AI Act: provider obligations

Yes. The AI Act allocates duties by role, not by place of registration. A company that places an AI system on the EU market or puts it into service there is the provider, even where every stage of research, training and deployment happens in India. What you owe depends on the risk class, and a general-purpose model carries a separate set of duties on top.

• Classify first: prohibited practice, high risk, limited risk with transparency duties, or minimal risk. The classification decides everything that follows.
• High-risk systems: operate a risk management system, govern the training and validation data, keep technical documentation, log events, provide for human oversight, and complete conformity assessment before placing on the market.
• Limited risk: disclose to the person that they are interacting with an AI system, and mark synthetic audio, image, video and text in machine-readable form.
• A provider with no establishment in the Union must appoint an authorised representative in writing before placing the system on the market.
• Where the system processes personal data from the EU, the Chapter V transfer route applies in parallel and is assessed separately.

• AI Act Article 6: classification rules for high-risk systemsArticle nodeOfficial text
• AI Act Article 16: obligations of providers of high-risk systemsArticle nodeOfficial text
• AI Act Article 22: authorised representativeArticle nodeOfficial text
• AI Act Article 50: transparency obligationsArticle nodeOfficial text

• Must Indian AI models comply with the EU AI Act to be sold in the EU?

• General-purpose and generative AI models
• Data transfers from the EU to India
• Cyber Resilience Act
• All requirements
• Indian law against EU law

The same requirement is published for Chinese exporters in simplified Chinese: 人工智能法案

Sector

AI, machine learning, deep tech

Read date

2026-08-26

Register version

in-export-v1.0.0

Address

/in/export/ai-act-provider