AI-applications analyze unstructured data using an algorithm custom-tailored to the specific use intended, in order to draw conlusions based on such analysis. Regardless of its area of application and the purpose for which an AI application is put to use, legal questions arise regarding the creation, the parametrization and the use of AI applications. Since legislation does not (yet) account for the complexity of AI, the legal risks should be addressed by organisational measures and contractual provisions.