NIST AI RMF, MapMAP 2.2

As a developer, make available to deployers, on request or at initial sale and on material updates, a statement of the system's intended uses and known or reasonably foreseeable risks, with documentation of training data, evaluation, data governance, intended benefits, and recommendations for use and monitoring

If you are the provider of a high-risk AI system, draw up its technical documentation before you place the system on the market or put it into service, and keep it up to date.

Draw up the technical documentation so that it demonstrates the system complies with the Chapter III, Section 2 requirements and gives national competent authorities and notified bodies the information they need, in a clear and comprehensive form, to assess that compliance; include at least the elements set out in Annex IV.

Supply the system with instructions for use in an appropriate digital format or otherwise, containing concise, complete, correct and clear information that is relevant, accessible and comprehensible to deployers.

Put in the instructions at least: your identity and contact details, and those of your authorised representative where applicable; the system's characteristics, capabilities and limitations of performance (Article 13(3), point (b)); the changes to the system and its performance that you pre-determined at the initial conformity assessment; the human oversight measures of Article 14, including the technical measures that help deployers interpret the output; the computational and hardware resources needed, the expected lifetime and the necessary maintenance and care measures, including software updates; and, where relevant, a description of the mechanisms that let deployers properly collect, store and interpret the logs in accordance with Article 12.

Provide the system to the deployer so that the natural persons assigned to oversee it can understand its capacities and limitations and duly monitor its operation, including detecting and addressing anomalies, dysfunctions and unexpected performance.

If you test with deployers or prospective deployers, inform them of all aspects of the testing relevant to their decision to participate, give them the instructions for use of the system referred to in Article 13, and conclude an agreement specifying your roles and responsibilities to ensure compliance with the provisions for testing in real world conditions and with other applicable Union and national law (Article 60(4), point (h)).

If you are a vendor of an automated employment decision system seeking approval, give the independent auditor or the department documentation of the system's design and development, its intended purpose and outputs, and an analysis of its accuracy, reliability, validity, and error rates.

Before or when you deploy a new or substantially modified frontier model, publish on your website a transparency report giving your website, a way for a person to reach you, the model's release date, its supported languages and output modalities, its intended uses, and any generally applicable restrictions on its use.

If you are a frontier developer, publish a transparency report before or concurrently with deploying a new or substantially modified frontier model; a large frontier developer adds summaries of its catastrophic risk assessments.

Before or at the same time as you deploy a new or substantially modified frontier model, publish on your website a transparency report giving your website, a way for a person to contact you, the model's release date, its supported languages and output modalities, its intended uses, and any general restrictions or conditions on its use; publishing this in a model card or system card satisfies the duty.

If you develop a sovereign or national large foundation AI model, take organizational and technical measures to secure it, define operating rules covering restrictions, conditions of use, updates, and decommissioning, and maintain technical documentation of its key parameters and limitations sufficient to assess the safety of its application.

If you develop automated employment-related decision technology, give a deployer the information the deployer needs to meet its own notice duties, unless your technology was not advertised or configured for that use.