{
  "attribution": {
    "source": "legal.exploreworldai.com",
    "canonical": "https://legal.exploreworldai.com/api/public/v1/obj/action_kit/eu:ai-act",
    "cite_as": "NovaCopilot, legal.exploreworldai.com (https://legal.exploreworldai.com/api/public/v1/obj/action_kit/eu:ai-act)",
    "license": "https://legal.exploreworldai.com/revision",
    "version": "legal-2026-10-07",
    "fingerprint": "ewai:se:3358c2",
    "proof": "sha256:e12deaf082211835f3f87085bb43afbcfb06c1c1574782ad01f3d9d6207958d1",
    "jurisdiction": "se",
    "lang": "en",
    "publisher": "NovaCopilot by ExploreWorld Legal",
    "terms": "https://legal.exploreworldai.com/om"
  },
  "brand_source": "Source: NovaCopilot",
  "object_type": "action_kit",
  "object_id": "action_kit:eu:ai-act",
  "schema_version": "1",
  "schema": "https://legal.exploreworldai.com/api/public/v1/schemas/action_kit",
  "url": "https://legal.exploreworldai.com/api/public/v1/obj/action_kit/eu:ai-act",
  "source": "NovaCopilot",
  "item": {
    "coverage": {
      "complete": 5,
      "total": 5,
      "label": "5 of 5 answers ready"
    },
    "subject": "eu:ai-act",
    "act": "ai-act",
    "article": null,
    "actions": [
      {
        "obligation": "obligation:eu:ai-act-art-16-provider",
        "verification": "internal_review",
        "sanctions": [
          "sanction:eu:ai-act-art-99-4"
        ]
      },
      {
        "obligation": "obligation:eu:ai-act-art-9-provider",
        "verification": "internal_review",
        "sanctions": [
          "sanction:eu:ai-act-art-99-4"
        ]
      },
      {
        "obligation": "obligation:eu:ai-act-art-10-provider",
        "verification": "testing",
        "sanctions": [
          "sanction:eu:ai-act-art-99-4"
        ]
      },
      {
        "obligation": "obligation:eu:ai-act-art-11-provider",
        "verification": "register",
        "sanctions": [
          "sanction:eu:ai-act-art-99-4"
        ]
      },
      {
        "obligation": "obligation:eu:ai-act-art-12-provider",
        "verification": "register",
        "sanctions": [
          "sanction:eu:ai-act-art-99-4"
        ]
      },
      {
        "obligation": "obligation:eu:ai-act-art-17-provider",
        "verification": "internal_review",
        "sanctions": [
          "sanction:eu:ai-act-art-99-4"
        ]
      },
      {
        "obligation": "obligation:eu:ai-act-art-43-provider",
        "verification": "conformity",
        "sanctions": [
          "sanction:eu:ai-act-art-99-4"
        ]
      },
      {
        "obligation": "obligation:eu:ai-act-art-72-provider",
        "verification": "internal_review",
        "sanctions": [
          "sanction:eu:ai-act-art-99-4"
        ]
      },
      {
        "obligation": "obligation:eu:ai-act-art-73-provider",
        "verification": "authority_filing",
        "sanctions": [
          "sanction:eu:ai-act-art-99-4"
        ]
      },
      {
        "obligation": "obligation:eu:ai-act-art-26-deployer",
        "verification": "internal_review",
        "sanctions": [
          "sanction:eu:ai-act-art-99-4"
        ]
      },
      {
        "obligation": "obligation:eu:ai-act-art-27-deployer",
        "verification": "assessment",
        "sanctions": []
      },
      {
        "obligation": "obligation:eu:ai-act-art-23-importer",
        "verification": "conformity",
        "sanctions": [
          "sanction:eu:ai-act-art-99-4"
        ]
      },
      {
        "obligation": "obligation:eu:ai-act-art-24-distributor",
        "verification": "internal_review",
        "sanctions": [
          "sanction:eu:ai-act-art-99-4"
        ]
      },
      {
        "obligation": "obligation:eu:ai-act-art-53-gpai-provider",
        "verification": "register",
        "sanctions": [
          "sanction:eu:ai-act-art-101"
        ]
      },
      {
        "obligation": "obligation:eu:ai-act-art-55-gpai-provider",
        "verification": "internal_review",
        "sanctions": [
          "sanction:eu:ai-act-art-101"
        ]
      }
    ],
    "answers": [
      {
        "key": "what_to_do",
        "status": "ready",
        "sha256": "340fbaff5fb9ae45f49d9d1acb06616e578f2095bd39bc1a22d49fc39645d6ac"
      },
      {
        "key": "who",
        "status": "ready",
        "sha256": "56dd673af78925aa3fc57872beb0732e04820ff2cd80553d66fb3707b501a18d"
      },
      {
        "key": "verification",
        "status": "ready",
        "sha256": "272e8fa61ac8201957edcbb3b0a18badfcfdff0d5bca7a44574e2050d8fdd683"
      },
      {
        "key": "documents",
        "status": "ready",
        "sha256": "c0d586fe260d47c9f253568ecc384a4168b3a8634bc62a26c35e04071704a4f3"
      },
      {
        "key": "if_not_met",
        "status": "ready",
        "sha256": "4e306186ade97ab92c632486bce29ee5af0e7fc97d2cca9a392771cebd4f3c4b"
      }
    ],
    "answers_full": [
      {
