EU AI Act Guide

EU AI Act provider vs deployer

The provider and deployer distinction matters because obligations follow the role a company actually performs. A company can build, place, operate, modify or use AI systems in ways that create different responsibility profiles.

Identify your role

Operational information, not legal advice.

Role classification model

EU AI Act Provider vs Deployer

01

Provider role

02

Deployer role

03

Importer or distributor role

04

Responsibility chain

Direct answer

Provider and deployer roles decide which obligations matter first.

The provider and deployer distinction matters because duties follow the role a company actually performs. A company may build, place, integrate, modify, operate or use an AI system. Each of those actions can create a different responsibility profile.

For the next layer, compare provider vs deployer roles, review high-risk AI system signals, or start with an EU AI Act risk assessment.

Decision criteria

How to separate the roles

  • A provider usually develops or places an AI system on the market under its name or responsibility.
  • A deployer usually uses an AI system in its own operation or decision process.
  • A company can move toward provider-like responsibility when it substantially modifies a system.
  • Role classification should happen before implementation planning.

First inspection

What to clarify first

  1. 01Who built or configured the system.
  2. 02Who controls the use case.
  3. 03Who relies on the output.
  4. 04Who can change model behavior, workflow logic or deployment context.

This page provides operational information for AI governance readiness. It is not legal advice.

Related guides

Does the EU AI Act Apply to US Companies?

A direct answer page for US companies that need to understand possible EU AI Act exposure.

EU AI Act High-Risk AI Systems

Understand high-risk AI system triage and why early classification matters before implementation.

EU AI Act Risk Assessment

A practical guide to assessing EU AI Act risk before committing budget to implementation.

EU AI Act Diagnostic

Run a diagnostic-first EU AI Act assessment for role, risk, documentation and implementation exposure.