AI Literacy Assessment.
EU AI Act Article 4 Ready
Article 4 is already law and applies to your existing staff, not just new hires. Bryq's AI Literacy Assessment measures your full workforce (candidates and current employees) in five dimensions, validated by I/O psychologists, and produces records that support your audit programme.
AI Literacy Assessment.
EU AI Act Article 4 Ready
Article 4 is already law and applies to your existing staff, not just new hires. Bryq's AI Literacy Assessment measures your full workforce (candidates and current employees) in five dimensions, validated by I/O psychologists, and produces records that support your audit programme.
AI Literacy Assessment.
EU AI Act Article 4 Ready
Article 4 is already law and applies to your existing staff, not just new hires. Bryq's AI Literacy Assessment measures your full workforce (candidates and current employees) in five dimensions, validated by I/O psychologists, and produces records that support your audit programme.
What Article 4 requires
What Article 4 requires
Article 4 of Regulation (EU) 2024/1689 requires providers and deployers of AI systems used in the EU to "ensure, to their best extent, a sufficient level of AI literacy" among staff and other persons dealing with the operation and use of those systems on their behalf. The duty has been in force since 2 February 2025. It applies regardless of the risk category of the tool, including embedded ATS features and generative tools used for everyday hiring tasks. (Source: Article 4 EU AI Act; AI Act Service Desk Article 4 page)
The European Commission's AI Office FAQ has been explicit on three points: there is no certification scheme; there is no one-size-fits-all training programme; and "sufficient" is calibrated to the role, the risk profile of the tool, and the people affected by its output. (Source: European Commission AI Literacy Q&A)
Article 4 of Regulation (EU) 2024/1689 requires providers and deployers of AI systems used in the EU to "ensure, to their best extent, a sufficient level of AI literacy" among staff and other persons dealing with the operation and use of those systems on their behalf. The duty has been in force since 2 February 2025. It applies regardless of the risk category of the tool, including embedded ATS features and generative tools used for everyday hiring tasks. (Source: Article 4 EU AI Act; AI Act Service Desk Article 4 page)
The European Commission's AI Office FAQ has been explicit on three points: there is no certification scheme; there is no one-size-fits-all training programme; and "sufficient" is calibrated to the role, the risk profile of the tool, and the people affected by its output. (Source: European Commission AI Literacy Q&A)
Article 4 of Regulation (EU) 2024/1689 requires providers and deployers of AI systems used in the EU to "ensure, to their best extent, a sufficient level of AI literacy" among staff and other persons dealing with the operation and use of those systems on their behalf. The duty has been in force since 2 February 2025. It applies regardless of the risk category of the tool, including embedded ATS features and generative tools used for everyday hiring tasks. (Source: Article 4 EU AI Act; AI Act Service Desk Article 4 page)
The European Commission's AI Office FAQ has been explicit on three points: there is no certification scheme; there is no one-size-fits-all training programme; and "sufficient" is calibrated to the role, the risk profile of the tool, and the people affected by its output. (Source: European Commission AI Literacy Q&A)
What the regulation actually says
What the regulation actually says
EU AI ACT, ARTICLE 3(56), VERBATIM DEFINITION
AI literacy means "the skills, knowledge and understanding that allow providers, deployers and affected persons, taking into account their respective rights and obligations in the context of this Regulation, to make an informed deployment of AI systems, as well as to gain awareness about the opportunities and risks of AI and possible harm it can cause." Source: Regulation (EU) 2024/1689, Article 3(56)
AI literacy means "the skills, knowledge and understanding that allow providers, deployers and affected persons, taking into account their respective rights and obligations in the context of this Regulation, to make an informed deployment of AI systems, as well as to gain awareness about the opportunities and risks of AI and possible harm it can cause." Source: Regulation (EU) 2024/1689, Article 3(56)
AI literacy means "the skills, knowledge and understanding that allow providers, deployers and affected persons, taking into account their respective rights and obligations in the context of this Regulation, to make an informed deployment of AI systems, as well as to gain awareness about the opportunities and risks of AI and possible harm it can cause." Source: Regulation (EU) 2024/1689, Article 3(56)
We quote the regulation verbatim because the definition itself is the standard. Note three things in the wording: "taking into account respective rights and obligations" (literacy is role-relative), "informed deployment" (operational competence, not theoretical knowledge), and "awareness about opportunities and risks" (literacy includes critical evaluation, not just task execution). Bryq's five-dimension framework maps to all three.
