Compliance

Provider/Operator

Actors who provide or deploy AI systems.

How the laws define this

Regulatory frameworks agree that providers and operators are primary duty-holders responsible for an artificial intelligence system throughout its lifecycle, holding them accountable for key compliance duties like documentation and reporting. The central divergence lies in whether these functions represent distinct legal roles or a single combined designation. Guidance from the KI-Servicestelle at RTR strictly separates the two based on EU AI Act terminology, defining a provider as an entity bringing a system to market and an operator as one deploying and using it. In contrast, the National Artificial Intelligence Policy and Peru’s Project 7033/2023 treat provider and operator as an integrated concept, applying duties to any natural or legal person that develops, provides, deploys, or operates a system. Project 7033/2023 further broadens this scope by explicitly reaching offshore actors whose systems affect Peruvian rights or who offer services to persons in Peru, whereas the other instruments do not address offshore entities.

Synthesised from the 3 statutory definitions below. Each one is quoted in full, with its source.

How jurisdictions differ

What is distinctive in each definition, binding law in force first.

Jurisdiction	Instrument	Status	What is distinctive
Austria	AI Service Office — establishment at RTR	In Force	Aligns strictly with EU AI Act by distinguishing provider as bringing AI to market from operator as deploying and using it, targeting guidance and templates for their obligations.
Ethiopia	National Artificial Intelligence Policy	In Force	Broadens to any entity deploying, operating, or making AI available, adding accountability for maintenance, human oversight, registration, monitoring, reporting, and remediation.
Peru	Project 7033/2023 (07033) — Bill that proposes to regulate the development and use of Artificial Intelligence in Peru	Under Review	Expands to include offshore actors affecting Peru or serving persons there, designating them as primary duty-holders for risk classification, AIAs, testing, documentation, reporting, and registry.

What it triggers

In Austria, the AI Service Office provides guidance and templates to providers and operators to meet documentation, transparency, and conformity obligations under the AI Act and national law.source
Under Peru's Project 7033/2023, providers/operators would be responsible for risk classification, conducting AIAs, security testing, documentation, incident reporting, and registry obligations.source

Definitions (3)

‘Provider’ and ‘Operator’ are roles adopted in alignment with EU AI Act terminology: a provider brings an AI system to market or places it on the market, while an operator deploys and uses an AI system. The Servicestelle’s guidance and templates are aimed at these actors to help meet documentation, transparency and conformity obligations under the AI Act and national law.

KI-Servicestelle (AI Service Office) — establishment at RTRDefinition 1 of 3

An entity that deploys, operates, or makes an AI system available to users; accountable for deployment, maintenance, human oversight arrangements, registration/certification where required, and compliance with monitoring, reporting, and remediation duties.

National Artificial Intelligence PolicyDefinition 2 of 3

The natural or legal person who develops, provides, deploys or operates an AI system (including offshore actors offering services to persons in Peru or whose systems have demonstrable effects on Peruvian rights). Providers/operators are designated as the primary duty‑holders responsible for risk classification, conducting AIAs, security testing, documentation, incident reporting and registry obligations.

Project 7033/2023 (07033) — Bill that proposes to regulate the development and use of Artificial Intelligence in PeruDefinition 3 of 3

Not to be confused with

operator/provider

Operator/provider focuses on deploying or offering AI services to users or customers, while Provider/Operator definitions add specific accountabilities like oversight and reporting.

Operator/Deployer

Operator/Deployer covers operating, deploying, or using AI systems, whereas Provider/Operator explicitly includes providing or placing systems on the market.

Providers and Deployers

Providers and Deployers emphasize developing, placing on market, or using, similar to Provider/Operator but without the detailed duty-holder obligations in these definitions.

Questions and answers

What duties do providers and operators have under Austria's AI Service Office?

The AI Service Office offers advisory services, guidance, and templates to providers and operators to help them meet documentation, transparency, and conformity obligations under the EU AI Act and national law. It targets public authorities and businesses for AI adoption readiness.

Does Peru's AI bill apply to foreign providers affecting the country?

Yes, the natural or legal person who develops, provides, deploys or operates an AI system includes offshore actors offering services to persons in Peru or whose systems have demonstrable effects on Peruvian rights. They would be primary duty-holders for risk classification, AIAs, security testing, documentation, incident reporting, and registry obligations.