Notified-Body Subcontractor and Subsidiary Governance

Qualify, approve, monitor and retain evidence for subcontractors/subsidiaries used in AI conformity assessment.

Before a notified body subcontracts assessment work or uses a subsidiary, verify the applicable Article 31 requirements and obtain the provider's agreement. Inform the notifying authority as required, keep the relevant subsidiary list public and define oversight of the work. The notified body remains responsible for tasks performed by subcontractors or subsidiaries. Retain qualification and work records for the required period, measured from the applicable termination trigger. Recheck material changes rather than relying permanently on the initial qualification.

Before subcontracting or using a subsidiary; during oversight; on relevant changes or termination; retention under the applicable rule.

Qualification and scope assessment Provider agreement and authority notification Public subsidiary-list record Work review and accountability records Retention schedule and retained qualification/work files

Choose subcontracted work and trace it to qualification, provider agreement, authority notification and review of the result. Check that retained records remain available for the required period after termination.