The provider must draw up a written, machine readable, physical or electronically signed EU declaration of conformity for each high-risk AI system, keep it at the disposal of the national competent authorities for ten years after the system was placed on the market or put into service, and submit a copy on request. The declaration must identify the system it was drawn up for, state that the system meets the Chapter III Section 2 requirements, contain the information set out in Annex V, and be translated into a language easily understood by the national competent authorities of each Member State where the system is placed on the market or made available. Where other Union harmonisation legislation also requires a declaration, a single declaration covering all applicable Union law must be drawn up and must identify the legislation it relates to. By drawing it up the provider assumes responsibility for compliance, and must keep the declaration up to date.
This control maps to 4 controls across 3 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
EU AI Act EUAI-Art.47 is one control. If you already hold one of the frameworks below, a reviewed crosswalk already says how much of EU AI Act your existing evidence covers. Hold ISO/IEC 42001:2023 and 17 of 43 EU AI Act controls already carry evidence.
Each report names every control your existing framework evidences, every one it does not, the reasoning behind each claim, and the claims that were argued against and rejected. 0 were rejected on the ISO/IEC 42001:2023 pair alone.
The graph holds this control, the 4 it maps to, and the evidence behind each claim, over MCP and REST.