unified
UC-AI-15 — Fulfill general-purpose AI model provider obligations
Where the organization provides general-purpose AI models, maintain model technical documentation and information for downstream providers, implement a policy to comply with applicable copyright law including reservation-of-rights opt-outs, and publish a sufficiently detailed summary of training content. For models designated as posing systemic risk, additionally perform state-of-the-art model evaluations including adversarial testing, assess and mitigate systemic risks, track and report serious incidents to the competent authority, and ensure adequate cybersecurity protection for the model and its infrastructure.
Record JSON · Open in map · Data retrieval guide
Catalog revision: 24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028. A connection does not establish full coverage.
Attributes
- domain
- AI Governance
- type
- preventive
- category
- administrative
Details
- unified_id
- UC-AI-15
- title
- Fulfill general-purpose AI model provider obligations
- statement
- Where the organization provides general-purpose AI models, maintain model technical documentation and information for downstream providers, implement a policy to comply with applicable copyright law including reservation-of-rights opt-outs, and publish a sufficiently detailed summary of training content. For models designated as posing systemic risk, additionally perform state-of-the-art model evaluations including adversarial testing, assess and mitigate systemic risks, track and report serious incidents to the competent authority, and ensure adequate cybersecurity protection for the model and its infrastructure.
- domain
- AI Governance
- control_type
- preventive
- control_category
- administrative
- members
- framework
- eu-ai-act
- control_id
- AIA-Art53
- coverage
- full
- relationship
- superset_of
- framework
- eu-ai-act
- control_id
- AIA-Art55
- coverage
- full
- relationship
- superset_of
- guidance
Source
No record-specific source URL is provided.
Connections
- AI Governance & Risk/Impact Assessment oversees UC-AI-15 — Fulfill general-purpose AI model provider obligations
- GPAI Model Provider Compliance Cycle operates UC-AI-15 — Fulfill general-purpose AI model provider obligations
- UC-AI-15 — Fulfill general-purpose AI model provider obligations mitigates AI safety failures causing physical or psychological harm
- strength
- related
- rationale
- Assessing/mitigating systemic risks and reporting serious incidents reduces large-scale harm from powerful models.
- UC-AI-15 — Fulfill general-purpose AI model provider obligations maps_to AIA-Art53 — Obligations for providers of general-purpose AI (GPAI) models
- framework
- eu-ai-act
- control_id
- AIA-Art53
- coverage
- full
- relationship
- superset_of
- delta
- Not provided
- source_version
- Regulation (EU) 2024/1689
- provenance
- mapper
- coworkcanvas-compliance-graph
- reviewDate
- 2026-09-07
- direction
- canonical_to_source
- defaultConfidence
- medium
- defaultStatus
- active
- note
- Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.
- UC-AI-15 — Fulfill general-purpose AI model provider obligations mitigates Adversarial attacks, data poisoning and prompt injection
- strength
- primary
- rationale
- Mandated state-of-the-art adversarial testing plus model and infrastructure cybersecurity directly defend against adversarial attacks and model extraction.
- UC-AI-15 — Fulfill general-purpose AI model provider obligations mitigates GPAI transparency, systemic-risk and synthetic-content obligations
- strength
- primary
- rationale
- Directly discharges GPAI transparency/copyright/training-summary duties and, for systemic models, the red-teaming, incident reporting and cybersecurity the risk says are missing.
- UC-AI-15 — Fulfill general-purpose AI model provider obligations maps_to AIA-Art55 — Obligations for GPAI models with systemic risk
- framework
- eu-ai-act
- control_id
- AIA-Art55
- coverage
- full
- relationship
- superset_of
- delta
- Not provided
- source_version
- Regulation (EU) 2024/1689
- provenance
- mapper
- coworkcanvas-compliance-graph
- reviewDate
- 2026-09-07
- direction
- canonical_to_source
- defaultConfidence
- medium
- defaultStatus
- active
- note
- Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.
- UC-AI-15 — Fulfill general-purpose AI model provider obligations mitigates Lack of AI explainability, documentation and disclosure
- strength
- related
- rationale
- Model technical documentation and downstream information supply model cards/datasheets for GPAI.