Build a board-ready risk heatmap in minutes — free, no account required

Open tool

Article 33

CurrentFrom 2 Aug 2025

Govern Subsidiaries and Subcontractors Used for AI Conformity Assessment

Applies to Notified Body.

Actors
Notified Body
Themes
Third Parties & Supply ChainRisk & Assurance

Tracker Guidance

Retain full responsibility for subcontracted or subsidiary conformity-assessment work and ensure the Article 31 requirements continue to be met.

Official text

Article 33Official source
1. Where a notified body subcontracts specific tasks connected with the conformity assessment or has recourse to a subsidiary, it shall ensure that the subcontractor or the subsidiary meets the requirements laid down in Article 31, and shall inform the notifying authority accordingly. 2. Notified bodies shall take full responsibility for the tasks performed by any subcontractors or subsidiaries. 3. Activities may be subcontracted or carried out by a subsidiary only with the agreement of the provider. Notified bodies shall make a list of their subsidiaries publicly available. 4. The relevant documents concerning the assessment of the qualifications of the subcontractor or the subsidiary and the work carried out by them under this Regulation shall be kept at the disposal of the notifying authority for a period of five years from the termination date of the subcontracting.

Sub-obligations

These are independently assessable parts of the parent requirement.

  1. Article 33(1)-(2)

    Current

    Verify Subcontractor and Subsidiary Compliance and Notify the Notifying Authority

    Tracker Guidance

    Ensure each subcontractor or subsidiary performing conformity-assessment tasks satisfies the Article 31 requirements, inform the notifying authority and retain full responsibility for the work.

    Official text

    Article 33(1)-(2)Official source
    1. Where a notified body subcontracts specific tasks connected with the conformity assessment or has recourse to a subsidiary, it shall ensure that the subcontractor or the subsidiary meets the requirements laid down in Article 31, and shall inform the notifying authority accordingly. 2. Notified bodies shall take full responsibility for the tasks performed by any subcontractors or subsidiaries.
  2. Article 33(3)

    Current

    Obtain Provider Agreement for Subcontracted Assessment Work and Publish the Subsidiary List

    Tracker Guidance

    Use subcontractors or subsidiaries only with the provider's agreement and make the notified body's list of subsidiaries publicly available.

    Official text

    Article 33(3)Official source
    3. Activities may be subcontracted or carried out by a subsidiary only with the agreement of the provider. Notified bodies shall make a list of their subsidiaries publicly available.
  3. Article 33(4)

    Current

    Retain Subcontractor and Subsidiary Qualification Records for Five Years

    Tracker Guidance

    Keep documents concerning subcontractor/subsidiary qualifications and work performed available to the notifying authority for five years after the subcontracting arrangement ends.

    Official text

    Article 33(4)Official source
    4. The relevant documents concerning the assessment of the qualifications of the subcontractor or the subsidiary and the work carried out by them under this Regulation shall be kept at the disposal of the notifying authority for a period of five years from the termination date of the subcontracting.

Recognized by G2 as a Leader

Trusted by customers and rated highly across all categories

Article 33: Govern Subsidiaries and Subcontractors Used for AI Conformity Assessment | EU AI Act Library