        "key": "what_to_do",
        "status": "ready",
        "answer": "Meet the provider obligations for high-risk AI systems. Establish and maintain a risk management system. Apply data and data governance requirements to training, validation and testing data. (+12 more)",
        "ids": [
          "obligation:eu:ai-act-art-16-provider",
          "obligation:eu:ai-act-art-9-provider",
          "obligation:eu:ai-act-art-10-provider",
          "obligation:eu:ai-act-art-11-provider",
          "obligation:eu:ai-act-art-12-provider",
          "obligation:eu:ai-act-art-17-provider",
          "obligation:eu:ai-act-art-43-provider",
          "obligation:eu:ai-act-art-72-provider",
          "obligation:eu:ai-act-art-73-provider",
          "obligation:eu:ai-act-art-26-deployer",
          "obligation:eu:ai-act-art-27-deployer",
          "obligation:eu:ai-act-art-23-importer",
          "obligation:eu:ai-act-art-24-distributor",
          "obligation:eu:ai-act-art-53-gpai-provider",
          "obligation:eu:ai-act-art-55-gpai-provider"
        ],
        "question": "What must I do?",
        "sha256": "340fbaff5fb9ae45f49d9d1acb06616e578f2095bd39bc1a22d49fc39645d6ac"
      },
      {
        "key": "who",
        "status": "ready",
        "answer": "Responsible roles: deployer, distributor, gpai-provider, importer, provider.",
        "ids": [
          "obligation:eu:ai-act-art-16-provider",
          "obligation:eu:ai-act-art-9-provider",
          "obligation:eu:ai-act-art-10-provider",
          "obligation:eu:ai-act-art-11-provider",
          "obligation:eu:ai-act-art-12-provider",
          "obligation:eu:ai-act-art-17-provider",
          "obligation:eu:ai-act-art-43-provider",
          "obligation:eu:ai-act-art-72-provider",
          "obligation:eu:ai-act-art-73-provider",
          "obligation:eu:ai-act-art-26-deployer",
          "obligation:eu:ai-act-art-27-deployer",
          "obligation:eu:ai-act-art-23-importer",
          "obligation:eu:ai-act-art-24-distributor",
          "obligation:eu:ai-act-art-53-gpai-provider",
          "obligation:eu:ai-act-art-55-gpai-provider"
        ],
        "question": "Who is responsible?",
        "sha256": "56dd673af78925aa3fc57872beb0732e04820ff2cd80553d66fb3707b501a18d"
      },
      {
        "key": "verification",
        "status": "ready",
        "answer": "Verified by: internal_review, testing, register, conformity, authority_filing, assessment. Internal review against the duty text.",
        "ids": [
          "verification:internal_review",
          "verification:testing",
          "verification:register",
          "verification:conformity",
          "verification:authority_filing",
          "verification:assessment"
        ],
        "question": "How is this verified?",
        "sha256": "272e8fa61ac8201957edcbb3b0a18badfcfdff0d5bca7a44574e2050d8fdd683"
      },
      {
        "key": "documents",
        "status": "ready",
        "answer": "Keep: Dated internal compliance note, Test plan, Test report with findings, Remediation log, Register extract, Retention schedule, EU declaration of conformity, Technical documentation, CE marking, Filed report or declaration, Submission receipt or publication URL with date, Dated assessment document, Method description, Update log.",
        "ids": [
          "documentation_requirement:eu:ai-act"
        ],
        "question": "Which documents are required?",
        "sha256": "c0d586fe260d47c9f253568ecc384a4168b3a8634bc62a26c35e04071704a4f3"
      },
      {
        "key": "if_not_met",
        "status": "ready",
        "answer": "4 sanctions, up to 7 % of turnover; e.g. EUR 35 000 000.",
        "ids": [
          "sanction:eu:ai-act-art-101",
          "sanction:eu:ai-act-art-99-3",
          "sanction:eu:ai-act-art-99-4",
          "sanction:eu:ai-act-art-99-5"
        ],
        "question": "What happens if the requirement is not met?",
        "sha256": "4e306186ade97ab92c632486bce29ee5af0e7fc97d2cca9a392771cebd4f3c4b"
      }
    ],
    "action_list": [
      {
        "obligation": "obligation:eu:ai-act-art-16-provider",
        "provision": "ai-act art. 16",
        "role": "provider",
        "action": "Meet the provider obligations for high-risk AI systems.",
        "deadline": null,
        "recipient": null,
        "verification": "internal_review",
        "verification_method": "Internal review against the duty text.",
        "evidence": [
          "Dated internal compliance note"
        ],
        "exceptions": [
          "exception:eu:ai-act-military",
          "exception:eu:ai-act-research",
          "exception:eu:ai-act-personal-use",
          "exception:eu:ai-act-annex-iii-no-significant-risk"
        ],
        "sanctions": [
          "sanction:eu:ai-act-art-99-4"
        ],
        "related_rules": [
          "obligation:eu:gdpr-art-32-controller",
