Annex VIII

Digital & dataLevel 1RegulationAI ActIn forceOfficial source

Information to be submitted upon the registration of high-risk AI systems in accordance with Article 49

Section A — Information to be submitted by providers of high-risk AI systems in accordance with Article 49(1)

The following information shall be provided and thereafter kept up to date with regard to high-risk AI systems to be registered in accordance with Article 49(1):

(1)

1.The name, address and contact details of the provider;

Copy link

(2)

2.Where submission of information is carried out by another person on behalf of the provider, the name, address and contact details of that person;

Copy link

(3)

3.The name, address and contact details of the authorised representative, where applicable;

Copy link

(4)

4.The AI system trade name and any additional unambiguous reference allowing the identification and traceability of the AI system;

Copy link

(5)

5.A description of the intended purpose of the AI system and of the components and functions supported through this AI system;

Copy link

(6)

6.A basic and concise description of the information used by the system (data, inputs) and its operating logic;

Copy link

(7)

7.The status of the AI system (on the market, or in service; no longer placed on the market/in service, recalled);

Copy link

(8)

8.The type, number and expiry date of the certificate issued by the notified body and the name or identification number of that notified body, where applicable;

Copy link

(9)

9.A scanned copy of the certificate referred to in point 8, where applicable;

Copy link

(10)

10.Any Member States in which the AI system has been placed on the market, put into service or made available in the Union;

Copy link

(11)

11.A copy of the EU declaration of conformity referred to in Article 47;

Copy link

(12)

12.Electronic instructions for use; this information shall not be provided for high-risk AI systems in the areas of law enforcement or migration, asylum and border control management referred to in Annex III, points 1, 6 and 7;

Copy link

(13)

13.A URL for additional information (optional).

Copy link

Section B — Information to be submitted by providers of high-risk AI systems in accordance with Article 49(2)

The following information shall be provided and thereafter kept up to date with regard to AI systems to be registered in accordance with Article 49(2):

(1)

1.The name, address and contact details of the provider;

Copy link

(2)

2.Where submission of information is carried out by another person on behalf of the provider, the name, address and contact details of that person;

Copy link

(3)

3.The name, address and contact details of the authorised representative, where applicable;

Copy link

(4)

4.The AI system trade name and any additional unambiguous reference allowing the identification and traceability of the AI system;

Copy link

(5)

5.A description of the intended purpose of the AI system;

Copy link

(6)

6.The condition or conditions under Article 6(3)based on which the AI system is considered to be not-high-risk;

Copy link

[Deleted by Regulation (EU) 2026/1744 of 8 July 2026.]

(8)

8.The status of the AI system (on the market, or in service; no longer placed on the market/in service, recalled).

Copy link

[Deleted by Regulation (EU) 2026/1744 of 8 July 2026.]

Section C — Information to be submitted by deployers of high-risk AI systems in accordance with Article 49(3)

The following information shall be provided and thereafter kept up to date with regard to high-risk AI systems to be registered in accordance with Article 49(3):

(1)

1.The name, address and contact details of the deployer;

Copy link

(2)

2.The name, address and contact details of the person submitting information on behalf of the deployer;

Copy link

(3)

3.The URL of the entry of the AI system in the EU database by its provider;

Copy link

(4)

4.A summary of the findings of the fundamental rights impact assessment conducted in accordance with Article 27;

Copy link

(5)

5.A summary of the data protection impact assessment carried out in accordance with Article 35 of Regulation (EU) 2016/679 or Article 27 of Directive (EU) 2016/680 as specified in Article 26(8) of this Regulation, where applicable.

Copy link