{"slug":"eu-ai-act-importer-distributor-obligations","id":"AIPT-OBL-0022","permanent_url":"https://aipolicytracker.org/id/AIPT-OBL-0022","title":"Verify conformity before importing or distributing high-risk AI","short_title":"Obligations of importers and distributors","category":"vendor_governance","summary":"Importers must verify that the provider completed conformity assessment, drew up technical documentation, affixed CE marking and appointed an authorised representative where required, and must indicate their name and contact details on the system. Distributors must verify CE marking, the declaration of conformity and instructions, and refrain from making non-compliant systems available.\n","practical_action":"Build AI Act checks into supplier onboarding and contract clauses.\n","is_binding":true,"applies_from":"2027-12-02","section":"Articles 16–27","source_reference":"Articles 23 and 24","official_source_url":"https://eur-lex.europa.eu/eli/reg/2024/1689/oj","review_status":"pending_review","confidence_level":"medium","last_verified_at":null,"reviewed_by":null,"actors":["importer","distributor"],"sectors":["cross_sector"],"use_cases":["safety_critical"],"applicability":[{"description":"Importers and distributors of high-risk AI systems.","actors":["importer","distributor"],"conditions":null}],"evidence_examples":[{"title":"Supplier due-diligence checklist","description":null,"artifact_type":"record"}],"framework_mappings":[{"framework":"iso_42001","framework_name":"ISO/IEC 42001:2023","reference":"Annex A controls on third parties and suppliers","note":"Original editorial mapping.","confidence_level":"medium","is_original":true},{"framework":"nist_ai_rmf","framework_name":"NIST AI RMF 1.0","reference":"GOVERN 6.1, GOVERN 6.2","note":"Third-party risk management.","confidence_level":"high","is_original":true}],"controls":[{"slug":"conformity-assessment-and-registration","title":"Conformity assessment, declaration and registration","kind":"process","relationship":"supports","note":"Knowledge of the assessment route needed to verify it.","confidence_level":"low","url":"https://aipolicytracker.org/controls/conformity-assessment-and-registration"},{"slug":"contractual-allocation-of-ai-duties","title":"Contractual allocation of AI duties across the supply chain","kind":"contractual","relationship":"supports","note":"Supplier terms require the paperwork and notice of changes.","confidence_level":"medium","url":"https://aipolicytracker.org/controls/contractual-allocation-of-ai-duties"},{"slug":"third-party-ai-due-diligence","title":"Vendor and third-party AI due diligence","kind":"process","relationship":"satisfies","note":"Onboarding verifies the provider's conformity assessment, documentation, marking and representative.","confidence_level":"high","url":"https://aipolicytracker.org/controls/third-party-ai-due-diligence"}],"url":"https://aipolicytracker.org/obligations/eu-ai-act-importer-distributor-obligations","policy":{"slug":"eu-ai-act","title":"Regulation (EU) 2024/1689 — Artificial Intelligence Act","status":"partially_applicable","jurisdiction":"eu","url":"https://aipolicytracker.org/policies/eu-ai-act"}}