Certifying a Team vs Certifying a Person: What Employers Actually Need

Most AI training is sold per seat. That pricing model quietly imports an assumption: that the unit of value is the individual, and that an organisation becomes compliant by accumulating enough individuals who have been through a course. For the EU AI Act, that assumption is wrong, and it is expensive.

Article 4 is an obligation on the organisation. It asks providers and deployers to take measures across the people operating AI systems on their behalf. The obligation is organisational; the certificates are individual. The gap between those two things is where a lot of budget goes to die.

What a per-person certificate gives you

A certificate held by a named individual is genuinely useful for three things:

• Portability. It travels with the person to their next role, which is why individuals value it and why it belongs in a development conversation.
• CPD evidence. If your professional body requires recorded learning, a certificate is a tidy record.
• Specific role assurance. For a small number of genuinely high-exposure roles, having a named, assessed credential is a reasonable control.

What it does not give you is organisational coverage. Twenty certificates among two hundred staff tells you about twenty people. It says nothing about whether you identified the right twenty.

What organisational assurance looks like instead

The organisational version of the same spend buys you different artefacts:

• An AI inventory — what systems are in use, who touches them, what decisions they affect.
• A role-exposure map — which roles need what depth of understanding, and why.
• Delivered training matched to that map — short for low-exposure roles, substantial for high-exposure ones.
• A dated record tying the two together, maintained as tooling changes.
• A review that someone competent has signed off.

That package answers "show me your Article 4 measures". A stack of individual certificates does not, because it cannot demonstrate that the coverage was scoped against actual exposure. Our guide to evidencing AI literacy without a certificate sets out what that record should contain.

Do the arithmetic before you buy

Published per-seat prices for EU AI Act and AI governance training in Europe ranged from around EUR 20 to several thousand euro as at October 2026, for products nominally covering the same subject. At the upper end, a one-day course at four figures per seat becomes a six-figure line item for a mid-sized organisation before you have produced a single inventory or role map.

The question to put to any provider quoting per seat is simple: what do we hold at the end of this that we can show a regulator? If the answer is that each attendee holds a certificate, you are buying individual development, which may be worth having, but you are not buying organisational assurance and you should not let it be sold as such.

A sensible split

In most organisations the right answer is both, in very different proportions:

• Deep, assessed training for the small high-exposure group. People who act on AI output that affects someone else outcome — credit, recruitment, clinical, casework. Individual certification is reasonable here.
• Role-appropriate, documented training for everyone else. Often short, often deliverable internally, and worth far more as a documented programme than as a pile of per-seat purchases.
• Specialist depth for whoever owns the compliance position. One or two people who understand the Regulation properly and can maintain the record.

Spending disproportionately on the second group is the most common budgeting error, and it is the one the per-seat model encourages.

The procurement question people forget

There is one circumstance in which individual certificates genuinely are the requirement: when a client or tender asks for them. Procurement requirements are not legal requirements, but they are real commercial constraints, and if a major client supplier questionnaire asks how many of your staff hold a named credential, that is the answer you need.

Treat that as a commercial decision made on commercial grounds, and keep it separate from your compliance position. Confusing the two leads organisations to over-buy certificates and under-build records — ending up with a strong answer to a question nobody asked and a weak answer to the one that matters.

Frequently asked questions

Can an organisation be certified under the EU AI Act?

No. There is no AI Act certification scheme for organisations or individuals. Any certification on offer is a private product. See our guide on whether you need an EU AI Act certificate.

How many staff need training?

Those who operate AI systems on your behalf, at a depth appropriate to the role. That is determined by your inventory, not by a percentage.

Is internally delivered training acceptable?

Yes. Nothing in the Regulation requires external delivery. What matters is appropriateness and documentation.

Should senior management be included?

If they make or sign off decisions informed by AI output, yes — and that group is frequently missed because they do not think of themselves as operating a system.

If you want training scoped to roles rather than sold by the seat, our CPD courses are structured that way, and our guide to tailoring AI training by role covers how to build the map first.