Presumption of Conformity

European technical specifications adopted by recognized standards bodies (CEN, CENELEC, ETSI) that provide prescriptive technical solutions for meeting the essential requirements of the AI Act. When a provider fully applies a harmonized standard whose reference has been published in the Official Journal of the EU, the resulting high-risk AI system automatically benefits from presumption of conformity for the requirements covered by that standard.

• Developed in response to a Standardization Request from the European Commission
• Remain voluntary—providers may use alternative compliance methods
• Must demonstrate state-of-the-art technical rigor

The mandatory verification process demonstrating that a high-risk AI system meets all applicable regulatory requirements before market placement. Presumption of conformity streamlines this process by allowing providers to rely on harmonized standards rather than undergoing full third-party evaluation by a notified body for every requirement.

• Internal control based on harmonized standards is often sufficient
• Absent harmonized standards, a notified body must be involved
• Results in the affixing of CE Marking

An independent, accredited organization designated by an EU member state to conduct third-party conformity assessments of high-risk AI systems. The role of notified bodies becomes critical when harmonized standards are unavailable or incomplete—without presumption of conformity, providers must submit their systems for external audit.

• Operates within a defined accreditation scope
• Verifies technical documentation and quality management systems
• Issuance of EU-type examination certificates where required

A physical or digital mark affixed to an AI system signifying the manufacturer's declaration of compliance with all applicable EU harmonization legislation. Presumption of conformity through harmonized standards provides the legal basis for self-declaration and CE marking without mandatory third-party intervention.

• Indicates conformity with the AI Act and other applicable directives
• Required before a high-risk system can be placed on the market
• Subject to post-market surveillance and serious incident reporting obligations

The comprehensive dossier a provider must compile to demonstrate a high-risk AI system's design, development, and compliance. When relying on presumption of conformity, the technical documentation must explicitly map each harmonized standard clause to the corresponding essential requirement, creating an auditable compliance traceability matrix.

• Must include system architecture, data specifications, and performance metrics
• Serves as primary evidence during market surveillance investigations
• Requires continuous updates reflecting substantial modifications

A formal mandate issued by the European Commission directing European standardization organizations to draft harmonized standards that operationalize the AI Act's essential requirements. The availability and quality of these resulting standards directly determines the practical scope of presumption of conformity for providers.

• Defines the technical scope and timeline for standard development
• Ensures standards address state-of-the-art risk mitigation
• Absence of finalized standards creates regulatory uncertainty for providers