# AI for the CC Desk — Day-to-Day Toolkit

*Workshop 2 segment + takeaway resource · PHINEO CC-AG · 11 June 2026*
*FINAL · ~9-min segment, folded into Speaker 3's slot (10:50–11:20). See changelog at bottom.*

---

## 0. Purpose (the one line)

> Every participant leaves with a **one-page toolkit**: which AI tools to use (and how to get them approved), what to do and not do, and ready-made "commands" for their actual CC tasks. Not "what is AI" — **"what do I do with it Monday, and how do I bring it into my company without Legal saying no."**

The job is to **skill them up and leverage their motivation** — while keeping every decision and the accountability with them. AI is the tool; they stay the operator.

---

## 1. Who we are calibrating for (the evidence)

These are CC/CSR managers at DACH corporates. Not AI novices. The data:

- **60%+ of German employees already use AI at work** — but mostly **informally, not introduced by their employer** ([ZEW DiWaBe](https://www.zew.de/en/press/latest-press-releases/employees-use-ai-even-without-formal-introduction-by-their-employers)).
- **~80% of university-educated employees use AI** — this whole room has almost certainly used ChatGPT ([ZEW](https://www.zew.de/en/press/latest-press-releases/employees-use-ai-even-without-formal-introduction-by-their-employers)).
- **Only 26% of German companies officially provide** generative AI → most use is **shadow/personal** ([Bitkom 2025](https://www.bitkom.org/Presse/Presseinformation/Beschaeftigte-nutzen-Schatten-KI)).
- What they actually do today: **"draft an email, summarize a long document, generate an image."** Basic text tasks ([Bitkom](https://www.bitkom.org/Presse/Presseinformation/Beschaeftigte-nutzen-Schatten-KI)).
- **40.9% of German companies use AI** in business processes, up 27% YoY ([ifo, 2025](https://www.ifo.de/en/facts/2025-06-16/companies-germany-increasingly-relying-artificial-intelligence)).

**Calibration verdict:** Level = **mid, not basic.** They can prompt; they just don't apply it to CC work or know what's allowed.
- "What is AI / your first prompt" → too obvious, cut it.
- "Build an agent / RAG / fine-tune" → too complex, cut it.
- **"Point the AI you already use at your CC job — safely, and officially."** ← the gap.

The two things they genuinely lack: **(1) job-specific application** and **(2) permission/compliance.**

---

## 2. The tools — what's actually used in Germany (say this with confidence)

German consumer survey: **ChatGPT ~25%** have used it, **Copilot 7%**, **Gemini 6%** ([Statista DE](https://de.statista.com/infografik/34917/anteil-der-befragten-die-diese-ki-anwendungen-nutzen/)). Honest framing: *ChatGPT is the default everyone tried; Copilot is the one your employer probably already pays for; and there's now a whole German "compliance-safe" category built for exactly your problem.*

### Tier 1 — what you probably already have
| Tool | Best at | Compliance | Use when |
|---|---|---|---|
| **Microsoft 365 Copilot** | Drafting in Word/Outlook/Teams, summarizing your own files, meeting notes | Safest — runs inside your company M365 data boundary | You're an Office/Teams shop (most German corporates) |
| **Google Gemini** (Workspace) | Same, inside Google Workspace | Inside your Workspace boundary | You run on Google, not Office |

> **Meeting notes** (a daily CC task): Copilot/Gemini do this *natively* in Teams/Meet — no extra tool. No license? DSGVO-local options: **Jamie** (DE EU servers, bot-free) or **Meetily** (open-source, 100% on-device, Schrems-II-safe). Avoid US consumer note-bots for partner/stakeholder calls.

### Tier 2 — the everyday model apps
| Tool | Best at | Compliance | Use when |
|---|---|---|---|
| **ChatGPT** (OpenAI) | Most capable all-rounder, brainstorming, rewriting | **Team/Enterprise only** — never paste company data into the free app | You need the strongest reasoning + have the paid tier |
| **Mistral – Le Chat** (FR) | ChatGPT-equivalent, **EU-hosted / on-prem** | Sovereign-AI; partnered with **SAP** for German public sector | Legal is the blocker — this is an unlock |
| **Claude** (Anthropic) | Strong long-form writing & careful reasoning | Enterprise tier for work data | Heavy drafting / nuanced documents |
| **Perplexity** | Research with **cited sources** | Public research, not internal data | You need answers *with links* to verify |
| **DeepL / DeepL Write** (DE Cologne) | Translation + polishing DE/EN | German company, DACH standard, easy Legal "yes" | Any cross-language work — lowest-risk starter |

