What evidence should a company retain for its AI literacy measures?

Taking a measure and being able to explain it are different things. A simple, maintainable record helps the company review its plan, answer a customer or show what it did.

The law does not prescribe a certificate

Article 4 defines no certification, exam or official template. A record is a practical way to preserve traceability of the measures taken, not a compliance seal.

What each record should connect

• The AI system or use addressed by the measure.
• The person, function or target group.
• Prior knowledge, context and identified need.
• The measure taken and content or material used.
• Date, owner and version of the material.
• Completion, acknowledgement or follow-up where relevant.
• Review date or change that would trigger an update.

Individual or group records

Not every measure needs named tracking. A general rule may be recorded by group. Targeted training or access to a sensitive system may justify evidence for each person.

Keep the decision, not only the PDF

Saving slides shows that material existed. It does not explain why it was chosen, who it addressed or whether it remains current. Useful evidence connects content, audience and reasoning.

When to update it

Review the record when the system, purpose, users or possible effects change. Review it too when an incident shows that the previous measure was insufficient.

What it should not promise

A completion record proves an activity; it does not certify EU AI Act compliance. Legal questions and the sufficiency of the full plan must be assessed in the company’s real context.