What they did
Summarized a client contract
What actually happened
Confidential terms now sit on a third-party server.
Turn the lights on.
Your team already uses AI every day — quietly, and with company data. Five minutes per employee turns that invisible risk into certified, auditable competence.
Try the free module5 minutes. Just your work email.
- 35 minutes
- any device
- no LMS
- certificate included
what you can't see today
- Legal — contract pasted into free chatbot
- HR — salary list uploaded 'to make a chart'
- Sales — client email translated on a personal account
Move your cursor across the dark.
Five minutes of training turns this into daylight.
The certificate is the point.
Not a participation trophy — an audit artifact. Every completion generates evidence you can put in front of an auditor, mapped to the exact clauses they check.
ISO 27001, A.6.3 — covers the awareness and training control in your next audit.
EU AI Act, Article 4 — documents the AI-literacy duty, in force since February 2025.
NIS2, Article 20 — evidence of the training the directive expects entities to extend to their employees.
Verifiable serial — every certificate carries a number an auditor can check against our registry.
noshadow.ai
Training record
Certificate of AI-Literacy Training
This certifies that
María Fernández Ruiz
Andaltec SL
has completed the noshadow.ai Shadow-AI training programme, supporting the AI-literacy duty under Regulation (EU) 2024/1689, Article 4, and the training controls of ISO/IEC 27001:2022 A.6.3 and Directive (EU) 2022/2555, Article 20.
- Serial
- NS-0000-000000
- Completed
- 2026-06-12
- Score
- 90 / 100
Verify at noshadow.ai/verify/NS-0000-000000
You can't manage what you can't see.
What they did
Drafted a patient report faster
What actually happened
Health data left the EU.
What they did
Fixed a spreadsheet formula
What actually happened
The payroll went with it.
Blocking AI tools doesn't stop this — it moves it to personal phones. Training does. And EU law now agrees.
Training stopped being optional in 2025.
EU AI Act, Article 4 — every company using AI must ensure its staff are AI-literate. Applicable since 2 February 2025.
NIS2, Article 20 — management must follow cybersecurity training — and entities are expected to extend it to their employees.
Auditors won't ask if you trained people. They'll ask you to prove it.
What your team actually does
Five modules, 35 minutes end to end. The first one is free.
1 · 7 min
Shadow AI: what your company can't see
What Shadow AI is, why it happens in every office, and what actually leaves the building when work data goes into a free AI tool.
2 · 7 min
What data is sensitive
How to recognize personal data, special categories and company secrets on sight, and why AI tools handle your text differently from other software.
3 · 7 min
Safe prompting
How to strip identifiers from any prompt while keeping the task intact, and how to spot the cases where redaction alone is not enough.
4 · 6 min
Approved tools and the right way in
Why your company approves specific AI tools, how to find the golden path for any task, and why reporting a slip early always beats hiding it.
5 · 8 min
The law, your company, and you
What the EU AI Act, NIS2, and ISO 27001 actually ask of your company, what your certificate proves, and the final assessment for the whole course.
How it works.
1Sign up and invite your team — no LMS required
2Each employee: 35 minutes, on any device
3Named certificates land in your audit file, verifiable online
Every completion is recorded against a serial your auditor can check.
Simple, per person, per year.
Free preview
- First module of the course
- 5 minutes, on any device
- Your work email, nothing else
€0 no card
Start module 1Team
- Full course, every employee certified
- Hosted at noshadow.ai — no LMS needed
- Named, serial-verifiable certificates for your audit file
€29 per employee / year + VAT
Get your team certifiedOrganisation
- Everything in Team
- Invoicing and volume pricing
- Rollout support by email
Volume billed annually + VAT
Talk to usAll prices exclude VAT.
Frequently asked questions
Is AI training really a legal requirement?
For AI literacy, yes. Article 4 of the EU AI Act (Regulation (EU) 2024/1689) requires providers and deployers of AI systems to take measures ensuring a sufficient level of AI literacy of their staff — applicable since 2 February 2025. NIS2 (Directive (EU) 2022/2555, Article 20) additionally requires the members of management bodies of essential and important entities to follow cybersecurity training, and expects those entities to offer similar training to employees on a regular basis.
We already block ChatGPT, why train?
Blocking doesn't stop Shadow AI — it moves it to personal phones and private accounts, where you have zero visibility. It also doesn't discharge your AI Act literacy duty: your team still deals with AI embedded in the tools they use every day. Training changes behaviour where blocking can't reach, and produces the evidence blocking never will.
Do we need an LMS?
No. The course is hosted at noshadow.ai — employees just need a work email to start, on any device. Nothing to install, nothing to integrate.
How long does it take per employee?
About 35 minutes end to end, on any device, and it can be done in short sittings. The first module is free and takes 5 minutes — try it before rolling anything out.
Do certificates expire?
The certificate itself doesn't expire: it's a dated record that a named person passed the assessment on a given day, and that stays true. What changes is the tooling and the rules around it, so companies generally refresh awareness training about once a year and keep each year's certificates in the evidence file.
What does the certificate prove?
It's a named, dated training record with a serial number an auditor can verify against our registry. It supports your evidence for ISO 27001 control A.6.3 (awareness, education and training), the AI-literacy duty of EU AI Act Article 4, and the training expectations of NIS2 Article 20. No certificate makes you compliant by itself — this one is built to slot into the evidence file that does.
Turn the lights on this quarter.
Five minutes to try it, 35 to certify someone, and evidence your auditor can check by serial.