MedTech Terms
    The authoritative reference
    All terms

    Provider and Deployer (EU AI Act)

    The two primary role categories in the AI Act. Providers place systems on the market; deployers put them into use in a professional capacity.

    Reviewed by Christian Espinosa, Founder, Blue Goat CyberLast reviewed July 25, 2026

    Definition

    Article 3(3) defines a provider as a natural or legal person that develops an AI system or has one developed and places it on the market or puts it into service under its own name or trademark. Article 3(4) defines a deployer as a natural or legal person using an AI system under its authority, except where use is in the course of a personal non-professional activity. Obligations differ sharply between the two.

    What this means in practice

    A device manufacturer is almost always the provider for its AI-enabled device. A hospital or clinic that uses the device is a deployer with a narrower but real set of duties, including human oversight, input-data governance, monitoring, and (for certain public bodies and services) a Fundamental Rights Impact Assessment. Contracts should make the split explicit.
    Common pitfalls
    • Assuming deployers have no AI Act obligations. Article 26 imposes concrete duties on them.
    • Rebranding a system under a hospital's name without recognizing that this can make the hospital the provider under Article 25.
    Grouped by theme
    Cited by

    Where this term appears across MedTech Terms.

    Primary references

    3 sources
    Link health: 3 verified· last checked 2026-06-20
    EUR-Lex·1FDA·1European Commission·1
    1. 1
      Regulation (EU) 2024/1689, Article 3 and Article 26
      Verified
      EUR-Lexeur-lex.europa.eu
    2. 2
      FDA - Medical Devices
      Verified
      FDAfda.gov
    3. 3
      European Commission - Medical Devices
      Verified
      European Commissionhealth.ec.europa.eu

    Inline markers like [1] jump to the matching reference above.