Provider vs. deployer under the AI Act – what is the difference?

In several places, the EU AI Act distinguishes between two central roles: providers (Anbieter) and deployers (Betreiber) of AI systems. This distinction matters because the specific obligations can differ depending on the role.

Put simply, a provider is someone who develops an AI system or places it on the market under their own name or brand. A deployer is someone who uses an existing AI system under their own responsibility without having developed it themselves.

This is relevant in practice for many SMEs because they usually do not develop an AI system themselves but embed a ready-made chat or voice widget from a third party. In that case they typically act more as deployers – in detail, other and in part leaner obligations can apply to them than to the provider of the widget itself.

Where exactly the line falls in an individual case depends, among other things, on whether the widget is used unchanged or is adapted, renamed or redistributed under your own brand. A blanket statement on which party bears which specific obligations cannot responsibly be made here – it depends on the individual set-up and, in case of doubt, should be clarified by a lawyer.

Important to know: regardless of the exact classification as provider or deployer, both generally operate within the same legal framework of the transparency obligations under Art. 50 – the distinction tends to concern the detail of the scope of obligations, not the basic question of whether a disclosure obligation exists at all.

For more on how this applies in practice to trades businesses, law firms and other SMEs, see the full guide to the chatbot disclosure obligation.