Intended Purpose

Definition

Intended purpose is defined in Article 3(12) of the EU AI Act as:

"the use for which an AI system is intended by the provider, including the specific context and conditions of use, as specified in the information supplied by the provider in the instructions for use, promotional material or statements and in the technical documentation"

Why intended purpose determines risk classification

The EU AI Act classifies AI systems based on what they are designed and marketed to do — not how they happen to be used in any particular deployment. A provider that sells a CV-parsing tool "for internal HR process automation" while knowing it is used for automated candidate screening cannot avoid Annex III classification by narrowing the documented intended purpose.

Article 9 makes this explicit: providers must assess risk based on intended purpose and reasonably foreseeable misuse.

Intended purpose in Annex IV

Section 1 of the Annex IV technical documentation requires the provider to state the intended purpose in detail, including:

• The natural language description of what the system does
• The specific context, domain, and environment of deployment
• The category of users (deployers and, where applicable, affected persons)
• The hardware and software environment the system requires
• The version of any software or firmware the system relies on

The problem with vague intended purpose statements

Many providers write generic intended purpose statements to avoid classification as high-risk. This strategy backfires:

1. Regulatory risk: If supervisory authorities find the system is being used in a way consistent with Annex III, they can reclassify it regardless of the stated purpose
2. Commercial risk: Enterprise buyers in regulated sectors require a specific, detailed intended purpose statement. Vague statements signal compliance immaturity and can block procurement
3. Liability risk: If harm occurs in a deployment that falls within the system's capabilities but outside the stated intended purpose, providers face complex liability questions

Intended purpose vs. reasonably foreseeable misuse

Article 9 requires providers to document not just intended purpose but also reasonably foreseeable misuse — uses that are not intended but are predictable given the system's capabilities. Both must be covered in the risk management documentation.

→ See High-Risk AI System for classification guidance or run the Readiness Check.