Conformity & Assurance
Notified-Body Assessment and Certificate Management
What this control does
Perform AI conformity assessments and manage certificate issuance, renewal, restriction, suspension, withdrawal and appeals.
How to implement
For a notified body, use controlled procedures for assessment, certificate decisions, restrictions and appeals. Record the assessment scope and evidence, the reasons for decisions and the permitted validity period for the relevant system category. Monitor findings that may require provider correction or a certificate restriction, suspension or withdrawal. Maintain an accessible appeal procedure and a record of its operation. Certificate decisions are the notified body's responsibility; do not describe them as a provider's power to issue or approve its own certificate.
Suggested timing and triggers
At each assessment or certificate decision; before expiry or extension; on relevant findings or appeals.
Evidence examples
Assessment procedures and completed workpapers Certificates, supplements, scope and validity records Findings, reasons and provider-correction deadlines Restriction, suspension or withdrawal decisions Appeal procedure, requests and outcomes
How to check this control
Review one certificate decision and one finding or appeal. Check the supporting assessment, authorized decision-maker, reasons and correct validity conditions. Confirm that supplements and restrictions are reflected in the current record.
Related EU AI Act obligations
Article 34
Perform Notified-Body AI Conformity Assessment Activities in Accordance With the Act
Article 34(1)-(2)
Verify High-Risk AI Conformity Using the Applicable Assessment Procedure
Sub-obligation of Article 34: Perform Notified-Body AI Conformity Assessment Activities in Accordance With the Act
Article 44
Issue, Maintain and Control AI Conformity Certificates and Appeals
Article 44(1)-(2)
Issue and Renew AI Conformity Certificates Within the Applicable Validity Periods
Sub-obligation of Article 44: Issue, Maintain and Control AI Conformity Certificates and Appeals
Article 44(3)
Restrict, Suspend or Withdraw Certificates When High-Risk AI No Longer Complies
Sub-obligation of Article 44: Issue, Maintain and Control AI Conformity Certificates and Appeals
Article 44(3)
Maintain an Appeal Procedure for Notified-Body Decisions
Sub-obligation of Article 44: Issue, Maintain and Control AI Conformity Certificates and Appeals