Compliance Quick Check for Your Company
Find out for free in 2 minutes which compliance obligations your company has, from GDPR to the AI Act, with top risks and legal bases.
Compliance obligations for companies: the key categories
Which obligations a company has depends on legal form, industry, headcount and data processing: typically 20 to 40 statutory obligations, and for a GmbH with a website, customer data and AI use more than 45. The compliance quick check works out your personal lower bound in two minutes, free and without sign-up.
This lower bound is spread across a few large clusters. In data protection, the GDPR classics affect almost every company: a privacy policy on the website, a record of processing activities (RoPA), data processing agreements (DPA) with service providers and technical and organisational measures (TOM). Taxes & accounting covers the ongoing obligations of every business: GoBD-compliant archiving, e-invoicing, retention periods and the advance VAT return. As soon as staff are employed, occupational safety is added: risk assessment, regular briefings and correct working time records. Corporations additionally carry company law obligations such as transparency register entry, publication of the annual financial statements and the duties of the management as a corporate body. And anyone using AI tools moves into the AI & digital area: the EU AI Act requires AI literacy under Article 4, transparency obligations under Article 50 and a ban on certain practices under Article 5. This overview of company obligations shows that most businesses underestimate how many clusters apply at the same time.
What violations can lead to
The consequences range from fines to personal liability. Data protection violations can be fined under the GDPR with up to 20 million euros or 4 percent of global annual turnover. Prohibited AI practices under the EU AI Act can even reach 35 million euros or 7 percent. A missing or incorrect transparency register entry can be fined with up to 150,000 euros. Missing mandatory information in the legal notice or terms and conditions is among the most common reasons for warning letters in German online business. And a managing director who fails to file for insolvency in time risks not only a fine but a prison sentence of up to three years. These figures show that compliance is not an administrative detail but a direct business risk, for the company and personally for its management.
Why an obligations cockpit instead of a one-off list
A one-off list only answers today’s question. Compliance obligations for SMEs, however, are ongoing: many obligations recur every year, have fixed deadlines and change with new laws, such as the Accessibility Strengthening Act (BFSG) 2025, the NIS2 Directive 2025 or mandatory e-invoicing in 2027/2028. Anyone who writes down their obligations only once loses sight of exactly this movement. That is why the quick check is the first step, not the last: in the Company Audit cockpit you manage all obligations with a deadline calendar, status tracking and matching templates in one place, instead of asking yourself every year what is currently due.
Frequently asked questions
Which compliance obligations does a company in Germany have?
That depends on legal form, industry, headcount and data processing. Even a solo self-employed person without a website has around 10 basic obligations, such as GoBD-compliant archiving, retention periods and tax returns. A GmbH with a website, customer data and AI use quickly reaches more than 45 obligations, from the privacy policy and the transparency register to the AI literacy obligation under Article 4 of the EU AI Act.
Is the compliance quick check really free?
Yes. The quick check is completely free, with no account, no email address and no hidden conditions. You answer 8 questions and see the result immediately. Only if you want to manage all obligations with deadlines and templates in the Company Audit cockpit can you create a free account there.
How reliable is the result of the quick check?
The result is a deliberately conservative lower bound: the quick check asks 8 of 15 profile attributes and assumes the most favourable case for all the others. Your company therefore has at least as many obligations as shown, and in practice usually more, for example if you have office premises, a cash register, a warehouse or company vehicles. The check does not replace legal advice.
What happens to my answers?
Nothing: your answers are used solely for the one-off calculation and are neither stored nor logged. The check collects no personal data: no email, no name, no company name. After the evaluation, your answers no longer exist on the server.
What are the consequences of violating company obligations?
Depending on the obligation, the consequences are fines, warning letters or personal liability of the management. Data protection violations can be fined up to 20 million euros or 4 percent of global annual turnover, prohibited AI practices under the EU AI Act even up to 35 million euros or 7 percent. Missing legal notice or terms and conditions details are among the most common reasons for warning letters, and filing for insolvency too late can be punished with up to three years in prison.
Company Audit
All compliance obligations in one place
See at a glance which obligations apply to your company, with deadlines, templates and an AI assistant in the cockpit.
More free tools
AI Training Obligation Check
Are your employees required to receive AI training under the EU AI Act? 8 questions to find out.
AI Knowledge Test for Teams
10 questions, 3 minutes: how safely does your team use AI? With instant results and a level rating.
LLM API Cost Calculator
What do GPT-5, Claude or Gemini cost per month? Enter requests and tokens and compare the API costs of all models.