Providers must discharge the full set of provider duties for each high-risk AI system: ensure it meets the Chapter III Section 2 requirements; indicate their name, registered trade name or registered trade mark and a contact address on the system or, where that is not possible, on its packaging or accompanying documentation; hold a quality management system complying with Art.17; keep the Art.18 documentation; keep the automatically generated logs under Art.19 where they are under their control; put the system through the Art.43 conformity assessment before it is placed on the market or put into service; draw up the Art.47 EU declaration of conformity; affix the CE marking under Art.48; comply with the Art.49(1) registration duty; take corrective action and provide information under Art.20; demonstrate conformity to a national competent authority on reasoned request; and ensure the system meets the accessibility requirements of Directives (EU) 2016/2102 and (EU) 2019/882.
EU AI Act EUAI-Art.16 is one control. If you already hold one of the frameworks below, a reviewed crosswalk already says how much of EU AI Act your existing evidence covers. Hold ISO/IEC 42001:2023 and 17 of 43 EU AI Act controls already carry evidence.
Each report names every control your existing framework evidences, every one it does not, the reasoning behind each claim, and the claims that were argued against and rejected. 0 were rejected on the ISO/IEC 42001:2023 pair alone.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.