Compliance Library

AI Compliance Guides for German Companies

Practical compliance guides for AI tools and applications. EU AI Act, GDPR, and German employment law explained for every AI use case.

74 guides available

Companies in Germany deploying or developing AI systems must navigate three overlapping frameworks simultaneously: the EU AI Act, the GDPR, and German employment law. Which specific obligations apply depends on how a system is classified — as a high-risk system under Annex III, a limited-risk AI application, or a GPAI use case.

The compliance guides on this page explain the legal requirements for more than 50 AI use cases — from automated candidate screening and medical AI to automated credit decisions. Each guide provides a structured analysis of EU AI Act obligations, GDPR requirements, and — where relevant — sector-specific rules.

All Guides

AI APIs for Law Firms: BRAO Compliance Guide Germany

Using AI APIs as a German law firm: what §43a BRAO, §43e BRAO, and GDPR require for ChatGPT, Claude, and other AI tools in legal practice.

AI Chatbot Compliance Germany: EU AI Act & GDPR Checklist

Is your AI chatbot compliant? EU AI Act Article 50 requires transparency notices in Germany. Step-by-step checklist for GDPR + AI Act compliance.

AI Credit Scoring: What German Companies Need to Know

AI credit scoring is high-risk under the EU AI Act. Compliance requirements for financial services in Germany.

AI Customer Service in Germany: GDPR Compliance Guide

GDPR compliance for AI customer service in Germany: legal basis, DPA requirements, privacy risks, and compliance checklist for AI chatbots.

AI Document Analysis in Germany: GDPR, AI Act, and Lawful Deployment Guide

Using AI for document analysis in Germany: GDPR requirements, AI Act risk classification, legal privilege, and what German businesses need to deploy lawfully.

AI Emotion Recognition in Germany: GDPR, AI Act, and Legal Limits

Is AI emotion recognition legal in Germany? The EU AI Act prohibits it in workplaces and schools. GDPR adds further restrictions.

AI Facial Recognition in Germany: Compliance Guide 2026

Facial recognition in Germany: EU AI Act prohibitions, GDPR biometric data rules, and high-risk compliance deadline August 2026.

AI Fraud Detection: What German Companies Need to Know

How the EU AI Act affects fraud detection AI in Germany. Risk classification and compliance requirements.

AI Hiring Tools in Germany: EU AI Act & GDPR Compliance Guide (2026)

AI hiring tools are high-risk under EU AI Act Annex III. This guide covers GDPR, works council rights, and the August 2026 deadline for German companies.

AI Image Generation Compliance in Germany: What Companies Need to Know

AI image generation in Germany requires GDPR review, IP checks, and AI Act planning before Article 50 transparency rules apply on August 2, 2026.

AI Legal Counsel Germany for EU AI Act, GDPR, and AI Procurement

Compound Law provides AI legal counsel in Germany for EU AI Act, GDPR, DPA review, works council issues, and AI procurement.

AI Medical Diagnosis: What German Providers Need to Know

AI diagnostic tools are high-risk under the EU AI Act. How MDR and AI Act requirements intersect in Germany.

AI Tools for Law Firms in Germany: BRAO & GDPR Guide

Can German lawyers use AI? This guide covers BRAO §43e attorney-client privilege, GDPR DPA requirements, and a provider comparison table.

AI Vendor Due Diligence for German Companies: Legal Checklist

AI vendor due diligence for German companies should cover GDPR, Article 28 DPA terms, AI Act support, audit rights, IP, and exit clauses before purchase.

AI Voice Assistants in Germany: GDPR, AI Act, and Rollout Checks

AI voice assistants are usable in Germany if GDPR, call recording, AI Act transparency, and human handoff controls are built in.

Autonomous Vehicles: What German Companies Need to Know

How the EU AI Act affects autonomous vehicles in Germany.

Biometric Identification: What German Companies Need to Know

How the EU AI Act affects biometric identification in Germany.

Can German Companies Use AI Customer Service? GDPR & AI Act (2026)

Yes — with the right setup. Covers GDPR legal basis, DPA review, AI Act transparency rules, and human escalation. Includes a 10-step rollout checklist.

