--- title: "Provider and Deployer (EU AI Act)… | MedTech Terms" description: "The two primary role categories in the AI Act. Providers place systems on the market; deployers put them into use in a professional capacity." lang: en json-ld: | { "@context": "https://schema.org", "@graph": [ { "@type": "DefinedTerm", "@id": "https://medtechterms.com/terms/ai-act-provider-deployer#term", "name": "Provider and Deployer (EU AI Act)", "description": "Article 3(3) defines a provider as a natural or legal person that develops an AI system or has one developed and places it on the market or puts it into service under its own name or trademark. Article 3(4) defines a deployer as a natural or legal person using an AI system under its authority, except where use is in the course of a personal non-professional activity. Obligations differ sharply between the two.", "url": "https://medtechterms.com/terms/ai-act-provider-deployer", "termCode": "ai-act-provider-deployer", "inDefinedTermSet": { "@type": "DefinedTermSet", "name": "MedTech Terms", "url": "https://medtechterms.com/terms" } }, { "@type": "Article", "@id": "https://medtechterms.com/terms/ai-act-provider-deployer#article", "headline": "Provider and Deployer (EU AI Act)", "description": "The two primary role categories in the AI Act. Providers place systems on the market; deployers put them into use in a professional capacity.", "url": "https://medtechterms.com/terms/ai-act-provider-deployer", "mainEntityOfPage": { "@type": "WebPage", "@id": "https://medtechterms.com/terms/ai-act-provider-deployer" }, "about": { "@id": "https://medtechterms.com/terms/ai-act-provider-deployer#term" }, "articleSection": "Regulatory", "inLanguage": "en", "keywords": "Provider and Deployer (EU AI Act), Regulatory, medical device, MedTech", "author": { "@type": "Person", "name": "Christian Espinosa", "jobTitle": "Founder, Blue Goat Cyber", "url": "https://bluegoatcyber.com" }, "publisher": { "@type": "Organization", "name": "MedTech Terms", "url": "https://medtechterms.com" }, "isPartOf": { "@type": "WebSite", "name": "MedTech Terms", "url": "https://medtechterms.com" }, "datePublished": "2026-07-25", "dateModified": "2026-07-25", "citation": [ { "@type": "CreativeWork", "name": "Regulation (EU) 2024/1689, Article 3 and Article 26", "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj", "publisher": { "@type": "Organization", "name": "EUR-Lex" } }, { "@type": "CreativeWork", "name": "FDA - Medical Devices", "url": "https://www.fda.gov/medical-devices", "publisher": { "@type": "Organization", "name": "FDA" } }, { "@type": "CreativeWork", "name": "European Commission - Medical Devices", "url": "https://health.ec.europa.eu/medical-devices-sector_en", "publisher": { "@type": "Organization", "name": "European Commission" } } ], "mentions": [ { "@type": "DefinedTerm", "@id": "https://medtechterms.com/terms/ai-act-high-risk-system#term", "name": "High-Risk AI System (EU AI Act)", "url": "https://medtechterms.com/terms/ai-act-high-risk-system" }, { "@type": "DefinedTerm", "@id": "https://medtechterms.com/terms/ai-act-fria#term", "name": "Fundamental Rights Impact Assessment", "alternateName": "FRIA", "url": "https://medtechterms.com/terms/ai-act-fria" } ] }, { "@type": "BreadcrumbList", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "Home", "item": "https://medtechterms.com/" }, { "@type": "ListItem", "position": 2, "name": "Terms", "item": "https://medtechterms.com/terms" }, { "@type": "ListItem", "position": 3, "name": "Regulatory", "item": "https://medtechterms.com/terms?cat=Regulatory" }, { "@type": "ListItem", "position": 4, "name": "Provider and Deployer (EU AI Act)", "item": "https://medtechterms.com/terms/ai-act-provider-deployer" } ] } ] } --- [ MedTech Terms The authoritative reference ](/) Browse Learn [Latest](/latest) About 1. [Home](/) 2. [Terms](/terms) 3. [Regulatory](/terms?cat=Regulatory) 4. Provider and Deployer (EU AI Act) [All terms](/terms) Regulatory [Regulated Pathways](/ecosystems/regulated-pathways)[AI / ML in Devices](/ecosystems/ai-ml)[Quality System](/ecosystems/quality-system)[Global Markets](/ecosystems/global-markets) # Provider and Deployer (EU AI Act) The two primary role categories in the AI Act. Providers place systems on the market; deployers put them into use in a professional capacity. Reviewed by [Christian Espinosa, Founder, Blue Goat Cyber](/authors/christian-espinosa) Last reviewed July 25, 2026 ## Definition Article 3(3) defines a provider as a natural or legal person that develops an AI system or has one developed and places it on the market or puts it into service under its own name or trademark. Article 3(4) defines a deployer as a natural or legal person using an AI system under its authority, except where use is in the course of a personal non-professional activity. Obligations differ sharply between the two. ## What this means in practice A device manufacturer is almost always the provider for its AI-enabled device. A hospital or clinic that uses the device is a deployer with a narrower but real set of duties, including human oversight, input-data governance, monitoring, and (for certain public bodies and services) a [Fundamental Rights Impact Assessment](/terms/ai-act-fria). Contracts should make the split explicit. Common pitfalls - • Assuming deployers have no AI Act obligations. Article 26 imposes concrete duties on them. - • Rebranding a system under a hospital's name without recognizing