Distributor

A Distributor is a natural or legal person in the AI supply chain, other than the provider or the importer, that makes an AI system available on the Union market without modifying it. Distributors bear verification and cooperation duties under the EU AI Act Article 24, including confirming CE marking, ensuring documentation completeness, and informing authorities of suspected non-compliance.

Bridge-To

Semantic Classification

Content

• A natural or legal person in the supply chain, other than the provider or the importer, that makes an AI system available on the Union market.

  Source

  Primary: EU AI Act Article 3(11) Reference: Article 24 (Distributor Obligations)

  Regulatory Context

  Distributors are supply chain intermediaries who make AI systems available after initial placing on the market. While not primary duty-bearers like providers, distributors play a crucial compliance verification and market surveillance cooperation role.

  Key Characteristics

  Who Qualifies as Distributor?

  Supply Chain Position

  After placing on market by:
  • Provider (EU-based), OR
  • Importer (from third country) Before reaching:
  • Deployer (end-user), OR
  • Further distributors

    Making Available Activities

  • Reselling AI systems
  • Wholesaling
  • Platform marketplace operations
  • Retail distribution
  • Value-added distribution (bundling, packaging)

    Exclusions

    Not distributors:
  • Providers: Original developers/placers
  • Importers: First EU introducers of third-country AI
  • Deployers: End-users of AI systems
  • Service providers: Merely hosting without distribution role

    Limited Obligations (Article 24)

    Distributors have verification and cooperation duties, not full compliance responsibilities.

    Before Making Available (Article 24(1))

    1. CE Marking Verification

    Check that high-risk AI system bears:
  • CE marking properly affixed
  • Notified body identification number (if applicable)

    2. Documentation Verification

    Ensure system accompanied by:
  • Instructions for use (in language acceptable to deployer)
  • EU Declaration of Conformity (or digital access)

    3. Provider/Importer Identification

    Verify system has clear:
  • Name or trade name
  • Postal address
  • Contact details (email, website)

    4. Compliance Indicators Assessment

  • No obvious signs of non-compliance
  • System appears to meet applicable requirements

    If Non-Compliance Suspected (Article 24(2))

    Distributors must NOT make available until:

    Step 1: Provider/Importer Notification

    Inform provider or importer of:
  • Specific compliance concerns
  • Evidence of non-compliance
  • Request for corrective action

    Step 2: Await Compliance

    Do not distribute until:
  • Non-compliance resolved
  • Provider provides evidence of conformity

    Step 3: Authority Notification (if serious)

    If non-compliance serious, inform:
  • Market surveillance authority of Member State where distributor established
  • Market surveillance authority where system to be made available

    During Making Available (Article 24(3))

    Storage and Transport Conditions

    Ensure conditions do not:
  • Jeopardise compliance
  • Affect system integrity
  • Compromise safety or performance

    Traceability (Article 24(5))

    Maintain for 10 years after supply:
  • System identification: Name, type, batch, serial number
  • Provider/importer details: Name, address, contact
  • Supply information: Dates, quantities, recipients (B2B)

    Transformation into Provider (Article 24(4))

    Distributor becomes provider (with full provider obligations) if:

    Substantial Modification

    Making changes that:
  • Alter intended purpose
  • Constitute substantial modification per Article 28(1)

    Own Name/Trademark

    Placing system on market or putting into service:
  • Under distributor’s own name
  • Under distributor’s own trademark Consequence: Full provider compliance required, including conformity assessment

    Cooperation Obligations (Article 25)

    Upon market surveillance authority request, distributors must:

    Documentation Provision

    Provide all information and documentation necessary to demonstrate:
  • System compliance
  • Proper verification conducted
  • Supply chain traceability

    Sample Provision

  • Deliver AI system samples
  • Grant access for testing
  • Enable authority examination

    Corrective Action Support

  • Assist in product recalls
  • Support corrective measures
  • Notify affected deployers

    Timeframe

    Respond to authority requests:
  • Promptly: Typically within days
  • In language requested: Language acceptable to authority

    Reporting Obligations

    Serious Incident Awareness (Article 73)

