--- title: "AI Compliance Guides for German Companies — Compound Law" description: "Practical compliance guides for AI tools and applications. EU AI Act, GDPR, and German employment law explained for every AI use case." image: "https://compound.law/assets/images/og-image-en.webp" source: "https://compound.law/en-DE/compliance/" language: "en" --- Compliance Library # AI Compliance Guides for German Companies Practical compliance guides for AI tools and applications. EU AI Act, GDPR, and German employment law explained for every AI use case. 78 guides available Companies in Germany deploying or developing AI systems must navigate three overlapping frameworks simultaneously: the [**EU AI Act**](https://compound.law/en-DE/ai-act/), the **GDPR**, and German employment law. Which specific obligations apply depends on how a system is classified — as a high-risk system under Annex III, a limited-risk AI application, or a GPAI use case. The compliance guides on this page explain the legal requirements for more than 50 AI use cases — from automated [candidate screening](https://compound.law/en-DE/compliance/ai-recruitment-screening/) and [medical AI](https://compound.law/en-DE/compliance/ai-medical-diagnosis/) to [automated credit decisions](https://compound.law/en-DE/compliance/ai-loan-approval/). Each guide provides a structured analysis of EU AI Act obligations, GDPR requirements, and — where relevant — sector-specific rules. ## Popular Guides [![Ad Targeting Compliance](https://compound.law/assets/images/compliance/compliance_1.webp)](https://compound.law/en-DE/compliance/ai-ad-targeting/) [Compliance](https://compound.law/en-DE/compliance/ai-ad-targeting/) ### [Ad Targeting: What German Companies Need to Know](https://compound.law/en-DE/compliance/ai-ad-targeting/) [How the EU AI Act affects ad targeting in Germany.](https://compound.law/en-DE/compliance/ai-ad-targeting/) [![AI API compliance lawyer for German law firms — BRAO counsel from Compound Law](https://compound.law/assets/images/compliance/compliance_3.webp)](https://compound.law/en-DE/compliance/ai-api-lawyer-germany/) [Compliance](https://compound.law/en-DE/compliance/ai-api-lawyer-germany/) ### [AI API Compliance Lawyer for German Law Firms](https://compound.law/en-DE/compliance/ai-api-lawyer-germany/) [Compound Law advises German law firms on §43a BRAO, §43e BRAO, GDPR, and EU AI Act compliance for AI APIs — from vendor review to go-live.](https://compound.law/en-DE/compliance/ai-api-lawyer-germany/) [![AI APIs for law firms in Germany](https://compound.law/assets/images/compliance/compliance_3.webp)](https://compound.law/en-DE/compliance/ai-apis-for-law-firms-germany/) [Compliance](https://compound.law/en-DE/compliance/ai-apis-for-law-firms-germany/) ### [AI APIs for Law Firms in Germany: Compliance Guide](https://compound.law/en-DE/compliance/ai-apis-for-law-firms-germany/) [When German law firms can use OpenAI API, Anthropic API, or Azure OpenAI with defensible safeguards.](https://compound.law/en-DE/compliance/ai-apis-for-law-firms-germany/) ## All Guides ### [AI APIs for Law Firms: BRAO Compliance Guide Germany](https://compound.law/en-DE/compliance/ai-api-brao-law-firms/) [Using AI APIs as a German law firm: what §43a BRAO, §43e BRAO, and GDPR require for ChatGPT, Claude, and other AI tools in legal practice.](https://compound.law/en-DE/compliance/ai-api-brao-law-firms/) ### [AI Chatbot Compliance Germany: EU AI Act & GDPR Checklist](https://compound.law/en-DE/compliance/ai-chatbots/) [Is your AI chatbot compliant? EU AI Act Article 50 requires transparency notices in Germany. Step-by-step checklist for GDPR + AI Act compliance.](https://compound.law/en-DE/compliance/ai-chatbots/) ### [AI Credit Scoring: What German Companies Need to Know](https://compound.law/en-DE/compliance/ai-credit-scoring/) [AI credit scoring is high-risk under the EU AI Act. Compliance requirements for financial services in Germany.](https://compound.law/en-DE/compliance/ai-credit-scoring/) ### [AI Document Analysis in Germany: GDPR, AI Act, and Lawful Deployment Guide](https://compound.law/en-DE/compliance/ai-document-analysis/) [Using AI for document analysis in Germany: GDPR requirements, AI Act risk classification, legal privilege, and what German businesses need to deploy lawfully.](https://compound.law/en-DE/compliance/ai-document-analysis/) ### [AI Emotion Recognition in Germany: GDPR, AI Act, and Legal Limits](https://compound.law/en-DE/compliance/ai-emotion-recognition/) [Is AI emotion recognition legal in Germany? The EU AI Act prohibits it in workplaces and schools. GDPR adds further restrictions.](https://compound.law/en-DE/compliance/ai-emotion-recognition/) ### [AI