          "obligation:eu:gdpr-art-32-processor",
          "obligation:eu:dora-art-17-financial-entity",
          "obligation:eu:gdpr-art-5-controller",
          "obligation:eu:gdpr-art-6-controller"
        ],
        "source_url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj"
      },
      {
        "obligation": "obligation:eu:ai-act-art-9-provider",
        "provision": "ai-act art. 9",
        "role": "provider",
        "action": "Establish and maintain a risk management system.",
        "deadline": null,
        "recipient": null,
        "verification": "internal_review",
        "verification_method": "Internal review against the duty text.",
        "evidence": [
          "Dated internal compliance note"
        ],
        "exceptions": [
          "exception:eu:ai-act-military",
          "exception:eu:ai-act-research",
          "exception:eu:ai-act-personal-use",
          "exception:eu:ai-act-annex-iii-no-significant-risk"
        ],
        "sanctions": [
          "sanction:eu:ai-act-art-99-4"
        ],
        "related_rules": [
          "obligation:eu:gdpr-art-32-controller",
          "obligation:eu:gdpr-art-32-processor",
          "obligation:eu:dora-art-17-financial-entity",
          "obligation:eu:gdpr-art-5-controller",
          "obligation:eu:gdpr-art-6-controller"
        ],
        "source_url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj"
      },
      {
        "obligation": "obligation:eu:ai-act-art-10-provider",
        "provision": "ai-act art. 10",
        "role": "provider",
        "action": "Apply data and data governance requirements to training, validation and testing data.",
        "deadline": null,
        "recipient": null,
        "verification": "testing",
        "verification_method": "Tests executed on a schedule with findings and remediation tracked.",
        "evidence": [
          "Test plan",
          "Test report with findings",
          "Remediation log"
        ],
        "exceptions": [
          "exception:eu:ai-act-military",
          "exception:eu:ai-act-research",
          "exception:eu:ai-act-personal-use",
          "exception:eu:ai-act-annex-iii-no-significant-risk"
        ],
        "sanctions": [
          "sanction:eu:ai-act-art-99-4"
        ],
        "related_rules": [
          "obligation:eu:dora-art-24-financial-entity",
          "obligation:eu:dora-art-26-financial-entity"
        ],
        "source_url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj"
      },
      {
        "obligation": "obligation:eu:ai-act-art-11-provider",
        "provision": "ai-act art. 11",
        "role": "provider",
        "action": "Draw up and keep technical documentation.",
        "deadline": null,
        "recipient": null,
        "verification": "register",
        "verification_method": "A complete, current register or archive can be produced on request.",
        "evidence": [
          "Register extract",
          "Retention schedule"
        ],
        "exceptions": [
          "exception:eu:ai-act-military",
          "exception:eu:ai-act-research",
          "exception:eu:ai-act-personal-use",
          "exception:eu:ai-act-annex-iii-no-significant-risk"
        ],
        "sanctions": [
          "sanction:eu:ai-act-art-99-4"
        ],
        "related_rules": [
          "obligation:eu:gdpr-art-30-controller",
          "obligation:eu:dora-art-28-financial-entity",
          "obligation:eu:amlr-art-10-obliged-entity",
          "obligation:eu:amlr-art-77-obliged-entity"
        ],
        "source_url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj"
      },
      {
        "obligation": "obligation:eu:ai-act-art-12-provider",
        "provision": "ai-act art. 12",
        "role": "provider",
        "action": "Enable automatic recording of events (logging).",
        "deadline": null,
        "recipient": null,
        "verification": "register",
        "verification_method": "A complete, current register or archive can be produced on request.",
        "evidence": [
          "Register extract",
          "Retention schedule"
        ],
        "exceptions": [
          "exception:eu:ai-act-military",
          "exception:eu:ai-act-research",
          "exception:eu:ai-act-personal-use",
          "exception:eu:ai-act-annex-iii-no-significant-risk"
        ],
        "sanctions": [
          "sanction:eu:ai-act-art-99-4"
        ],
        "related_rules": [
          "obligation:eu:gdpr-art-30-controller",
          "obligation:eu:dora-art-28-financial-entity",
          "obligation:eu:amlr-art-10-obliged-entity",
          "obligation:eu:amlr-art-77-obliged-entity"
        ],
        "source_url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj"
      },
      {
        "obligation": "obligation:eu:ai-act-art-17-provider",
        "provision": "ai-act art. 17",
