EU AI Act Readiness Training

AI is already entering daily work, through approved platforms, vendor products, and tools employees find on their own. This awareness-level EU AI Act readiness training helps your teams spot that use, understand the regulation's risk-based logic in plain language, and turn uncertainty into an action plan, without presenting the program as legal advice or a compliance certification.

modules
6
hours
12
Contact us

Why this training

Why AI governance & compliance matter

Most teams treat EU AI Act readiness as a research problem: read enough summaries and the compliance picture clarifies itself. It doesn't. The harder question is where AI is already in use inside your own organization and who owns each use. It is also worth asking whether the people around it understand the limits of their role.

AI arrives through a sanctioned assistant, a feature buried in a vendor platform, a customer-facing product, or an employee's own browser tab. Without an inventory, governance starts from guesswork. This training gives compliance, legal, risk, IT, procurement, HR, and business teams a shared way to talk about all of it.

Participants learn the regulation's risk-based logic and the roles organizations may hold, then apply it to their own workflows. They map AI use, test transparency and oversight controls, organize documentation, and ask vendors questions that go beyond a “compliant” label. Like every program in our AI training catalog, the work uses your own material. You leave with an AI-use inventory, literacy outline by role, vendor question set, and 90-day action plan with named owners.

This is not legal advice, an audit, or a promise that finishing a course makes an organization compliant, and Zeo is not a law firm. Every exercise says so upfront, and the legal judgment on a specific system stays with qualified counsel. Leadership teams that need the wider governance strategy before this operational work begins can start with AI training for executives and leaders instead.

You can't govern what you can't see

AI use rarely sits in one system or department. An inventory brings approved tools, embedded vendor features, experiments, and unsanctioned use into one view. The organization can then ask the right questions before assigning controls.

Which role does your organization actually hold?

The EU AI Act uses a risk-based framework and distinguishes different roles around an AI system. Teams need a shared, plain-language way to identify where the organization may sit and which uses deserve closer legal, technical, or operational review.

Literacy makes policy a daily habit

Policies don't work if staff can't recognize an AI-enabled task and its limits. They also need to see the moment a human has to take over. Role-relevant AI literacy turns broad principles into daily habits for users, managers, buyers, and reviewers.

Vendor claims don't equal accountability

A product being called secure, enterprise-ready, or compliant doesn't say how it uses data, documents its limitations, supports oversight, or divides up responsibility. Someone still has to ask those questions directly. Procurement and business owners need a repeatable question set they can run every time.

Show your work

An inventory, named owners, review records, escalation paths, and change logs help teams explain how an AI use was assessed and who accepted the remaining risk, with proportionate accountability as the aim.

Syllabus

Training syllabus

  1. EU AI Act essentials in plain language

    120 minBeginner

    A working orientation to the EU AI Act's scope, risk-based structure, broad categories, and the roles organizations may hold around an AI system. The session stays at awareness level and teaches participants what to investigate and when to bring in qualified legal counsel.

    • What the EU AI Act is designed to address
    • The risk-based framework, briefly
    • Broad categories of AI practices and systems
    • Provider, deployer, importer, and distributor roles at a high level
    • Questions that require legal interpretation or specialist review
    • Why readiness isn't the same as compliance certification

  2. Build an inventory of AI use

    120 minBeginner

    Participants map AI across employee tools, customer journeys, internal decisions, vendor products, and experiments. Their inventory records purpose, users, data, owner, vendor, and potential impact. The first pass is not treated as a legal classification.

    • Finding sanctioned, embedded, experimental, and shadow AI use
    • Purpose, users, affected people, and the business owner, on record
    • Data sources and outputs, including the decisions downstream
    • Separating assistance from automated decision-making
    • Which use cases need a deeper look
    • A repeatable intake process for new AI use

  3. AI literacy for staff and managers

    120 minBeginner

    A role-based literacy program for people who use, approve, manage, buy, or review AI-enabled systems. Teams learn to recognize model limitations, protect sensitive information, verify outputs, and escalate when a use goes past their authority or competence.

    • What staff need to know about capability and limitation
    • Hallucination, bias, automation bias, and over-reliance
    • Safe handling of personal and confidential data, including proprietary material
    • Verification habits for AI-assisted work
    • Role-specific learning paths for users and managers, including reviewers
    • Recording attendance and scope, plus refresher needs

  4. Transparency and human oversight in operating controls

    150 minIntermediate

    Principles become workable controls. People learn when others should know AI is involved and what meaningful human review looks like. The escalation path gets defined too. Participants pressure-test the controls against actual workflows. A policy statement alone is never proof that oversight exists.

