Under Regulation (EU) 2024/1689, a natural or legal person using an AI system under its authority in the course of a professional activity, distinct from the provider that placed the system on the market.
In practiceDeployers of high-risk systems must use the system in accordance with the provider's instructions, assign competent human oversight, ensure input data is relevant and representative for the intended purpose, monitor operation, keep logs where they are under the deployer's control, and inform workers and their representatives before putting a high-risk system into service in the workplace. Public bodies and certain private deployers must also carry out a fundamental rights impact assessment before first use.
A bank that licenses a third-party credit-decisioning model is the deployer: it must train its underwriters on the instructions for use, retain operation logs, and run a fundamental rights impact assessment covering the affected applicant population before going live.
This definition is maintained by Moweb partners and used in live client engagements. For how Deployer applies to your estate, or to challenge a working definition, speak to a partner.