Governance

AI deployer

Entity that supplies or uses an AI system to provide a product or service.

How the laws define this

Regulators broadly agree that an AI deployer is an entity or party that integrates, configures, operates, or puts an AI system into real-world use within products, services, or operational contexts for end users. Crucially, deployers carry operational responsibility for managing deployment risks, monitoring performance, and applying human oversight. Frameworks diverge on whether individuals fall under this classification. The Draft Organic Law for the Regulation and Promotion of Artificial Intelligence and the AI Basic Act (Draft) explicitly include individuals alongside organizations as potential deployers. Conversely, instruments such as House Bill No. 7396 (Artificial Intelligence Development and Regulation Act), House Bill No. 7913 (Artificial Intelligence Regulation Act - AI Bill of Rights), the Voluntary AI Safety Standard (VAISS), and the Central Bank AI Guidelines restrict deployers to entities, businesses, or companies.

Synthesised from the 10 statutory definitions below. Each one is quoted in full, with its source.

How jurisdictions differ

What is distinctive in each definition, binding law in force first.

JurisdictionInstrumentStatusWhat is distinctive
TaiwanTaiwan Artificial Intelligence Basic ActIn ForceAdds responsibility for ensuring compliant deployment, monitoring performance, implementing human oversight, and fulfilling operational obligations under the Act.
Doha, QatarCentral Bank AI GuidelinesIn ForceLimits to companies or other entities that adopt, integrate, or deploy AI solutions in their operations.
ThailandDraft ETDA Notification regarding AI Risk AssessmentDraftAdds responsibility for day-to-day oversight, applying mitigations, monitoring performance, and updating risk assessments as material changes occur.
United StatesThe Republic Unifying Meritocratic Performance Advancing Machine Intelligence by Eliminating Regulatory Interstate Chaos Across American Industry ActProposedSpecifies the party incorporating an existing AI model into a specific product, service, or application for end-consumers or other businesses.
EcuadorDraft Organic Law for the Regulation and Promotion of Artificial IntelligenceUnder ReviewAdds duties to register high-risk systems, perform algorithmic impact assessments, maintain operational logs, monitor for bias and incidents, and provide appeals and redress.
PhilippinesHouse Bill No. 7396 (Artificial Intelligence Development and Regulation Act)Under ReviewIncludes businesses, government agencies, healthcare providers, and organizations integrating AI into products or services affecting end users.
G7Hiroshima Process International Guiding Principles for Organizations Developing Advanced AI Systems and International Code of Conduct for Organizations Developing Advanced AI SystemsAdoptedAdds bearing responsibility for safe deployment and post-deployment monitoring.
AustraliaVoluntary AI Safety Standard (VAISS)SupersededAdds that the deployer is the primary actor responsible for implementing governance, risk management, disclosure, oversight and compliance measures.
ThailandDraft Principles for AI LegislationDraftIncludes service providers and platform operators, adding duties for incident detection/reporting, post-market monitoring, and sectoral compliance.
PhilippinesHouse Bill No. 7913 (Artificial Intelligence Regulation Act - AI Bill of Rights)WithdrawnAdds responsibility for compliance with registration, monitoring, incident reporting, and remedial obligations.

What it triggers

  • In Taiwan, deployers are responsible for ensuring compliant deployment, monitoring performance, implementing human oversight, and fulfilling operational obligations under the Act.source
  • Under the Draft ETDA Notification regarding AI Risk Assessment in Thailand, deployers are responsible for implementation, day-to-day oversight, applying mitigations, monitoring performance, and updating risk assessments as material changes occur.source
  • In Ecuador's Draft Organic Law, deployers must register high-risk systems, perform algorithmic impact assessments, ensure meaningful human oversight, maintain operational logs, monitor for bias and incidents, and provide mechanisms for appeals and redress.source
  • Under House Bill No. 7396 in the Philippines, deployers are subject to deployment, registration, oversight, and incident-reporting obligations.source

Definitions (10)

An entity that supplies, operates or uses an AI system to deliver a product or service to users or customers; under the standard the AI deployer is the primary actor responsible for implementing governance, risk management, disclosure, oversight and compliance measures.

Organizations or individuals that implement and use AI systems for concrete purposes; deployers must register high-risk systems, perform algorithmic impact assessments, ensure meaningful human oversight, maintain operational logs, monitor for bias and incidents, and provide mechanisms for appeals and redress.

Entities that put AI systems into use in operational environments, including businesses, government agencies, healthcare providers, and any organization integrating AI into products or services affecting end users, which are subject to deployment, registration, oversight, and incident-reporting obligations under the bill.

Entities that implement, operate, or put AI systems into operational environments where they affect individuals or society, including organizations that integrate AI into products, services, or decision-making processes. Deployers are responsible for compliance with registration, monitoring, incident reporting, and remedial obligations.

An entity that integrates, configures, or operates an AI system in a specific operational context, responsible for implementation, day‑to‑day oversight, applying mitigations, monitoring performance, and updating risk assessments as material changes occur.

An entity that integrates, configures, or operates an AI system within a product or service (including service providers and platform operators), responsible for operational duties including implementing risk‑mitigation measures, human oversight, incident detection/reporting, post‑market monitoring, and compliance with sectoral requirements.

An organization or individual that integrates, operates, or puts AI systems into real-world use, responsible for ensuring compliant deployment, monitoring performance, implementing human oversight, and fulfilling operational obligations under the Act.

AI Basic Act (Draft)Definition 7 of 10

Companies or other entities that adopt, integrate, or deploy AI solutions in their operations.

Central Bank AI GuidelinesDefinition 8 of 10

The party that incorporates an existing AI model into a specific product, service, or application for use by end-consumers or other businesses.

Organizations or parties that take developed AI systems and integrate, configure, or deploy them into products, services, or operational environments for end users, bearing responsibility for safe deployment and post-deployment monitoring.

Not to be confused with

Operator/Deployer

Operator/Deployer combines operating and deploying into one entity, while AI deployer focuses specifically on deployment.

Deployer / Operator

Deployer/Operator explicitly links placing AI systems into production or use, overlapping closely but emphasizing production deployment.

Questions and answers

What obligations do AI deployers have under Taiwan's Artificial Intelligence Basic Act?

Deployers must ensure compliant deployment, monitor performance, implement human oversight, and fulfill operational obligations. This applies to organizations or individuals integrating, operating, or putting AI systems into real-world use.

Who counts as an AI deployer in financial contexts in Qatar?

Companies or other entities that adopt, integrate, or deploy AI solutions in their operations qualify as deployers under the Central Bank AI Guidelines.

What are the post-deployment duties for AI deployers in the G7 principles?

Deployers bear responsibility for safe deployment and post-deployment monitoring when integrating, configuring, or deploying AI systems into products, services, or operational environments.