That phrasing sounds soft. It is not. Under Article 99, a literacy failure can be cited as an aggravating factor in fines reaching up to €15 million or 3% of global annual turnover when something else goes wrong with a high-risk hiring tool. The standard scales with the role and the risk; the consequences do not.
We quote the regulation verbatim because the definition itself is the standard. Note three things in the wording: "taking into account respective rights and obligations" (literacy is role-relative), "informed deployment" (operational competence, not theoretical knowledge), and "awareness about opportunities and risks" (literacy includes critical evaluation, not just task execution). Bryq's five-dimension framework maps to all three.
That phrasing sounds soft. It is not. Under Article 99, a literacy failure can be cited as an aggravating factor in fines reaching up to €15 million or 3% of global annual turnover when something else goes wrong with a high-risk hiring tool. The standard scales with the role and the risk; the consequences do not.
We quote the regulation verbatim because the definition itself is the standard. Note three things in the wording: "taking into account respective rights and obligations" (literacy is role-relative), "informed deployment" (operational competence, not theoretical knowledge), and "awareness about opportunities and risks" (literacy includes critical evaluation, not just task execution). Bryq's five-dimension framework maps to all three.
That phrasing sounds soft. It is not. Under Article 99, a literacy failure can be cited as an aggravating factor in fines reaching up to €15 million or 3% of global annual turnover when something else goes wrong with a high-risk hiring tool. The standard scales with the role and the risk; the consequences do not.
What "sufficient AI literacy" means in practice
What "sufficient AI literacy" means in practice
The Commission's guidance points at four things, in order:
The Commission's guidance points at four things, in order:
The Commission's guidance points at four things, in order:
1.
1.
Map your AI in hiring. A written inventory of every AI tool used in the recruitment workflow, including embedded ATS features and generative tools used for tasks like drafting job ads.
Map your AI in hiring. A written inventory of every AI tool used in the recruitment workflow, including embedded ATS features and generative tools used for tasks like drafting job ads.
Map your AI in hiring. A written inventory of every AI tool used in the recruitment workflow, including embedded ATS features and generative tools used for tasks like drafting job ads.
2.
2.
Match roles to systems. For each tool, list who uses it, who relies on its output, and who is responsible for overriding it. Recruiters, hiring managers, HR business partners, and external sourcing agencies acting on your behalf are all in scope.
Match roles to systems. For each tool, list who uses it, who relies on its output, and who is responsible for overriding it. Recruiters, hiring managers, HR business partners, and external sourcing agencies acting on your behalf are all in scope.
Match roles to systems. For each tool, list who uses it, who relies on its output, and who is responsible for overriding it. Recruiters, hiring managers, HR business partners, and external sourcing agencies acting on your behalf are all in scope.
3.
3.
Differentiate the literacy you provide. One generic e-learning module sent to all of HR is not what regulators have in mind. The Commission's word for what they expect is "tailored"; in practice that means role-specific training tracks.
Differentiate the literacy you provide. One generic e-learning module sent to all of HR is not what regulators have in mind. The Commission's word for what they expect is "tailored"; in practice that means role-specific training tracks.
Differentiate the literacy you provide. One generic e-learning module sent to all of HR is not what regulators have in mind. The Commission's word for what they expect is "tailored"; in practice that means role-specific training tracks.
4.
4.
Document everything. A training register, the materials and syllabi used, simple competency checks or attestations, and a review cadence showing how training is updated as tools change.
Document everything. A training register, the materials and syllabi used, simple competency checks or attestations, and a review cadence showing how training is updated as tools change.
Document everything. A training register, the materials and syllabi used, simple competency checks or attestations, and a review cadence showing how training is updated as tools change.
Bryq sits on step three (differentiating literacy by role) and step four (documenting evidence). It is not a substitute for steps one and two, which sit with the organisation. The Commission has been clear that no single tool grants a presumption of Article 4 compliance.
Bryq sits on step three (differentiating literacy by role) and step four (documenting evidence). It is not a substitute for steps one and two, which sit with the organisation. The Commission has been clear that no single tool grants a presumption of Article 4 compliance.
Bryq sits on step three (differentiating literacy by role) and step four (documenting evidence). It is not a substitute for steps one and two, which sit with the organisation. The Commission has been clear that no single tool grants a presumption of Article 4 compliance.