        "role": "provider",
        "action": "Operate a quality management system.",
        "deadline": null,
        "recipient": null,
        "verification": "internal_review",
        "verification_method": "Internal review against the duty text.",
        "evidence": [
          "Dated internal compliance note"
        ],
        "exceptions": [
          "exception:eu:ai-act-military",
          "exception:eu:ai-act-research",
          "exception:eu:ai-act-personal-use",
          "exception:eu:ai-act-annex-iii-no-significant-risk"
        ],
        "sanctions": [
          "sanction:eu:ai-act-art-99-4"
        ],
        "related_rules": [
          "obligation:eu:gdpr-art-32-controller",
          "obligation:eu:gdpr-art-32-processor",
          "obligation:eu:dora-art-17-financial-entity",
          "obligation:eu:gdpr-art-5-controller",
          "obligation:eu:gdpr-art-6-controller"
        ],
        "source_url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj"
      },
      {
        "obligation": "obligation:eu:ai-act-art-43-provider",
        "provision": "ai-act art. 43",
        "role": "provider",
        "action": "Carry out the applicable conformity assessment before placing on the market.",
        "deadline": null,
        "recipient": null,
        "verification": "conformity",
        "verification_method": "Conformity assessment against the listed requirements before placing on the market.",
        "evidence": [
          "EU declaration of conformity",
          "Technical documentation",
          "CE marking"
        ],
        "exceptions": [
          "exception:eu:ai-act-military",
          "exception:eu:ai-act-research",
          "exception:eu:ai-act-personal-use",
          "exception:eu:ai-act-annex-iii-no-significant-risk"
        ],
        "sanctions": [
          "sanction:eu:ai-act-art-99-4"
        ],
        "related_rules": [
          "obligation:eu:accessibility-art-7-manufacturer",
          "obligation:eu:accessibility-art-7-3-manufacturer",
          "obligation:eu:accessibility-art-9-importer",
          "obligation:eu:accessibility-art-10-distributor"
        ],
        "source_url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj"
      },
      {
        "obligation": "obligation:eu:ai-act-art-72-provider",
        "provision": "ai-act art. 72",
        "role": "provider",
        "action": "Run post-market monitoring of the system in use.",
        "deadline": null,
        "recipient": null,
        "verification": "internal_review",
        "verification_method": "Internal review against the duty text.",
        "evidence": [
          "Dated internal compliance note"
        ],
        "exceptions": [
          "exception:eu:ai-act-military",
          "exception:eu:ai-act-research",
          "exception:eu:ai-act-personal-use",
          "exception:eu:ai-act-annex-iii-no-significant-risk"
        ],
        "sanctions": [
          "sanction:eu:ai-act-art-99-4"
        ],
        "related_rules": [
          "obligation:eu:gdpr-art-32-controller",
          "obligation:eu:gdpr-art-32-processor",
          "obligation:eu:dora-art-17-financial-entity",
          "obligation:eu:gdpr-art-5-controller",
          "obligation:eu:gdpr-art-6-controller"
        ],
        "source_url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj"
      },
      {
        "obligation": "obligation:eu:ai-act-art-73-provider",
        "provision": "ai-act art. 73",
        "role": "provider",
        "action": "Report serious incidents to the market surveillance authority.",
        "deadline": "15 days",
        "recipient": "Market surveillance authority of the member state",
        "verification": "authority_filing",
        "verification_method": "Filing or publication can be shown with date and recipient.",
        "evidence": [
          "Filed report or declaration",
          "Submission receipt or publication URL with date"
        ],
        "exceptions": [
          "exception:eu:ai-act-military",
          "exception:eu:ai-act-research",
          "exception:eu:ai-act-personal-use",
          "exception:eu:ai-act-annex-iii-no-significant-risk"
        ],
        "sanctions": [
          "sanction:eu:ai-act-art-99-4"
        ],
        "related_rules": [
          "obligation:eu:gdpr-art-33-controller",
          "obligation:eu:gdpr-art-33-processor",
          "obligation:eu:nis2-art-23-essential-entity",
          "obligation:eu:dora-art-19-financial-entity",
          "obligation:eu:amlr-art-69-obliged-entity"
        ],
        "source_url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj"
      },
      {
        "obligation": "obligation:eu:ai-act-art-26-deployer",
        "provision": "ai-act art. 26",
        "role": "deployer",
        "action": "Use the system in line with the instructions and assign human oversight.",