Facial Recognition in Germany: Compliance Guide 2026](https://compound.law/en-DE/compliance/ai-facial-recognition/) [Facial recognition in Germany: EU AI Act prohibitions, GDPR biometric data rules, and high-risk compliance deadline August 2026.](https://compound.law/en-DE/compliance/ai-facial-recognition/) ### [AI Fraud Detection: What German Companies Need to Know](https://compound.law/en-DE/compliance/ai-fraud-detection/) [How the EU AI Act affects fraud detection AI in Germany. Risk classification and compliance requirements.](https://compound.law/en-DE/compliance/ai-fraud-detection/) ### [AI Hiring Tools in Germany: EU AI Act, GDPR and Works Council](https://compound.law/en-DE/compliance/ai-hiring-tools/) [AI hiring tools in Germany need EU AI Act, GDPR Article 22, DPIA, and works council review before rollout. Use this buyer checklist before procurement.](https://compound.law/en-DE/compliance/ai-hiring-tools/) ### [AI Image Generation Compliance in Germany: What Companies Need to Know](https://compound.law/en-DE/compliance/ai-image-generation/) [AI image generation in Germany requires GDPR review, IP checks, and AI Act planning before Article 50 transparency rules apply on August 2, 2026.](https://compound.law/en-DE/compliance/ai-image-generation/) ### [AI Lawyer Germany for Companies Buying and Using AI](https://compound.law/en-DE/compliance/ai-lawyer-germany/) [Need an AI lawyer in Germany? Compound Law advises companies on EU AI Act, GDPR, AI procurement, vendor contracts, and rollout governance.](https://compound.law/en-DE/compliance/ai-lawyer-germany/) ### [AI Lawyer vs AI Legal Assistant for German Businesses](https://compound.law/en-DE/compliance/ai-lawyer-vs-ai-legal-assistant/) [Compare an AI lawyer with an AI legal assistant for German companies handling AI procurement, GDPR, EU AI Act, confidentiality, and liability.](https://compound.law/en-DE/compliance/ai-lawyer-vs-ai-legal-assistant/) ### [AI Legal Counsel Germany for EU AI Act, GDPR, and AI Procurement](https://compound.law/en-DE/compliance/ai-act-gdpr-legal-advisory/) [Compound Law provides AI legal counsel in Germany for EU AI Act, GDPR, DPA review, works council issues, and AI procurement.](https://compound.law/en-DE/compliance/ai-act-gdpr-legal-advisory/) ### [AI Legal Counsel in Germany for Companies](https://compound.law/en-DE/compliance/ai-legal-counsel-germany/) [AI legal counsel in Germany helps companies handle EU AI Act, GDPR, DPA, procurement, and rollout risk before signing or launching AI tools.](https://compound.law/en-DE/compliance/ai-legal-counsel-germany/) ### [AI Medical Diagnosis: What German Providers Need to Know](https://compound.law/en-DE/compliance/ai-medical-diagnosis/) [AI diagnostic tools are high-risk under the EU AI Act. How MDR and AI Act requirements intersect in Germany.](https://compound.law/en-DE/compliance/ai-medical-diagnosis/) ### [AI Tools for Law Firms in Germany: BRAO & GDPR Guide](https://compound.law/en-DE/compliance/ai-tools-law-firms-germany/) [Can German lawyers use AI? This guide covers BRAO §43e attorney-client privilege, GDPR DPA requirements, and a provider comparison table.](https://compound.law/en-DE/compliance/ai-tools-law-firms-germany/) ### [AI Vendor Due Diligence for German Companies: Legal Checklist](https://compound.law/en-DE/compliance/ai-vendor-due-diligence-germany/) [AI vendor due diligence for German companies should cover GDPR, Article 28 DPA terms, AI Act support, audit rights, IP, and exit clauses before purchase.](https://compound.law/en-DE/compliance/ai-vendor-due-diligence-germany/) ### [AI Voice Assistants in Germany: GDPR, AI Act, and Rollout Checks](https://compound.law/en-DE/compliance/ai-voice-assistants/) [AI voice assistants are usable in Germany if GDPR, call recording, AI Act transparency, and human handoff controls are built in.](https://compound.law/en-DE/compliance/ai-voice-assistants/) ### [Autonomous Vehicles: What German Companies Need to Know](https://compound.law/en-DE/compliance/ai-autonomous-vehicles/) [How the EU AI Act affects autonomous vehicles in Germany.](https://compound.law/en-DE/compliance/ai-autonomous-vehicles/) ### [Biometric Identification: What German Companies Need to Know](https://compound.law/en-DE/compliance/ai-biometric-identification/) [How the EU AI Act affects biometric identification in Germany.](https://compound.law/en-DE/compliance/ai-biometric-identification/) ### [Can German Companies Use AI Customer Service? GDPR & AI Act (2026)](https://compound.law/en-DE/compliance/ai-customer-service/) [Yes — with the right setup. Covers GDPR legal basis, DPA review, AI Act transparency