COMPLIANCE GERMANY
Compliance Germany.
Enforced at Runtime.
In Germany the EU AI Act applies directly – flanked by GDPR, the Federal Data Protection Act, national market surveillance and sector supervision. EVEDY translates these requirements into machine-enforced policies and delivers the evidence with them.
CLEAR CONROL. SECURE REGULATIONS
The regulatory landscape for AI in Germany
The EU AI Act phases in step by step – key duties for enterprises already apply today, with more following through 2027. Add data protection law and supervisory expectations.
Regulation
What it re
How EVEDY enforces it
EU AI Act
In force since 08/2024; duties phasing in through 2027
Risk-based duties: prohibited practices, AI literacy (Art. 4), transparency, logging, human oversight and robustness – strictest for high-risk systems.
End-to-end logging of every interaction, policies per risk class, human-oversight escalation, evidence documentation for conformity assessments.
GDPR & BDSG
EU General Data Protection Regulation and the Federal Data Protection Act
A lawful basis for every processing operation, data minimisation, individual rights, specific safeguards for automated individual decisions (Art. 22 GDPR).
Automatic PII redaction in prompts and responses, access control via your IAM, marked automated decisions, complete logging.
National AI supervision
Market surveillance under the AI Act; central role planned for the Bundesnetzagentur
Evidence, reporting and cooperation duties towards market surveillance; national implementing legislation under way.
Tamper-evident audit trails per regulation – regulator-ready evidence on demand.
BaFin expectations
Financial sector: including MaRisk and supervisory IT requirements
Governance and risk management for AI use: clear accountability, model-risk control, outsourcing governance.
A central control plane across all models and agents, testing and evaluation of every version, continuous monitoring of non-deterministic behaviour.
ISO/IEC 42001 & internal policies
AI management standard and your own directives
A systematic AI management system: roles, processes, continuous improvement – plus your enterprise AI policies.
Enterprise policies are stored as machine-enforceable rules and applied automatically to every AI interaction – not just documented.
As of August 2026. This overview does not constitute legal advice.