AI Governance Engineer
GitHub

Provider

By Updated

Under the EU AI Act, whoever develops an AI system or general-purpose AI model, or has one developed, and places it on the market or puts it into service under its own name or trademark, whether for payment or free 1. It carries the design, documentation, conformity and monitoring duties for high-risk systems.

Developed in
ch. 18, The EU operator roles
Chapters
ch. 15, Deployment · ch. 18, EU AI Act
Contrast with
Deployer
Source
1 numbered reference, listed below

Commonly confused

  • Provider versus Deployer

    Provider
    Under the EU AI Act, whoever develops an AI system or general-purpose AI model, or has one developed, and places it on the market or puts it into service under its own name or trademark, whether for…
    Deployer
    Under the EU AI Act, whoever uses an AI system under its own authority, other than in a purely personal, non-professional activity.

    The differenceDevelops the system and places it on the market under its own name, against uses it under its own authority.

    Why it mattersDifferent duties and different evidence; a substantial modification can turn a deployer into the provider.

Where it is used

18 chapters of the Body of Knowledge use the term. Each link opens the first section that does.

Provider: mentions per chapter375 mentions of the term across 18 of the 23 chapters of the Body of Knowledge; the chapters the glossary cross-references are drawn solid.Cross-referenced chapterOther chapter02 Why Now: 3 mentions02 Why Now304 The Stack: 2 mentions04 The Stack205 Patterns: 3 mentions05 Patterns308 Regulatory Map: 100 mentions08 Regulatory Map10010 Reading List: 3 mentions10 Reading List311 AI Defined: 5 mentions11 AI Defined512 Governance Program: 11 mentions12 Governance Program1113 Risk Management: 8 mentions13 Risk Management814 Development: 31 mentions14 Development3115 Deployment: 44 mentions15 Deployment4416 Fairness & XAI: 7 mentions16 Fairness & XAI717 Incidents: 43 mentions17 Incidents4318 EU AI Act: 68 mentions18 EU AI Act6819 Privacy & AI: 7 mentions19 Privacy & AI720 Existing Law: 11 mentions20 Existing Law1121 AI Laws Worldwide: 7 mentions21 AI Laws Worldwide722 Principles & Standards: 9 mentions22 Principles & Standards923 AI Agents: 13 mentions23 AI Agents13No mentions in the other 5 chaptersSource: the Body of Knowledgev0.5.0
Provider: mentions per chapter375 mentions of the term across 18 of the 23 chapters of the Body of Knowledge; the chapters the glossary cross-references are drawn solid.Cross-referenced chapterOther chapter000102 Why Now: 3 mentions3020304 The Stack: 2 mentions20405 Patterns: 3 mentions305060708 Regulatory Map: 100 mentions1000810 Reading List: 3 mentions31011 AI Defined: 5 mentions51112 Governance Program: 11 mentions111213 Risk Management: 8 mentions81314 Development: 31 mentions311415 Deployment: 44 mentions441516 Fairness & XAI: 7 mentions71617 Incidents: 43 mentions431718 EU AI Act: 68 mentions681819 Privacy & AI: 7 mentions71920 Existing Law: 11 mentions112021 AI Laws Worldwide: 7 mentions72122 Principles & Standards: 9 mentions92223 AI Agents: 13 mentions1323Source: the Body of Knowledge v0.5.0
Mentions per chapter How often each chapter names the term, with the chapters the glossary cross-references drawn solid. The longest bar is where to read the term in use; bars spread across many chapters mark a term that runs through the discipline.
Mentions as a table
Mentions of Provider per chapter
ChapterMentionsCross-referenced
00 Preface0No
01 Definition0No
02 Why Now3No
03 Values & Principles0No
04 The Stack2No
05 Patterns3No
06 The Role0No
07 Maturity Model0No
08 Regulatory Map100No
10 Reading List3No
11 AI Defined5No
12 Governance Program11No
13 Risk Management8No
14 Development31No
15 Deployment44Yes
16 Fairness & XAI7No
17 Incidents43No
18 EU AI Act68Yes
19 Privacy & AI7No
20 Existing Law11No
21 AI Laws Worldwide7No
22 Principles & Standards9No
23 AI Agents13No

Patterns that use this term

17 pattern pages use the term; the 10 that use it most:

