Providers of General-Purpose AI Models — What We Know About Who Will Qualify

What this rule actually says

The EU is defining which AI companies count as "general-purpose AI model providers" — basically, who has to follow extra compliance rules. This applies to anyone building foundational AI models (like large language models) that can be used for many different tasks, not just one specific purpose. If building a medical scribe or chatbot using an existing model like GPT or Claude, this probably doesn't apply. If training a custom large language model from scratch to sell to others, it likely does.

Who it applies to

• If you're in the EU or selling to EU customers: These rules apply. Non-EU founders only need to care if they have EU users.
• If you built your own large language model or foundation model from scratch: You're likely a GPAI provider and this applies.
• If you're using OpenAI's, Anthropic's, or similar off-the-shelf models: You're probably not the GPAI provider — they are. You may have separate obligations as an "AI system provider," but not under these GPAI rules.
• If your AI system has one narrow purpose (medical scribes, hiring assistants, support chatbots): Even if you trained it yourself, narrow-purpose models often fall outside GPAI scope.
• If you're collecting user data to improve your model: This doesn't automatically trigger GPAI obligations, but it may create separate data governance duties.

What founders need to do

1. Audit your model's scope (2–3 hours): Document whether your AI model can serve multiple, unpredictable use cases or is purpose-built. Write one paragraph describing what it does.

1. Check the AI Office guidelines (1 day): Visit the EU AI Office website to review the April 2025 draft guidelines on GPAI scope. Confirm whether your model truly qualifies.

1. If you qualify as a GPAI provider, document your training data and model card (3–5 days): Prepare summaries of training data sources, model capabilities, and known limitations. This will likely be required for compliance.

1. Implement a compliance checklist (ongoing): The guidelines outline seven main compliance topics. Create a simple spreadsheet tracking which ones apply to you and assign ownership.

1. Consult an EU AI specialist if unsure (1–2 days consultation): If your model sits in a gray area, a 30-minute legal call costs far less than retroactive fixes.

Bottom line

If you're using someone else's model to build a specialized tool (medical scribe, chatbot, hiring assistant), monitor the guidelines but don't panic; if you trained your own foundation model for broad use, act now and verify your GPAI status.