Annex VIII: Information for Registration of High-Risk AI Systems

Providers must submit:

1. Provider name, address, and contact details 2. Name and contact of the authorised representative (if applicable) 3. Trade name and any additional unambiguous reference for the AI system 4. Description of intended purpose of the AI system 5. Status of the AI system (on the market, in service, no longer available) 6. Type, number, and expiry date of the conformity assessment certificate and notified body name (Annex VII cases) 7. Member States where the system is placed on the market or put into service 8. Type of the system — standalone or integrated into a product 9. EU declaration of conformity URL or identification 10. Annex III area and sub-area classification 11. Instructions for use access (URL or equivalent) 12. URL of further information (voluntary)

The full numbered list appears on EUR-Lex Annex VIII.

When the deployer is a public authority or EU institution, body, office or agency, it must separately register:

1. Deployer name and contact details 2. Name of the person responsible for the deployment 3. The system's Annex III category and sub-category 4. Description of intended use (specific to the deployer's context) 5. Member State where the system is used 6. Fundamental rights impact assessment status (Article 27)

This data populates a non-public section of the EU database, accessible to market surveillance and data protection authorities.

• Article 49 — The registration obligation that references Annex VIII.
• Article 16(i) — Provider duties include registration.
• Article 26(8) — Deployer registration duties.
• Article 27 — FRIA referenced in Section B.
• Annex V — EU declaration of conformity referenced in Section A.
• Annex III — Risk categories that structure registration fields.