{
  "notice": "Illustrative mapping from the AI Governance Engineer Body of Knowledge v0.5.0 (not a claim of conformity)",
  "version": "0.5.0",
  "license": "CC BY 4.0",
  "licenseUrl": "https://creativecommons.org/licenses/by/4.0/",
  "schemaVersion": 2,
  "schema": "https://aigovernanceengineer.com/api/v1/schemas/obligation.json",
  "self": "https://aigovernanceengineer.com/api/v1/obligations/aige-obl-euaia-art25.json",
  "source": "https://aigovernanceengineer.com/obligations/aige-obl-euaia-art25",
  "citation": {
    "title": "AI Governance Engineering: The Thesis & Body of Knowledge",
    "authors": [
      "Jorge García Aibar"
    ],
    "parentDoi": "https://doi.org/10.5281/zenodo.22956197",
    "conceptDoi": "https://doi.org/10.5281/zenodo.22857084"
  },
  "obligation": {
    "id": "AIGE-OBL-EUAIA-ART25",
    "url": "https://aigovernanceengineer.com/obligations/aige-obl-euaia-art25",
    "json": "https://aigovernanceengineer.com/api/v1/obligations/aige-obl-euaia-art25.json",
    "framework": "EU AI Act",
    "frameworkId": "eu-ai-act",
    "clause": "Art. 25",
    "obligation": "EU AI Act Art. 25 responsibilities along the AI value chain",
    "requirement": "Responsibilities along the AI value chain: when a distributor, importer or deployer becomes a provider, and the information a provider must pass to actors downstream",
    "artefact": "Value-chain due-diligence gate; provider/deployer responsibility allocation; AIBOM and model/data cards collected from upstream providers",
    "layers": [
      2,
      5
    ],
    "dutyHolder": "Provider + value-chain actors",
    "scope": null,
    "authority": "National MSA",
    "appliesFrom": "2027-12-02",
    "appliesStatus": "deferred",
    "appliesNote": "2027-12-02 (Annex III)",
    "milestones": [
      {
        "date": "2028-08-02",
        "systemClass": [
          "high-risk-annex-i"
        ],
        "note": "Applies to Annex I embedded (product safety-component) systems"
      },
      {
        "date": "2030-08-02",
        "systemClass": [],
        "note": "Deadline for legacy high-risk systems intended for use by public authorities (Art. 111(2))"
      }
    ],
    "systemClass": [
      "high-risk-annex-iii",
      "high-risk-annex-i"
    ],
    "patterns": [
      {
        "id": "pattern-vendor--model-due-diligence-gate",
        "title": "Vendor / Model Due-Diligence Gate",
        "url": "https://aigovernanceengineer.com/patterns/vendor-model-due-diligence-gate"
      },
      {
        "id": "pattern-downstream-use-register",
        "title": "Downstream Use Register",
        "url": "https://aigovernanceengineer.com/patterns/downstream-use-register"
      }
    ],
    "crosswalkTopics": [
      "supply-chain",
      "deployment-change-decommissioning"
    ],
    "reviewed": "2026-09-24",
    "chapter": "https://aigovernanceengineer.com/bok/regulatory-map#eu-ai-act-post-omnibus"
  }
}