Purpose
Ensure AI systems classified as high risk are properly documented and registered with EU authorities (and other jurisdictions where required) before market placement or deployment.
Scope
Applies to all high-risk AI systems under EU AI Act Annex III and any other regulatory regime requiring system registration or notification.
- Employment, credit, education, healthcare, law enforcement, critical infrastructure AI
- Any AI system flagged high-risk by internal risk assessment even if not in Annex III
Definitions
- High-Risk Classification Checklist: Tool mapping AI use cases to Annex III categories and internal criteria.
- Registration Dossier: Evidence package submitted to authorities, including technical documentation, risk assessments, and conformity declarations.
- Authorized Representative: Local EU representative for organizations outside the Union.
Policy
Compliance Program Manager must confirm classification, prepare the registration dossier, and submit required documentation via the EU database (and other regulators) before deployment. Registrations must be kept current when system changes occur.
Roles and Responsibilities
Compliance Program Manager leads the registration workflow. Model Owner supplies technical documentation. Legal ensures authorized representative arrangements. Responsible AI confirms risk controls align with Annex IV requirements.
Procedures
Registration workflow includes:
- Classify model using the high-risk checklist and document rationale.
- Compile registration dossier (technical documentation, risk management, CE declarations).
- Coordinate with authorized representative if required.
- Submit dossier to the EU database and capture acknowledgement.
- Update registration upon major changes or decommissioning.
- Maintain evidence of communication with authorities.
Exceptions
No exceptions for systems operating in regulated markets. Experimental deployments must remain isolated until registration is complete.
Review Cadence
Registration status is reviewed quarterly; any discrepancies trigger remediation within 15 business days.
References
- EU AI Act Articles 49-52 (Registration of high-risk AI systems)
- Internal documents: High-Risk Classification Checklist, Registration Dossier Template, Regulator Communication SOP