EU AI Act Art. 53 — Obligations for providers of general-purpose AI models
Article 53 is the baseline rulebook for all general-purpose AI model providers: technical documentation, information for downstream developers, a copyright policy, and a published summary of training content.
At a glance
What this article requires
- All GPAI providers must draw up technical documentation (Annex XI) and keep it current.
- They must provide downstream providers with information on capabilities and limitations (Annex XII).
- They must put in place a copyright policy that respects EU copyright law, including rights reservations.
- They must publish a sufficiently detailed summary of the training content using the AI Office's template.
- Open-source GPAI models are exempt from the documentation duties unless they present systemic risk.
Scope
Who this applies to
Providers of general-purpose AI models — the base models, not the applications built on them. Downstream providers rely on the documentation to comply for their own systems.
Obligations
What you must actually do
Document the model
Maintain Annex XI technical documentation covering architecture, training data, compute, testing, and known limitations.
Hand information downstream
Give developers building on your model the capability and limitation information (Annex XII) they need for their own compliance.
Get the copyright policy right
Respect opt-outs and rights reservations (e.g. under the DSM Directive) and be able to show the policy.
Publish the training summary
Provide a sufficiently detailed summary of training content on the AI Office's template.
Action plan
Practical first steps
- 1
Draft the Annex XI and XII documents before the model ships to developers.
- 2
Implement a training-data governance process that can answer 'what was trained on' with evidence.
- 3
Set a review cadence — the GPAI obligations applied from 2 August 2025.
Penalty exposure
Up to €15 million or 3% of global annual turnover for GPAI documentation failures, with the systemic-risk tier for models that present systemic risk.
FAQ
Questions about Art. 53
I build an app on GPT-4 — do Article 53 duties fall on me?
The provider of the base model carries the Art. 53 duties. You, as a downstream provider, rely on their Annex XII information and carry your own duties under the high-risk or transparency chapters as applicable.
Are open-source models exempt?
Yes — the exemption covers the technical documentation, downstream information, and copyright-policy duties (Art. 53(1)(a)–(c)) unless the model presents systemic risk. The training-content summary (Art. 53(1)(d)) still applies to open-source models.
Sources
Citations & further reading
Related
More article explainers
Wondering which articles apply to your AI?
Describe your system in the free Risk Scanner and get a preliminary risk read with the obligations that likely apply — in seconds.
Check my use casePreliminary EU AI Act clarity summary. Not legal advice.