rules, and human escalation. Includes a 10-step rollout checklist.](https://compound.law/en-DE/compliance/ai-customer-service/) ### [Claims Processing: What German Companies Need to Know](https://compound.law/en-DE/compliance/ai-claims-processing/) [How the EU AI Act affects claims processing in Germany.](https://compound.law/en-DE/compliance/ai-claims-processing/) ### [Code Generation: What German Companies Need to Know](https://compound.law/en-DE/compliance/ai-code-generation/) [How the EU AI Act affects code generation in Germany.](https://compound.law/en-DE/compliance/ai-code-generation/) ### [Computer Vision: What German Companies Need to Know](https://compound.law/en-DE/compliance/ai-computer-vision/) [How the EU AI Act affects computer vision in Germany.](https://compound.law/en-DE/compliance/ai-computer-vision/) ### [Content Moderation: What German Companies Need to Know](https://compound.law/en-DE/compliance/ai-content-moderation/) [How the EU AI Act affects content moderation in Germany.](https://compound.law/en-DE/compliance/ai-content-moderation/) ### [Cybersecurity: What German Companies Need to Know](https://compound.law/en-DE/compliance/ai-cybersecurity/) [How the EU AI Act affects cybersecurity in Germany.](https://compound.law/en-DE/compliance/ai-cybersecurity/) ### [Data Analytics: What German Companies Need to Know](https://compound.law/en-DE/compliance/ai-data-analytics/) [How the EU AI Act affects data analytics in Germany.](https://compound.law/en-DE/compliance/ai-data-analytics/) ### [Demand Forecasting: What German Companies Need to Know](https://compound.law/en-DE/compliance/ai-demand-forecasting/) [How the EU AI Act affects demand forecasting in Germany.](https://compound.law/en-DE/compliance/ai-demand-forecasting/) ### [Drug Discovery: What German Companies Need to Know](https://compound.law/en-DE/compliance/ai-drug-discovery/) [How the EU AI Act affects drug discovery in Germany.](https://compound.law/en-DE/compliance/ai-drug-discovery/) ### [Enterprise AI Legal Risk: What German Companies Must Check](https://compound.law/en-DE/compliance/enterprise-ai-legal-risk/) [Enterprise AI legal risk in Germany starts with GDPR, the EU AI Act, contracts, IP, and employment law. This guide shows what to review before rollout.](https://compound.law/en-DE/compliance/enterprise-ai-legal-risk/) ### [Enterprise Search GDPR: Google Drive, SharePoint & M365](https://compound.law/en-DE/compliance/enterprise-search-gdpr/) [Enterprise search GDPR for Google Drive, SharePoint, and M365 in Germany. DPA, works council, SCCs, and rollout checklist.](https://compound.law/en-DE/compliance/enterprise-search-gdpr/) ### [EU AI Act Dates for German Businesses: 2026, 2027 and 2028](https://compound.law/en-DE/compliance/eu-ai-act-august-2026-deadline-checklist/) [EU AI Act timeline Germany: what applies on 2 August 2026, 2 December 2027, and 2 August 2028 for procurement, transparency, and high-risk AI.](https://compound.law/en-DE/compliance/eu-ai-act-august-2026-deadline-checklist/) ### [EU AI Act Employee Monitoring in Germany: Not Lawful by Default](https://compound.law/en-DE/compliance/ai-employee-monitoring/) [Not lawful by default. Emotion recognition at work is banned since 2 February 2025; other workplace AI needs GDPR, Section 26 BDSG, and works council review.](https://compound.law/en-DE/compliance/ai-employee-monitoring/) ### [EU AI Act Procurement Before 2027 in Germany](https://compound.law/en-DE/compliance/eu-ai-act-procurement-before-2027/) [EU AI Act procurement before 2027 matters now for German buyers because contracts, evidence flows, and deployer support should be fixed before rollout.](https://compound.law/en-DE/compliance/eu-ai-act-procurement-before-2027/) ### [EU AI Act Procurement Requirements for German Enterprises](https://compound.law/en-DE/compliance/eu-ai-act-procurement-requirements-german-enterprises/) [EU AI Act procurement in Germany now turns on the 2026, 2027, and 2028 timeline split. Here is what deployers should demand from vendors.](https://compound.law/en-DE/compliance/eu-ai-act-procurement-requirements-german-enterprises/) ### [EU AI Act Timeline Germany: 2026, 2027 and 2028](https://compound.law/en-DE/compliance/eu-ai-act-procurement-timeline-germany/) [EU AI Act timeline Germany: what applies on 2 August 2026, 2 December 2027 and 2 August 2028 for AI procurement and compliance.](https://compound.law/en-DE/compliance/eu-ai-act-procurement-timeline-germany/) ### [EU AI Act Training Obligation: What Article 4 Requires](https://compound.law/en-DE/compliance/ai-act-schulungspflicht/) [EU AI Act training obligation under Article 4: who it covers in