Most organisations are deployers under the AI Act, yet two provisions catch them off guard. Article 4 requires a sufficient level of AI literacy among staff, and Article 25 can turn a deployer into a provider when it rebrands or substantially modifies a system. The session shows how both duties apply to ordinary tools, what documentation regulators will ask for, and where the line between deployer and provider runs in practice.