Art. 49 EU AI Act: registration in the EU database for providers

Updated: June 2026

Introduction: public accountability through registration

Article 49 of the EU AI Act establishes the EU database for high-risk AI systems, a public-facing transparencytransparencyOpenness about the fact that AI is used and how it operates in general: disclosures, documentation, notices. Pairs with explainability, which addresses individual outcomes.Open full entry → instrument that allows regulators, researchers, and the public to see which high-risk AI systems are deployed in the EU market. Registration is primarily a providerproviderThe actor who develops an AI system (or has it developed) and places it on the market or into service under its own name — carrying manufacturer-style duties: design controls, documentation, conformity.Open full entry → obligation, but deployers have related verification and, in some cases, direct registration duties.

What is the EU database?

The EU AI database is a centrally managed, publicly accessible registry of high-risk AI systems. It is maintained by the EU AI Office and includes:

• Provider identification and contact information
• The AI systemAI systemA machine-based system that, for explicit or implicit objectives, infers from input how to generate outputs — predictions, content, recommendations or decisions — that can influence physical or virtual environments. The OECD-style definition followed by the EU AI Act.Open full entry →'s name and version
• The Annex IIIAnnex IIIThe EU AI Act's list of high-risk use-case areas — biometrics, critical infrastructure, education, employment, essential services, law enforcement, migration, justice.Open full entry → classification category
• Intended purpose and deployment context
• Countries of deployment within the EU
• Link to the EU declaration of conformity
• Post-market monitoringpost-market monitoringProvider-side duty to systematically collect and act on experience from systems in use — the product-regulation half of continuous monitoring.Open full entry → plan summary

The database has a public section (accessible to all) and a restricted section (accessible to market surveillance authorities only, containing confidential technical information).

Provider registration obligations under Art. 49

Art. 49.1 requires providers to register their high-risk AI systems before placing them on the EU market. Key requirements:

• Registration must occur prior to market placement, not after
• Each new version of a high-risk AI system requires a new or updated registration
• Providers outside the EU must designate an EU authorised representative to handle registration
• Registration generates a unique system identifier that must appear on the EU declaration of conformity

Deployer verification and due diligence

For deployers, Art. 49 creates an important due diligence obligation: verify that your high-risk AI provider has fulfilled registration obligations. Steps:

1. Request the EU database registration number from your provider
2. Cross-check the number against the public EU database once operational
3. If the provider cannot provide a registration number, this is a red flag requiring further investigation before deployment
4. Document your verification process

Compliance checklist

1. Have you requested EU database registration numbers from all high-risk AI providers?
2. Have you verified these numbers against the public database?
3. If you are a deployerdeployerAn organization using an AI system under its own authority in its activities — carrying operator duties: use per instructions, oversight, input relevance, monitoring, notices.Open full entry → with provider-equivalent obligations (provider outside EU): have you registered?
4. Are registration numbers retained in your AI system inventory?