Quick wins for a faster PC:
Scan for outdated or missing drivers - takes under a minuteDriver Scan →Repair Windows errors before they cause bigger problemsFix Now →The EU AI Act does not make every product containing AI high-risk or automatically make its manufacturer the AI system’s provider. The answer depends on whether the software is an AI system under the Act, its intended purpose, how it is marketed or put into service, whether it falls into a high-risk category, and the product-sector rules that also apply. A manufacturer that places an AI system on the market or puts it into service with a product under its own name or trademark can be in scope; special provider rules apply to certain high-risk product safety components.
Does the EU AI Act apply to manufacturers?
Yes, in defined circumstances. Article 2 of Regulation (EU) 2024/1689 expressly covers product manufacturers that place an AI system on the market or put it into service together with their product under their own name or trademark. That does not mean every manufacturer is automatically the provider of every AI feature in a product, or that every such system is high-risk. The relevant role depends on the system and the manufacturer’s conduct.
As an Amazon Associate I earn from qualifying purchases.
Start by answering four questions for the particular product and system:
Do these 3 things before closing this tab:
1Scan for outdated or missing drivers - takes under a minute2Repair Windows errors before they cause bigger problems3Fix the driver behind crashes, sound loss and screen glitches- Is the software an AI system under the Act? Confirm that the software falls within the regulation’s definition rather than assuming that any automated or software-controlled feature qualifies.
- What is its intended purpose, and who markets or puts it into service? Consider the system’s stated purpose and the operator’s actual role in supplying it, including whether it is supplied with the product under the manufacturer’s name or trademark.
- Does it meet a high-risk route? Check the conditions in Article 6 and whether the system is covered by Annex I or Annex III.
- Which product-sector legislation applies? Identify the relevant Union harmonisation legislation and its conformity-assessment procedure as well as the AI Act requirements.
This is a scoping process, not a substitute for classifying a specific product against the full regulation and the applicable sectoral rules. The legal references below are to Regulation (EU) 2024/1689, using the consolidated text dated 27 July 2026.
When does a manufacturer become the provider?
“Manufacturer” and “provider” are not interchangeable labels. A company may be a product manufacturer under sectoral product law and also be the AI Act provider because of how it supplies the AI system. Conversely, a company’s involvement in making or integrating a product does not, by itself, resolve its AI Act role. Examine the system’s intended purpose, the market-facing name or trademark, and who places it on the market or puts it into service.
AI supplied with a product under the manufacturer’s brand
Article 2 brings a product manufacturer within the Act’s scope when it places an AI system on the market or puts it into service together with its product under its own name or trademark. This is the broader scope rule; it should not be confused with the more specific Article 25(3) rule for high-risk safety components described below.
High-risk AI that is a product safety component
Under Article 25(3), a product manufacturer is considered the provider of a high-risk AI system when the system is a safety component of a product covered by legislation listed in Annex I, Section A, and the system is marketed or put into service under that manufacturer’s name or trademark. Both the product-law coverage and the safety-component and branding conditions matter. A manufacturer should not assume this special rule applies merely because AI is present in a product.
Rank #2
When another operator takes on provider responsibility
Article 25 can make a distributor, importer, deployer, or other third party the provider of a high-risk system if that operator:
- puts its own name or trademark on an existing high-risk AI system;
- substantially modifies a high-risk AI system while it remains high-risk; or
- changes the intended purpose of a system that was not high-risk so that it becomes high-risk.
For manufacturers, these rules make branding, modification control, and intended-purpose statements important across the supply chain. A change in purpose or a substantial modification can affect who carries provider responsibilities, not just how the product is described.
Is AI in a product high-risk?
Not automatically. Article 6 and the relevant annex determine whether a system is high-risk. In broad terms, the Act has a product-related route tied to certain safety components and a separate route tied to specified use cases. A product’s inclusion of AI, or a manufacturer’s use of the word “AI,” does not alone establish high-risk status.
Rank #3
| Route to assess | What to check | Why it matters to the manufacturer |
|---|---|---|
| Article 6(1), with Annex I product legislation | Whether the system is a safety component of a product covered by the legislation listed in Annex I, Section A, and whether the applicable conditions for this route are met. | If the system is high-risk and supplied under the manufacturer’s name or trademark, the specific product-manufacturer provider rule in Article 25(3) may apply. The sectoral product-law conformity route is also relevant. |
| Article 6(2), with an Annex III use case | Whether the system falls within a listed Annex III category and meets the applicable Article 6 conditions. | Provider duties and registration requirements may apply if the system is high-risk. The conformity route differs from the Annex I product route. |
Classification should be made for the system as intended and supplied, not inferred from a product label or from the fact that an AI component is safety-relevant in ordinary language. The relevant legal test and any applicable conditions must be checked against the system’s intended purpose and product context.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
What must a high-risk AI provider do before market placement or service?
