EU AI Act
EU AI Act Article 26: Obligations of deployers of high-risk AI systems
UpcomingApplies from 2 Dec 2027. Applies from 2 Aug 2028 for high-risk AI systems under Article 6(1) and Annex I.
Deployers of high-risk AI systems shall take appropriate technical and organisational measures to ensure they use such systems in accordance with the instructions for use accompanying the systems, pursuant to paragraphs 3 and 6.
Article 26, paragraph 1. Regulation (EU) 2024/1689, consolidated text of 27 July 2026. Read the full text on EUR-Lex
EUR-Lex text is reused under Commission Decision 2011/833/EU. Guidance is stored as an interpretation, not as a statute.
What evidence usually supports this
- Records that the system is used as the provider's instructions describe
- Named people assigned to oversight, and log retention
Maps to the HUMAN_OVERSIGHT and RECORD_KEEPING controls in the Assurance OS catalog.
How Assurance OS gates it
Deployers can register bought-in AI systems and gate their own rollouts on the same oversight and record-keeping evidence.
This page shows an excerpt of the law and the evidence teams commonly keep for it. It is not legal advice and does not say whether your system complies. Read the full text and take legal advice for your case.
Gate Article 26 evidence in CI.
Free plan, no card. Assurance OS checks the evidence on every release and hands buyers a signed pack.