### Tier 3 — German/EU "compliance-safe hubs" (the category to *pitch your company to buy*)
These wrap **multiple models (GPT, Claude, Mistral, 40+)** behind **one DSGVO-compliant, EU-hosted interface** — solving the exact "Legal won't let us" blocker. This is usually the *right answer* for a corporate.

| Platform | Why it matters | Proof / notes |
|---|---|---|
| **Langdock** (Berlin) | Model-agnostic hub (Chat / Workflows / Agents), all leading models, EU-hosted, data not used for training; ISO 27001 + SOC 2 Type II; managed / private-cloud / **on-prem** | **7,000+ companies — Merck, BASF, Würth, Trumpf, Der Spiegel, Süddeutsche, FAZ, Volksbank, UNICEF**. Merck CDO: *"company-wide AI companion, 33,000+ monthly active users"* ([langdock.com](https://www.langdock.com)) |
| **Aleph Alpha** (Heidelberg) | German sovereign-AI flagship; government + regulated-sector focus | Backed by **Schwarz Group** (Lidl/Kaufland). *(Reported 2026 acquisition by Cohere — verify before citing.)* |
| **Omnifact** | Automatic data masking (Privacy Filter™) | For teams that need PII stripped before the model sees it |
| **Mindverse / DeutschlandGPT / meinGPT / Lurus** | German-hosted multi-model hubs, €19–29/user/mo | GDPR-first ChatGPT alternatives ([Lurus comparison](https://lurus.ai/en/blog/deutsche-ki-plattformen-vergleich/)) |
| **neuroflash** (Hamburg) | Marketing/comms content, DE-hosted, ISO 27001 | If the use case is campaigns & content |

**Slide one-liner:** *"Use the one your company already pays for (usually Copilot). If Legal is the blocker, the German answer is a hub like Langdock — same ChatGPT power, EU-hosted, used by Merck and Volksbank."*

### Tier 4 — CC-domain tools (the answer to survey response #6: impact, matchmaking, ESG)
The Tier 1–3 tools are general assistants. These are *purpose-built* for CC/CSR work:

| Job | Tool | Note |
|---|---|---|
| **ESG / CSRD reporting** | **Briink** (DE Berlin) | AI extracts & pre-fills ESG data across ESRS / CDP / EcoVadis; Verdantix Top-10 ESG vendor 2025 ([briink.com](https://www.briink.com/)) |
| **Volunteer program + impact + matchmaking** | **Benevity** | Established corporate-citizenship platform; AI volunteer matching, donor engagement, impact measurement |
| **If your company runs SAP** | **SAP Joule** | Role-based AI assistant inside SAP; generates audit-ready Scope-3 / ESG reports — relevant if your sustainability data already lives in SAP |
| **NGO-facing (your partners)** | **Claude for Nonprofits**, **Microsoft/Salesforce nonprofit AI** | Discounted/pro-bono access for the nonprofits you support |

> Reality check for partners: **82% of nonprofits already use AI, but only ~10% have any governance policy** ([source](https://www.sigmaforces.com/post/nonprofits-ai-social-impact-2025)). When you help an NGO adopt AI, help them with the *guardrails*, not just the tool.

---

## 3. Pitch the purchase — get your company to say yes

The lever isn't "AI is cool." Three arguments leadership can't wave off:

1. **Legal (strongest):** The **EU AI Act (Art. 4)** requires every "deployer" to ensure **staff have a sufficient level of AI literacy** — in force since **2 Feb 2025, enforceable from 3 Aug 2026** (≈2 months after this workshop). Only 23% of companies have any AI rules ([EU AI Act Art. 4](https://artificialintelligenceact.eu/article/4/), [Bitkom Akademie](https://bitkom-akademie.de/news/sicherstellung-der-ki-kompetenz-als-arbeitgeberpflicht-das-muessen-unternehmen-wissen)). *"We have a compliance gap that becomes enforceable in August."*
2. **Risk:** **60%+ of staff already use AI informally**, shadow-AI is rising ([ZEW](https://www.zew.de/en/press/latest-press-releases/employees-use-ai-even-without-formal-introduction-by-their-employers), [Bitkom](https://www.bitkom.org/Presse/Presseinformation/Beschaeftigte-nutzen-Schatten-KI)). *"Our people paste company data into private ChatGPT right now. A sanctioned tool stops that."*
3. **Cheap pilot:** Don't ask for a rollout. Ask for *10 licenses, one team, 8 weeks, one metric.*