        "deadline": null,
        "recipient": null,
        "verification": "internal_review",
        "verification_method": "Internal review against the duty text.",
        "evidence": [
          "Dated internal compliance note"
        ],
        "exceptions": [
          "exception:eu:ai-act-military",
          "exception:eu:ai-act-research",
          "exception:eu:ai-act-personal-use"
        ],
        "sanctions": [
          "sanction:eu:ai-act-art-99-4"
        ],
        "related_rules": [
          "obligation:eu:gdpr-art-32-controller",
          "obligation:eu:gdpr-art-32-processor",
          "obligation:eu:dora-art-17-financial-entity",
          "obligation:eu:gdpr-art-5-controller",
          "obligation:eu:gdpr-art-6-controller"
        ],
        "source_url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj"
      },
      {
        "obligation": "obligation:eu:ai-act-art-27-deployer",
        "provision": "ai-act art. 27",
        "role": "deployer",
        "action": "Carry out a fundamental rights impact assessment where required.",
        "deadline": null,
        "recipient": null,
        "verification": "assessment",
        "verification_method": "A dated assessment with method, scope and outcome exists and is updated.",
        "evidence": [
          "Dated assessment document",
          "Method description",
          "Update log"
        ],
        "exceptions": [
          "exception:eu:ai-act-military",
          "exception:eu:ai-act-research",
          "exception:eu:ai-act-personal-use"
        ],
        "sanctions": [],
        "related_rules": [
          "obligation:eu:gdpr-art-35-controller",
          "obligation:eu:csddd-art-8-company",
          "obligation:eu:csddd-art-15-company"
        ],
        "source_url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj"
      },
      {
        "obligation": "obligation:eu:ai-act-art-23-importer",
        "provision": "ai-act art. 23",
        "role": "importer",
        "action": "Verify conformity, documentation and marking before placing on the market.",
        "deadline": null,
        "recipient": null,
        "verification": "conformity",
        "verification_method": "Conformity assessment against the listed requirements before placing on the market.",
        "evidence": [
          "EU declaration of conformity",
          "Technical documentation",
          "CE marking"
        ],
        "exceptions": [
          "exception:eu:ai-act-military",
          "exception:eu:ai-act-research",
          "exception:eu:ai-act-personal-use"
        ],
        "sanctions": [
          "sanction:eu:ai-act-art-99-4"
        ],
        "related_rules": [
          "obligation:eu:accessibility-art-7-manufacturer",
          "obligation:eu:accessibility-art-7-3-manufacturer",
          "obligation:eu:accessibility-art-9-importer",
          "obligation:eu:accessibility-art-10-distributor"
        ],
        "source_url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj"
      },
      {
        "obligation": "obligation:eu:ai-act-art-24-distributor",
        "provision": "ai-act art. 24",
        "role": "distributor",
        "action": "Verify marking and documentation before making available on the market.",
        "deadline": null,
        "recipient": null,
        "verification": "internal_review",
        "verification_method": "Internal review against the duty text.",
        "evidence": [
          "Dated internal compliance note"
        ],
        "exceptions": [
          "exception:eu:ai-act-military",
          "exception:eu:ai-act-research",
          "exception:eu:ai-act-personal-use"
        ],
        "sanctions": [
          "sanction:eu:ai-act-art-99-4"
        ],
        "related_rules": [
          "obligation:eu:gdpr-art-32-controller",
          "obligation:eu:gdpr-art-32-processor",
          "obligation:eu:dora-art-17-financial-entity",
          "obligation:eu:gdpr-art-5-controller",
          "obligation:eu:gdpr-art-6-controller"
        ],
        "source_url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj"
      },
      {
        "obligation": "obligation:eu:ai-act-art-53-gpai-provider",
        "provision": "ai-act art. 53",
        "role": "gpai-provider",
        "action": "Keep model documentation and a copyright policy for general-purpose AI models.",
        "deadline": null,
        "recipient": null,
        "verification": "register",
        "verification_method": "A complete, current register or archive can be produced on request.",
        "evidence": [
          "Register extract",
          "Retention schedule"
        ],
        "exceptions": [
          "exception:eu:ai-act-military",
          "exception:eu:ai-act-research",
          "exception:eu:ai-act-personal-use"
        ],
        "sanctions": [
