Where: /app/euaiact/eu-database

The stop rule

Article 26(8) obliges a deployer not to use a high-risk system whose provider registration cannot be confirmed. The register surfaces that as a stop, not a warning.

Test that the stop is a stop. A red banner that still lets the journey proceed is not a control. If use continues with an unconfirmed provider entry, that is a finding.

Provider-side registration

Where the organisation is itself a provider, Article 49 registration obligations apply and should appear against those systems. Where it is not a provider, the register should say so plainly rather than showing an empty table that reads like a gap.

Deployer registration

Where deployer registration is conditional — for example on being a public authority — the page should state the condition rather than asserting an obligation that may not bind.