Skip to content

Regulation Tracker / EU AI Act / Chapter III · Section 4

Article 33
Subsidiaries of notified bodies and subcontracting

Chapter III — Classification rules for high-risk AI systems, Section 4 — Notifying authorities. 4 distinct duties, powers or definitions are coded from this article, applying from 2025-08-02.

official text: EUR-Lex (consolidated 27 Jul 2026) · text © European Union (Decision 2011/833/EU) · coding CC BY 4.0 · data: obligations.json · Hugging Face · GitHub

The text

1. Where a notified body subcontracts specific tasks connected with the conformity assessment or has recourse to a subsidiary, it shall ensure that the subcontractor or the subsidiary meets the requirements laid down in Article 31, and shall inform the notifying authority accordingly.

2. Notified bodies shall take full responsibility for the tasks performed by any subcontractors or subsidiaries.

3. Activities may be subcontracted or carried out by a subsidiary only with the agreement of the provider. Notified bodies shall make a list of their subsidiaries publicly available.

4. The relevant documents concerning the assessment of the qualifications of the subcontractor or the subsidiary and the work carried out by them under this Regulation shall be kept at the disposal of the notifying authority for a period of five years from the termination date of the subcontracting.

What it requires, coded

SafeLegalAI's reading of each duty in this article: who, what, from when, under which fine tier, and whether it reaches a firm, chambers, court or legal-AI vendor. Descriptive, not advice; the quoted words are the Regulation's.

  1. Art. 33(1)RequirementHigh-risk

    A notified body using a subcontractor or subsidiary must ensure it meets Article 31 requirements and inform the notifying authority.

    "Where a notified body subcontracts specific tasks connected with the conformity assessment or has recourse to a subsidiary, it shall ensure that the subcontractor or the subsidiary meets the requirements laid down in Article 31, and shall inform the notifying authority accordingly."
    Who
    Notified body
    From
    (Art. 113(b))
    Fine tier
    Art. 99(4)
    Legal practice
    Institutional — Notified-body infrastructure; indirect relevance to legal-AI vendors seeking or relying on high-risk conformity assessment.
    See
    Art. 31

  2. Art. 33(2)RequirementHigh-risk

    Notified bodies remain fully responsible for tasks performed by their subcontractors or subsidiaries.

    "Notified bodies shall take full responsibility for the tasks performed by any subcontractors or subsidiaries."
    Who
    Notified body
    From
    (Art. 113(b))
    Fine tier
    Art. 99(4)
    Legal practice
    Institutional — Notified-body infrastructure; indirect relevance to legal-AI vendors seeking or relying on high-risk conformity assessment.

  3. Art. 33(3)Information to personsHigh-risk

    Subcontracted or subsidiary activities require provider agreement, and notified bodies must publish a list of subsidiaries.

    "Activities may be subcontracted or carried out by a subsidiary only with the agreement of the provider. Notified bodies shall make a list of their subsidiaries publicly available."
    Who
    Notified body
    From
    (Art. 113(b))
    Fine tier
    Art. 99(4)
    Legal practice
    Institutional — Notified-body infrastructure; indirect relevance to legal-AI vendors seeking or relying on high-risk conformity assessment.

  4. Art. 33(4)Record keepingHigh-risk

    Notified bodies must keep subcontractor or subsidiary qualification and work documents available to the notifying authority for five years after subcontracting ends.

    "The relevant documents concerning the assessment of the qualifications of the subcontractor or the subsidiary and the work carried out by them under this Regulation shall be kept at the disposal of the notifying authority for a period of five years from the termination date of the subcontracting."
    Who
    Notified body
    From
    (Art. 113(b))
    Fine tier
    Art. 99(4)
    Legal practice
    Institutional — Notified-body infrastructure; indirect relevance to legal-AI vendors seeking or relying on high-risk conformity assessment.

Cite

Regulation (EU) 2024/1689, Article 33 (Subsidiaries of notified bodies and subcontracting), as amended by Regulation (EU) 2026/1744, consolidated text of 27 July 2026, https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_33 — text © European Union; only the Official Journal is authentic. Coding: SafeLegalAI (published by Cognesio LLP), "EU AI Act, structured", safelegalai.com/regulation/eu-ai-act/article-33, accessed 2026-09-08, CC BY 4.0.