Deployer

The deployer (Article 3(4)) is whoever uses an AI system under its own authority, except in a personal, non-professional activity. If your company uses an AI tool bought from a vendor, this is your role.

For high-risk systems, its main obligations (Article 26) are: use the system according to the provider's instructions, assign human oversight to trained people, monitor its operation, keep automatic logs for at least six months, inform workers before using it in the workplace and inform affected people when the system makes or helps make decisions about them.

Some deployers (public bodies, private entities providing public services, and those assessing creditworthiness or pricing life and health insurance) must also carry out a fundamental rights impact assessment.

Read more: Generate a free AI use policy covering your basic obligations as a deployer.