Which of the following describes conformity assessments in High-Risk AI under the EU AI Act?

• A. A rigorous evaluation to verify compliance with specified requirements
• B. An informal developer self-check
• C. A marketing compliance statement
• D. A basic security scan

Answer: (A)

Conformity assessments are formal, independent evaluations that demonstrate a high-risk AI system meets the specific requirements set by the EU AI Act before it can be marketed. In this context, the assessment is rigorous and typically involves thorough documentation, testing, and review by an authorized body to verify compliance with criteria covering safety, reliability, data governance, traceability, transparency, human oversight, and cybersecurity. This level of scrutiny distinguishes it from a developer’s informal self-check or a marketing claim, and from a basic security scan, which do not verify the full range of required standards. The rigorous evaluation is what provides objective assurance that the system meets the mandated safeguards for high-risk AI.