GLOSSARY · AI SECURITY
Provider vs deployer
Provider vs deployer is the EU AI Act's split between the party that builds or substantially modifies an AI system and the party that puts it to use, each carrying different duties.
It matters because your obligations follow your role, and one organization can be both. Buying an AI tool does not move the risk off your desk: as a deployer you still owe oversight, and modifying a model can make you a provider.