A provider that considers, or has reason to consider, that a high-risk AI system it has placed on the market or put into service is not in conformity with the Regulation must immediately take the necessary corrective action to bring it into conformity, withdraw it, disable it or recall it as appropriate, and must inform the distributors of that system and, where applicable, the deployers, the authorised representative and the importers. Where the system presents a risk within the meaning of Art.79(1) and the provider becomes aware of it, the provider must immediately investigate the causes, in collaboration with the reporting deployer where applicable, and inform the competent market surveillance authorities and, where a certificate was issued for the system, the notified body concerned, of the nature of the non-compliance and of any corrective action taken.
EU AI Act EUAI-Art.20 is one control. If you already hold one of the frameworks below, a reviewed crosswalk already says how much of EU AI Act your existing evidence covers. Hold ISO/IEC 42001:2023 and 17 of 43 EU AI Act controls already carry evidence.
Each report names every control your existing framework evidences, every one it does not, the reasoning behind each claim, and the claims that were argued against and rejected. 0 were rejected on the ISO/IEC 42001:2023 pair alone.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.