Article 25 — Responsibilities along the AI value chain

Official title, Regulation (EU) 2024/1689

Responsibilities along the value chain

Who it binds: Every operator — provider, deployer, importer and distributor alike.
Evidence that discharges it: a contractual term with the counterparty
Usually owned by: Legal
Severity: Major — a gap here is a finding an auditor will raise and expect a remediation plan for.

Does it apply to you?

Applicability under the Act is risk tier × operator role, not tier alone. This grid is computed by running the same function the assessment uses, so it cannot drift from what the product would tell you.

minimal riskprovider, deployer, importer, distributor
high riskprovider, deployer, importer, distributor

Read against Regulation (EU) 2024/1689 as amended, consolidated text 02024R1689-20260727 (consolidation 001.001, incorporating Regulation (EU) 2026/1744). What we work from

Check which duties apply to you All obligations →