          "sanction:eu:ai-act-art-101"
        ],
        "related_rules": [
          "obligation:eu:gdpr-art-30-controller",
          "obligation:eu:dora-art-28-financial-entity",
          "obligation:eu:amlr-art-10-obliged-entity",
          "obligation:eu:amlr-art-77-obliged-entity"
        ],
        "source_url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj"
      },
      {
        "obligation": "obligation:eu:ai-act-art-55-gpai-provider",
        "provision": "ai-act art. 55",
        "role": "gpai-provider",
        "action": "Meet the additional obligations for models with systemic risk.",
        "deadline": null,
        "recipient": null,
        "verification": "internal_review",
        "verification_method": "Internal review against the duty text.",
        "evidence": [
          "Dated internal compliance note"
        ],
        "exceptions": [
          "exception:eu:ai-act-military",
          "exception:eu:ai-act-research",
          "exception:eu:ai-act-personal-use"
        ],
        "sanctions": [
          "sanction:eu:ai-act-art-101"
        ],
        "related_rules": [
          "obligation:eu:gdpr-art-32-controller",
          "obligation:eu:gdpr-art-32-processor",
          "obligation:eu:dora-art-17-financial-entity",
          "obligation:eu:gdpr-art-5-controller",
          "obligation:eu:gdpr-art-6-controller"
        ],
        "source_url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj"
      }
    ],
    "checklist": [
      {
        "step": 1,
        "role": "provider",
        "do": "Meet the provider obligations for high-risk AI systems.",
        "verify": "Internal review against the duty text.",
        "keep": [
          "Dated internal compliance note"
        ],
        "deadline": null,
        "if_not": [
          "sanction:eu:ai-act-art-99-4"
        ],
        "done": false
      },
      {
        "step": 2,
        "role": "provider",
        "do": "Establish and maintain a risk management system.",
        "verify": "Internal review against the duty text.",
        "keep": [
          "Dated internal compliance note"
        ],
        "deadline": null,
        "if_not": [
          "sanction:eu:ai-act-art-99-4"
        ],
        "done": false
      },
      {
        "step": 3,
        "role": "provider",
        "do": "Apply data and data governance requirements to training, validation and testing data.",
        "verify": "Tests executed on a schedule with findings and remediation tracked.",
        "keep": [
          "Test plan",
          "Test report with findings",
          "Remediation log"
        ],
        "deadline": null,
        "if_not": [
          "sanction:eu:ai-act-art-99-4"
        ],
        "done": false
      },
      {
        "step": 4,
        "role": "provider",
        "do": "Draw up and keep technical documentation.",
        "verify": "A complete, current register or archive can be produced on request.",
        "keep": [
          "Register extract",
          "Retention schedule"
        ],
        "deadline": null,
        "if_not": [
          "sanction:eu:ai-act-art-99-4"
        ],
        "done": false
      },
      {
        "step": 5,
        "role": "provider",
        "do": "Enable automatic recording of events (logging).",
        "verify": "A complete, current register or archive can be produced on request.",
        "keep": [
          "Register extract",
          "Retention schedule"
        ],
        "deadline": null,
        "if_not": [
          "sanction:eu:ai-act-art-99-4"
        ],
        "done": false
      },
      {
        "step": 6,
        "role": "provider",
        "do": "Operate a quality management system.",
        "verify": "Internal review against the duty text.",
        "keep": [
          "Dated internal compliance note"
        ],
        "deadline": null,
        "if_not": [
          "sanction:eu:ai-act-art-99-4"
        ],
        "done": false
      },
      {
        "step": 7,
        "role": "provider",
        "do": "Carry out the applicable conformity assessment before placing on the market.",
        "verify": "Conformity assessment against the listed requirements before placing on the market.",
        "keep": [
          "EU declaration of conformity",
          "Technical documentation",
          "CE marking"
        ],
        "deadline": null,
        "if_not": [
          "sanction:eu:ai-act-art-99-4"
        ],
        "done": false
      },
      {
        "step": 8,
        "role": "provider",
        "do": "Run post-market monitoring of the system in use.",
        "verify": "Internal review against the duty text.",
        "keep": [
          "Dated internal compliance note"
        ],
        "deadline": null,
        "if_not": [
          "sanction:eu:ai-act-art-99-4"
        ],
        "done": false
      },
      {
