Conformity Assessment & CE Marking for AI: A Complete Guide
High-risk AI systems need conformity assessment before market placement. Learn the difference between self-assessment and third-party evaluation, and how to prepare for CE marking.
What Is Conformity Assessment?
Before a high-risk AI system can be placed on the EU market, it must undergo a conformity assessment—a structured evaluation that verifies the system meets all requirements set out in the AI Act. This is the gateway to the CE marking, which signals compliance and allows market access across all EU member states.
Two Routes to Conformity
Route 1: Internal Control (Self-Assessment) — Annex VI
Most high-risk AI systems listed in Annex III can use the internal control procedure. This means the provider conducts the conformity assessment themselves, without involving a third-party body. However, providers must verify compliance with all requirements under Articles 8-15, establish and maintain a Quality Management System (QMS) under Article 17, prepare complete technical documentation per Annex IV before the system enters the market, ensure the system is designed to enable automatic logging of events (Article 12), and conduct thorough testing using appropriate metrics and probabilistic thresholds.
Route 2: Third-Party Assessment (Notified Body) — Annex VII
For AI systems used in biometric identification and categorization of natural persons, a third-party conformity assessment by a Notified Body is mandatory. Member States are currently in the process of designating Notified Bodies. Organizations planning to deploy biometric AI should begin identifying potential Notified Bodies early, as capacity constraints are expected during the initial rollout period.
The Quality Management System (Article 17)
Regardless of which conformity route applies, every provider of a high-risk AI system must implement a QMS covering compliance strategy with regulatory requirements, design and development process documentation, post-market monitoring procedures, data management policies including data collection, annotation, and storage, risk management integration throughout the AI lifecycle, corrective and preventive action processes, and accountability and resource allocation for AI governance.
Technical Documentation (Annex IV)
The technical documentation must be prepared before the system is placed on the market and kept up to date throughout its lifecycle. Key contents include general description of the AI system and its intended purpose, detailed description of system elements and development process, information about training, validation, and testing data, description of the risk management system and measures taken, pre-market testing and validation results with metrics, description of human oversight measures, and accuracy, robustness, and cybersecurity specifications.
CE Marking: What It Means
After a successful conformity assessment, the provider affixes the CE marking to the AI system (or its documentation if physical marking is impractical). The CE marking indicates that the system has been assessed against all applicable AI Act requirements, it meets the essential requirements for high-risk AI systems, and the provider takes full responsibility for ongoing compliance.
Post-Market Obligations
Conformity assessment is not a one-time event. Providers have ongoing obligations under Article 72 for post-market monitoring, including continuously monitoring system performance in real-world conditions, reporting serious incidents to national authorities within 15 days, implementing corrective actions when non-conformities are identified, and updating technical documentation when significant changes occur.
Preparing for Your Assessment
Organizations should begin preparing now. Start by inventorying all AI systems, classifying them under the AI Act's risk framework, and identifying which conformity assessment route applies. Building the technical documentation and QMS infrastructure takes time—and August 2, 2026 is closer than it appears.
Need guidance on conformity assessment? Browse our directory to find consultants specializing in AI Act conformity procedures.