Skip to content
DPCert.org
RAIF

Responsible AI Foundation

The entry point for any professional who uses AI: how AI fails, its risks, the main frameworks, data protection basics and responsible use at work.

Questions
50
Duration
60 min
Passing score
70%
Investment
Free
Black Friday flash promotion: free throughout November, until November 30. After that, back to $100 per exam.
Exam language
English, Portuguese, Spanish
Validity
Does not expire

The pass mark is fixed: you pass with 70% correct answers, with no curve and no comparison with other candidates.

Test your knowledge

No card, no payment. Sign in with a verified e-mail and your exam right is issued at once.

Who this is for

  • You use AI tools at work

    You draft, summarize or analyze with generative AI every week and want to know where the line is on confidential data, checking outputs and telling people AI was involved.

  • You are starting out in AI governance or privacy

    You want a structured first view of the risks, the main frameworks and the vocabulary before choosing a deeper path such as RAIP or DPAI.

  • You lead a team that is adopting AI

    Your people already use AI tools and you need a shared baseline: what is acceptable, what must be escalated and who is responsible for what.

What you take with you

  • A permanent verification code

    Anyone confirms your credential at dpcert.org/verify, without having to ask you for anything.

  • Approval that does not expire

    A credential you earned does not lapse, asks for no annual renewal and charges no subscription.

  • LinkedIn and a public profile

    Add it to your licenses and certifications section, or share the link to your profile.

  • A certificate with your score by domain

    In PDF, showing how you performed in each area assessed.

What you need to know

Six domains, drawn at random from a bank written for this certification exam. Read each one and see where you stand.

  • AI fundamentals for non-specialists

    8 questions · 16% of the exam

    What AI, machine learning and generative AI actually are, in plain terms, and where they predictably fail: confident wrong answers, outdated knowledge and patterns learned from skewed data.

  • Risks and harms

    10 questions · 20% of the exam

    Recognizing bias, hallucination, privacy leaks, security abuse and misuse in everyday situations, and judging which harm matters most in a given use and who would bear it.

  • Principles and frameworks

    10 questions · 20% of the exam

    What the OECD AI Principles, the NIST AI RMF, ISO/IEC 42001 and the EU AI Act risk tiers each ask of an organization, at overview level, and how they fit together.

  • Data protection basics for AI

    7 questions · 14% of the exam

    Core GDPR and LGPD concepts applied to AI: when data is personal, why pasting it into a prompt or a training set is processing, and what the DPO is there for.

  • Responsible use at work

    10 questions · 20% of the exam

    Following an acceptable use policy, keeping confidential information out of public tools, keeping a human in the decision and recording how an AI output was checked before it was used.

  • Roles and accountability

    5 questions · 10% of the exam

    Who answers for an AI tool in the organization, from the person using it to the system owner and the governance function, and when a concern must be escalated instead of worked around.

Candidate handbook, with weights and where to study each domain →

How the certification exams are builtIntegrityAbout DPCert

Test your knowledge with the Open Assessment

The Open Assessment has twenty questions at the level of the certification exam, with the result on the spot and a score for each domain. It is the honest way to decide whether you are ready.

Test your knowledge

See what the questions are like

Sample questions in the exam format: a work situation and a decision. The certification exam uses different questions.

  1. A system reads each incoming email and labels it as "invoice", "complaint" or "other". What kind of AI task is this?

    1. AContent generation, because the system writes a new label for every email
    2. BClassification, because the system assigns each input to one of a set of categories
    3. CRobotics, because the system acts automatically without a person
    4. DTranslation, because the system converts emails into a different format
    Show answer and explanation

    Answer: B

    Sorting inputs into predefined categories is classification, one of the most common uses of AI at work. Choosing a label from a fixed list is not generating new content. Robotics involves physical machines acting in the world. Translation converts content from one language or form to another, which is not what happens here.

  2. A call centre plans to use speech recognition to transcribe calls. In a pilot, it makes far more errors for customers with strong regional accents. What should happen before full rollout?

    1. ARoll out as planned, because the average error rate across all calls in the pilot was acceptable
    2. BAsk customers with strong accents to speak more slowly when they call
    3. CMeasure results for each group of callers and close the gap, or add safeguards, before relying on it
    4. DStop recording calls from the regions where the accent causes problems, so the errors disappear
    Show answer and explanation

    Answer: C

    A tool that works much worse for some groups can treat them unfairly, so performance should be measured per group and the gap fixed or mitigated before the tool is relied upon. A good average can hide a poor result for a specific group. Asking customers to adapt shifts the burden to the people who are already disadvantaged. Excluding regions avoids the problem without solving it and may itself be unfair.

Frameworks and concepts covered

The glossary terms linked to this certification, each with its definition.

Study from the source of the certification exam

Practise the topic with a free tool

No sign-up tools on subjects of this certification, to apply at work what the certification exam assesses.