Germany, what AI literacy measures to implement, and how to document compliance.](https://compound.law/en-DE/compliance/ai-act-schulungspflicht/) ### [GDPR AI Procurement for German Enterprises: Step-by-Step Guide](https://compound.law/en-DE/compliance/gdpr-ai-procurement/) [GDPR AI procurement for German enterprises requires role mapping, DPIA screening, transfer review, DPA terms, and ongoing vendor governance.](https://compound.law/en-DE/compliance/gdpr-ai-procurement/) ### [GDPR AI Vendor Assessment Checklist: 10 Questions Before Signing a DPA](https://compound.law/en-DE/compliance/gdpr-ai-vendor-assessment-checklist/) [Use this GDPR AI vendor assessment checklist before signing any DPA in Germany. 10 questions procurement teams must ask every AI vendor.](https://compound.law/en-DE/compliance/gdpr-ai-vendor-assessment-checklist/) ### [GDPR-Compliant AI in Germany: A Practical Guide for 2026](https://compound.law/en-DE/compliance/gdpr-compliant-ai-businesses-germany/) [GDPR-compliant AI means a lawful basis, transparency, a DPA, controlled transfers and a DPIA where risk is high. The 2026 guide for German companies.](https://compound.law/en-DE/compliance/gdpr-compliant-ai-businesses-germany/) ### [Germany Facial Recognition Market 2026: Size, Players & Legal Framework](https://compound.law/en-DE/compliance/facial-recognition-germany-market/) [Germany facial recognition market overview 2026: market size, CAGR, key vendors (Cognitec Systems, NEC, Idemia), AI Act rules, GDPR compliance for deployers.](https://compound.law/en-DE/compliance/facial-recognition-germany-market/) ### [Insurance Underwriting: What German Companies Need to Know](https://compound.law/en-DE/compliance/ai-insurance-underwriting/) [How the EU AI Act affects insurance underwriting in Germany.](https://compound.law/en-DE/compliance/ai-insurance-underwriting/) ### [Inventory Management: What German Companies Need to Know](https://compound.law/en-DE/compliance/ai-inventory-management/) [How the EU AI Act affects inventory management in Germany.](https://compound.law/en-DE/compliance/ai-inventory-management/) ### [Is Anthropic GDPR Compliant? A Guide for Businesses](https://compound.law/en-DE/compliance/anthropic-gdpr-compliance/) [Check Anthropic's GDPR terms, US data storage, ZDR limits, SCCs, and the assessments German businesses need before using Claude with personal data.](https://compound.law/en-DE/compliance/anthropic-gdpr-compliance/) ### [Is Facial Recognition Legal in Germany? AI Act & GDPR Rules](https://compound.law/en-DE/compliance/facial-recognition-germany/) [Facial recognition in Germany is legal only in narrow cases. See what the AI Act prohibits, when Article 9 GDPR applies, and what to do before 2 August 2026.](https://compound.law/en-DE/compliance/facial-recognition-germany/) ### [Legal Research: What German Companies Need to Know](https://compound.law/en-DE/compliance/ai-legal-research/) [How the EU AI Act affects legal research in Germany.](https://compound.law/en-DE/compliance/ai-legal-research/) ### [Loan Approval: What German Companies Need to Know](https://compound.law/en-DE/compliance/ai-loan-approval/) [How the EU AI Act affects loan approval in Germany.](https://compound.law/en-DE/compliance/ai-loan-approval/) ### [Natural Language Processing: What German Companies Need to Know](https://compound.law/en-DE/compliance/ai-natural-language-processing/) [How the EU AI Act affects natural language processing in Germany.](https://compound.law/en-DE/compliance/ai-natural-language-processing/) ### [Performance Evaluation: What German Companies Need to Know](https://compound.law/en-DE/compliance/ai-performance-evaluation/) [How the EU AI Act affects performance evaluation in Germany.](https://compound.law/en-DE/compliance/ai-performance-evaluation/) ### [Personalization Engines: What German Companies Need to Know](https://compound.law/en-DE/compliance/ai-personalization-engines/) [How the EU AI Act affects personalization engines in Germany.](https://compound.law/en-DE/compliance/ai-personalization-engines/) ### [Portfolio Management: What German Companies Need to Know](https://compound.law/en-DE/compliance/ai-portfolio-management/) [How the EU AI Act affects portfolio management in Germany.](https://compound.law/en-DE/compliance/ai-portfolio-management/) ### [Predictive Analytics: What German Companies Need to Know](https://compound.law/en-DE/compliance/ai-predictive-analytics/) [How the EU AI Act affects predictive analytics in Germany.](https://compound.law/en-DE/compliance/ai-predictive-analytics/) ### [Predictive Maintenance: What German Companies Need to Know](https://compound.law/en-DE/compliance/ai-predictive-maintenance/) [How