Legal requirement Technical documentation European Union Partially applicable

Providers of GPAI models must maintain technical documentation and inform downstream providers

Download: JSON · MarkdownUnder EU AI Act, Article 53(1)(a) and 53(1)(b); Annexes XI and XII

Verified against the official source 26 Sep 2026

What this label means

Verified: — a named reviewer opened the official source and confirmed the record; the date and the reviewer are shown.
Pending review: — linked to the official source and in the queue for a reviewer to confirm.
Source-linked: — linked to the official source, not yet confirmed by a reviewer.

No change recorded as of 26 Sep 2026 · official source last checked 26 Sep 2026

Open official source Sign in to follow

Report a correction How we verify

On this page 9 sections

In brief

Providers of GPAI models must maintain technical documentation and inform downstream providers is a legal requirement under the EU AI Act in the European Union (Article 53(1)(a) and 53(1)(b); Annexes XI and XII). It applies from 2 August 2025. The record carries 2 evidence examples and mappings to 2 frameworks.

Instrument: EU AI Act
Jurisdiction: European Union
Nature: Legal requirement
Source reference: Article 53(1)(a) and 53(1)(b); Annexes XI and XII
Applies from: 2 August 2025
Who it binds: General-purpose AI model provider
Evidence examples: 2
Framework mappings: ISO/IEC 42001:2023, NIST AI Risk Management Framework 1.0
Controls that meet it: 2
Official source: Open official text
Verification: Verified against the official source 26 Sep 2026

What does it require?

Providers of general-purpose AI models must draw up and keep up to date technical documentation covering the training and testing process and evaluation results, as set in Annex XI, and supply it to the AI Office or national authorities on request. They must also keep current the Annex XII information for providers that integrate the model into their own AI systems, so those providers understand its capabilities and limitations and can meet their own duties. Free and open-source models without systemic risk are exempt from both duties.

Practical action

Maintain a model card and technical file aligned to Annexes XI and XII with version control tied to each model release.

Who does it apply to?

Providers placing general-purpose AI models on the EU market, other than free and open-source models that do not present systemic risk. Models placed on the market before 2 August 2025 have until 2 August 2027 under Article 111(3).

Actors: General-purpose AI model provider
Sectors: Cross-sector / all sectors
Use cases: Generative AI and foundation models

Applies from: 2 August 2025

Which controls meet this duty?

Satisfies: the control, operated properly, does the work the duty asks for. Supports: it contributes but the duty needs more. Each control page lists every other duty it serves, so work done once can be counted once.

satisfiesProcessProduct or model owner · at launch and on material change
Technical documentation, model cards and instructions for use
Serves 14 recorded duties · evidence: Technical documentation file, Model card or deployer information pack, Instructions for use

Model card and technical file structured to Annexes XI and XII.
supportsProcessRelease manager · at launch and on material change
Model release and change-management gate
Serves 5 recorded duties · evidence: Release or change approval record, Release and change-classification procedure

Release requires the documentation to be current.

Templates that cover this duty

Generated from the records. Free · no account · links emailed to your work address. This duty is cited in each file with its source reference and a link back here.

AI System Inventory
Register · XLSX and DOCX · v6
EU AI Act Role and Risk Classifier
Checklist · XLSX · v4
EU AI Act Article 50 Transparency Kit
Kit · DOCX and XLSX · v44
ISO/IEC 42001 Gap Assessment and Statement of Applicability
Assessment · XLSX · v3

All 10 templates that cover it →

What evidence would a reviewer expect?

Evidence examples
Evidence	Type	Notes
Annex XI technical documentation	document
Annex XII downstream integration documentation	document

Framework mappings

Original editorial crosswalks. They cite clause numbers only and reproduce no standard text; confidence reflects how direct the mapping is.

See every European Union duty mapped this way →

Framework mappings table
Framework	Reference	Note	Confidence
ISO/IEC 42001:2023	Annex A.6.2.7, A.8.2, A.10.4	Technical documentation, system documentation and information for customers.	high
NIST AI RMF 1.0	GOVERN 1.4, MAP 2.2, MEASURE 2.1	Documentation of design, testing and evaluation.	medium

Frequently asked questions

Is this a legal requirement?

Yes. It is a legal requirement under EU AI Act (Article 53(1)(a) and 53(1)(b); Annexes XI and XII).

Who must comply with this obligation?

Providers placing general-purpose AI models on the EU market, other than free and open-source models that do not present systemic risk. (Models placed on the market before 2 August 2025 have until 2 August 2027 under Article 111(3).)

When does this obligation apply?

It applies from 2 August 2025.

What evidence shows compliance?

A reviewer would expect: Annex XI technical documentation; Annex XII downstream integration documentation.

Which frameworks map to this obligation?

It is mapped to ISO/IEC 42001:2023 Annex A.6.2.7, A.8.2, A.10.4, NIST AI Risk Management Framework 1.0 GOVERN 1.4, MAP 2.2, MEASURE 2.1. These are editorial crosswalks with a stated confidence, not official mappings.

Which controls satisfy this obligation?

Technical documentation, model cards and instructions for use; Model release and change-management gate.

What should an organisation do in practice?

Maintain a model card and technical file aligned to Annexes XI and XII with version control tied to each model release.

Cite this record

AIPolicyTracker (2026). “Providers of GPAI models must maintain technical documentation and inform downstream providers (EU AI Act)” [AIPT-OBL-0043, verified 26 September 2026]. https://aipolicytracker.org/id/AIPT-OBL-0043 (accessed 8 November 2026). Data licensed CC BY 4.0.

Permanent id AIPT-OBL-0043: it never changes or gets reused, and its address keeps working if this page moves.

Cite the official text alongside it: Regulation (EU) 2024/1689 of the European Parliament and of the Council of 13 June 2024 laying down harmonised rules on artificial intelligence, Official Journal of the European Union, https://eur-lex.europa.eu/eli/reg/2024/1689/oj.

BibTeX

@misc{aipolicytracker2026_providersofgpaimodelsmus,
  author       = {{AIPolicyTracker}},
  title        = {{Providers of GPAI models must maintain technical documentation and inform downstream providers (EU AI Act)}},
  year         = {2026},
  howpublished = {\url{https://aipolicytracker.org/obligations/eu-ai-act-art-53-gpai-technical-and-downstream-documentation}},
  url          = {https://aipolicytracker.org/obligations/eu-ai-act-art-53-gpai-technical-and-downstream-documentation},
  urldate      = {2026-11-08},
  note         = {Data licensed CC BY 4.0. Accessed 8 November 2026}
}

Change history

No change to this record's tracked fields has been recorded since 15 October 2026, when field-level history began.

Similar obligations in other instruments

Draw up technical documentation before placing a high-risk system on the market — EU AI Act, European Union
Providers must document and register a conclusion that an Annex III system is not high-risk — EU AI Act, European Union
Developers must document high-risk systems and disclose known risks — Colorado AI Act, Colorado (United States)
Developers must supply deployers with documentation of the technology — Colorado ADMT law (SB 26-189), Colorado (United States)

Disclaimer: informational only, not legal advice. Verify every claim against the linked official sources and consult a qualified lawyer before acting.