**Fill-in pitch (one slide they can steal):**
> *"We have a compliance obligation (EU AI Act Art. 4) and an active data-leak risk (staff use private AI today). I propose an 8-week pilot: [N] licenses of [Copilot / Langdock] for the CC team, measured on [hours saved on CSRD reporting / proposals turned around]. Cost: ~€25/user/mo (e.g. Langdock Business, excl. VAT, −20% on annual). Owner: me."*

Why a hub like Langdock pitches well internally: one contract, EU-hosted, multiple models, named corporate references (Merck, Volksbank) — it pre-answers IT and Legal's first three questions.

---

## 4. Dos & Don'ts (one-glance card)

| Do | Don't |
|---|---|
| Use the company-approved tool | Paste confidential / personal / partner data into a free consumer app |
| Treat output as a **draft**, always verify | Trust names, numbers, legal claims unchecked |
| Tell it the **role, audience, format** | Assume it knows your context |
| Keep a human signature on anything external | Send AI text to a stakeholder unread |
| Ask Legal/IT which tool is sanctioned | Quietly build a workflow Legal hasn't seen |
| Own the decision — AI advises, you decide | Outsource judgment or accountability to the model |

---

## 5. Pre-flight / Post-flight checklists

**PRE-FLIGHT — before you type the prompt**
1. Is this the **approved tool** for this kind of data?
2. About to paste anything **confidential / personal**? → strip or anonymize first.
3. Have I given it the **role, audience, and output format**?
4. Do I have the **source material** it needs (pasted in), not just a vague ask?

**POST-FLIGHT — before you use the output**
1. **Facts checked** — every name, number, date, DSGVO/legal claim verified against a real source.
2. **Hallucination scan** — does each cited org/program/stat actually exist?
3. **Tone & voice** — sounds like *us*, not a robot.
4. **Leak check** — nothing internal accidentally surfaced.
5. **Human owner** — would I put my name on this? Then send.

---

## 6. Out-of-the-box "commands" (copy-paste recipes for CC work)

Anchored to confirmed CC use cases — ESG/CSRD reporting, grant scoring, stakeholder comms ([ACCP](https://accp.org/news/accp-insights-blog/leveraging-ai-in-corporate-social-responsibility-opportunities-challenges-and-the-path-forward/), [BSR](https://www.bsr.org/en/reports/harnessing-ai-in-sustainability-emerging-use-cases)). Tool-agnostic; works in Copilot / Langdock / ChatGPT.

1. **Summarize a partner** — *"Here's a nonprofit's annual report. Give me: mission, who they serve, top 3 needs, red flags, and 3 questions before partnering."*
2. **Score grant applications** — *"Here are 5 applications and our 4 criteria. Rank them, score each criterion 1–5, and flag the closest call."*
   → *You get:* a ranked scoring table — so you walk into committee with a defensible first cut, not a blank page. **You still decide.**
3. **CSRD/ESG draft** — *"Turn these activity notes into 3 reportable impact paragraphs in CSRD-appropriate language. Mark anything that needs a real number."*
4. **CFO business case** — *"Rewrite this proposal as 5 bullets for a cost-focused CFO, each tied to ESG reporting, employer brand, or risk."*
   → *You get:* "• Covers 3 CSRD social datapoints we report manually today • Strengthens employer-brand & ESG-rating story • Mitigates reputational risk via vetted partners • €X tool cost vs €Y manual hours • 8-week reversible pilot." — a board-ready frame in 2 minutes.
5. **Rehearse the boss** — *"Act as my skeptical CFO. Give me the 5 objections you'd raise, then help me pre-answer them."*
6. **Stakeholder inquiry triage** — *"Draft a reply to this investor/rating-agency sustainability question in our cautious house tone. Flag anything I should not commit to in writing."*
7. **Your AI position** — *"Draft a cautious one-paragraph internal line on how our CC function uses AI, aligned to the EU AI Act, in a German Mittelstand voice."*
8. **Scope before you build** — *"A partner says 'we want to use AI.' Ask me 5 questions to turn that into one bounded problem — and name the condition to say no."*