    • Identifying transparency needs in employee and customer interactions
    • Human review with genuine authority and time, backed by enough information
    • No rubber-stamp approvals
    • Defining stop and override conditions, plus escalation
    • Errors, complaints, and material changes, tracked over time
    • Whether the control holds outside the workshop room

  5. Documentation and accountability in vendor questions

    120 minIntermediate

    Teams assemble a proportionate record for each material AI use and a question set for vendors. The module connects ownership, intended use, limitations, data handling, monitoring, incident response, and change management so procurement evidence and internal decisions tell the same story.

    • A working record for intended use, owner, data, and limitations
    • Decision logs, approvals, exceptions, and review cadence
    • Questions about training data, customer data, retention, and subprocessors
    • Evidence for performance, limitations, security, and human oversight
    • Contract and responsibility questions to escalate to counsel
    • Reassessment when a vendor, model, feature, or use changes

  6. From readiness review to action plan

    90 minIntermediate

    The final workshop turns inventory and control gaps into a prioritized plan with owners, quick fixes, deeper reviews, EU AI Act work linked to privacy and security, and a cadence for keeping it current.

    • Prioritizing uses by potential impact and uncertainty
    • Named owners across business, compliance, legal, IT, and procurement
    • AI governance, connected to GDPR, KVKK, security, and existing risk work
    • Defining quick actions and specialist reviews, plus longer-term controls
    • Your 90-day roadmap
    • New uses and material changes, including when to look again

Outcomes

Outcomes & audience

What you will learn

  • Explain the Act's risk logic, its organizational roles, in plain language
  • A working inventory of approved, embedded, experimental, and shadow AI use
  • Flag AI uses that need deeper legal, technical, privacy, or operational review
  • Role-relevant AI literacy, mapped for staff, managers, buyers, and reviewers
  • Transparency, human-oversight, escalation, and verification controls that actually work
  • One record per AI use
  • Ask vendors sharper questions on data, limits, oversight, and security
  • A 90-day plan, owners named

Who should attend

  • Compliance and ethics teams, including enterprise-risk functions
  • In-house legal and data-protection staff, working with qualified counsel
  • IT, information-security, data, and AI-governance work
  • Procurement and vendor-management staff, including commercial teams that buy AI-enabled products
  • HR, L&D, and internal communications, where staff AI literacy lands
  • Business and product leaders, including operations owners of AI-enabled workflows

Format

Training format

Cross-functional teams spend about 12 hours together across two days or shorter sessions. Onsite and live-online formats use your inventory examples and approved tools without asking participants to share confidential data.

Format
Onsite or live online
Duration
About 12 hours across 2 days or shorter scheduled sessions
Group size
Up to 20 participants per group
Language
English or Turkish
Materials
AI inventory template, vendor question set, control checklist, and 90-day action-plan worksheet
Certificate
Certificate of completion

About Zeo

Why Zeo

Zeo started in 2011 and now works out of San Francisco, Istanbul, Ankara, and Lisbon. We run Copilot Academy and organize Digitalzone, an international digital marketing conference. This program draws on the 10+ years of consulting and training work behind that, applied to corporate AI adoption.

  • 2011founded in Istanbul
  • 10+years of consulting and training experience
  • 3offices: San Francisco, Istanbul, Ankara, Lisbon

Keep exploring

AI Briefing for Executive Teams6 modules · 10 hoursA leadership briefing, half a day to two days, that gives C-suite and boards the AI value map, the build-vs-buy call, KVKK and EU AI Act awareness, and a 90-day roadmap each leader leaves with.View trainingUsing AI in Legal Practice6 modules · 13 hoursGenerative AI training for law firms and in-house legal teams: document review and drafting, research with a verification discipline, and confidential, compliant adoption, taught on your own files.View trainingAI in the Public Sector6 modules · 13 hoursFor public-sector teams: turning policy notes, correspondence, and citizen guidance into faster drafts, with named reviewers and firm limits around what AI may never decide.View trainingAI in Cybersecurity & SOC6 modules · 13 hoursAI training for cybersecurity and SOC teams, scoped to the knowledge-work layer around security operations: faster triage notes, incident write-ups, playbook documentation, and threat-intel summaries, with every detection and response call staying with an analyst.View training

Next step

Turn AI Act uncertainty into an owned action plan

Share where AI is already used and which teams share responsibility. Show us what governance work already exists. From there we build an awareness-level readiness program around your workflows and the questions your specialists still need answered.
Plan the training
Illustrated figure checking items on a clipboard beside a large shield

Questions

Frequently asked questions