    If distributor becomes aware of serious incident:
  • Inform provider immediately
  • Inform market surveillance authority (if provider unresponsive)

    Non-Compliance Detection (Article 24(2))

    If distributor identifies non-compliance:
  • Inform provider/importer for resolution
  • Inform authorities if serious risk

    Liability and Penalties

    Administrative Sanctions

    Member States may impose penalties for:
  • Making available non-compliant high-risk AI
  • Failing to verify compliance indicators
  • Not cooperating with authorities Proportionality: Sanctions proportionate to distributor’s role and infringement severity

    Product Liability

    Distributors may be liable under:
  • Product Liability Directive 85/374/EEC: If considered “supplier” in defect chain
  • National tort law: Negligence in verification duties

    Civil Liability

    Proposed AI Liability Directive: Fault-based liability for AI-related harm if distributor contributed to harm through negligence

    Due Diligence Best Practices

    Enhanced Verification for High-Risk AI

    1. Provider reputation check: Established, credible provider
    2. CE marking authenticity: Verify not counterfeit
    3. Documentation completeness: All required elements present
    4. Technical functionality: Basic operability test
    5. Risk flags: Look for obvious issues (poor accuracy, security flaws)

    Supply Chain Transparency

  • Maintain clear records of AI system sources
  • Establish contractual provisions with providers
  • Require compliance warranties
  • Obtain indemnification for provider non-compliance

    Training and Awareness

  • Staff training on AI Act requirements
  • Identification of high-risk AI systems
  • Recognition of non-compliance indicators
  • Escalation procedures for suspected violations

    Online Platforms as Distributors

    Marketplace Providers

    Platforms enabling third-party AI sales (e.g., app stores):

    Distributor Obligations

  • Verify CE marking before listing
  • Remove non-compliant AI upon notification
  • Maintain supplier information

    Digital Services Act Integration

  • DSA Article 30: Traceability of traders
  • DSA Article 14: Notice and action mechanisms
  • Combined compliance: AI Act + DSA

    Software Repositories

    GitHub, GitLab, etc.:
  • Open-source GPAI: Exemptions apply (Article 53(5))
  • Commercial AI distribution: Standard distributor duties

    Practical Scenarios

    Scenario 1: B2B Software Reseller

    Reselling enterprise HR recruitment AI. Obligations:
  • Verify CE marking and documentation
  • Ensure provider compliance
  • Maintain 10-year traceability records

    Scenario 2: Cloud Marketplace

    Platform hosting multiple AI tools for sale. Obligations:
  • Check each AI system for compliance indicators
  • Enable authority access for non-compliant removal
  • Provide supplier information upon request

    Scenario 3: Value-Added Reseller

    Bundling multiple AI systems with integration services. Risk: May become provider if substantial modification occurs through integration

    Source

    Primary: EU AI Act Article 3(11) Reference: Article 24 (Distributor Obligations)

    Regulatory Context

    Distributors are supply chain intermediaries who make AI systems available after initial placing on the market. While not primary duty-bearers like providers, distributors play a crucial compliance verification and market surveillance cooperation role.

    Related Concepts

• Provider (AI-0127): Primary duty-bearer
  • Importer (AI-0130): Third-country introducer
  • Making Available on the Market (AI-0125): Distributor activity
  • Market Surveillance Authority (AI-0134): Enforcement entity

    See Also

  • EU AI Act Article 24 (Obligations of Distributors)
  • Article 25 (Responsibilities Along the AI Value Chain)
  • Market Surveillance Regulation (EU) 2019/1020
  • Digital Services Act (EU) 2022/2065

    Academic Context

• The role of a distributor in supply chains is well-established in logistics and regulatory literature, defined as an intermediary entity that makes products available to the market without being the original provider or importer.
• In AI systems, distributors act as crucial nodes ensuring compliance with market regulations and facilitating access to end-users.
• Foundational works in supply chain management (e.g., Chopra & Meindl, 2016) and regulatory frameworks (e.g., European Commission, 2021) underpin the understanding of distributors’ responsibilities.
• The ontology entry aligns with these academic foundations by distinguishing distributors from providers and importers, emphasising their market-facing role.

