Build a board-ready risk heatmap in minutes — free, no account required

Open tool

Conformity & Assurance

Notified-Body Assessment and Certificate Management

What this control does

Perform AI conformity assessments and manage certificate issuance, renewal, restriction, suspension, withdrawal and appeals.

How to implement

For a notified body, use controlled procedures for assessment, certificate decisions, restrictions and appeals. Record the assessment scope and evidence, the reasons for decisions and the permitted validity period for the relevant system category. Monitor findings that may require provider correction or a certificate restriction, suspension or withdrawal. Maintain an accessible appeal procedure and a record of its operation. Certificate decisions are the notified body's responsibility; do not describe them as a provider's power to issue or approve its own certificate.

Suggested timing and triggers

At each assessment or certificate decision; before expiry or extension; on relevant findings or appeals.

Evidence examples

Assessment procedures and completed workpapers Certificates, supplements, scope and validity records Findings, reasons and provider-correction deadlines Restriction, suspension or withdrawal decisions Appeal procedure, requests and outcomes

How to check this control

Review one certificate decision and one finding or appeal. Check the supporting assessment, authorized decision-maker, reasons and correct validity conditions. Confirm that supplements and restrictions are reflected in the current record.

Recognized by G2 as a Leader

Trusted by customers and rated highly across all categories

Notified-Body Assessment and Certificate Management | EU AI Act Suggested Control | Tracker Networks