Filtering candidates with AI is one of [the uses the AI Act classifies as high-risk](/en/blog/high-risk-classification-guidelines-consultation). The Omnibus grants leeway until the end of 2027, but the documentation is worth starting sooner.
The first step in AI governance isn't buying software. It's knowing what AI you're already using. And the answer is almost always longer than the organisation thinks.
The AI Act isn't overseen only from Brussels. In Spain, AESIA is the central piece, and it isn't alone. Understanding the map of authorities helps you prepare without panicking.
In most SMEs, AI governance falls to someone who never asked for the job: the IT person, the quality lead, the HR manager. That emerging role deserves structure, without confusing it with a legal figure the AI Act doesn't require.
A checklist tells you that you did something. Evidence proves that you did it, how, and when. The difference looks subtle — until the day someone asks you to prove it.