High-risk AI · For providers

High-risk AI: the provider's obligations in three work packages

If you build AI used for hiring, credit, life and health insurance pricing, education or another Annex III use, you are its provider, and the heaviest obligations are yours from 2 December 2027. We take you through them one package at a time.

Three work packages

Each package is a fixed piece of work with named outputs from your register. Most clients take them in this order: the conformity assessment builds on the first two.

01

Build

Risk, data and system design

Obligations
  • Art. 9 risk management system
  • Art. 10 data governance
  • Art. 12 logging
  • Art. 14 human oversight
  • Art. 15 accuracy, robustness and cybersecurity
Outputs

Risk register with measures; data-governance record; logging and oversight requirements for your product team; declared metrics and test evidence.

02

Document

Documentation and quality

Obligations
  • Art. 11 and Annex IV technical documentation
  • Art. 13 instructions for use
  • Art. 17 quality management system
  • Art. 4 AI literacy
Outputs

Annex IV technical documentation; instructions for use for your customers; quality management record; AI literacy record.

03

Certify

Conformity, registration and after-market

Obligations
  • Art. 43 conformity assessment
  • Art. 47 EU declaration of conformity
  • Art. 48 CE marking
  • Art. 49 registration in the EU database
  • Art. 72 post-market monitoring
  • Art. 73 serious incident reporting
Outputs

Conformity assessment record; EU declaration of conformity; registration sheet; post-market monitoring plan; incident procedure.

Are you the provider?

You are the provider if you develop an AI system, or have it developed, and place it on the market or put it into service under your own name. A recruitment software vendor whose product scores candidates is the provider of that feature; the agency using it is a deployer, with duties of its own.

Deadlines: 2 December 2027 for Annex III systems (hiring, credit, life and health insurance pricing, education, essential services); 2 August 2028 for AI in products covered by EU product legislation (Annex I).

Time and price

Time
Depends on the package and the number of high-risk features
Price
On request, per package

Every package starts from the inventory: if you have not had one, we start there.

Request a 30-minute call

A working analysis of your AI against the AI Act, not a legal opinion.

Contact

Book a call or send a message about your AI features.

Whether you have a defined project or just a sense that the EU AI Act should be on your agenda — a first conversation costs nothing and usually clarifies a lot.

Email — contact@euai-compliance.com
Based in — Nice, France · working across France, Italy, and Europe
Languages — English, French, Italian