Do You Need an EU AI Act Certificate? What the Commission Actually Says

If you have been sold a course on the basis that your organisation must hold an EU AI Act certificate, it is worth reading the Regulation before you read the invoice. There is no EU AI Act certification scheme. There is no approved-provider list, no accreditation body for AI literacy training, and no certificate that a regulator will ask to see. The European Commission has said so in plain language.

That does not mean the obligation is optional. It is not. But the duty and the certificate are different things, and conflating them is how a one-day course comes to be priced like a professional qualification.

What Article 4 actually says

Article 4 of the EU AI Act (Regulation (EU) 2024/1689) places a duty on providers and deployers of AI systems to take measures to ensure a level of AI literacy among their staff and other people operating AI systems on their behalf. It has applied since 2 February 2025. There is no headcount threshold and no turnover threshold: a four-person practice using an AI tool is caught in the same way a bank is.

Article 4 was amended on 8 July 2026 by Regulation (EU) 2026/1744, in force from 27 July 2026. The amendment matters, and most vendor pages have not caught up with it. The amended Article 4(1) adds an express carve-out stating that the Article does not require providers or deployers to guarantee any specific level of AI literacy of any individual.

Read that carefully, because it is widely misquoted in both directions. It does not say the obligation has gone away. The duty to take measures survives in full and is unconditional. What is not guaranteed is the outcome — you are not required to certify that every individual has reached a defined standard. You are still required to take the measures. The recital frames this as a proportionality fix, not a repeal.

One further detail worth knowing: the phrase "sufficient level", which a great many training providers still quote as though it were the statutory test, is no longer in the Regulation. If a page is quoting it at you in late 2026, it is quoting superseded text.

The Commission own position on certificates

The European Commission AI Literacy questions-and-answers material addresses the certificate question directly. Its stated position is that there is no need for a certificate and that no strict requirements or mandatory trainings are imposed.

That is about as unambiguous as regulatory guidance gets. There is no AI Act certification scheme, no accreditation requirement for trainers, and no list of approved providers. A certificate is one acceptable form of evidence that you took a measure. It is not the measure, and it is not the obligation.

So what does a regulator actually want to see?

What Article 4 asks for is a defensible, documented, role-appropriate measure, and a record that it happened. In practice that means being able to answer four questions:

• Who in this organisation operates or relies on AI systems? Not everyone does, and the people who do are often not the people you would guess. A credit officer reading a model output and a marketer using a drafting tool have different exposure.
• What does each of those roles need to understand? The Regulation asks for literacy appropriate to the role and the context, not a uniform corporate module.
• What did we actually do about it, and when? Dated training records, attendance, content covered, who delivered it.
• How do we keep it current? AI tooling in most organisations changes faster than the annual training cycle.

A role-mapped training record and an internal or external review of it answers "show me your Article 4 measures" considerably better than a PDF certificate from a half-day e-learning module does. The certificate proves someone sat through something. The record proves you identified the risk, matched the training to the role, and can show when it happened.

What about penalties?

This is where accuracy matters in both directions, because both the alarmist and the dismissive version are wrong.

Article 4 does not appear anywhere in Article 99, so no harmonised EU-wide fine ceiling attaches specifically to it. If you have seen EUR 35 million or 7% of global turnover printed next to Article 4 in a sales deck, that figure is the penalty for the prohibited practices set out in Article 5 — a different obligation entirely.

But Article 4 is not unenforceable. Article 99(1), as amended, requires Member States to lay down penalties for any infringement of the Regulation, and national market surveillance authorities may sanction Article 4 breaches under national law from 2 August 2026. The exposure is real; it is simply national rather than harmonised. Anyone telling you there is no penalty is as wrong as the person quoting you the Article 5 number. For more detail on how enforcement is structured, see our guide to AI Act penalties and enforcement for employers.

When a certificate is still worth buying

None of this makes certificates worthless. It makes them a career and procurement product rather than a compliance product. A certificate can be genuinely useful when:

• It carries recognition in the labour market that a hiring manager recognises on a CV.
• It is mapped to your professional body CPD requirements, so the hours count twice.
• It is assessed, so passing it means something beyond attendance.
• A client or tender process specifically asks for one — procurement requirements are not the same as legal requirements, but they are still real.

What a certificate cannot do is discharge Article 4 on its own, because Article 4 is about the measures you take across the people who operate your AI systems, not about any individual credential. If you are weighing up which credential actually earns its price, our honest guide to AI certifications compares what is on the market.

Frequently asked questions

Is there an official EU AI Act certificate?

No. There is no certification scheme, no accreditation body for AI literacy training, and no approved-provider list under the Regulation.

Does Article 4 apply to small businesses?

Yes. There is no headcount or turnover threshold. It binds providers and deployers of AI systems regardless of size.

Did the July 2026 amendment remove the obligation?

No. It removed the implication that you must guarantee a specific level of literacy in any individual. The duty to take measures is unchanged and unconditional.

What is the minimum we should do?

Identify who operates AI systems, decide what each role needs to understand, deliver training proportionate to that, and keep a dated record. Our guide to tailoring AI literacy training by role walks through how to scope that.

If you want AI training that is mapped to your professional body CPD requirements rather than sold as a compliance shortcut, our CPD courses are built around what each role actually needs to know.