EU AI Act obligations mapped to tests, documents and processes
Fourteen obligation records cover Art. 9 to 15, 17, 26, 27, 50 and 53 to 55 of Regulation (EU) 2024/1689, with Annex IV, XI and XII. Each page splits the article text into testable, documentation and process elements. Each page states where thresholds come from and gives the standard's stage. Each page names the protocol and the artifacts an assessor asks for. Regulation (EU) 2026/1744 moved the high-risk application dates Deferred and left the content of the obligations unchanged.
| Article | Title | Testable | Documentation | Process | Protocols | Applies from |
|---|---|---|---|---|---|---|
| Art. 9 | Risk management system | 6 | 11 | 6 |
| |
| Art. 10 | Data and data governance | 8 | 11 | 6 |
| |
| Art. 11 | Technical documentation | 12 | 19 | 4 |
| |
| Art. 12 | Record-keeping | 10 | 6 | 4 |
| |
| Art. 13 | Transparency and provision of information to deployers | 5 | 14 | 3 |
| |
| Art. 14 | Human oversight | 7 | 8 | 4 |
| |
| Art. 15 | Accuracy, robustness and cybersecurity | 7 | 6 | 4 |
| |
| Art. 17 | Quality management system | 8 | 17 | 12 |
| |
| Art. 26 | Obligations of deployers of high-risk AI systems | 8 | 8 | 11 |
| |
| Art. 27 | Fundamental rights impact assessment for high-risk AI systems | 5 | 10 | 4 |
| |
| Art. 50 | Transparency obligations for providers and deployers of certain AI systems | 11 | 12 | 8 |
| |
| Art. 53 | Obligations for providers of general-purpose AI models | 8 | 8 | 8 |
| |
| Art. 54 | Authorised representatives of providers of general-purpose AI models | 2 | 4 | 6 |
| |
| Art. 55 | Obligations of providers of general-purpose AI models with systemic risk | 5 | 5 | 4 |
|
A testable element has a protocol that runs on the system or its data and records an observable result; under Art. 15 the accuracy of a high-risk AI system on a held-out set is one such element. A documentation element is met by a document with a stated content, and a process element by an activity the provider repeats over the lifecycle. The documentation and process elements on each page are what the provider has ready before a test starts.
What we cannot do
- We do not perform conformity assessments where a notified body is required.
- We do not issue CE marking or the EU Declaration of Conformity.
- We are not a notified body.
- We do not give legal opinions on classification or liability.
- We test against requirements, prepare evidence, and structure documentation; compliance decisions remain with the provider or deployer, their notified body, and their counsel.