EU AI Act FAQ
What is a conformity assessment for AI?
Quick answer
A conformity assessment checks a high-risk AI system against applicable legal requirements using the route required by Article 43 or relevant product legislation. It is principally a provider responsibility. The route may involve internal control or a notified body; an ordinary customer is not automatically required to commission a separate certification.
What is assessed
The applicable route addresses the relevant requirements for the system, supported by its technical documentation and quality and risk management arrangements. Product-related AI follows the interaction with the legislation listed in Annex I. Annex III systems use the routes specified for their category. An ISO management-system certificate is not a substitute for the required AI Act conformity process.
What the customer should establish
A deployer should obtain the information needed to use and oversee the system appropriately, understand the intended purpose and check the provider's relevant compliance evidence. That does not create a general right to the supplier's entire confidential technical file. If the customer makes a substantial modification or changes the purpose so that provider responsibilities transfer, its duties can change. Check the classification and commencement provisions before setting a procurement requirement.
Reviewed 4 October 2026. Sources: Commission AI Act overview and timetable, classification, deployer duties, literacy guidance and AI Office of Ireland.
Acuity AI helps Irish organisations navigate conformity assessment requirements for high-risk AI. See our EU AI Act compliance services.