Proof of competence: which artefacts actually count
The EU AI Act does not require a certificate. It requires that you have taken measures. So document what actually happened.
Weak proof
Attendance lists, course completions unrelated to the role, generic certificates.
Strong proof
Anything that shows people have assessed and applied AI in their own context.
- Impact report with the task, approach and result per team
- Skills library with prompts, workflows and guardrails
- Prototypes including a description and their limits
- Documented decisions on data protection and data use
Retention
Store the artefacts wherever your compliance documentation lives, and link them to roles and systems.