See all tools

No course is required

The certification exam is the same for everyone, and how you prepare is your call: a course, a book, or the experience you already carry from the job.

I already have a voucher

No card, no payment. Sign in with a verified e-mail and your exam right is issued at once.

Sample credential

RAIF

Responsible AI Foundation

Holder
Emily Katherine Thompson
Credential IDIssued March 12, 2026

RAIF-YDA3-JHHE

Verified credentialdpcert.org/verify
Example of the certificate

Frequently asked questions about the certification exam

›What does the RAIF cover?

Six essentials domains: what AI, machine learning and generative AI are, and where they fail; risks and harms such as bias, hallucination, privacy, security, safety and misuse; principles and frameworks, with an overview of the OECD AI Principles, the NIST AI RMF, ISO/IEC 42001 and the EU AI Act risk tiers; data protection basics for AI, with GDPR and LGPD concepts; responsible use at work; and roles and accountability, including when to escalate.

›How many questions does the RAIF have, and how long is it?

There are 50 multiple-choice questions in 60 minutes, and you pass with 70% correct answers. The exam is online, with no scheduling and no prerequisite, and you can take it in English, Portuguese or Spanish. To practise first, the free RAIF open assessment has 20 questions with answer key and explanations. The result comes on the spot, with your per-domain performance, and those who pass receive the credential, the Open Badge and the PDF certificate at the same moment.

›Who is the RAIF for?

For any professional who uses AI at work or is affected by it, in any field: customer service, HR, marketing, operations, legal, finance, management and students too. It is the starting point for anyone who has never studied AI governance or privacy, and a simple way for a whole team to demonstrate the same essential knowledge.

›Do I need coding or a technical background for the RAIF?

No. The RAIF involves no code, no maths and no engineering detail. Questions ask you to recognise a risk, choose the responsible course of action in a work situation or know whom to escalate a problem to. Anyone who uses AI tools day to day and studies the syllabus has what they need.

›I passed the RAIF. Which certification should I take next?

It depends on your work. If you apply AI in product, data, engineering or risk, the RAIP is the natural next step. If your focus is privacy and data protection, the DPAI. If you are an executive or board member, the RAI-X. The RAIF is not a formal prerequisite for any of them, and it does not replace the RAIP or the DPAI as the prerequisite for the RAIL and the AUDAI.

›What is the certification exam like? Is it online?

Yes, it is an online multiple-choice exam, taken in your own browser, with no scheduling and no exam centre. Questions describe work situations and ask for a decision, rather than testing memorised definitions, and the RAIL and the AUDAI also have a case analysis domain. Every question has four options and exactly one correct answer. All exams have 50 questions; the duration and the passing score of each are on the certification page.

›How hard is the exam, and what is the passing score?

The passing score is 70% for the RAIF, RAIP, DPAI and RAI-X, and 72% for the RAIL and the AUDAI, which are higher-level. There is no curve and no comparison with other candidates, and every question has exactly one correct answer. On difficulty: we do not publish pass rates yet, because DPCert is new and we will only publish figures with a large enough sample. Questions ask for decisions in real situations, so studying from the syllabus makes a difference.

›Can I retake a paid exam? Do I have to wait?

You can retake it, and for paid certifications there is no waiting period and no limit on attempts. Each new attempt requires a new voucher, because each voucher is worth one attempt. Questions are drawn afresh each time you open an exam, so a retake does not repeat the previous paper. If you do not pass, you receive a coupon to buy the new attempt at the same certification for half the price, valid for 90 days. For a RAIF taken at no cost under the Black Friday flash promotion, the rule is different: a free retake within 7 days of the result.

›Does the voucher expire?

A voucher bought on the site does not expire. Vouchers issued to an organisation in bulk may carry a deadline set at issuance, and in that case the date is shown with the code. If you lost the email, the code is also in your account, under Certification exams, once your address is confirmed.

›What is the refund policy? Can I cancel my purchase?

Yes, within 14 days of purchase, as long as the voucher has not been used. Write to [email protected] from the same email used in the purchase, saying you want a refund. We return the full amount through the same payment method and cancel the voucher at the same time. A voucher already used is not refundable, even within the 14 days, because the attempt is consumed when the exam is opened. For a bundle, the refund covers the whole bundle and only applies if none of its vouchers has been used. After 14 days, the voucher is still yours and never expires, but it is no longer refundable.

›Does the DPCert credential expire? Do I need to renew it?

No and no. A DPCert credential does not expire: there is no expiry date, no periodic retesting, no continuing education quota (CPE/CPD), no renewal fee and no annual dues. You sit the exam once, and the credential stays valid unless revoked. Revocation is an administrative act with a recorded reason, not an automatic expiry. No renewal fees. No CPE quotas. Many certifications on the market charge periodic upkeep; this one does not.

Questions about the certification exam →All frequently asked questions →