Supply Chain – Infrastructure

• Use trusted suppliers

  Contracts & third-party management

  Effect

  Preventive

  Implementation level

  Supply chain

  Classification and rationale

  Complementary control typeOrganizational & process-based

  Primarily a contracts and third-party management control: Selection, verifiable commitments, and audit or enforcement rights toward third parties enable the protective effect; complemented by binding workflows.

• Infrastructure hardening

  Technical

  Effect

  Preventive

  Implementation level

  Infrastructure

  Classification and rationale

  Primarily technical: Safe formats, restrictive defaults, or protective layers reduce unsafe execution paths and exploitable attack surface.

• Supply chain security audits

  Contracts & third-party management

  Effect

  Preventive, Detective

  Implementation level

  Supply chain

  Classification and rationale

  Complementary control typeOrganizational & process-based

  Primarily a contracts and third-party management control: Contractual audit, information, and remediation rights enable control; binding audit workflows put those rights into practice.

• Continuous monitoring of hosting environments

  Technical

  Effect

  Detective

  Implementation level

  Infrastructure, Use & operations

  Classification and rationale

  Complementary control typeOrganizational & process-based

  Primarily technical: Software or analytical tools systematically produce and evaluate measurements, deviations, or attack indicators; complemented by binding workflows.

• Support downstream providers Art. 25 Abs. 2, Art. 25 Abs. 4 · applies from Annex III: 2 December 2027 · Annex I: 2 August 2028 · amended by Reg. 2026/1744

  Statutory roles: Provider, Provider of a general-purpose AI model. Classes: High-risk under Annex III, High-risk as a product or safety component.

  Regulation (EU) 2026/1744 spelled out the initial provider duty to cooperate and at the same time created an exception: it does not apply where the initial provider has clearly specified that their system must not be turned into a high-risk system. Infringements of Art. 25(2) and (4) are now expressly subject to fines.

  This reference is a review prompt. A threat match alone does not establish applicability.

• Draw up the technical documentation of the model Art. 53 Abs. 1 Buchst. a, Anhang XI · applies from 2 August 2025

  Statutory roles: Provider of a general-purpose AI model. Classes: General-purpose AI model, Model with systemic risk.

  This reference is a review prompt. A threat match alone does not establish applicability.

• Provide information to downstream providers Art. 53 Abs. 1 Buchst. b, Anhang XII · applies from 2 August 2025

  Statutory roles: Provider of a general-purpose AI model. Classes: General-purpose AI model, Model with systemic risk.

  This reference is a review prompt. A threat match alone does not establish applicability.

• Respect copyright and summarise the training content Art. 53 Abs. 1 Buchst. c und d · applies from 2 August 2025

  Statutory roles: Provider of a general-purpose AI model. Classes: General-purpose AI model, Model with systemic risk.

  For models released under a free and open-source licence with publicly available parameters, the obligations under points (a) and (b) do not apply, but the copyright policy and the summary do. Models with systemic risk are excluded from this relief.

  This reference is a review prompt. A threat match alone does not establish applicability.

• Evaluate and mitigate systemic risks Art. 55 · applies from 2 August 2025

  Statutory roles: Provider of a general-purpose AI model. Classes: Model with systemic risk.

  This reference is a review prompt. A threat match alone does not establish applicability.

All 62 obligations by role, risk class and deadline in the obligations compass

What is Supply Chain – Infrastructure?

Attackers compromise the technical environment in which an AI system is developed and operated: cloud services, development tools, and third-party software components. This gives them access to systems, data, and models.

Which mitigations help against Supply Chain – Infrastructure?

The catalogue lists 4 mitigations, each with control type, effect and implementation level. First among them are Use trusted suppliers, Infrastructure hardening and Supply chain security audits.

Which EU AI Act obligations does Supply Chain – Infrastructure touch?

The catalogue maps this threat to Art. 25 Abs. 2, Art. 53 Abs. 1 Buchst. a, Art. 53 Abs. 1 Buchst. b, Art. 53 Abs. 1 Buchst. c und d and Art. 55 of the EU AI Act. In the obligations compass this leads to: Support downstream providers, Draw up the technical documentation of the model, Provide information to downstream providers, Respect copyright and summarise the training content and Evaluate and mitigate systemic risks. Whether an obligation applies depends on role, risk class and deadline.