Mandatory trainings. Ready to deploy.

5 interactive E-Learnings for legally required compliance trainings. Offline-capable, with quiz and certificate.

1 HTML file · 50-question pool · quiz with certificate · offline-capable · unlimited employees · EUR 390 per module (one-time)

Legal obligation. Provably fulfilled.

Mandatory since Feb 2025

AI Literacy

Article 4, Regulation (EU) 2024/1689
40 slidesQuiz + certificate
EUR 390
one-time
View details →
Management duty

Cybersecurity Awareness

§38 (3) BSIG / Art. 20 NIS2
35 slidesQuiz + certificate
EUR 390
one-time
View details →
Art. 39 mandatory

Data Protection

Art. 39 (1) (b) GDPR
40 slidesQuiz + certificate
EUR 390
one-time
View details →
Expertise required

Whistleblower Protection

§15 (2) HinSchG
35 slidesQuiz + certificate
EUR 390
one-time
View details →
§12 AGG mandatory

Anti-Discrimination

§12 (2) AGG
35 slidesQuiz + certificate
EUR 390
one-time
View details →

Why mandatory training isn't optional

The five modules on this page cover no convenience topics. They address explicit, statutory training obligations in which the employer is the direct addressee of the norm — not industry best practice, but an element of the legal duty itself.

  • § 12 (2) AGG (German General Equal Treatment Act) obliges every employer to train employees in a suitable manner to prevent discrimination. A completed training causes a reversal of the burden of proof under § 12 (3) AGG — without it, the employer faces the full compensation claim almost by default.
  • § 38 (3) BSIG (transposing NIS2, Art. 20 of Directive (EU) 2022/2555) requires the management of essential and important entities to attend training personally on a regular basis and to offer comparable training to staff. Breaches carry administrative fines of up to EUR 10 million or 2% of global annual turnover under § 60 BSIG.
  • Art. 32 (4) and Art. 39 (1) (b) GDPR make awareness and training a statutory duty of the controller and the data protection officer. Administrative fines up to EUR 10 million or 2% of group turnover apply (Art. 83 (4) GDPR).
  • Article 4 of Regulation (EU) 2024/1689 (EU AI Act) has required from 2 February 2025 that every provider and deployer of AI systems — irrespective of risk level — ensures a sufficient level of AI literacy among personnel using such systems. Market surveillance authorities have been auditing this requirement since August 2025.
  • § 17 in conjunction with § 15 (2) HinSchG (German Whistleblower Protection Act) demands that personnel running the internal reporting channel possess the required expertise — proof of competence is regularly established in audits through documented training.

In practice, auditors and supervisory authorities look for three things: a current training concept linked to the relevant norm, per-employee attendance records, and content evidence that the applicable legal topic was actually covered. A workshop photo is not enough — what is required is a complete, individually attributable trail.

What makes our trainings different

The five modules are built — technically and didactically — for mid-sized organisations that do not run an in-house training department:

  • SCORM 2004 (3rd Edition) compatible — can be imported directly into existing learning platforms (Moodle, ILIAS, TalentLMS, Cornerstone, SAP SuccessFactors). Organisations without an LMS use the included standalone SCORM player, delivered as a single HTML file.
  • Employee certificate with company logo — automatically generated after a passed quiz, printable as PDF, including date, module name, regulatory reference and a hash for tamper-evidence.
  • No per-user licence, no subscription — one-time purchase, unlimited number of employees, no user cap, no recurring fees.
  • Audit log export — CSV and JSON export of all attendance data (name, date, score, quiz attempts) for direct submission to the supervisory authority, external auditor or group internal audit.
  • Full bilingual coverage (DE/EN) — identical module content in German and British English, suitable for international workforces and EU subsidiaries.

FAQ on compliance training

How often must mandatory training be repeated?

Neither AGG, HinSchG nor the EU AI Act prescribe a fixed frequency. Supervisory authorities and labour court case law nonetheless converge on an annual refresher. § 38 BSIG (NIS2 transposition) demands training "on a regular basis"; a 12-month cycle has become the de-facto standard. Where the underlying law materially changes (e.g. a new implementing act), an unscheduled training is required.

Do new joiners have to be trained immediately?

Yes — training belongs in the onboarding process, ideally within the first 30 days and before productive access to personal data or AI systems. For AGG training, § 12 (2) AGG requires the training "in advance" — i.e. before the employee takes up tasks where discrimination could occur.

Can we use e-learning instead of in-person training?

Yes. Neither AGG, HinSchG, GDPR, NIS2 nor the EU AI Act mandate an in-person format. What matters is substantive suitability and a demonstrable learning outcome — both are documented through quiz, pass threshold and an individual certificate. Supervisory authorities explicitly accept e-learning, provided knowledge is actually tested.

What exactly does an auditor want to see?

Three artefacts: (1) the training concept referencing the applicable regulation, (2) an attendance list with date, name and passed-quiz status per employee, (3) the training content itself (SCORM package or PDF export of the slides). Our modules deliver all three from a single source.

Does the certificate also cover external contractors and temporary staff?

If external personnel access your data, AI systems or business processes, the supervisory authority expects them to be trained as well — in particular under NIS2 (supply-chain duties, § 30 BSIG) and the GDPR (Art. 28). Because our licence has no user cap, you may include external personnel at no additional cost.

Pricing

Single modules EUR 390 — see the modules above. Bundle saves 24%.