Governance

Developer/Provider

Entities that design, build or supply AI tools.

How the laws define this

Frameworks consistently define this role around entities or individuals responsible for designing, developing, maintaining, producing, or supplying AI tools, services, and systems, placing core compliance burdens such as documentation and registration upon them. The primary point of divergence lies in whether downstream operational roles fall under this concept. The National Guidelines on AI Governance & Ethics (AIGE), the National Artificial Intelligence Policy (National AI Policy) 2025, and the Draft Act on the Promotion and Support of Artificial Intelligence Innovation (AI Innovation Promotion Act) restrict coverage to creation, maintenance, and supply functions. In contrast, the Bill for the Establishment of the National Agency for AI Governance explicitly expands the term to include those who deploy or operate AI systems.

Synthesised from the 4 statutory definitions below. Each one is quoted in full, with its source.

How jurisdictions differ

What is distinctive in each definition, binding law in force first. Showing 3 of the 4 instruments that define this term; all are listed under Definitions below.

Jurisdiction	Instrument	Status	What is distinctive
Malaysia	National Guidelines on AI Governance & Ethics (AIGE)	In Force	Explicitly includes vendors and in-house development teams while emphasizing responsibility for the system's design and documentation.
Thailand	Draft Act on the Promotion and Support of Artificial Intelligence Innovation of Thailand B.E. ....	Draft	Encompasses natural or legal persons, organizations or entities offering AI services and assigns primary responsibilities for compliance measures like documentation and risk assessments.
Morocco	Bill for the Establishment of the National Agency for AI Governance	Proposed	Broadens to include those who deploy or operate AI systems alongside primary obligations like risk assessments, record-keeping, registration, and cooperation with the Agency.

What it triggers

In Malaysia's National Guidelines on AI Governance & Ethics (AIGE), sets out responsibilities for the system's design and documentation.source
Under Thailand's Draft Act, would require compliance with obligations such as documentation, risk/impact assessments, registration and mitigation measures.source
Morocco's Bill for the Establishment of the National Agency for AI Governance would require documentation, risk assessments, record-keeping, registration/notification, and cooperation with the Agency.source

Definitions (4)

Entities (public or private) that design, develop, train, maintain or supply AI tools and models, including vendors and in‑house development teams, and who bear responsibility for the system's design and documentation.

National Guidelines on AI Governance & Ethics (AIGE)Definition 1 of 4

An organisation or individual responsible for the design, development, maintenance, or provision of an AI system, including obligations for registration, conformity assessments, security measures, and remediation under the policy’s implementation instruments.

National Artificial Intelligence Policy (National AI Policy) 2025Definition 2 of 4

The natural or legal person, organization or entity that develops, produces, offers or supplies an AI system or service and is assigned primary responsibilities under the draft for compliance with obligations such as documentation, risk/impact assessments, registration and mitigation measures.

Draft Act on the Promotion and Support of Artificial Intelligence Innovation (AI Innovation Promotion Act)Definition 3 of 4

Natural or legal persons who develop, produce, supply, deploy, or operate AI systems and who carry primary obligations under the Bill, including documentation, risk assessments, impact assessments, record-keeping, registration/notification, and cooperation with the Agency for audits and corrective measures.

Bill for the Establishment of the National Agency for AI GovernanceDefinition 4 of 4

Not to be confused with

AI provider

This term is broader than 'AI provider', which only covers entities that develop or supply AI systems, by including maintenance, operation, and specific compliance obligations.

AI developer/provider

Unlike 'AI developer/provider' focused on developing, deploying or offering products/services, these definitions add maintenance, supply, operation and detailed responsibilities.

AI developer organisation

This term extends beyond 'AI developer organisation' that designs, builds or maintains, by including supply, deployment, operation and compliance duties.

Questions and answers

What responsibilities do developers/providers have under Malaysia's AIGE guidelines?

They bear responsibility for the system's design and documentation. The guidelines are voluntary and set principles for responsible AI.

Does the term include in-house teams or only external vendors?

Yes, Malaysia's AIGE explicitly includes in-house development teams alongside vendors as entities responsible for AI tools.

What compliance obligations apply to AI developers/providers in proposed bills?

Thailand's Draft Act and Morocco's Bill would assign primary responsibilities including documentation, risk assessments, registration and cooperation with regulators.