Article 16 sets out core provider responsibilities, while Article 17 addresses the quality-management system. The specific details depend on the system category and the rest of the Act, so this is a practical outline rather than an exhaustive compliance specification.
For a high-risk system, the provider’s work includes:
- Meet the applicable system requirements. Ensure the system complies with the requirements in Section 2 of the Act that apply to it.
- Establish and operate a quality-management system. Article 17 requires a system designed to ensure compliance with the regulation. The Act states: “Providers of high-risk AI systems shall put a quality management system in place that ensures compliance with this Regulation.”
- Maintain controlled records. Keep the required technical documentation and logs under the provider’s control, and identify the provider on the system or, where that is not possible, on its packaging or accompanying documentation.
- Complete the applicable conformity assessment. The relevant assessment must be completed before the system is placed on the market or put into service.
- Prepare the EU declaration of conformity and apply CE marking. These AI Act steps do not remove other marking or documentation obligations under product-sector legislation.
- Meet applicable registration duties. Registration depends on the system’s category and the Act’s exceptions and arrangements.
- Monitor and respond. Take corrective action where appropriate and cooperate with competent authorities as required.
These obligations apply to the provider, not automatically to every business in the product’s supply chain. A manufacturer should first establish whether it is the provider for the system in question and then identify the duties applicable to that category.
Which conformity assessment and registration route applies?
The route depends on the high-risk classification and, for product-related systems, the relevant Union harmonisation legislation. The AI Act’s assessment and marking requirements sit alongside sectoral requirements; AI Act CE marking does not replace other product-law obligations.
Free tools Windows power users keep installed
One-click scans. No signup required.
| High-risk system route | Conformity-assessment approach described in the Act | Registration point |
|---|---|---|
| Annex III categories, generally points 2–8 | Generally internal control under Annex VI. The Act provides for notified-body assessment in circumstances where it is required; not every manufacturer must use a notified body. | Article 49 requires provider registration for most Annex III high-risk systems before market placement or putting into service, subject to stated exceptions. Annex III point 2 has a national-level registration arrangement. |
| Article 6(1) systems covered by Annex I, Section A legislation | Follow the conformity-assessment route in the applicable Union harmonisation legislation, incorporating the AI Act requirements. The sectoral rules determine whether and when a notified body is involved. | Do not assume the Annex III registration rule applies; check the applicable category and registration provisions. |
Article 49 also assigns additional registration duties to public-authority deployers. Manufacturers integrating supplier-provided AI should establish early which operator is responsible for each required submission and which evidence must be available to support the assessment.
Best Value
What should manufacturers review with AI suppliers and integrators?
Provider responsibility and compliance evidence can depend on information held by several organisations. Article 25(4) requires written agreements between a high-risk AI provider and relevant suppliers of AI systems, models, tools, services, components, or processes. Within the provision’s scope and subject to its exception, those agreements are to specify necessary information, capabilities, technical access, and assistance.
For an integration or private-label project, review whether contracts and technical arrangements make it possible to obtain the information and cooperation needed for the provider’s obligations. The agreement should be considered alongside decisions about branding, system changes, intended purpose, documentation, and logs. A supplier’s description of a component does not by itself settle the legal role of the company that integrates or sells the finished product.
When do the EU AI Act rules start applying to high-risk products?
Application is staged; the general date is not the start date for every high-risk category. The dates below are the schedule in Article 113 of Regulation (EU) 2024/1689 as set out in the consolidated text dated 27 July 2026. Match each date to the relevant provision and system category, and check Article 111’s transition rules for systems already on the market.
| Date | What starts applying |
|---|---|
| 2 February 2025 | Chapters I and II. |
| 2 August 2025 | Specified provisions identified in Article 113. |
| 2 August 2026 | The general application date for the Act. |
| 2 December 2027 | Requirements for Article 6(2) high-risk systems covered by Annex III. |
| 2 August 2028 | Requirements for Article 6(1) high-risk systems covered by Annex I. |
| 2 August 2030 | Deadline for providers and deployers of high-risk AI systems intended for use by public authorities to take the necessary compliance steps under the Article 111 transition rules. |
The dates do not eliminate the need to examine transition treatment for a particular system already on the market, nor do they change the importance of obligations that apply earlier. Before setting a launch or redesign deadline, verify the current consolidated text and the system’s exact Article 6 route.
How should a manufacturer turn the rules into a product decision?
Use a product-by-product record rather than a single assumption about “AI products.” For each system, document the intended purpose, the party placing it on the market or putting it into service, the name or trademark used, the relevant product legislation, the Article 6 and annex route considered, and the resulting operator roles. Then map the applicable provider duties, assessment route, registration requirements, supplier agreements, and category-specific dates to that record.
This approach keeps three questions separate: whether the software is an AI system, whether it is high-risk, and which company is the provider. Those answers may be connected, but they are not the same legal determination.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
The Tool Desk
Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →
