Sello CriterIA© — Uso responsable y con criterio de la IA, by EstratégicaMente. Anclado en la blockchain.
The seal · Responsible use of AI

EU AI Act compliance for SMEs: diagnosis, policies and evidence

« Use AI. Comply with the law. Prove it »

CriterIA© is the seal for responsible, criterion-led use of AI. It verifies method and culture against the private CriterIA© methodology — and anchors every issuance on the blockchain.

Take the free CriterIA© 7See the four levels

by EstratégicaMente

CriterIA© · EU AI Act

Four ways to start. None of them ties you to the next.

Complying with the Regulation does not start with a project: it starts by knowing where you stand. The number says how many points are reviewed: seven, twenty-five or sixty.

Self-assessment

CriterIA© 7

To find out whether the rules apply to you and where to begin.

FreeSeven questions

  • Which obligations already apply to you since 2 August
  • Your estimated exposure to penalties
  • A four-point starting plan

Automated, without human review.

Take the CriterIA© 7
Recommended

Diagnosis

CriterIA© 25

The professional diagnosis: 25 points and your first recommendations.

490 €VAT included

  • Compliance report with your first literacy and governance recommendations
  • Editable AI use policy template, in Word
  • Report on the analysis of AI policies worldwide

Extended 25-point questionnaire across the six dimensions.

Buy the CriterIA© 25

Diagnosis + compliance file

CriterIA© 60

The full diagnosis and your documentary file.

1.500 €VAT included

  • Extended report with your 90-day plan in three phases
  • Six file templates, in Word
  • Report on the analysis of AI policies worldwide

The six templates: technical documentation, instructions for use, literacy, record of processing activities, TIA and responsibility matrix. Assisted 60-point self-assessment across the six dimensions.

Buy the CriterIA© 60

Implementation and seal

CriterIA© Seal

We do it, we verify it from the inside and we seal it.

On quotationTailored · Levels II and III

  • The file completed and verified by us
  • Review of your contracts and your suppliers, one by one
  • Basic AI course for staff: documented AI literacy training, with test and diploma
  • Executive reskilling and implementation supported by a senior professional
  • Issuance of the CriterIA© seal, verifiable and anchored on blockchain
Request a quote

Nobody loses by starting at the bottom. The 490 € of the CriterIA© 25 is deducted in full from the CriterIA© 60 if you buy it within 30 days.

High risk deferred by Regulation (EU) 2026/1744 to December 2027 and August 2028. Transparency (Art. 50) and literacy remain in force.

Verifiable, not decorative

A seal anyone can check.

The hash anchors every issuance on the blockchain. Anyone can check issuer, holder, level and date without going through us.

  • Blockchain anchoring: the file hash is calculated and sealed on blockchain, with its .ots on-chain proof receipt.
  • Seal with its hash: personalised with the hash and the level, ready to use in SVG and PNG.
  • QR and public verification: issuer, holder, level, date and status. Anyone can check it.
Verify a seal
  1. Level IAwarenessThe organisation knows the framework, identifies its AI uses and states human oversight principles.
  2. Level IIPracticeIt applies real controls, records and governance processes to its AI systems in operation.
  3. Level IIICultureMature governance, external audit and continuous improvement. Requires external documented verification.

Privacy by design. Only the hash is anchored on the blockchain; personal data stays off-chain, in line with the GDPR.

More than the rules

We ask for more than the Regulation requires.

79pointsverified across eight dimensions and three pillars: literacy, reskilling and governance
45of 79are EstratégicaMente’s own criteria; thirty-two derive from the Regulation and two are mixed

The Regulation does not go this far. Its Article 4, in the wording in force since 27 July 2026, requires supporting the promotion of AI literacy, without imposing any documentary format or evidence. CriterIA© deliberately goes further: of the seventy-nine points in the rubric, forty-five are EstratégicaMente’s own criteria, thirty-two derive from the Regulation and two are mixed; all eight points of the reskilling pillar are our own. We ask for more because an organisation that does not know how to use AI neither optimises it nor creates value with it, however thick its file.

Own data · source: CriterIA© rubric, 79 points

What CriterIA© is — and what it is not.

What it is

CriterIA© assesses AI literacy (Art. 4 of Regulation (EU) 2024/1689), reskilling and organisational governance for the responsible use of artificial intelligence. It is a private, voluntary methodological seal, aligned with the spirit of the codes of conduct in Art. 95 of the Regulation. What it does verify: that the organisation has method, training and a culture of criterion in its use of AI — verifiably, with every issuance anchored on blockchain.

What it is not

It does not constitute the EU declaration of conformity or the CE marking provided for in the Regulation, nor does it replace any applicable conformity assessment procedure (Arts. 43-44), and it is not a certification issued by an accredited body.

Pillar · Governance

Governing AI is not about knowing how much technology an organisation uses. It is about knowing where it is used, what for, who is accountable, which risks are accepted and what evidence shows they remain under control.

Our thesis: literacy, reskilling and governance

Without literacy, governance and reskilling, AI is not an advantage: it is a risk. Artificial intelligence does not fail because of the technology: it fails when it enters an organisation that does not know how to use it, has not redesigned its processes to receive it and has no way of deciding who answers for what it produces. In that scenario it saves no work: it multiplies the error, makes it faster and spreads it further.

Literacy. That people know what the tool does, where it fails and when to distrust it. It is not teaching prompt writing: it is teaching people not to believe the answer.

Reskilling. That roles are redesigned around what the person contributes once the machine does the rest. Without this, AI frees no time: it creates confusion and resistance.

Governance. Inventory, risk classification, human oversight with a real ability to intervene, and a record of what was decided and why. Without this there is nothing to show when someone asks.

A law firm tells you whether you comply. We train your team, redesign how you work and then issue our private verification seal. Those are three different things. We applied it at home before any client: we have our consultant network trained with an auditable record, and verification is separated from drafting.

Technological transparency: we apply our own method to ourselves

Our clients' data is stored in the European Union (Ireland). Calls to AI models involve a transfer to the United States under standard contractual clauses. Full detail in our AI Policy.

If you use generative AI, four rules: always take a commercial plan with a DPA, never consumer accounts. Check how your provider transfers data.

· DIRECT CONTACT · REPLY IN < 24 H

2 August has already passed. Shall we talk about your compliance today?

No hidden newsletter and no sales calls: tell us your case and a person will reply.