Versatile AI Risk Assessment

Glossary Governance and evidence

Provider and deployer

Who supplies an AI system and who uses it, with very different duties.

As of: September 2026 · Glossary with 28 terms

What is Provider and deployer?

The EU AI Act mainly distinguishes two roles. Providers develop an AI system or have it developed and place it on the market under their own name. Deployers use a system under their own responsibility. Different duties attach to each role, from conformity assessment to oversight in operation.

In practice the assignment is the most common point of dispute. Anyone who substantially modifies a purchased system, offers it under their own name or changes its purpose can become a provider themselves. The role should therefore be documented and justified per system, not silently assumed.

Art. 25 EU AI ActRolesResponsibility

More terms from the subject area Governance and evidence.

DPIA threshold analysis Screening under Art. 35 GDPR: does the processing need a full impact assessment? EU AI Act risk classes Classification of AI systems by risk, from prohibited practices to minimal risk. TOMs: technical and organisational measures Technical and organisational safeguards under Art. 32 GDPR, appropriate to the risk.

From the term into the substance

The link leads to the place on the website where the term becomes practical; the overview shows every term in the glossary by subject area.

Start the EU-KI-VO-Check as a free single module All terms in the glossary

Cite this term

For reports, policies or internal documents; the link leads directly to this term page.

“Provider and deployer”. Versatile AI Risk Assessment, glossary of AI risk analysis, as of September 2026.
https://www.versatile-ai-risk-assessment.com/en/wissensbasis/glossary/anbieter-betreiber/

← Back to the glossary