the EU AI Act affects predictive maintenance in Germany.](https://compound.law/en-DE/compliance/ai-predictive-maintenance/) ### [Pricing Algorithms: What German Companies Need to Know](https://compound.law/en-DE/compliance/ai-pricing-algorithms/) [How the EU AI Act affects pricing algorithms in Germany.](https://compound.law/en-DE/compliance/ai-pricing-algorithms/) ### [Professional Liability Insurance for AI Developers in Germany — E\&O Guide](https://compound.law/en-DE/compliance/professional-liability-insurance-ai-germany/) [Which professional liability insurance AI developers, AI governance consultants and ethical AI specialists in Germany need — types, coverage, limits.](https://compound.law/en-DE/compliance/professional-liability-insurance-ai-germany/) ### [Professional Liability Insurance for AI Specialists in Germany](https://compound.law/en-DE/compliance/professional-liability-ai-specialists/) [AI developers and governance specialists in Germany need professional indemnity insurance. What coverage the EU AI Act requires.](https://compound.law/en-DE/compliance/professional-liability-ai-specialists/) ### [Quality Control: What German Companies Need to Know](https://compound.law/en-DE/compliance/ai-quality-control/) [How the EU AI Act affects quality control in Germany.](https://compound.law/en-DE/compliance/ai-quality-control/) ### [Recommendation Systems: What German Companies Need to Know](https://compound.law/en-DE/compliance/ai-recommendation-systems/) [How the EU AI Act affects recommendation systems in Germany.](https://compound.law/en-DE/compliance/ai-recommendation-systems/) ### [Recruitment Screening: What German Companies Need to Know](https://compound.law/en-DE/compliance/ai-recruitment-screening/) [How the EU AI Act affects recruitment screening in Germany.](https://compound.law/en-DE/compliance/ai-recruitment-screening/) ### [Regulatory Compliance in Germany: A Practical Framework](https://compound.law/en-DE/compliance/regulatory-compliance-germany/) [Regulatory compliance in Germany means turning legal duties into owners, controls, training, and documentation across data, AI, and governance.](https://compound.law/en-DE/compliance/regulatory-compliance-germany/) ### [Risk Assessment: What German Companies Need to Know](https://compound.law/en-DE/compliance/ai-risk-assessment/) [How the EU AI Act affects risk assessment in Germany.](https://compound.law/en-DE/compliance/ai-risk-assessment/) ### [Robotics AI Act Germany: What Companies Need to Do Now](https://compound.law/en-DE/compliance/ai-robotics/) [German robotics companies should classify each AI use case, map the 2026, 2027, and 2028 AI Act dates, and align product safety, employment, and GDPR duties.](https://compound.law/en-DE/compliance/ai-robotics/) ### [Scheduling Optimization: What German Companies Need to Know](https://compound.law/en-DE/compliance/ai-scheduling-optimization/) [How the EU AI Act affects scheduling optimization in Germany.](https://compound.law/en-DE/compliance/ai-scheduling-optimization/) ### [Section 43e BRAO Explained: AI API Requirements for German Law Firms](https://compound.law/en-DE/compliance/section-43e-brao-ai/) [Section 43e BRAO permits law firms to use AI APIs under strict conditions: confidentiality, §203 StGB, no-training clauses, and deletion rules.](https://compound.law/en-DE/compliance/section-43e-brao-ai/) ### [Spam Filtering: What German Companies Need to Know](https://compound.law/en-DE/compliance/ai-spam-filtering/) [How the EU AI Act affects spam filtering in Germany.](https://compound.law/en-DE/compliance/ai-spam-filtering/) ### [Speech Recognition: What German Companies Need to Know](https://compound.law/en-DE/compliance/ai-speech-recognition/) [How the EU AI Act affects speech recognition in Germany.](https://compound.law/en-DE/compliance/ai-speech-recognition/) ### [Summarization: What German Companies Need to Know](https://compound.law/en-DE/compliance/ai-summarization/) [How the EU AI Act affects summarization in Germany.](https://compound.law/en-DE/compliance/ai-summarization/) ### [Supply Chain Management: What German Companies Need to Know](https://compound.law/en-DE/compliance/ai-supply-chain-management/) [How the EU AI Act affects supply chain management in Germany.](https://compound.law/en-DE/compliance/ai-supply-chain-management/) ### [Tenant Screening: What German Companies Need to Know](https://compound.law/en-DE/compliance/ai-tenant-screening/) [How the EU AI Act affects tenant screening in Germany.](https://compound.law/en-DE/compliance/ai-tenant-screening/) ### [Trading Algorithms: What German Companies Need to