CLUSTER / THE DECISION MAP
Providers.
The provider role, provider duties, and what happens when a role or a system changes.
IN THIS CLUSTER
12 guides.
Provider responsibilities
Map the provider role and the practical work associated with developing or placing an AI system on the market.
Read guide ↗CLUSTER ARTICLEProvider definition and edge cases: who counts as a provider under Article 3(3)
The provider definition tested against developers, integrators, rebranders, open-source suppliers and own-use builders, with Article 25 kept in view.
Read guide ↗CLUSTER ARTICLEArticle 16 provider duties: the obligations of providers of high-risk AI systems
The provider duties in Article 16 explained as a whole, including conformity, documentation, marking, registration and post-market duties.
Read guide ↗CLUSTER ARTICLEArticle 25 substantial modification and change of role: when the provider changes
How Article 25 treats rebranding, substantial modification and change of intended purpose, and what the new provider must then do.
Read guide ↗CLUSTER ARTICLEArticle 17 quality management system: what a high-risk provider must run
The quality management system required by Article 17, its required elements, and how it connects to risk management, conformity and post-market work.
Read guide ↗CLUSTER ARTICLEArticle 11 technical documentation and Annex IV: what the file must contain
How to build technical documentation for a high-risk AI system under Article 11 and Annex IV, and how to keep it current through the lifecycle.
Read guide ↗CLUSTER ARTICLEArticle 12 logging and Articles 18 to 19: record keeping that supports oversight
How high-risk systems must be designed for automatic logging, what logs must capture, and how long documentation and logs must be kept.
Read guide ↗CLUSTER ARTICLEArticle 13 instructions for use: what deployers must be told about a high-risk system
The transparency and instructions duties in Article 13, what the instructions must contain, and how they differ from marketing material.
Read guide ↗CLUSTER ARTICLEAppointing an authorised representative: what a non-EU provider must put in place
The provider's side of the Article 22 appointment, including the written mandate, the representative's establishment, and the information that must flow.
Read guide ↗CLUSTER ARTICLEProvider cooperation with authorities: Articles 20 and 21, corrective action and information duties
How providers must cooperate with market surveillance authorities, take corrective action, and provide information on a reasoned request.
Read guide ↗CLUSTER ARTICLEProvider pre-market checks: choosing the conformity route before release
The checks a provider must complete before placing a high-risk system on the market, including classification, conformity assessment route, declaration and marking.
Read guide ↗CLUSTER ARTICLEProvider post-market change control: monitoring, incidents and version discipline
How providers must monitor high-risk systems after release, report serious incidents, control changes, and keep the conformity file current.
Read guide ↗