Claims Processing: What German Companies Need to Know

How the EU AI Act affects claims processing in Germany.

Code Generation: What German Companies Need to Know

How the EU AI Act affects code generation in Germany.

Computer Vision: What German Companies Need to Know

How the EU AI Act affects computer vision in Germany.

Content Moderation: What German Companies Need to Know

How the EU AI Act affects content moderation in Germany.

Cybersecurity: What German Companies Need to Know

How the EU AI Act affects cybersecurity in Germany.

Data Analytics: What German Companies Need to Know

How the EU AI Act affects data analytics in Germany.

Demand Forecasting: What German Companies Need to Know

How the EU AI Act affects demand forecasting in Germany.

Drug Discovery: What German Companies Need to Know

How the EU AI Act affects drug discovery in Germany.

Employee Apps With EU Data Residency: Germany 2026

Which employee apps support EU data residency for Germany? Compare Slack, Teams, Google Workspace, Asana, Notion, HubSpot, and Zoom for GDPR compliance.

Enterprise AI Legal Risk: What German Companies Must Check

Enterprise AI legal risk in Germany starts with GDPR, the EU AI Act, contracts, IP, and employment law. This guide shows what to review before rollout.

Enterprise Search GDPR: Google Drive, SharePoint & M365

Enterprise search GDPR for Google Drive, SharePoint, and M365 in Germany. DPA, works council, SCCs, and rollout checklist.

EU AI Act Dates for German Businesses: 2026, 2027 and 2028

EU AI Act timeline Germany: what applies on 2 August 2026, 2 December 2027, and 2 August 2028 for procurement, transparency, and high-risk AI.

EU AI Act Employee Monitoring Germany: GDPR, Works Council & 2026 Guide

EU AI Act employee monitoring in Germany needs separate GDPR, BDSG, and works council analysis. Learn what changed in 2025 and what to prepare now.

EU AI Act procurement before 2027: timeline for Germany

EU AI Act procurement before 2027: exact dates, official sources, and what German buyers should secure now from AI vendors.

EU AI Act Procurement Requirements for German Enterprises

EU AI Act procurement in Germany now turns on the 2026, 2027, and 2028 timeline split. Here is what deployers should demand from vendors.

Facial Recognition in Germany: Legal Framework & AI Act Rules

Facial recognition in Germany: what is legal, what is prohibited, how GDPR Article 9 and EU AI Act apply, market size, key vendors, and compliance checklist.

GDPR AI Procurement for German Enterprises: Step-by-Step Guide

GDPR AI procurement for German enterprises requires role mapping, DPIA screening, transfer review, DPA terms, and ongoing vendor governance.

GDPR AI Vendor Assessment Checklist: 10 Questions Before Signing a DPA

Use this GDPR AI vendor assessment checklist before signing any DPA in Germany. 10 questions procurement teams must ask every AI vendor.

Germany Facial Recognition Market 2026: Size, Players & Legal Framework

Germany facial recognition market overview 2026: market size, CAGR, key vendors (Cognitec Systems, NEC, Idemia), AI Act rules, GDPR compliance for deployers.

Insurance Underwriting: What German Companies Need to Know

How the EU AI Act affects insurance underwriting in Germany.

Inventory Management: What German Companies Need to Know

How the EU AI Act affects inventory management in Germany.

Is Anthropic GDPR Compliant? Complete Compliance Guide

Anthropic GDPR compliance explained: DPA, SCCs, EU data residency, ZDR, certifications, and what German companies must verify before deploying Claude.

Legal Research: What German Companies Need to Know

How the EU AI Act affects legal research in Germany.

Loan Approval: What German Companies Need to Know

How the EU AI Act affects loan approval in Germany.

Natural Language Processing: What German Companies Need to Know

How the EU AI Act affects natural language processing in Germany.

Performance Evaluation: What German Companies Need to Know

How the EU AI Act affects performance evaluation in Germany.

Personalization Engines: What German Companies Need to Know

How the EU AI Act affects personalization engines in Germany.

Portfolio Management: What German Companies Need to Know

How the EU AI Act affects portfolio management in Germany.