---

## 7. Resources to forward internally (real, mostly free)

| Need | Point them at |
|---|---|
| Free AI upskilling (team or NGO) | **KI-Campus**, **DRK Lernplattform**, **vhs.cloud** |
| Help an NGO actually deploy | **MI4People – KIISS**, **N3XTCODER – AI for Impact** |
| Find / match a partner project | **Civic Coding-Accelerator**, **CorrelAid (Data4Good)** |
| Proven employee-volunteer model | **Hacker School – "at Work"** |
| EU AI Act / compliance help | **ARIC Hamburg** |
| Compliance-safe corporate tool | **Langdock**, **Mistral Le Chat**, **DeepL** |
| Discounted tools + pro-bono for a nonprofit partner | **Microsoft for Nonprofits** (M365 Copilot −15% ≈ $25.50/user/mo; up to 300 free Business Basic licenses), **Salesforce – Agents for Impact** (pro-bono + AI agents) |

---

## 8. Format for delivery

- **Live segment (~8–10 min):** reframe (30s) → the calibration ("you already use it; here's how to aim it + get it approved") → **one live demo** (recipe #5, the CFO rehearsal — always lands) → flash the tool tiers + the pitch slide → hand over the page.
- **Takeaway:** the participant 1-pager is its own file — `handout_ai_cheatsheet.md` (EN) / `handout_ki_spickzettel_de.md` (DE). This master doc stays facilitator-only.
- **Live calibration:** make the 09:00 check-in warm-up a 4-option poll ("Which AI tool do you use for work? Copilot / ChatGPT / other / none") so the segment can reference real room numbers.

---

## 9. Live segment — slide-by-slide (~8 min)

| # | Time | Slide | Say / do |
|---|---|---|---|
| 1 | 0:00–0:30 | **"You already use AI. Let's make it work for your job — safely."** | Call back the check-in poll: "X of you use Copilot, Y use ChatGPT." This isn't AI 101. |
| 2 | 0:30–1:30 | **The reality** | 60%+ already use it, mostly private & for basic tasks. The gap isn't skill — it's *aiming it at CC work* + *getting it approved*. AI advises; **you decide and sign.** |
| 3 | 1:30–4:00 | **Live demo — rehearse your CFO** (recipe #5) | Do it on screen: paste a rough proposal → "act as my skeptical CFO." Let them watch the objections appear. This is the moment that sticks. |
| 4 | 4:00–5:30 | **Which tool?** (tier table) | "Use what your company already pays for — usually Copilot. If Legal blocks it, the German answer is Langdock or Mistral — EU-hosted. Merck runs Langdock at 33,000 users." |
| 5 | 5:30–6:30 | **Pitch it internally** | EU AI Act Art. 4 (enforceable Aug 2026) + shadow-AI risk + an 8-week pilot. One slide they can photograph. |
| 6 | 6:30–7:30 | **Your cheat-sheet** | Hold up the handout: 8 commands, do/don't, pre/post-flight. "Pre/post-flight are your guardrails — they keep you accountable, not the model." Take it, forward it. |
| 7 | 7:30–8:00 | **One ask** | "Pick ONE command. Try it Monday." → hands straight into Breakout 2 ("what will we have tried by next workshop?"). |

**Live demo safety:** pre-load the prompt + a sample proposal in a second window in case typing on Teams wobbles; have a screenshot of the output as fallback.

