Deployer

The role in the framework's value chain occupied by the organisation putting an agent into operation, choosing what systems it connects to, what permissions it carries beyond the platform's defaults, and what instructions it is given. The deployer's choices sit closest to the moment of harm and are the most common role held by the learner working through this program's dossier.

Under Article 3(4), any natural or legal person, public authority, agency, or other body using an AI system under its authority, except where the AI system is used in the course of a personal non-professional activity. Deployers of high-risk systems bear the Article 26 operational obligations and, where Article 27(1) applies, the FRIA obligation.

The actor that uses an AI system under its own authority in its activity. Most organizations are deployers; deployers of high-risk systems carry Article 26 duties (and some an Article 27 fundamental-rights impact assessment), and must know each system's tier to meet those duties and to catch an under-classifying vendor.

Under the EU AI Act, an organization that uses a high risk AI system under its own authority without being the system's provider; carries a narrower but real set of obligations, including human oversight and, following the Digital Omnibus, potential access to the Article 4a bias detection basis.

An entity that puts an already-built AI system to use in a specific context, such as an employer using a third-party hiring tool, as distinct from the developer that built the underlying model. Many AI laws impose obligations specifically on deployers, regardless of who built the model.