Skip to main content

Provider

The company or person that builds and releases an AI system or model, taking legal responsibility for its compliance with AI regulations.

The Simple Version

The company or person that builds and releases an AI system or model, taking legal responsibility for its compliance with AI regulations.

Detailed Explanation

Under the EU AI Act, the provider role carries the heaviest compliance burden: providers must conduct conformity assessments, prepare technical documentation, affix CE marking, register high-risk systems, and establish post-market monitoring. A deployer who substantially modifies a high-risk AI system becomes a provider for that modified version. The provider concept is technology-neutral and applies whether the AI is a standalone application, an API, an embedded component, or a GPAI model.

Key Characteristics

  • Places AI on the market or puts it into service under its own name
  • Carries primary responsibility for conformity assessment and CE marking
  • A deployer who substantially modifies a system assumes provider obligations
  • Must appoint an authorised representative in the EU if not established there

Why It Matters

SaaS vendors, model API companies, and internal AI development teams that release AI capabilities to business users or consumers are all providers and must build compliance programmes accordingly.

Real-World Analogy

A car manufacturer is the 'provider' of the vehicle, the dealer who sells it is more like a deployer or distributor. The manufacturer is responsible for safety certification, recalls, and documentation.

Common Misconceptions

  • Open-source AI model developers are not providers, releasing a model publicly under an open-source licence still makes the developer a provider if they place it on the market.
  • A company that merely customises a third-party model is never a provider, substantial modification triggers provider obligations.

Related Terms

Related Articles

Sources & Further Reading