## Changelog / open improvements
- **v2.1 — FINALIZED.** Placement locked (PHINEO-delivered ~9 min folded into Speaker 3's slot, 10:50–11:20); Speaker 3/4 inconsistency resolved across all docs. Deck readability pass (cue-card slides, ~2× font on dense slides). All colour emoji removed (CSS dots / typographic). All local-file refs stripped from audience-facing deck + cheat-sheet → real source URLs. Demo-mode guidance added (pre-record recommended). Deck/PDF/PPTX + EN/DE cheat-sheets re-rendered.
- **v2.0 — FINAL.** Rebuilt around the *lever* frame (fulcrum + arm; inward/outward) to ladder to the title. Added value-chain RAG strip, caught-hallucination demo, starter AI-position language, outward-lever + 5-step skeleton, data-safety honesty (GDPR-capable, DPA/DPIA/Betriebsrat), corrected EU AI Act dates, vendor-stated sourcing. Deck rebuilt to 8 slides (HTML/PDF/PPTX). Added `references.md`, `feedback_synthesis_and_fit.md`, `HANDOVER.md`. Validated: 2 persona rounds → 7/7 converged.
- v1.1 — added `references.md` (every tool/program/stat linked; handouts + README point to it). Built the actual deck: `presentation_deck.html` (PHINEO-branded, self-contained, speaker notes on 'N'), `presentation_deck.pdf` (7-page), `presentation_deck.pptx` (editable, notes in pane). Brand pulled from phineo.org CSS: petrol #20383A, teal #298294, lime #94c11f, Besley + Inter.
- **v1.0 — READY FROM MY SIDE.** Cross-file consistency check passed (price €25/user, EU AI Act Aug 2026, Langdock facts, Aleph Alpha hedge all aligned across 6 files). Everything producible without the team is done. Remaining items need PHINEO (room level, segment owner, final language, real demo proposal) — run-ready defaults set for each.
- v0.16 — added `presentation_kit.md`: run-ready slides + verbatim speaker script + pre-baked CFO-demo transcript (fallback if live demo fails) + chosen run-ready defaults. The "small presentation" half is now fully built, not just outlined.
- v0.15 — added SAP Joule (Scope-3/ESG inside SAP) for the SAP-heavy DACH audience. Tool-landscape sweep complete across general assistants, German hubs, CC-domain, meeting notes, comms, and SAP. **Loop concluded.**
- v0.14 — added meeting-notes guidance (Copilot/Gemini native; DSGVO-local: Jamie, Meetily) — a daily CC task previously only implicit. Skipped grant-writing tools (serve NGO grant-seekers, not corporate CC reviewers).
- v0.13 — red-team review pass: hedged the unverified Aleph Alpha/Cohere acquisition claim; fixed stale §8 takeaway mapping (now points to handout files); replaced stale TODO with a converged status line. No factual overclaims remain.
- v0.12 — added `facilitator_prep.md` (Katharina/Silvia questions + check-in poll + open decisions) and folder `README.md` index. Deliverable set complete.
- v0.11 — added German-language handout `handout_ki_spickzettel_de.md` (Sie-form) for the DACH audience to forward to German-speaking colleagues.
- v0.10 — added Tier 4 CC-domain tools (Briink ESG/CSRD, Benevity matchmaking/impact, Claude for Nonprofits) — directly answers survey response #6; added the 82%-use/10%-governance nonprofit stat reinforcing the accountability throughline.
- v0.9 — added §9 live segment slide-by-slide (~8 min) with the CFO-rehearsal demo as the centerpiece + demo safety note. Deliverable now covers the full "small presentation + takeaway" ask. Converged.
- v0.8 — verified Langdock pricing (Business €25/user/mo excl. VAT, 7-day free trial, −20% annual); corrected ~€20→~€25 in both files. All fact-check TODOs cleared.
- v0.7 — split out the printable participant handout → `handout_ai_cheatsheet.md` (1 page: tool-picker, do/don't, pre/post-flight, 8 commands, internal pitch, forward-list). This doc stays the facilitator reference.
- v0.6 — verified + added "discounted tools + pro-bono for a nonprofit partner" resource row (Microsoft for Nonprofits Copilot −15%/300 free Basic; Salesforce Agents for Impact). No more recall-only rows in the deliverable.
- v0.5 — added "you get / you still decide" worked outputs to recipes #2 (grant scoring) and #4 (CFO case) — reinforces the human-keeps-accountability framing.
- v0.4 — verified Langdock on official site (Merck/BASF/Würth/Trumpf/FAZ/UNICEF + Merck 33k-MAU quote, on-prem option); sharpened EU AI Act Art. 4 lever (in force Feb 2025, **enforceable 3 Aug 2026** — ~2 mo post-workshop).
- v0.3 — added Tier 3 German compliance-safe hubs (Langdock, Aleph Alpha, Omnifact, Mindverse, neuroflash); reframed pitch around buying a hub.
- v0.2 — added German usage data, calibration verdict, pitch, dos/donts, pre/post-flight, recipes.
- **Status:** converged & reviewed. Set complete (master + EN/DE handouts + facilitator prep + README); all fact-checks done. Re-verify vendor pricing / program terms before quoting externally — they shift.