that this can make the hospital the provider under Article 25. ## Related terms Grouped by theme ### Editor's picks · Hand-selected related concepts [ Regulatory Fundamental Rights Impact Assessment(FRIA) Assessment deployers of certain high-risk AI systems must complete before first use. ](/terms/ai-act-fria)[ Regulatory High-Risk AI System (EU AI Act) AI systems captured by Article 6 of the EU AI Act because they are safety components of regulated products or listed in Annex III. ](/terms/ai-act-high-risk-system) ### More in Regulatory · Same category [ Regulatory 510(k) Premarket Notification(510(k)) FDA submission demonstrating a device is substantially equivalent to a legally marketed predicate. ](/terms/510k)[ Regulatory 510(k) Summary vs 510(k) Statement Two alternative disclosure mechanisms in a 510(k) submission, a Summary is public on FDA's website; a Statement promises to share Safety & Effectiveness info on request. ](/terms/510k-summary-vs-statement)[ Regulatory 513(g) Request for Information(513(g)) Formal mechanism to ask FDA whether a product is a device and, if so, its likely classification. ](/terms/513g)[ Regulatory Abbreviated 510(k) 510(k) variant that relies on FDA guidance, special controls, or recognized consensus standards. ](/terms/abbreviated-510k) Cited by Where this term appears across MedTech Terms. Ecosystems (4) - [Regulated Pathways](/ecosystems/regulated-pathways) - [AI / ML in Devices](/ecosystems/ai-ml) - [Quality System](/ecosystems/quality-system) - [Global Markets](/ecosystems/global-markets) ## Primary references 3 sources Link health: 3 verified · last checked 2026-06-20 EUR-Lex· 1 FDA· 1 European Commission· 1 1. [1 Regulation (EU) 2024/1689, Article 3 and Article 26 Verified EUR-Lex eur-lex.europa.eu ](https://eur-lex.europa.eu/eli/reg/2024/1689/oj) 2. [2 FDA - Medical Devices Verified FDA fda.gov ](https://www.fda.gov/medical-devices) 3. [3 European Commission - Medical Devices Verified European Commission health.ec.europa.eu ](https://health.ec.europa.eu/medical-devices-sector_en) Inline markers like \[1\] jump to the matching reference above. Sponsor note ### Navigating an FDA or EU MDR submission? Blue Goat Cyber supports the cybersecurity content of premarket submissions, from threat models to the 524B narrative. [Book a 30-minute discovery session](https://go.bluegoatcyber.com/meetings/blue-goat-cyber/discovery-session) - No obligation - Expert-led from minute one - NDA available on request MedTech Terms is a community resource sponsored by [Blue Goat Cyber](https://bluegoatcyber.com). Definitions are independent of any vendor. On this term Category Regulatory Sources 3 Updated 7/25/2026 [Compare with another term](/compare?a=ai-act-provider-deployer) Learn in 60 seconds Card Lesson Quiz The two primary role categories in the AI Act. Providers place systems on the market; deployers put them into use in a professional capacity. - · A device manufacturer is almost always the provider for its AI-enabled device. - · Contracts should make the split explicit. - · Article 3(4) defines a deployer as a natural or legal person using an AI system under its authority, except where use is in the course of a personal non-professional activity. Remember this Watch out: Assuming deployers have no AI Act obligations. Article 26 imposes concrete duties on them. Related terms - [High-Risk AI System (EU AI Act) ](/terms/ai-act-high-risk-system) - [Fundamental Rights Impact Assessment(FRIA) ](/terms/ai-act-fria) You may also need Auto-suggested from Regulatory and shared keywords. - [AI Act Transparency Obligations ](/terms/ai-act-transparency-obligations) - [Self-Test and Near-Patient Testing (IVDR) ](/terms/ivdr-self-test) - [General-Purpose AI Model(GPAI) ](/terms/ai-act-gpai) - [Genetic Testing Requirements (IVDR Article 4) ](/terms/ivdr-genetic-testing) - [Post-Market Surveillance Plan (IVDR) ](/terms/ivdr-pms-plan) - [Cardiac Rhythm Management(CRM) ](/terms/cardiac-rhythm-management) [All Regulatory terms](/terms?cat=Regulatory) From the Blue Goat network Related resources and services on this topic. - [ MedTech Cybersecurity Standards Authoritative reference for the standards and guidances behind medical device cybersecurity. ](https://medtechcyberstandards.com) - [ MedTech Cybersecurity Crosswalk International crosswalk of medical device cybersecurity requirements across regulators. ](https://mdccrosswalk.com) - [ MedTech Truths Common misconceptions about medical device development - debunked. ](https://mdcmisconceptions.com) - [ MedTech Launchpad MedTech funding rounds, accelerators, and launch resources. ](https://medtechlaunchguide.com) MedTech Terms An authoritative, plain-language reference for the regulatory, quality, cybersecurity, and software terms that shape modern medical devices. Browse - [All terms](/terms) - [A–Z index](/a-z) - [Categories](/categories) - [Ecosystems](/ecosystems) - [Learning paths](/paths) - [Compare terms](/compare) - [Quiz](/quiz) Resources - [FDA Medical Devices](https://www.fda.gov/medical-devices) - [EU MDR](https://eur-lex.europa.eu/eli/reg/2017/745/oj) - [IMDRF](https://www.imdrf.org/) - [Methodology](/methodology) - [Changelog](/changelog) - [Editor: Christian Espinosa](/authors/christian-espinosa) - [About this site](/about) © 2026 MedTech Terms. Reference content for educational purposes - not regulatory advice. A community resource sponsored by [Blue Goat Cyber](https://bluegoatcyber.com)