For providers · Anbieter

You put AI on the market under your name. Here is the chain the Act expects.

A product, a model, an embedded feature: the provider chapter is long, but it is a list, and most of it has a date in 2027 or 2028.

What applies to you

  • Art. 4 and Art. 5: literacy measures and no prohibited practice (since 2 February 2025)
  • Art. 50(1) and (2): disclose AI interaction; mark synthetic audio, image, video and text in a machine-readable format (since 2 August 2026; existing generative systems by 2 December 2026)
  • Art. 53 to 55: general-purpose model documentation, downstream information, copyright policy, training-content summary; systemic-risk duties (since 2 August 2025; pre-existing models by 2 August 2027)
  • Art. 9 to 15: risk management, data governance, technical documentation, logging, instructions, human oversight, accuracy and robustness for high-risk systems
  • Art. 16 to 22, 43, 47 to 49: QMS, conformity assessment, declaration of conformity, CE marking, registration, authorised representative
  • Art. 72 and 73: post-market monitoring and serious-incident reporting with the 15, 10 and 2-day clocks

By date

  1. 2 February 2025Literacy and prohibitionsIn force
  2. 2 August 2025GPAI, governance, penaltiesIn force
  3. 2 August 2026General applicationIn force
  4. 2 December 2026New prohibitions and marking deadline24 days left
  5. 2 August 2027Pre-existing GPAI models267 days left
  6. 2 December 2027Annex III high-risk389 days left
  7. 2 August 2028Annex I high-risk633 days left

What you would need to document

  • Technical documentation per Annex IV (SMEs: the simplified form of Art. 11(1))
  • Risk management file and data governance record
  • Instructions for use and human oversight description
  • QMS documentation (EN 18286:2026; SMEs: Art. 63 simplified form)
  • EU declaration of conformity, CE marking evidence, EU database entry
  • Marking technical documentation for Art. 50(2): signed metadata, watermark, detection route, robustness tests
  • Post-market monitoring plan and incident procedure

Regulation (EU) 2024/1689 as amended by Regulation (EU) 2026/1744; dates per Art. 113 and Art. 111. Corpus snapshot 02024R1689-20260727. Information, not legal advice.

Start with one AI system.

Run the free check, keep the result as your first inventory entry, and invite your team when you are ready.