Act itself tells regulators to weigh the measures you took when setting penalties in any wider investigation - an absent training record works against you. This isn't about dodging one specific fine. It's about not being the business that gets made an example of when something else goes wrong. What you get here is real, documented, role-specific evidence rather than nothing.

We don't have time.

Most people spend ninety minutes, once, any time between Day 2 and Day 5. One person, the Builder, spends about four and a half hours across the week, and that is the person who ends up holding the file. A one-person business runs the Solo Track instead: everything combined, roughly six hours across the seven days. Nobody is blocking out a training day.

We're not really "using AI" as a business.

If anyone in your business uses ChatGPT, Copilot, Gemini, Claude, or an AI feature built into other software - even informally - you're a deployer under the Act. There's no SME carve-out and no minimum headcount. Run the 90-second self-check above if you're not sure. The course's first exercise walks you through listing what you actually use, and it often surfaces more than expected.

I'm a one-person business. Does this still work?

Yes, and deliberately so. You are both the Builder and the participant, so instead of asking you to combine two tracks, the Solo Track sequences everything into one path across the same seven days: about six hours in total. You attend the same live calls as everyone else and finish with the same thirteen-artefact evidence pack. Where the pack asks who is accountable, "Business Owner" in every row is a complete and honest record, and the role matrix becomes the hats you wear rather than departments you have.

Do I need a second person for the Day 7 drill?

You need a second voice, not a second employee. The drill works because someone unfamiliar with your file asks the questions, so a solo business can bring an accountant, a mentor, a spouse or another business owner. Fifteen minutes of their time, and the rehearsal is genuinely better for them not knowing where anything is.

Do we need a certificate?

No official certificate exists under the Act, and no training provider can legally give you one that carries regulatory weight. The European Commission's own AI Office has said directly that an internal, documented training record is sufficient, and there's no requirement to obtain external certification. What you need is exactly what your AI Evidence Pack gives you: a genuine, dated, defensible record you can produce if asked. We do issue a Record of AI Literacy Training for each person, clearly labelled a private attestation, because people want something to show internally. The Pack is the substance behind it.

Which Irish regulator actually enforces this for my business?

Ireland split enforcement across 15 sectoral regulators instead of one central body. Financial services answers to the Central Bank of Ireland. Healthcare answers to the HPRA. Media and platforms answer to Coimisiún na Meán. Telecoms answers to ComReg. Most general businesses using AI tools day-to-day sit under the standard market surveillance route. The Ireland-specific legal context module in your Day 0 kickoff covers exactly where your business falls.

What if I can't make the live kickoff session?

It's recorded, so you can watch it any time within your cohort's 7-day window. The WhatsApp group still opens for you right after the live session and stays open for the full 7 days regardless of whether you attended live.

What happens after the 7-day WhatsApp group closes?

The group archives and stops being monitored - the support window is genuinely time-boxed so it stays responsive while it's open. You keep the training, your completed evidence pack, the policy, and every record permanently; only the live support window ends.

Done properly, with real support

Join the 17 August 2026 cohort and have a real, documented, instructor-supported AI-literacy record on file within a week.

Join the next cohort