GovernanceCore
Regulation

Deployer

Working definition

Reviewed 30 July 2026

Under the EU AI Act, a deployer is a natural or legal person, public authority, agency, or other body using an AI system under its authority, except where the system is used in the course of a personal non-professional activity.

Context

Why it matters

Organizations often assume the vendor owns compliance. The Act assigns deployers distinct responsibilities that cannot be outsourced through a contract.

Operating note

What this looks like in practice

  1. 01Use the system according to instructions and within the approved intended purpose.
  2. 02Assign competent human oversight and monitor operation and incidents.
  3. 03Understand when modification or rebranding could make the deployer a provider.

Sources & further research

Primary authority anchors the definition. Research links add conceptual or operational depth. External sources may update independently; always verify legal duties against the current official text.

  1. Official source

    Regulation (EU) 2024/1689, Articles 3(4) and 26

    Defines deployer and sets obligations for deployers of high-risk AI systems.

    European Union
    2024    Open source ↗