EU AI Act Provider vs Deployer: How to Tell Your Role Before You Start

Last reviewed: 2026-06-23

Short answer: A provider generally develops or places an AI system on the market under its name; a deployer uses an AI system under its authority. One company may be both depending on the system and use case.

Role Decision Table

Question	Provider signal	Deployer signal
Did your team develop or substantially modify the AI system?	Stronger signal	Not necessarily
Is the system offered under your company or product brand?	Stronger signal	Not necessarily
Are you using a third-party AI tool in your workflow?	Possible if rebranded or substantially modified	Common signal
Do you control how the system is used in a business process?	Possible	Stronger signal
Can you document purpose, inputs, outputs, limits, and human review?	Needed evidence	Needed evidence

Evidence To Collect

Evidence item	Why it matters
AI system description	Establishes the system boundary.
Ownership and branding	Helps separate provider and deployer scenarios.
Development or modification history	Shows whether the team built, modified, configured, or integrated the system.
User group and impact	Connects role analysis to risk review.
Vendor documentation	Supports third-party tool analysis.
Human oversight	Shows how outputs are reviewed before action.

Common Edge Cases

Third-party model APIs.
Wrapper products around foundation models.
Internal-only AI tools.

What This Page Does Not Decide

Final legal role.
Compliance status.
Sufficiency of vendor documentation.

Sample ActCheck Output

Area	Status	Evidence gap
Role evidence	Needs review	Product branding and vendor role are not documented.
System purpose	Present	AI assistant purpose is described.
User impact	Needs review	Output effect on customer decisions is unclear.
Vendor evidence	Missing	No DPA or technical documentation attached.

FAQ

Is provider vs deployer the same as developer vs user?

Not always. Development and use are helpful signals, but branding, control, modification, and system context also matter.

Can a startup be both provider and deployer?

Yes. A company may place a system on the market and also use it internally or in customer workflows.

What is the first document to prepare?

Start with a short AI system description covering purpose, users, inputs, outputs, vendor involvement, and human review.

Run a role-first evidence readiness check

Use the existing ActCheck assessment flow from the homepage.

ActCheck provides informational self-assessment and evidence-readiness support. It does not provide legal advice, legal review, compliance certification, lawyer services, or a guarantee of compliance.