Deployer obligations checklist — EU AI Act

Uses an AI system under its authority in a professional context (not a personal, non-professional user). Distinct, lighter-but-real duties (human oversight, use per instructions, some logging).

4 obligations apply to a deployer. Each links to the evidence an auditor expects. Download as checklist (.md).

• ☐ Disclose deepfakes — by 2026-08-02
  Evidence: Transparency / disclosure notice
• ☐ Assign human oversight and use per instructions (deployer) — by 2027-12-02
  Evidence: Deployer human-oversight record, Automatically-generated logs
• ☐ Classify the system against Article 6 / Annex III — by 2027-12-02
  Evidence: High-risk classification decision record
• ☐ Register in the EU database — by 2027-12-02
  Evidence: EU database registration confirmation

Not legal advice. This is a practitioner reference generated from a cited knowledge base built on the primary legal text and official Commission guidance. Verify against the cited primary sources before relying on it for a compliance decision. See editorial standards & methodology.