White papers & guides
Mandatory training is a legal topic. We translated it into working papers.
Which training obligations apply from which company size? What does the EU AI Act actually require since February 2025? Why does spreadsheet evidence tear in audits — and why don’t phishing click rates drop despite annual training? We have written six white papers on the typical problems and pitfalls of compliance training: compact, concrete, no marketing fog. Each addresses one problem of one role — from executives to shift leads — and ends with a plan you can execute with any tool. The papers cover German law, in English.
Executives & HR
The Training Obligations Compass 2026
Seven laws in five years — and none of them asks whether you have a compliance department. Which mandatory trainings really apply to your company, sorted by size and sector.
Get it free →
Founders
The obligations arrive before the customers
Data protection from the first customer record, AI literacy since February 2025, occupational safety from the first employee. None of these rules waits until you are big enough.
Get it free →
Executives, Compliance & Privacy
The AI Literacy Obligation Is Already Here
Article 4 of the EU AI Act has applied since February 2025 — to every company that uses AI tools. Which is nearly every company. And hardly any of them has implemented the obligation yet.
Get it free →
HR, Privacy & Works Council
The Works Council Is Watching — Good
Learning records, phishing simulations, performance monitoring: the works council’s questions are legitimate — and have fair answers. Including eight cornerstones for a works agreement.
Download directly →
Compliance, CISO & QM
Training That Survives the Audit
In an audit, what counts is not that training happened — but that you can prove it. The chain of evidence in five links, and auditors’ questions translated into concrete records.
Get it free →
Manufacturing, Logistics & Care
Training Without a Desk
Roughly half of all employees work without a PC of their own — and that is exactly where instructions are mandatory and records are weakest. How mandatory training reaches the shop floor, the warehouse and the ward.
Get it free →
IT Security & CISO
After the Click
Click rates not going down despite annual training? That is rarely the employees’ fault — and almost always the wrong metric plus a simulation that punishes instead of trains.
Get it free →
Executives, HR & associations
Who is missing first?
Workforce loss in a state of tension or defence under German law: four legal paths employees leave your company on — or may no longer leave on. German-language paper.
Get it free →
Executives, boards & advisory boards
The Training You Cannot Delegate
For twenty years, training obligations pointed at the workforce. Since December 2025, three German and EU laws point at the management itself — with a duty to prove it and personal liability.
Get it free →
Engineering, product management & QA
24 Hours
From 11 September 2026, manufacturers of connected products must report an actively exploited vulnerability within 24 hours. The Cyber Resilience Act is discussed everywhere as an engineering topic. The deadline is not an engineering question.
Get it free →
Marketing, communications, service & HR
The Breathing Space That Is Not One
The AI Omnibus postponed the high-risk obligations to December 2027. The headline said “postponed” — and many filed the topic away. The Article 50 transparency obligations have applied unchanged since 2 August 2026.
Get it free →
Finance, accounting & payment approval
The Call Came From Your Boss
The voice was right. The number was right. The urgency was plausible. Fraud with synthetic voices does not target IT — it targets the person with payment authority.
Get it free →
Data protection officers
Die Aufgabe, für die niemand Sie gebucht hat
Art. 39(1)(b) GDPR lists training among the tasks of the data protection officer. German-only paper.
Get it free →
Online retailers and distance sellers
Das Paket, das niemandem gehört
A parcel travels from manufacturer through customs to the doorstep, touched by four roles with four sets of obligations. German-language paper.
Get it free →
Vessel operators, ship managers, crewing
Your ship already has a rating before it berths
Port state control does not pick at random. Every ship carries a risk profile that decides priority, inspection interval and inspection depth — and one of its parameters is not the ship but the company behind it.
Get it free →All papers are free. For most we ask for your e-mail address — you get the download immediately, and you will only hear from us again if you explicitly tick the newsletter box. The works council paper deliberately has no form: it is built to be forwarded.