Annex XII: Transparency Information for Providers and Users of GPAI Models

GPAI model providers must supply downstream integrators with information covering:

1. Model capabilities and limitations — what the model can and cannot do, performance ranges, known failure modes 2. Intended and reasonably foreseeable uses — purpose, recommended applications, and foreseeable misuse scenarios 3. Integration and use instructions — how to integrate the model, input/output specifications, operational constraints 4. Risk information — known risks, biases, safety concerns, and limitations relevant to downstream risk management 5. Computational resource requirements — hardware, inference compute, latency profiles 6. Training information relevant to downstream compliance — data characteristics, training methodology summaries

The level of detail must be sufficient for downstream providers to meet their Chapter III obligations (risk management, data governance, transparency, accuracy/robustness). Always check the exact list on EUR-Lex Annex XII.

| | Annex XI (Technical Documentation) | Annex XII (Transparency Information) | |---|---|---| | Required by | Art. 53(1)(a) | Art. 53(1)(b) | | Audience | AI Office, regulators | Downstream providers | | Purpose | Prove the GPAI model itself is documented | Enable downstream compliance | | Confidentiality | May contain trade secrets | Must be practically usable by integrators |

Annex XI is the upstream regulator-facing dossier; Annex XII is the downstream integrator-facing information package. Both are mandatory for all GPAI providers.

• Article 53(1)(b) — The direct legal hook requiring Annex XII information.
• Article 53(1)(c) — Copyright policy information (complementary to Annex XII).
• Annex XI — Technical documentation (the regulator-facing counterpart).
• Annex IV — High-risk tech doc that downstream providers populate using Annex XII info.
• Article 9 — Downstream risk management depends on Annex XII risk information.
• Article 13 — Downstream transparency to deployers requires upstream Annex XII data.
• Article 56 — Codes of practice may specify how to provide Annex XII information.

The recitals in the same consolidated AI Act on EUR-Lex contextualise the value chain transparency rationale, the enabling role of GPAI information for downstream compliance, and the balance with trade secret protection. Use the official preamble on EUR-Lex.