        "step": 9,
        "role": "provider",
        "do": "Report serious incidents to the market surveillance authority.",
        "verify": "Filing or publication can be shown with date and recipient.",
        "keep": [
          "Filed report or declaration",
          "Submission receipt or publication URL with date"
        ],
        "deadline": "15 days",
        "if_not": [
          "sanction:eu:ai-act-art-99-4"
        ],
        "done": false
      },
      {
        "step": 10,
        "role": "deployer",
        "do": "Use the system in line with the instructions and assign human oversight.",
        "verify": "Internal review against the duty text.",
        "keep": [
          "Dated internal compliance note"
        ],
        "deadline": null,
        "if_not": [
          "sanction:eu:ai-act-art-99-4"
        ],
        "done": false
      },
      {
        "step": 11,
        "role": "deployer",
        "do": "Carry out a fundamental rights impact assessment where required.",
        "verify": "A dated assessment with method, scope and outcome exists and is updated.",
        "keep": [
          "Dated assessment document",
          "Method description",
          "Update log"
        ],
        "deadline": null,
        "if_not": [],
        "done": false
      },
      {
        "step": 12,
        "role": "importer",
        "do": "Verify conformity, documentation and marking before placing on the market.",
        "verify": "Conformity assessment against the listed requirements before placing on the market.",
        "keep": [
          "EU declaration of conformity",
          "Technical documentation",
          "CE marking"
        ],
        "deadline": null,
        "if_not": [
          "sanction:eu:ai-act-art-99-4"
        ],
        "done": false
      },
      {
        "step": 13,
        "role": "distributor",
        "do": "Verify marking and documentation before making available on the market.",
        "verify": "Internal review against the duty text.",
        "keep": [
          "Dated internal compliance note"
        ],
        "deadline": null,
        "if_not": [
          "sanction:eu:ai-act-art-99-4"
        ],
        "done": false
      },
      {
        "step": 14,
        "role": "gpai-provider",
        "do": "Keep model documentation and a copyright policy for general-purpose AI models.",
        "verify": "A complete, current register or archive can be produced on request.",
        "keep": [
          "Register extract",
          "Retention schedule"
        ],
        "deadline": null,
        "if_not": [
          "sanction:eu:ai-act-art-101"
        ],
        "done": false
      },
      {
        "step": 15,
        "role": "gpai-provider",
        "do": "Meet the additional obligations for models with systemic risk.",
        "verify": "Internal review against the duty text.",
        "keep": [
          "Dated internal compliance note"
        ],
        "deadline": null,
        "if_not": [
          "sanction:eu:ai-act-art-101"
        ],
        "done": false
      }
    ],
    "links": {
      "sme_kit": "https://legal.exploreworldai.com/api/public/v1/obj/sme_kit/eu:ai-act",
      "act_kit": null,
      "articles": [
        "https://legal.exploreworldai.com/api/public/v1/obj/action_kit/eu:ai-act--art-16",
        "https://legal.exploreworldai.com/api/public/v1/obj/action_kit/eu:ai-act--art-9",
        "https://legal.exploreworldai.com/api/public/v1/obj/action_kit/eu:ai-act--art-10",
        "https://legal.exploreworldai.com/api/public/v1/obj/action_kit/eu:ai-act--art-11",
        "https://legal.exploreworldai.com/api/public/v1/obj/action_kit/eu:ai-act--art-12",
        "https://legal.exploreworldai.com/api/public/v1/obj/action_kit/eu:ai-act--art-17",
        "https://legal.exploreworldai.com/api/public/v1/obj/action_kit/eu:ai-act--art-43",
        "https://legal.exploreworldai.com/api/public/v1/obj/action_kit/eu:ai-act--art-72",
        "https://legal.exploreworldai.com/api/public/v1/obj/action_kit/eu:ai-act--art-73",
        "https://legal.exploreworldai.com/api/public/v1/obj/action_kit/eu:ai-act--art-26",
        "https://legal.exploreworldai.com/api/public/v1/obj/action_kit/eu:ai-act--art-27",
        "https://legal.exploreworldai.com/api/public/v1/obj/action_kit/eu:ai-act--art-23",
        "https://legal.exploreworldai.com/api/public/v1/obj/action_kit/eu:ai-act--art-24",
        "https://legal.exploreworldai.com/api/public/v1/obj/action_kit/eu:ai-act--art-53",
        "https://legal.exploreworldai.com/api/public/v1/obj/action_kit/eu:ai-act--art-55"
      ],
      "risk": [
        "https://legal.exploreworldai.com/api/public/v1/obj/risk_chain/eu:ai-act--deployer",
        "https://legal.exploreworldai.com/api/public/v1/obj/risk_chain/eu:ai-act--distributor",
        "https://legal.exploreworldai.com/api/public/v1/obj/risk_chain/eu:ai-act--gpai-provider",
