Conformity & Assurance
High-Risk AI Conformity Assessment
What this control does
Select, complete and document the conformity-assessment procedure applicable to each high-risk AI system, including reassessment after substantial modification.
How to implement
For the responsible high-risk AI provider, document the applicable conformity-assessment route before release. Check the classification, product legislation and relevant standards or common specifications. Distinguish Annex III routes from Annex I Section A product procedures; a notified body is not required for every high-risk system. Assemble the applicable technical and quality evidence, resolve findings and retain the assessment decision. Reassess substantial modifications and review certificate continuity if a notified body's status changes. A product manufacturer treated as the provider follows the relevant provider route. The manufacturer's responsibility and the notified body's assessment role remain distinct.
Suggested timing and triggers
Before applicable market placement or putting into service; on substantial modification; on relevant certificate or notified-body changes.
Evidence examples
Classification and conformity-route decision Applicable standards or common-specification analysis Technical and quality evidence package Assessment findings, certificates and closure records where relevant Substantial-modification and certificate-continuity decisions
How to check this control
Select a released or modified system and reconcile the chosen route to its classification and product legislation. Check completion of the applicable assessment, closure of findings and any certificate validity or transfer conditions.
Related EU AI Act obligations
Article 43
Complete the Required Conformity Assessment for High-Risk AI
Article 43(1)
Apply the Required Conformity Assessment Route for Annex III Point 1 High-Risk AI
Sub-obligation of Article 43: Complete the Required Conformity Assessment for High-Risk AI
Article 43(2)
Use Internal-Control Conformity Assessment for Annex III Points 2 to 8 High-Risk AI
Sub-obligation of Article 43: Complete the Required Conformity Assessment for High-Risk AI
Article 43(3)
Integrate AI Act Requirements Into the Applicable Annex I Section A Product Conformity Assessment
Sub-obligation of Article 43: Complete the Required Conformity Assessment for High-Risk AI
Article 43(4)
Perform a New Conformity Assessment After a Substantial Modification
Sub-obligation of Article 43: Complete the Required Conformity Assessment for High-Risk AI
Article 36(8)-(9)
Secure Replacement Notified-Body Responsibility for Affected Certificates When Required
Sub-obligation of Article 36: Manage Notified-Body Cessation, Restriction, Suspension or Withdrawal Impacts