Article 26 — Obligations of deployers of high-risk AI systems

Official title, Regulation (EU) 2024/1689

Monitoring high-risk AI systems operated by deployers

Who it binds

deployer

Evidence that discharges it

a minutes record

Usually owned by

Operations

Severity

Major — a gap here is a finding an auditor will raise and expect a remediation plan for.

Does it apply to you?

Applicability under the Act is risk tier × operator role, not tier alone. This grid is computed by running the same function the assessment uses, so it cannot drift from what the product would tell you.

• high riskdeployer

Read against Regulation (EU) 2024/1689 as amended, consolidated text 02024R1689-20260727 (consolidation 001.001, incorporating Regulation (EU) 2026/1744). What we work from