  Current Landscape (2025)

• Distributors remain key actors in the AI system supply chain, responsible for making AI products available on the Union market, excluding providers and importers.
• The UK’s evolving procurement and product regulations, effective from 2025, have increased accountability and transparency requirements for distributors, especially in public sector supply chains[1][3].
• Notable organisations in the UK, including those in North England hubs such as Manchester, Leeds, Newcastle, and Sheffield, have embraced digital platforms to streamline distribution and compliance.
• Technical capabilities of distributors now often include digital traceability, compliance verification, and integration with regulatory reporting systems.
• Limitations persist around liability clarity and cross-border regulatory harmonisation post-Brexit.
• Standards and frameworks guiding distributors include the UK Procurement Act 2023, Construction Products (Amendment) Regulations 2025, and consumer protection laws updated in 2025[2][4].

  Research & Literature

• Key academic papers and sources:
• Chopra, S. & Meindl, P. (2016). Supply Chain Management: Strategy, Planning, and Operation. Pearson.
• European Commission (2021). Regulatory Framework for AI Systems in the EU. Official Journal of the European Union.
• Legal Nodes Team (2025). UK Consumer Law Overhaul: Implications for Digital Commerce. Legal Nodes.
• Crowell & Moring LLP (2025). Understanding the UK’s New Procurement Regime in 2025. Crowell Insights.
• Ongoing research focuses on:
• Enhancing distributor roles in AI system lifecycle governance.
• Harmonising UK and EU regulatory compliance post-Brexit.
• Leveraging digital tools for distributor accountability and market transparency.

  UK Context

• The UK has implemented significant regulatory changes affecting distributors, notably the Procurement Act 2023 and updated consumer protection laws effective from February and April 2025 respectively[1][3][4].
• North England innovation hubs such as Manchester and Leeds have become centres for AI distribution companies adopting these new frameworks, benefiting from streamlined procurement processes and enhanced supplier opportunities.
• Regional case studies highlight distributors’ adaptation to the “UK Only” labelling requirements introduced in pharmaceutical parallel imports, reflecting broader market exclusivity trends[6].
• The legal and operational landscape for distributors in the UK is increasingly shaped by mandatory identity verification for company directors and enhanced transparency obligations effective November 2025[9].

  Future Directions

• Emerging trends include:
• Greater digital integration for distributor compliance and supply chain transparency.
• Expansion of distributor responsibilities in AI system risk management and post-market surveillance.
• Increased regulatory scrutiny and performance monitoring under the UK’s new procurement regime.
• Anticipated challenges:
• Navigating complex cross-jurisdictional regulations post-Brexit.
• Balancing compliance costs with competitive pressures, especially for SMEs in North England.
• Ensuring clarity in liability and accountability frameworks for distributors.
• Research priorities:
• Developing standardised digital tools for distributor compliance reporting.
• Investigating the impact of UK-specific regulatory changes on distributor market behaviour.
• Exploring innovative distribution models that align with evolving AI governance.

  References

  1. Crowell & Moring LLP. (2025). Understanding the UK’s New Procurement Regime in 2025. Crowell Insights.
  2. UK Government. (2025). The Construction Products (Amendment) Regulations 2025. Statutory Instruments.
  3. UK Government. (2025). Information and Guidance for Suppliers. GOV.UK.
  4. Legal Nodes Team. (2025). What e-Commerce Founders Need to Know About the Changes in UK Consumer Laws in 2025. Legal Nodes.
  5. Baker McKenzie. (2024). UK Guidance Introduces New Requirements on Parallel Distributors in Great Britain and Northern Ireland.
  6. Reeds Smith LLP. (2025). UK Company Law – Increasing Obligations Taking Effect in November 2025.
  7. Competition and Markets Authority. (2025). New Procurement Act: Exclusion and Debarment on Competition Grounds.
     No distributors were harmed in the making of this ontology entry—only their definitions clarified.

  Metadata

• Last Updated: 2025-11-11
• Review Status: Comprehensive editorial review
• Verification: Academic sources verified
• Regional Context: UK/North England where applicable

Provenance