EU AI Act EUAI-Art.13: Transparency and provision of information to deployers

What else in your programme already covers this

This control maps to 20 controls across 7 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

ISO/IEC 42001:2023 · 5 controls

A.10.4 Customers
A.6.2.6 AI system operation and monitoring
A.6.2.7 AI system technical documentation
A.8.2 System documentation and information for users
A.9.4 Intended use of the AI system

NIST AI Risk Management Framework (AI RMF 1.0) · 5 controls

AIRMF-MN-1.4 Negative residual risks, defined as the sum of all unmitigated risks, to both downstream acquirers of AI systems and end users are documented
AIRMF-MP-1.1 Intended purpose, potentially beneficial uses, context-specific laws, norms and expectations, and prospective settings in which the AI system will be deployed are understood and documented
AIRMF-MP-2.2 Information about the AI system's knowledge limits and how system output may be utilized and overseen by humans is documented
AIRMF-MS-2.8 Risks associated with transparency and accountability as identified in the MAP function are examined and documented
AIRMF-MS-2.9 The AI model is explained, validated, and documented, and AI system output is interpreted within its context as identified in the MAP function and to inform responsible use and governance

NIST SP 800-53 Rev 5 · 4 controls

NIST800-PL-4 PL-4 Rules of Behavior
NIST800-SA-16 SA-16 Developer-provided Training
NIST800-SA-22 SA-22 Unsupported System Components
NIST800-SA-5 SA-5 System Documentation

Cloud Security Alliance Cloud Controls Matrix (CCM) v4.0.1 · 2 controls

CCM-STA-03 SSRM Guidance
CCM-STA-09 Primary Service and Contractual Agreement

SOC 2 · 2 controls

SOC2-PI1.1 PI1.1 Quality information about processing objectives, data definitions and specifications
SOC2-PI1.4 PI1.4 Controls over output delivery

GDPR · 1 control

GDPR-Art.12 Transparent information, communication and modalities for rights

ISO 27001:2022 · 1 control

5.37 Documented operating procedures

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

You are reading one control. How much of EU AI Act have you already done?

EU AI Act EUAI-Art.13 is one control. If you already hold one of the frameworks below, a reviewed crosswalk already says how much of EU AI Act your existing evidence covers. Hold ISO/IEC 42001:2023 and 17 of 43 EU AI Act controls already carry evidence.

If you hold ISO/IEC 42001:202339.5% covered · 26 gaps If you hold NIST AI Risk Management Framework (AI RMF 1.0)25.6% covered · 32 gaps

Each report names every control your existing framework evidences, every one it does not, the reasoning behind each claim, and the claims that were argued against and rejected. 0 were rejected on the ISO/IEC 42001:2023 pair alone.

See the released pairs, $299 each Browse the graph free