The supplier remains provider: What is the clearest classification?

Purchasing and using a supplier’s unchanged system generally leaves the supplier provider and makes the office deployer.

The question

Preparing for AIGP? Take the free 5-min readiness quiz →

1. Both parties become providers whenever research administration uses high-risk software.

   High-risk use creates relevant duties but does not automatically transform every participating organization into a provider.
2. The office becomes provider only after signing a broader vendor oversight agreement.

   An agreement may clarify responsibilities but does not itself create provider status under the statutory role conditions.
3. The office is the provider because it selected the supplier.

   Selecting or purchasing a system does not automatically make the research office its provider under the EU AI Act.
4. The supplier remains provider; the office acts as deployer in use. ✓

   The supplier remains provider absent an own-name placement or relevant modification, while the office uses the system as deployer.

How to remember it

Purchasing and using a supplier’s unchanged system generally leaves the supplier provider and makes the office deployer.

More Understanding How Laws, Standards and Frameworks Apply to AI questions

• Recognize provider duties for the company’s own-brand: Which approach correctly allocates responsibility? →
• Assess whether the retraining and refund function: Assuming EU AI Act duties apply, which approach best →
• Maintain an iterative risk file covering identified risks: Which documentation approach best supports risk →
• All 394 Understanding How Laws, Standards and Frameworks Apply to AI questions →