Predictive Analytics: What German Companies Need to Know

How the EU AI Act affects predictive analytics in Germany.

Predictive Maintenance: What German Companies Need to Know

How the EU AI Act affects predictive maintenance in Germany.

Pricing Algorithms: What German Companies Need to Know

How the EU AI Act affects pricing algorithms in Germany.

Professional Liability Insurance for AI Developers in Germany — E&O Guide

Which professional liability insurance AI developers, AI governance consultants and ethical AI specialists in Germany need — types, coverage, limits.

Professional Liability Insurance for AI Specialists in Germany

AI developers and governance specialists in Germany need professional indemnity insurance. What coverage the EU AI Act requires.

Quality Control: What German Companies Need to Know

How the EU AI Act affects quality control in Germany.

Recommendation Systems: What German Companies Need to Know

How the EU AI Act affects recommendation systems in Germany.

Recruitment Screening: What German Companies Need to Know

How the EU AI Act affects recruitment screening in Germany.

Regulatory Compliance in Germany: A Practical Framework

Regulatory compliance in Germany means turning legal duties into owners, controls, training, and documentation across data, AI, and governance.

Risk Assessment: What German Companies Need to Know

How the EU AI Act affects risk assessment in Germany.

Robotics AI Act Germany: What Companies Need to Do Now

German robotics companies should classify each AI use case, map the 2026, 2027, and 2028 AI Act dates, and align product safety, employment, and GDPR duties.

Scheduling Optimization: What German Companies Need to Know

How the EU AI Act affects scheduling optimization in Germany.

Section 43e BRAO Explained: AI API Requirements for German Law Firms

Section 43e BRAO permits law firms to use AI APIs under strict conditions: confidentiality, §203 StGB, no-training clauses, and deletion rules.

Spam Filtering: What German Companies Need to Know

How the EU AI Act affects spam filtering in Germany.

Speech Recognition: What German Companies Need to Know

How the EU AI Act affects speech recognition in Germany.

Summarization: What German Companies Need to Know

How the EU AI Act affects summarization in Germany.

Supply Chain Management: What German Companies Need to Know

How the EU AI Act affects supply chain management in Germany.

Tenant Screening: What German Companies Need to Know

How the EU AI Act affects tenant screening in Germany.

Trading Algorithms: What German Companies Need to Know

How the EU AI Act affects trading algorithms in Germany.

Transcription: What German Companies Need to Know

How the EU AI Act affects transcription in Germany.

Translation: What German Companies Need to Know

How the EU AI Act affects translation in Germany.

Video Generation: What German Companies Need to Know

How the EU AI Act affects video generation in Germany.

Voice API Vendors in Germany: GDPR, DPA and Support

Comparison guide for German buyers evaluating voice API vendors, DPA terms, EU hosting claims, retention controls, and German support.

What Is a Data Processing Agreement? DPA under GDPR for Germany

What is a data processing agreement (DPA) under GDPR? Article 28 requirements, when a DPA is mandatory in Germany, and which AI tools provide one.

Writing Assistants: What German Companies Need to Know

How the EU AI Act affects writing assistants in Germany.

What Changed in 2026

The EU AI Act is entering into force in stages. Three milestones are relevant for companies in Germany:

  • February 2025: Prohibited AI practices (Art. 5) in force — including the ban on real-time biometric surveillance in public spaces and social scoring.
  • August 2025: AI governance rules and GPAI model provisions (Chapter V) in force — companies using Claude or GPT-4 already have deployer obligations under Art. 25–26 EU AI Act.
  • 2 August 2026: Full conformity obligations for high-risk AI under Annex III — technical documentation (Art. 11), risk management (Art. 9), conformity assessment (Art. 43), and registration in the EU AI database (Art. 49). Germany's supervisory authority is the Bundesnetzagentur (BNetzA).

Three months remain until the deadline. A readiness assessment and the required documentation typically take exactly this amount of time. Companies with high-risk AI in HR, credit decisions, medical diagnosis, or biometric identification should act now.

View August 2026 Checklist

Questions about AI compliance?

We help you understand the requirements for your specific use case.

Book Free Call
Book Free Call