How Bryq's AI Literacy Assessment maps to Article 4 requirements
How Bryq's AI Literacy Assessment maps to Article 4 requirements
Bryq measures the literacy of your workforce in five dimensions, scored 0–100, built on six peer-reviewed research frameworks including UNESCO's AI Competency Framework, SFIA v9, and OECD AI literacy work. Each candidate or employee completes the assessment in around 15 minutes, in scenarios that look like the work, not as a knowledge quiz.
The five dimensions and the corresponding Article 4 expectations:
Bryq measures the literacy of your workforce in five dimensions, scored 0–100, built on six peer-reviewed research frameworks including UNESCO's AI Competency Framework, SFIA v9, and OECD AI literacy work. Each candidate or employee completes the assessment in around 15 minutes, in scenarios that look like the work, not as a knowledge quiz.
The five dimensions and the corresponding Article 4 expectations:
Bryq measures the literacy of your workforce in five dimensions, scored 0–100, built on six peer-reviewed research frameworks including UNESCO's AI Competency Framework, SFIA v9, and OECD AI literacy work. Each candidate or employee completes the assessment in around 15 minutes, in scenarios that look like the work, not as a knowledge quiz.
The five dimensions and the corresponding Article 4 expectations:
Dimension
Dimension
Dimension
What it measures
What it measures
What it measures
AI Task Strategy
What it
measures
AI Task Strategy
Understanding when and how to deploy AI; recognising the limits of AI in a given workflow
Understanding when and how to deploy AI; recognising the limits of AI in a given workflow
Understanding when and how to deploy AI; recognising the limits of AI in a given workflow
Prompting & Interaction
Core
approach
Prompting & Interaction
Operational use of AI tools; producing useful output from generative systems
Operational use of AI tools; producing useful output from generative systems
Operational use of AI tools; producing useful output from generative systems
Critical Evaluation
AI
proficiency
Critical Evaluation
Spotting bias, hallucination, and factual errors before they reach a decision; meaningful human oversight
Spotting bias, hallucination, and factual errors before they reach a decision; meaningful human oversight
Spotting bias, hallucination, and factual errors before they reach a decision; meaningful human oversight
Ethical & Responsible Use
Candidate
experience
Ethical & Responsible Use
Handling sensitive data; candidate transparency; knowing what to escalate; data-protection awareness
Handling sensitive data; candidate transparency; knowing what to escalate; data-protection awareness
Handling sensitive data; candidate transparency; knowing what to escalate; data-protection awareness
Workflow Integration
Candidate
experience
Workflow Integration
Embedding AI into hiring without becoming dependent or losing professional judgement
Embedding AI into hiring without becoming dependent or losing professional judgement
Embedding AI into hiring without becoming dependent or losing professional judgement
Audit-ready scoring and documentation
Audit-ready scoring and documentation
The assessment produces structured records you can include in your Article 4 audit file. Specifically:
The assessment produces structured records you can include in your Article 4 audit file. Specifically:
The assessment produces structured records you can include in your Article 4 audit file. Specifically:
●
●
Per-employee scores across the five dimensions, with date and role group attached
Per-employee scores across the five dimensions, with date and role group attached
Per-employee scores across the five dimensions, with date and role group attached
●
●
Aggregate workforce distribution by dimension, segmented by team or business unit
Aggregate workforce distribution by dimension, segmented by team or business unit
Aggregate workforce distribution by dimension, segmented by team or business unit
●
●
Re-assessment records for tracking literacy as your tools and team change
Re-assessment records for tracking literacy as your tools and team change
Re-assessment records for tracking literacy as your tools and team change
●
●
A methodology note covering the five dimensions and the research frameworks behind them
A methodology note covering the five dimensions and the research frameworks behind them
A methodology note covering the five dimensions and the research frameworks behind them
●
●
Tool-agnostic format, the assessment does not test any one vendor's product, which means the record holds as your AI stack evolves
Tool-agnostic format, the assessment does not test any one vendor's product, which means the record holds as your AI stack evolves
Tool-agnostic format, the assessment does not test any one vendor's product, which means the record holds as your AI stack evolves
The records are one component of an Article 4 audit file. They do not stand in for the rest of the programme, the policy, the training delivery, the override protocols, the works council engagement, which sits with you.
The records are one component of an Article 4 audit file. They do not stand in for the rest of the programme, the policy, the training delivery, the override protocols, the works council engagement, which sits with you.
The records are one component of an Article 4 audit file. They do not stand in for the rest of the programme, the policy, the training delivery, the override protocols, the works council engagement, which sits with you.
