Procuring AI
A public body buying AI is usually a deployer under the AI Act, sometimes a provider. That difference decides the requirements. This page sets out what belongs in the tender, which clauses are commonly used, and which evidence can actually be checked.
NovaCopilot · ExploreWorld Legal
European and Nordic law as verifiable data, with source, reading date and checksum on every row.
- Publisher
- NovaCopilot, ExploreWorld Legal
- Corpus version
- legal-2026-10-05
- Read at
- 2026-08-31
- Freshness
- 82/100
Where the requirements belong
- Technical specifications: the system's purpose, its boundaries and the uses it is not permitted for.
- Qualification: the supplier's management system, documentation and incident reporting routine.
- Award criteria and contract terms: logging, human oversight, change management and a right to inspect the underlying sources.
Clauses in common use
- The Union model contractual clauses for AI procurement come in a high-risk and a non-high-risk version and can be adapted.
- A frequent addition is traceable sourcing: the supplier must be able to show what an answer rests on and when it was read.
- Another is a right to verify claims after award, not only at tender stage.
Evidence that can be checked
- Ask for a hash and a reading date per source, not just a source list. A date without a hash cannot be tested.
- Ask for an address that answers today: a canonical link that still resolves beats an annex.
- Our open machine layer supplies both for free, so a supplier can show their grounding without buying anything from us.
The NovaCopilot models
The decision model
In: A role, a legal act and the situation in plain words.
Out: The obligations that reach the role, the article behind them and what remains.
When: When the question is whether a requirement applies to you, and why.
The difference model
In: A checksum already used and the date of the last reading.
Out: What changed since then: checksum, reading date, passed deadline and rows to revisit.
When: When earlier work is reused and has to be checked first.
The obligation model
In: A legal act or an article, with or without a role filter.
Out: The obligation in the register's wording, the role it reaches, canonical address and reading date.
When: When the answer has to be citable article by article.
Example for an agent
curl -s "https://legal.exploreworldai.com/novacopilot/eu-upphandling-av-ai?format=agent"- canonical, the address to cite
- node_hash, the checksum for the next comparison
- corpus_version, the corpus version that answered
- freshness.read_at, the reading date of the row
- freshness.next_check, when a new check is reasonable
- citation.string, the finished citation
- agent.receipt, the receipt of the call, without a key
Metadata
- Canonical address
- https://legal.exploreworldai.com/novacopilot/eu-upphandling-av-ai
- Layer
- index
- Read at
- 2026-08-31
- Freshness
- 82/100
- Checksum
- ab63e7fa4221561f
- Corpus version
- legal-2026-10-05
- Next check
- -
- License
- https://legal.exploreworldai.com/revision
How to cite this page
NovaCopilot (ExploreWorld Legal, Valkiv Ventures AB), https://legal.exploreworldai.com/novacopilot/eu-upphandling-av-ai, read 2026-08-31, checksum ab63e7fa4221561f, corpus version legal-2026-10-05, license https://legal.exploreworldai.com/revision
- Owner
- Valkiv Ventures AB
- License
- https://legal.exploreworldai.com/revision
- Checksum
- ab63e7fa4221561f
- Fingerprint
- ewai:eu:63ce2f
- Terms
- Use, cite, index and cache. The register as such is not resold.
Source registers
The same material as registers, with read date and source on every row.
FAQ
- Can a public body become a provider under the AI Act?
- Anyone who puts their own name on the system, changes its intended purpose or makes a substantial modification steps into the provider role with the duties that follow.
- Can I require European data storage?
- Yes, where the requirement is linked to the subject matter of the contract and proportionately drafted. It must appear in the tender, not arrive later.
- How do I verify a supplier's sourcing claims?
- Fetch the canonical address and compare hash and reading date against the supplier's documentation. Our citation layer is open and needs no key.
Next step
Three ways to put the register to work in your own practice.
Start with your task
Litigation
Find support in a judgment
Search guiding decisions, see what became final and follow changes in the law.
In-house, deals
Map the rules in a transaction
Move from theme to act and on to the article that carries the duty.
Compliance
Assess the risk in a process
Risk scoring per legal area, with the sources behind every score.