Notified Bodies

The third parties that will certify high-risk AI in the EU, and their counterparts elsewhere.

The EU's notified body database listed only a small number of AI Act bodies in mid-2026, with most designations pending. At the August 2025 deadline, most countries surveyed had not named their AI authorities; China certified its first device-to-cloud AI security product in September 2026.

EU AI authority designations, Sep 2025: Member states required to designate 27; Countries surveyed 18; With a new AI authority 2. Cullen International survey EU AI AUTHORITY DESIGNATIONS, SEP 2025 Member states required to designate 27 Countries surveyed 18 With a new AI authority 2 COUNTRIES CULLEN INTERNATIONAL SURVEY
Months to Annex III demand
14
Sandbox deadline
Aug 2, 2027
Annex I notified-body date
Aug 2, 2028
China AI security certificates, first
1

Evidence

Few bodies are ready; the Omnibus moved some oversight to the AI Office

Developments: notified Bodies
DateDevelopmentCountryWhat happenedSource
Sep 30, 2025Cullen designation surveyEUMost of 18 countries had no authority; Poland and Spain created new bodiesSource
Jun 2026Notified body database statusEUA small number of AI Act bodies listed, most pendingSource
Jul 27, 2026Omnibus shifts competenceEUAI Office takes general-purpose-based systems from the same provider and AI in very large platformsSource
Sep 22, 2026First device-to-cloud AI security certificateChinaHuawei HarmonyOS certified, covering agent permission controlSource

Rules

Member states notify bodies; China relies on state evaluation centers

Key rules and standards: notified bodies
RuleJurisdictionWhat it requiresStatus
AI Act Articles 28 to 39EUMember states notify conformity assessment bodiesNeeded by Dec 2, 2027
AI Act Article 70EUEach state names notifying and market surveillance authoritiesDue Aug 2, 2025
MDR and IVDR with AI Act Annex IEUDevice notified bodies assess AI in devicesAug 2, 2028
CAC filing and sector testingChinaFiling plus testing for sector agentsEffective Jul 15, 2026

Status colors: green in force, blue voluntary standard or framework, amber adopted and phasing in, gray draft or pending, red withdrawn.

Record

Page Record

Datasets
ai_compliance_evidence.csv (4 rows)
Key sources
Cullen designation survey
Notified body database status
Omnibus shifts competence
First device-to-cloud AI security certificate
Last verified
October 2026