EXIN AI Compliance Professional study guide
EXIN AI Compliance Professional · Work through your exam, one topic at a time.
The EXIN AI Compliance Professional is a certification from EXIN, the Dutch exam institute, aimed at professionals who must show that an organisation's use of artificial intelligence meets legal and regulatory obligations. Typical candidates are compliance officers, privacy and data protection officers, risk and audit staff, legal counsel, and managers responsible for AI systems or AI governance programmes. People moving into AI governance from traditional compliance, information security, or quality roles also form a large part of the audience. The exam is structured around four equally weighted domains: AI compliance fundamentals; AI regulation and governance frameworks; AI risk management and controls; and AI compliance operations and accountability. The EXIN AI Compliance Professional study guide has 4 sections and about 1,546 words.
01AI compliance fundamentals
This domain tests whether you can define AI compliance, separate legal duties from ethical expectations, and describe the elements of a compliance programme across the AI lifecycle. Questions often ask you to classify an obligation, identify the correct compliance response, or spot a control gap in a scenario.
403 words, about 2 min02AI regulation and governance frameworks
This domain tests your ability to navigate the main regulatory and governance instruments, classify AI systems correctly, and explain how governance structures turn principles into accountable practice. Expect scenario questions on risk tiers, provider and deployer duties, and framework selection.
409 words, about 2 min03AI risk management and controls
This domain tests whether you can identify AI-specific risks, assess them consistently, select proportionate controls, and evidence residual risk. Questions often present a model, data set or vendor and ask for the most appropriate control or the missing risk step.
369 words, about 2 min04AI compliance operations and accountability
This domain tests how compliance is run day to day: who is accountable, how obligations are operationalised, how monitoring and incidents work, and how evidence is maintained. Scenario questions often ask who should own a decision, what must be documented, or when to escalate.
365 words, about 2 min