How to document AI literacy for EU AI Act Article 4, with proof

What does EU AI Act Article 4 require?

Article 4 requires providers and deployers of AI systems to take measures to support the development of AI literacy of their staff and other persons operating or using AI on their behalf, calibrated to those people's technical knowledge, experience, education, training and the context of use. As amended by the Digital Omnibus (Regulation (EU) 2026/1744, in force 27 July 2026), it is an obligation of effort: it does not require guaranteeing any specific level of literacy for any individual.

Who does Article 4 apply to, and since when?

It applies to both providers and deployers of AI systems, not only the companies that build AI. The AI literacy duty has applied since 2 February 2025, and national market-surveillance authorities supervise from 2 August 2026.

What proof do you need for Article 4?

Because it is an effort obligation, you prove it with records, not a certificate you buy. A defensible record shows role-calibrated training, who completed it with assessment evidence, and a review cadence that keeps it current. There is no dedicated EU fine tier for Article 4 on its own; it is enforced through national authorities, procurement questionnaires, contract representations, and negligence exposure, so the record is what protects you.

The six-part Article 4 compliance record

A defensible record has six parts. Two are yours to assemble about your own organization; four are the training evidence a good program supplies.

Is a completion certificate enough?

A certificate of attendance is weak evidence, because Article 4 is about capability calibrated to role, not hours attended. Stronger evidence is an assessed, scored, and independently verifiable record of what each person can actually do, tied to the systems and risks they face, and refreshed on a cadence.

Where GAGE fits, honestly

GAGE’s AI Literacy & Professional Conduct program is built to meet Article 4 and provides the four training-evidence parts of the record directly: the description of measures (the syllabus, with per-topic objectives calibrated by role), the completion log (a credential of per-topic mastery assessments passed, with scores, graded on our servers, not self-marked), the review cycle (a content currency protocol), and the evidence annex (a living credential at a signed URL an employer can query, grounded only in what the learner actually passed).

The two organization-specific parts, your system inventory and your covered-persons map, are yours to assemble; the program teaches you how, but no training provider can produce them for you truthfully. Be wary of any vendor that claims a course alone makes your whole organization compliant. It cannot: Article 4 is about your people, their roles, and your systems, and the record has to reflect that.