Know](https://compound.law/en-DE/compliance/ai-trading-algorithms/) [How the EU AI Act affects trading algorithms in Germany.](https://compound.law/en-DE/compliance/ai-trading-algorithms/) ### [Transcription: What German Companies Need to Know](https://compound.law/en-DE/compliance/ai-transcription/) [How the EU AI Act affects transcription in Germany.](https://compound.law/en-DE/compliance/ai-transcription/) ### [Translation: What German Companies Need to Know](https://compound.law/en-DE/compliance/ai-translation/) [How the EU AI Act affects translation in Germany.](https://compound.law/en-DE/compliance/ai-translation/) ### [Video Generation: What German Companies Need to Know](https://compound.law/en-DE/compliance/ai-video-generation/) [How the EU AI Act affects video generation in Germany.](https://compound.law/en-DE/compliance/ai-video-generation/) ### [What Is a Data Processing Agreement? DPA under GDPR for Germany](https://compound.law/en-DE/compliance/data-processing-agreement/) [What is a data processing agreement (DPA) under GDPR? Article 28 requirements, when a DPA is mandatory in Germany, and which AI tools provide one.](https://compound.law/en-DE/compliance/data-processing-agreement/) ### [Which Employee Apps Offer EU Data Residency? 7 Options for Germany](https://compound.law/en-DE/compliance/eu-data-residency-employee-apps/) [Slack, Teams, Google Workspace, Asana, Notion, HubSpot, and Zoom all offer EU data residency — but only on specific plan tiers, and each must be activated.](https://compound.law/en-DE/compliance/eu-data-residency-employee-apps/) ### [Writing Assistants: What German Companies Need to Know](https://compound.law/en-DE/compliance/ai-writing-assistants/) [How the EU AI Act affects writing assistants in Germany.](https://compound.law/en-DE/compliance/ai-writing-assistants/) ## What Changed in 2026 The EU AI Act is entering into force in stages. Three milestones are relevant for companies in Germany: - **February 2025:** Prohibited AI practices (Art. 5) in force — including the ban on real-time biometric surveillance in public spaces and social scoring. - **August 2025:** AI governance rules and GPAI model provisions (Chapter V) in force — companies using Claude or GPT-4 already have deployer obligations under Art. 25–26 EU AI Act. - **2 August 2026:** Full conformity obligations for high-risk AI under Annex III — technical documentation (Art. 11), risk management (Art. 9), conformity assessment (Art. 43), and registration in the EU AI database (Art. 49). Germany's supervisory authority is the **Bundesnetzagentur (BNetzA)**. Three months remain until the deadline. A readiness assessment and the required documentation typically take exactly this amount of time. Companies with high-risk AI in HR, credit decisions, medical diagnosis, or biometric identification should act now. [View August 2026 Checklist](https://compound.law/en-DE/compliance/eu-ai-act-august-2026-deadline-checklist/) ## Questions about AI compliance? We help you understand the requirements for your specific use case. [Get a quote](https://compound.law/en-DE/quote/) ## Structured data ```json [ { "@context": "https://schema.org", "@type": [ "Organization", "LegalService" ], "@id": "https://compound.law/#organization", "name": "Compound Law", "alternateName": "Compound Law — AI Law Firm", "url": "https://compound.law/", "logo": { "@type": "ImageObject", "url": "https://compound.law/press/logos/PNG/Compound_Law_Icon.png", "width": 1024, "height": 1024 }, "image": "https://compound.law/assets/images/og-image.webp", "description": "The AI-native law firm in Berlin for start-ups, mid-sized companies and corporates: commercial and contract law, data protection, the EU AI Act, trademarks, corporate law, and restructuring and insolvency. A lawyer reviews every result, billed at a flat fee.", "foundingDate": "2026", "founder": [ { "@type": "Person", "name": "Marko Bradic", "jobTitle": "CEO", "url": "https://compound.law/en-DE/tech-team/marko-bradic/", "sameAs": [ "https://www.linkedin.com/in/markobradic/" ], "knowsAbout": [ "Product strategy and development", "Scaling technology companies", "FinTech and financial services", "AI-powered product innovation", "Business operations and growth", "Digital transformation" ] }, { "@type": "Person", "name": "Mohit Tilwani", "jobTitle": "CTO", "url": "https://compound.law/en-DE/tech-team/mohit-tilwani/", "sameAs": [ "https://www.linkedin.com/in/mohit-tilwani/" ], "knowsAbout": [ "Engineering leadership and architecture", "Scaling high-traffic systems", "AI and machine learning infrastructure", "FinTech platform development", "Cloud infrastructure and DevOps", "Product