Home · Synthesis · cl-ai-conformity-assessment

AI conformity assessment, EU database registration, regulatory sandbox

EU AI Act ISO 42001 NIST AI RMF

Primary statement

AI conformity per EU AI Act Article 49 (EU database registration for HRAIS prior to market placement) + Article 57 (regulatory sandboxes — national competent authorities) + Article 62 (SME / mid-cap / start-up support) + ISO 42001 + NIST AI RMF. HRAIS registration in EU database is the publication trigger.

Audit-fatigue payoff

A unified conformity assessment programme — EU database registration + regulatory sandbox participation (where beneficial) + SME/mid-cap simplifications — satisfies conformity requirements across all 3 contributing frameworks.

Strictness matrix

Scope

Scope: HRAIS providers AND deployers (where applicable) AND authorised representatives shall register themselves and their HRAIS in the EU database PRIOR to market placement. Ceiling source: eu_ai_act:Art.49 Rationale: EU AI Act Art 49 pre-placement registration scope is comprehensive.

Threshold

Threshold: registration PRIOR to placement on EU market. Binary timing qualifier. Ceiling source: eu_ai_act:Art.49 Rationale: EU AI Act Art 49 pre-placement threshold is binary.

Method

Method: HRAIS registration in EU database + conformity assessment (third-party where required) + EU declaration of conformity + CE marking + regulatory sandbox participation where beneficial (Art 57) + SME simplifications where applicable (Art 62 — Omnibus extends to mid-caps up to 750 employees / EUR 150M). Ceiling source: eu_ai_act:Art.49 Rationale: EU AI Act Art 49 + Art 57 + Art 62 form the canonical conformity method.

Frequency

Registration: prior to placement + on substantial modification. Database refresh on material change. Ceiling source: eu_ai_act:Art.49 Rationale: Pre-placement + substantial modification trigger is the cadence.

Evidence

Evidence: EU database registration evidence + conformity assessment evidence + EU declaration of conformity + CE marking + sandbox participation records (if applicable). Ceiling source: eu_ai_act:Art.49 Rationale: EU AI Act Art 49 evidence with database registration is comprehensive.

Auditor test pattern

Step 1: For HRAIS, inspect EU database registration. Step 2: Verify conformity assessment. Step 3: Verify EU declaration of conformity. Step 4: For SMEs/mid-caps, verify simplifications claimed.

Common findings

Common findings: (1) EU database registration absent — assumed exempt; (2) Conformity assessment self-only without third-party where required; (3) EU declaration of conformity generic; (4) Mid-cap simplifications not claimed despite eligibility.