Art. 25

Article 25: When a Deployer Becomes a Provider

Article 25 sets out when another actor in the value chain — typically a deployer — is treated as the provider and takes on the full Article 8 to 22 obligation set: when it puts its own name or trademark on a high-risk system, when it makes a substantial modification to an already placed system, or when it changes the intended purpose of a system in a way that makes it high-risk.

providerdeployerdistributorimporter high-risk
When it applies
What it requires
What you keep on file
Commonly misread

Companies often assume fine-tuning or integrating a third-party model can never make them a provider; a substantial modification or a purpose change toward an Annex III use case can shift the full provider obligation stack onto them even though they did not build the base model.

Recent activity

What regulators published on Art. 25

  1. Loading from the public feed…

Informational content only. Not legal advice and not a substitute for qualified counsel. Dates reflect Regulation (EU) 2026/1744 as of 04 Aug 2026.