        "https://legal.exploreworldai.com/api/public/v1/obj/risk_chain/eu:ai-act--importer",
        "https://legal.exploreworldai.com/api/public/v1/obj/risk_chain/eu:ai-act--provider"
      ],
      "timeline": [
        "https://legal.exploreworldai.com/api/public/v1/obj/timeline/eu:ai-act-art-16-provider",
        "https://legal.exploreworldai.com/api/public/v1/obj/timeline/eu:ai-act-art-9-provider",
        "https://legal.exploreworldai.com/api/public/v1/obj/timeline/eu:ai-act-art-10-provider",
        "https://legal.exploreworldai.com/api/public/v1/obj/timeline/eu:ai-act-art-11-provider",
        "https://legal.exploreworldai.com/api/public/v1/obj/timeline/eu:ai-act-art-12-provider",
        "https://legal.exploreworldai.com/api/public/v1/obj/timeline/eu:ai-act-art-17-provider",
        "https://legal.exploreworldai.com/api/public/v1/obj/timeline/eu:ai-act-art-43-provider",
        "https://legal.exploreworldai.com/api/public/v1/obj/timeline/eu:ai-act-art-72-provider",
        "https://legal.exploreworldai.com/api/public/v1/obj/timeline/eu:ai-act-art-73-provider",
        "https://legal.exploreworldai.com/api/public/v1/obj/timeline/eu:ai-act-art-26-deployer",
        "https://legal.exploreworldai.com/api/public/v1/obj/timeline/eu:ai-act-art-27-deployer",
        "https://legal.exploreworldai.com/api/public/v1/obj/timeline/eu:ai-act-art-23-importer",
        "https://legal.exploreworldai.com/api/public/v1/obj/timeline/eu:ai-act-art-24-distributor",
        "https://legal.exploreworldai.com/api/public/v1/obj/timeline/eu:ai-act-art-53-gpai-provider",
        "https://legal.exploreworldai.com/api/public/v1/obj/timeline/eu:ai-act-art-55-gpai-provider"
      ],
      "list": "https://legal.exploreworldai.com/api/public/v1/action-kits"
    },
    "method": "Rule to action: five fixed agent questions from deterministic registers. Verification and evidence come from fixed keyword rules on the duty text. No model writes anything.",
    "attribution": "Source: NovaCopilot",
    "hash": "5523e67938a5ea5916166c7b83d90aebd5e4054900bb1a2d9d662716eaeab84b"
  },
  "links": {
    "provisions": "https://legal.exploreworldai.com/api/public/v1/obj/provision_link/eu:ai-act",
    "case_law": {
      "outcome": "https://legal.exploreworldai.com/api/public/v1/obj/outcome/eu:ai-act",
      "outcome_pattern": "https://legal.exploreworldai.com/api/public/v1/obj/outcome_pattern/eu:ai-act"
    },
    "evidence": {
      "provenance": null,
      "chain_verify": "https://legal.exploreworldai.com/api/public/v1/changes/verify",
      "object_changes": "https://legal.exploreworldai.com/api/public/v1/objects/changes"
    },
    "compact": "https://legal.exploreworldai.com/api/public/v1/obj/action_kit/eu:ai-act?view=compact",
    "representations": {},
    "machine_languages": [
      "en",
      "sv"
    ],
    "ref": "eu:ai-act"
  },
  "watch": {
    "changes": "https://legal.exploreworldai.com/api/public/v1/changes",
    "whats_new": "https://legal.exploreworldai.com/api/public/v1/whats-new?jurisdiction=eu",
    "conditional": "Send If-None-Match with the ETag; unchanged objects return 304 without body.",
    "recheck_after_seconds": 86400
  },
  "hash": "sha256:e12deaf082211835f3f87085bb43afbcfb06c1c1574782ad01f3d9d6207958d1",
  "version": "legal-2026-10-07",
  "expires": "2026-10-08T00:00:00.000Z",
  "dependency": {
    "index_version": "legal-2026-10-07+legal-2026-10-07+2026-10-07T15:50:53",
    "content_hash": "sha256:e12deaf082211835f3f87085bb43afbcfb06c1c1574782ad01f3d9d6207958d1",
    "revalidate_after": "2026-10-07T16:58:50.097Z",
    "max_copy_age_seconds": 3600,
    "policy": "revalidate-required; attribution-preferred",
    "changelog": "https://legal.exploreworldai.com/api/public/v1/dependency",
    "verify": "https://legal.exploreworldai.com/api/public/v1/verify",
    "stale_copy_invalid": true
  },
  "canonical": "https://legal.exploreworldai.com/api/public/v1/obj/action_kit/eu:ai-act",
  "disclaimer": "Source reference with official identifier. Not legal advice and not a compliance decision.",
  "content_notice": {
    "legal_advice": false,
    "nature": "Source register. Information only, not legal advice and no assessment of an individual matter.",
    "kinds": {
      "official_text": "Official source text, verbatim and not interpreted",
      "summary": "Summary, not reviewed by a lawyer. Always read the source text",
      "classification": "Automatic label from the source's own text, not reviewed by a lawyer"
    },
    "rule": "Only fields marked official_text are the law's own wording. Everything else points to it.",
    "report_error": "https://legal.exploreworldai.com/api/public/v1/corrections",
    "ai_act_declaration": "https://legal.exploreworldai.com/api/public/v1/ai-act-declaration"
  },
  "usageInfo": "https://legal.exploreworldai.com/citering"
}