Governance & evidence
GPAI Systemic Risk
General-purpose AI (GPAI) providers must document their models, publish a copyright and training-data policy, and (for the most compute-intensive models) assess and mitigate systemic risks. The GPAI page lets you record per-model details and run a systemic-risk assessment for models above the regulatory threshold.
Transcript
GPAI providers must maintain Annex 11 technical documentation, downstream information, a copyright policy and a public training data summary, plus systemic-risk duties above ten to the twenty-five FLOPs.
Per-model fields like copyright policy URL, energy consumption FLOPs and training data description now render in the GPAI pack as a live table per model.
Above ten to the twenty-five FLOPs or high-impact capability triggers systemic-risk duties: model evaluation including adversarial testing, risk assessment and mitigation, and incident reporting to the AI Office.
Record a systemic-risk assessment per GPAI model: FLOPs, systemic flag, evaluation performed, risk and mitigation text. This satisfies ai act fifty-five.
Regenerate the GPAI pack and verify the per-model table and systemic-risk table now show real data instead of Not provided.
Why this is required
A GPAI model card that never records its compute estimate cannot show whether the systemic-risk threshold is met, which is exactly what regulators check first.
Model evaluation, systemic-risk assessment and incident reporting need their own dated records. A single paragraph that says 'required if systemic risk' is not evidence.
What EuroCompliant does
Each GPAI model stores a copyright-policy URL, compute estimate, training-data description and lawful basis. These feed the generated documentation pack as a per-model table.
A systemic-risk assessment records whether the model exceeds the compute threshold, whether evaluation was performed, and what risk and mitigation measures are in place.
When at least one assessment has evaluation performed, the Article 55 obligation is satisfied.
Walking through it
Mark a system as GPAI
Toggle is_gpai and fill copyright_policy_url, energy_consumption_flops and training_data_description. Those fields appear directly in the GPAI pack table.
Open /systems →Record a systemic-risk assessment
In GPAI, pick the GPAI system, set FLOPs, toggle systemic risk and evaluation performed, and add risk/mitigation text. This satisfies ai_act_55.
Open /gpai →Regenerate the GPAI pack and verify
Generate eu_gpai_documentation again. The per-model table and the systemic-risk assessment table should now show real data instead of 'Not provided'.
Open /compliance-docs →The law
Obligations for providers of GPAI models
Annex XI technical documentation, Annex XII downstream information, Art.53(1)(c) copyright/TDM policy, Art.53(1)(d) public training-data summary.
Obligations for GPAI models with systemic risk
For high-impact / >10^25 FLOPs models: model evaluation including adversarial testing, systemic-risk assessment & mitigation, serious-incident tracking to the AI Office, adequate cybersecurity.
Frequently asked
When is a model systemic-risk?
When its capabilities are high-impact or its training compute exceeds 10^25 FLOPs. The doc pack shows a heuristic badge (>1e25) per model; the formal determination is recorded in the GPAI systemic-risk assessment row (is_systemic_risk).
Does the GPAI pack still contain generic guidance?
Where no per-model data exists it shows 'Not provided, add …' rather than filler. Once the fields and an assessment are present, the generic info-boxes are replaced by real table rows.
Related guides
Documentation & evidence generation
Generating Annex IV technical documentation, declarations of conformity and framework records from data you have already entered.
Automated document generation and cryptographic signing
Generate regulator-ready documents from your own data, then download a signed PDF an auditor can verify independently.
Compliance checklists
How Articles 9 to 15 become tracked, owned, evidenced work rather than a document nobody reads.
Try it on your own systems
Everything in this guide runs in the live product. Start a free trial and follow along with your own data.
Start free trial