For Legal and Compliance: defensibility, audit trails, retention
For Legal and Compliance: defensibility, audit trails, retention
Three things the Compliance team typically asks about:
Three things the Compliance team typically asks about:
Three things the Compliance team typically asks about:
Defensibility
Defensibility
The assessment is grounded in published competency research (UNESCO, SFIA, OECD), administered consistently across the workforce, validated by I/O psychologists, and dimension-level scored. It is structured, repeatable, and explainable, the three things an auditor will want to see in your literacy evidence.
The assessment is grounded in published competency research (UNESCO, SFIA, OECD), administered consistently across the workforce, validated by I/O psychologists, and dimension-level scored. It is structured, repeatable, and explainable, the three things an auditor will want to see in your literacy evidence.
The assessment is grounded in published competency research (UNESCO, SFIA, OECD), administered consistently across the workforce, validated by I/O psychologists, and dimension-level scored. It is structured, repeatable, and explainable, the three things an auditor will want to see in your literacy evidence.
Audit trail
Audit trail
The exported records include candidate or employee identifier, role group, dimension scores, composite score, assessment date, and methodology version. Bryq retains the records for the period agreed in your Data Processing Agreement; you can export the full record set on demand.
The exported records include candidate or employee identifier, role group, dimension scores, composite score, assessment date, and methodology version. Bryq retains the records for the period agreed in your Data Processing Agreement; you can export the full record set on demand.
The exported records include candidate or employee identifier, role group, dimension scores, composite score, assessment date, and methodology version. Bryq retains the records for the period agreed in your Data Processing Agreement; you can export the full record set on demand.
Interaction with GDPR
Interaction with GDPR
The assessment processes personal data. Bryq operates as a processor under your instruction; the legal basis for the processing sits with you, typically legitimate interest for employee assessment or contractual necessity for candidate assessment. The DPA addresses retention, sub-processors, transfers, and data-subject rights.
The assessment processes personal data. Bryq operates as a processor under your instruction; the legal basis for the processing sits with you, typically legitimate interest for employee assessment or contractual necessity for candidate assessment. The DPA addresses retention, sub-processors, transfers, and data-subject rights.
The assessment processes personal data. Bryq operates as a processor under your instruction; the legal basis for the processing sits with you, typically legitimate interest for employee assessment or contractual necessity for candidate assessment. The DPA addresses retention, sub-processors, transfers, and data-subject rights.
AI literacy and the candidate experience
AI literacy and the candidate experience
When AI literacy assessment is used in hiring, candidates have rights under both EU AI Act and GDPR. Bryq's candidate experience is designed around three principles:
When AI literacy assessment is used in hiring, candidates have rights under both EU AI Act and GDPR. Bryq's candidate experience is designed around three principles:
When AI literacy assessment is used in hiring, candidates have rights under both EU AI Act and GDPR. Bryq's candidate experience is designed around three principles:
Transparency
Transparency
Candidates are told what is being measured, why, and how the results are used. They are not subjected to opaque AI scoring.
Candidates are told what is being measured, why, and how the results are used. They are not subjected to opaque AI scoring.
Candidates are told what is being measured, why, and how the results are used. They are not subjected to opaque AI scoring.
Fairness
Fairness
Bryq's assessments are tested for adverse impact across demographic groups. Where adverse impact is detected, the item or methodology is revised. Documentation is available to deployers as part of the vendor diligence pack.
Bryq's assessments are tested for adverse impact across demographic groups. Where adverse impact is detected, the item or methodology is revised. Documentation is available to deployers as part of the vendor diligence pack.
Bryq's assessments are tested for adverse impact across demographic groups. Where adverse impact is detected, the item or methodology is revised. Documentation is available to deployers as part of the vendor diligence pack.
Proportionality
Proportionality
The assessment takes around 15 minutes and is calibrated to the role. Candidates are not asked to perform tasks unrelated to the work.
The assessment takes around 15 minutes and is calibrated to the role. Candidates are not asked to perform tasks unrelated to the work.
The assessment takes around 15 minutes and is calibrated to the role. Candidates are not asked to perform tasks unrelated to the work.
What Bryq does and does not provide
What Bryq does and does not provide
Bryq is one component of an Article 4 programme. We measure the literacy of your workforce in a structured, defensible way and produce records you can put in your audit file. The rest of the programme, policies, training delivery, override protocols, works council engagement, sits with you. The Commission has been explicit that no single tool grants a presumption of compliance, and we mirror that.
