CLAIM-2026-09-05-05

AI Act Article 25(4), first sentence: 'The provider of a high-risk AI system and the third party that supplies an AI system, tools, services, components, or processes that are used or integrated in a high-risk AI system shall, by written agreement, specify the necessary information, capabilities, technical access and other assistance based on the generally acknowledged state of the art, in order to enable the provider of the high-risk AI system to fully comply with the obligations set out in this Regulation.'

Why it matters

This is the Act's only mechanism for third-party components in a high-risk system, and it is contractual, not technical. A vetting report is not a written agreement.

Sources

  • europeancom2024article
  • euartificia2024responsib