GPAI Providers — Obligations 2026
Providers of general-purpose AI models (e.g. GPT-4, Claude) and their obligations under Art. 53 AI Act.
Definition
From 2 August 2025, GPAI providers must (Art. 53(1) AI Act): draw up and keep up to date technical documentation, make information available to downstream providers, put in place a copyright compliance policy, and draw up and publish a training data summary. Where there is systemic risk, additionally (Art. 55 AI Act): model evaluation including adversarial testing, mitigation of systemic risks, reporting of serious incidents, cybersecurity measures. In the EU AI Act Kit: GPAI documentation templates.