Bryq does provide:
Bryq is one component of an Article 4 programme. We measure the literacy of your workforce in a structured, defensible way and produce records you can put in your audit file. The rest of the programme, policies, training delivery, override protocols, works council engagement, sits with you. The Commission has been explicit that no single tool grants a presumption of compliance, and we mirror that.
Bryq does provide:
Bryq is one component of an Article 4 programme. We measure the literacy of your workforce in a structured, defensible way and produce records you can put in your audit file. The rest of the programme, policies, training delivery, override protocols, works council engagement, sits with you. The Commission has been explicit that no single tool grants a presumption of compliance, and we mirror that.
Bryq does provide:
●
●
Scored, dimension-level measurement of AI literacy across your workforce
Scored, dimension-level measurement of AI literacy across your workforce
Scored, dimension-level measurement of AI literacy across your workforce
●
●
Tool-agnostic, role-relative scoring against an Ideal Candidate Profile
Tool-agnostic, role-relative scoring against an Ideal Candidate Profile
Tool-agnostic, role-relative scoring against an Ideal Candidate Profile
●
●
Exportable records that support the documentation requirement under Article 4
Exportable records that support the documentation requirement under Article 4
Exportable records that support the documentation requirement under Article 4
●
●
Vendor diligence documentation reflecting Bryq's own status as a high-risk AI system under Annex III(4)(a)
Vendor diligence documentation reflecting Bryq's own status as a high-risk AI system under Annex III(4)(a)
Vendor diligence documentation reflecting Bryq's own status as a high-risk AI system under Annex III(4)(a)
Bryq does not provide:
Bryq does not provide:
Bryq does not provide:
●
●
Legal opinion on your specific Article 4 deployment
Legal opinion on your specific Article 4 deployment
Legal opinion on your specific Article 4 deployment
●
●
A presumption of Article 4 compliance
A presumption of Article 4 compliance
A presumption of Article 4 compliance
●
●
Training delivery (the assessment measures what training and experience have produced; it does not deliver the training itself)
Training delivery (the assessment measures what training and experience have produced; it does not deliver the training itself)
Training delivery (the assessment measures what training and experience have produced; it does not deliver the training itself)
●
●
Works council consultation; that conversation sits with you and your local counsel
Works council consultation; that conversation sits with you and your local counsel
Works council consultation; that conversation sits with you and your local counsel
A note on Bryq's own classification
A note on Bryq's own classification
Bryq's AI Proficiency Assessment uses AI in candidate evaluation. Under a strict reading of Annex III(4)(a) of the EU AI Act, that places it within the high-risk category. We treat Bryq as a provider of a high-risk AI system under Chapter III and meet the corresponding obligations: documented risk management, representative training data, technical documentation, logging, transparency to deployers, and built-in support for human oversight. When you run vendor diligence as part of your own Article 4 programme, ask for these. We provide them.
Bryq's AI Proficiency Assessment uses AI in candidate evaluation. Under a strict reading of Annex III(4)(a) of the EU AI Act, that places it within the high-risk category. We treat Bryq as a provider of a high-risk AI system under Chapter III and meet the corresponding obligations: documented risk management, representative training data, technical documentation, logging, transparency to deployers, and built-in support for human oversight. When you run vendor diligence as part of your own Article 4 programme, ask for these. We provide them.
Bryq's AI Proficiency Assessment uses AI in candidate evaluation. Under a strict reading of Annex III(4)(a) of the EU AI Act, that places it within the high-risk category. We treat Bryq as a provider of a high-risk AI system under Chapter III and meet the corresponding obligations: documented risk management, representative training data, technical documentation, logging, transparency to deployers, and built-in support for human oversight. When you run vendor diligence as part of your own Article 4 programme, ask for these. We provide them.
Ready to Measure AI Proficiency?
Book a 30-minute demo. We’ll build your first AI Proficiency profile on the call, for a role you're hiring or a team you want to assess.
Ready to Measure AI Proficiency?
Start hiring based on
real data.
Ready to Measure AI Proficiency?
Book a 30-minute demo. We’ll build your first AI Proficiency profile on the call, for a role you're hiring or a team you want to assess.
FAQ
Find answers to the most frequently asked questions
Resources
GDPR
COMPLIANT
AICPA SOC
CERTIFIED
Resources
Resources
GDPR
COMPLIANT
AICPA SOC
CERTIFIED