engineering" ] }, { "@type": "Person", "name": "Julian Jantze", "jobTitle": "Rechtsanwalt", "url": "https://compound.law/en-DE/lawyers/julian-jantze/", "sameAs": [ "https://www.linkedin.com/in/julian-jantze-957b95158/" ], "knowsAbout": [ "Corporate law and corporate governance for technology companies", "Employment law and HR compliance", "EU AI Act compliance and AI governance", "Employee participation models (VSOP/ESOP)", "Regulatory compliance for tech companies", "Legal operations and Legal Tech implementation" ] } ], "employee": [ { "@type": "Person", "name": "Marko Bradic", "jobTitle": "CEO", "url": "https://compound.law/en-DE/tech-team/marko-bradic/", "sameAs": [ "https://www.linkedin.com/in/markobradic/" ], "knowsAbout": [ "Product strategy and development", "Scaling technology companies", "FinTech and financial services", "AI-powered product innovation", "Business operations and growth", "Digital transformation" ] }, { "@type": "Person", "name": "Mohit Tilwani", "jobTitle": "CTO", "url": "https://compound.law/en-DE/tech-team/mohit-tilwani/", "sameAs": [ "https://www.linkedin.com/in/mohit-tilwani/" ], "knowsAbout": [ "Engineering leadership and architecture", "Scaling high-traffic systems", "AI and machine learning infrastructure", "FinTech platform development", "Cloud infrastructure and DevOps", "Product engineering" ] }, { "@type": "Person", "name": "Julian Jantze", "jobTitle": "Rechtsanwalt", "url": "https://compound.law/en-DE/lawyers/julian-jantze/", "sameAs": [ "https://www.linkedin.com/in/julian-jantze-957b95158/" ], "knowsAbout": [ "Corporate law and corporate governance for technology companies", "Employment law and HR compliance", "EU AI Act compliance and AI governance", "Employee participation models (VSOP/ESOP)", "Regulatory compliance for tech companies", "Legal operations and Legal Tech implementation" ] }, { "@type": "Person", "name": "Marc Schuba", "jobTitle": "Founding Partner, Rechtsanwalt (German attorney)", "url": "https://compound.law/en-DE/lawyers/marc-schuba/", "sameAs": [ "https://www.linkedin.com/in/marcschuba/" ], "knowsAbout": [ "IP and IT law", "SaaS and IT contracts, IT outsourcing", "Software and open-source licensing", "Data protection law (GDPR)", "AI law and the EU AI Act" ] }, { "@type": "Person", "name": "Dr. Markus Dreißigacker", "jobTitle": "Rechtsanwalt", "url": "https://compound.law/en-DE/lawyers/markus-dreissigacker/", "sameAs": [ "https://www.linkedin.com/in/markusdreissigacker" ], "knowsAbout": [ "M&A (Due diligence, post-merger integration, IPO readiness)", "Corporate Law (Governance, board work, restructuring)", "Commercial Law (Customer contracts, supplier agreements, NDAs)", "IP (Trademark management, IP transfer agreements)", "Compliance & ESG (Global compliance programs, human rights, sustainability)", "Data Protection (GDPR strategy, DPO experience, privacy programs)" ] }, { "@type": "Person", "name": "Philipp Brandt", "jobTitle": "Partner, Rechtsanwalt (German attorney), Specialist Lawyer for Intellectual Property Law", "url": "https://compound.law/en-DE/lawyers/philipp-brandt/", "sameAs": [ "https://www.linkedin.com/in/philipp-brandt-81b446a/" ], "knowsAbout": [ "Restructuring and insolvency law (crisis advice for management, protective shield and insolvency plan proceedings, insolvency administration)", "Intellectual property (trademarks, unfair competition, copyright, trade secrets, licence agreements)", "Data protection law (data breaches, regulatory fine proceedings, access and damages claims)", "Distribution and commercial law (distribution agreements, acquisition and sale of industrial plants)" ] } ], "address": { "@type": "PostalAddress", "addressLocality": "Berlin", "addressCountry": "DE" }, "areaServed": [ "Germany", "Austria", "Switzerland", "European Union", "United Kingdom", "United States", "Singapore" ], "availableLanguage": [ "de", "en" ], "serviceType": [ "AI law firm", "AI-native legal services", "legal counsel for start-ups and growth companies", "legal counsel for mid-sized companies and corporates", "Commercial Law", "Corporate Law", "Employment Law", "Regulatory & Compliance", "Intellectual Property", "Insolvency & Restructuring" ], "hasOfferCatalog": { "@type": "OfferCatalog", "name": "Compound Law services", "itemListElement": [ { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Commercial Contracts", "description": "Battle-tested contracts for your sales process", "serviceType": [ "enterprise contracts", "MSA", "DPA", "sales contracts" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "International Employment", "description": "Compliant hiring across borders", "serviceType": [ "international