Provider: related terms and patternsThe term at the centre; related terms on solid edges, the terms it is contrasted with on dashed edges, and the patterns that use it most in the colour of their layer.RelatedContrastColour: stack layer of the pattern02 Inventory04 Runtime Controls05 AssuranceProviderRelated terms (7)Authorised representative · RelatedAuthorised representativeDistributor · RelatedDistributorDownstream provider · RelatedDownstream providerImporter · RelatedImporterOperator (EU AI Act) · RelatedOperator (EU AI Act)Placing on the market · RelatedPlacing on the marketTechnical documentation (Annex IV) · RelatedTechnical documentationContrast with (1)Deployer · ContrastDeployerPatterns using it most (6)Deactivation, Localisation & Retirement Runbook, 5 mentions · Uses the termDeactivationDisclosure & Notification Pipeline, 7 mentions · Uses the termDisclosure & Notification…Downstream Use Register, 5 mentions · Uses the termDownstream Use RegisterIncident Pipeline, 13 mentions · Uses the termIncident PipelineStaged Rollout with Rollback Criteria, 5 mentions · Uses the termStaged RolloutVendor / Model Due-Diligence Gate, 15 mentions · Uses the termVendor / Model Due-Diligence
Provider: related terms and patternsThe term at the centre; related terms on solid edges, the terms it is contrasted with on dashed edges, and the patterns that use it most in the colour of their layer.RelatedContrastColour: stack layer of the pattern02 Inventory04 Runtime Controls05 AssuranceRelated terms (7)Authorised representative · RelatedAuthorised representativeDistributor · RelatedDistributorDownstream provider · RelatedDownstream providerImporter · RelatedImporterOperator (EU AI Act) · RelatedOperator (EU AI Act)Placing on the market · RelatedPlacing on the marketTechnical documentation (Annex IV) · RelatedTechnical documentationContrast with (1)Deployer · ContrastDeployerPatterns using it most (6)Deactivation, Localisation & Retirement Runbook, 5 mentions · Uses the termDeactivationDisclosure & Notification Pipeline, 7 mentions · Uses the termDisclosure & Notification…Downstream Use Register, 5 mentions · Uses the termDownstream Use RegisterIncident Pipeline, 13 mentions · Uses the termIncident PipelineStaged Rollout with Rollback Criteria, 5 mentions · Uses the termStaged RolloutVendor / Model Due-Diligence Gate, 15 mentions · Uses the termVendor / Model Due-DiligenceProvider
The term's neighbourhood Terms related to this one on solid edges, terms it is often confused with on dashed edges, and the patterns that use it most in the colour of their layer. Follow a dashed edge to check the distinction before you use either term.
Neighbourhood as a table
Neighbourhood of Provider
FamilyItemRelation
Related termsAuthorised representativeRelated
Related termsDistributorRelated
Related termsDownstream providerRelated
Related termsImporterRelated
Related termsOperator (EU AI Act)Related
Related termsPlacing on the marketRelated
Related termsTechnical documentation (Annex IV)Related
Contrast withDeployerContrast
Patterns using it mostDeactivation, Localisation & Retirement Runbook, 5 mentionsUses the term
Patterns using it mostDisclosure & Notification Pipeline, 7 mentionsUses the term
Patterns using it mostDownstream Use Register, 5 mentionsUses the term
Patterns using it mostIncident Pipeline, 13 mentionsUses the term
Patterns using it mostStaged Rollout with Rollback Criteria, 5 mentionsUses the term
Patterns using it mostVendor / Model Due-Diligence Gate, 15 mentionsUses the term
  • Authorised representative

    Under the EU AI Act, a person established in the Union with a written mandate from a non-EU provider of a high-risk AI system or general-purpose AI model to…

  • Distributor

    Under the EU AI Act, a person in the supply chain, other than the provider or the importer, who makes an AI system available on the Union market.

  • Downstream provider

    Under the EU AI Act, the provider of an AI system that integrates an AI model, its own or one supplied by another entity.

  • Importer

    Under the EU AI Act, a person established in the Union who places on the market an AI system bearing the name or trademark of a provider established outside…

  • Operator (EU AI Act)

    The umbrella term for the actors the AI Act binds: provider, product manufacturer, deployer, authorised representative, importer and distributor.

  • Placing on the market

    Under the EU AI Act, the first making available of an AI system or general-purpose AI model on the Union market; later supplies in the course of a commercial…

  • Technical documentation (Annex IV)

    The provider's technical file for a high-risk AI system, drawn up before placing on the market and kept up to date under Article 11: description, development…

Sources

  1. [1] Regulation (EU) 2024/1689 (AI Act), consolidated text as amended by Regulation (EU) 2026/1744 (Digital Omnibus on AI, in force 27 Jul 2026; definitions in Art. 3, incl. 3(1), 3(3) to 3(14), 3(14b), 3(20), 3(22), 3(23), 3(29) to 3(32), 3(49), 3(55) to 3(57), 3(60), 3(61), 3(63), 3(68); Arts. 4, 5, 6 (incl. 6(3) third subparagraph, profiling), 9, 10, 11, 13, 14, 15, 17, 22 to 27 (incl. 26(11)), 40, 41, 43, 47, 48, 50, 53 (incl. 53(1)(c)), 55, 57, 60, 72, 73, 86; Annexes I, III, IV). Publications Office of the EU (EUR-Lex). 2026-07-27. https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng (verified: primary)

Definitions of legal terms paraphrase the cited text, which governs. Dated statements are as of .

Cite this term

García Aibar, J. (2026). Provider. In AI Governance Engineering: The Thesis & Body of Knowledge (v0.5.0), Glossary. https://doi.org/10.5281/zenodo.22956197. https://aigovernanceengineer.com/glossary/provider. CC BY 4.0

BibTeX

@misc{aige2026provider,
  author  = {Jorge García Aibar},
  title   = {{Provider}},
  note    = {Glossary, AI Governance Engineering: The Thesis \& Body of Knowledge, version 0.5.0},
  year    = {2026},
  doi     = {10.5281/zenodo.22956197},
  url     = {https://aigovernanceengineer.com/glossary/provider}
}