employment", "hiring abroad", "employment contracts" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "VSOP/ESOP Setup", "description": "Employee participation that actually works", "serviceType": [ "VSOP", "ESOP", "employee stock options", "equity incentives" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Funding Round Support", "description": "Clean legal for your next raise", "serviceType": [ "funding round", "term sheet", "SHA", "due diligence", "cap table" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Corporate Housekeeping", "description": "Get your legal house in order", "serviceType": [ "corporate governance", "board resolutions", "shareholder register" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Data Protection & Privacy", "description": "GDPR compliance that doesn't slow you down", "serviceType": [ "GDPR", "data protection", "privacy", "DPA", "cookies", "data breach response", "GDPR fines", "Art. 82 GDPR" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "AI Act Compliance", "description": "Navigate EU AI regulation", "serviceType": [ "AI Act", "AI compliance", "AI governance", "EU AI regulation" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "IP & Competition", "description": "Protect and enforce what you've built", "serviceType": [ "IP protection", "intellectual property", "trademarks", "trademark enforcement", "warning letters", "preliminary injunctions", "unfair competition", "software licensing", "open source compliance" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Fractional General Counsel", "description": "In-house legal without the full-time cost", "serviceType": [ "fractional GC", "fractional general counsel", "outsourced legal", "legal retainer" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "FinTech Compliance", "description": "Navigate financial regulation", "serviceType": [ "fintech compliance", "BaFin", "banking regulation", "AML", "KYC" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Legal Retainer", "description": "Predictable legal support when you need it", "serviceType": [ "legal retainer", "legal subscription", "ongoing legal support" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "M&A Preparation", "description": "Get ready for acquisition interest", "serviceType": [ "M&A preparation", "acquisition", "due diligence", "exit" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Restructuring & Insolvency", "description": "From the first liquidity check to the restructuring itself", "serviceType": [ "restructuring", "insolvency", "StaRUG", "self-administration", "insolvency plan", "director liability" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } } ] }, "contactPoint": { "@type": "ContactPoint", "contactType": "sales", "email": "contact@compound.law", "availableLanguage": [ "English", "German" ], "areaServed": [ "DE", "AT", "CH", "EU", "GB", "US", "SG" ] }, "email": "contact@compound.law", "sameAs": [ "https://www.linkedin.com/company/compoundlawfirm", "https://x.com/CompoundLawFirm" ], "knowsAbout": [ "Commercial Contracts", "enterprise contracts", "MSA", "DPA", "sales contracts", "International Employment", "international employment", "hiring abroad", "employment contracts", "VSOP/ESOP Setup", "VSOP", "ESOP", "employee stock options", "equity incentives", "Funding Round Support", "funding round", "term sheet", "SHA", "due diligence", "cap table", "Corporate Housekeeping", "corporate governance", "board resolutions", "shareholder register", "Data Protection & Privacy", "GDPR", "data protection", "privacy", "cookies", "data breach response", "GDPR fines", "Art. 82 GDPR", "AI Act Compliance", "AI Act", "AI compliance", "AI governance", "EU AI regulation", "IP & Competition", "IP protection", "intellectual property", "trademarks", "trademark enforcement", "warning letters", "preliminary injunctions", "unfair competition", "software licensing", "open source compliance", "Fractional General Counsel", "fractional GC", "fractional general counsel", "outsourced legal", "legal retainer", "FinTech Compliance", "fintech compliance", "BaFin", "banking regulation", "AML", "KYC", "Legal Retainer", "legal subscription", "ongoing legal support", "M&A Preparation", "M&A preparation", "acquisition", "exit", "Restructuring & Insolvency", "restructuring", "insolvency", "StaRUG", "self-administration", "insolvency plan", "director liability" ] }, { "@context": "https://schema.org", "@type": "BreadcrumbList", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "Home", "item": "https://compound.law/en-DE/" }, { "@type": "ListItem", "position": 2, "name": "Compliance Guides", "item": "https://compound.law/en-DE/compliance/" } ] } ] ```