Do ai governance rules apply to a cloud provider?
Short answer
Yes when the provider offers a model or an AI service of its own. Hosting someone else's system is read differently from providing it.
Read against the registers 2026-08-26.
Who the role is
Whoever runs infrastructure, hosting or a platform for someone else's data and traffic.
What the topic covers
The EU writes one binding act for AI systems. The United States works through a voluntary framework and existing consumer protection powers. China regulates the service that reaches the public, with filing duties before launch.
The rows behind the answer
European Union
- AI Act — Regulation (EU) 2024/1689: Classifies AI systems by risk and sets duties per class, with transparency duties for general purpose models.
United States
- NIST AI Risk Management Framework 1.0: A voluntary framework in four functions: govern, map, measure and manage. Not a binding requirement.
- FTC Act Section 5, unfair or deceptive practices in AI and data: Section 5 gives the FTC power against unfair or deceptive practices, which covers claims made about AI.
China
- Interim Measures for the Management of Generative AI Services: Applies to generative services offered to the public in China, with content, labelling and filing duties.
- Provisions on the Management of Algorithmic Recommendation in Internet Information Services: Covers recommendation services: filing, user choice to switch the recommendation off and record keeping.
Where companies usually start
- Write down every AI system in use and what decision it takes part in.
- Read the EU risk class for each one, then check whether the same system is offered to the public in China.
- Keep the test records and the claims made in marketing in the same place.
This page reads published registers and describes common practice. It is not legal advice and it is not a compliance verdict.
Other questions for cloud service provider
- Do personal data rules apply to a cloud provider?
- Do cross-border data rules apply to a cloud provider?
- Do cybersecurity rules apply to a cloud provider?
- Do health data rules apply to a cloud provider?
- Do online platforms rules apply to a cloud provider?
- Do consumer rights rules apply to a cloud provider?
- Do product safety rules apply to a cloud provider?
- Do climate disclosure rules apply to a cloud provider?
- Do export controls rules apply to a cloud provider?
ExploreWorldAI is operated by Valkiv Ventures AB (Reg. no. 556995-1311), Kungsgatan 8, 111 43 Stockholm, Sweden. EU-hosted, with data processing assessed against the GDPR. Contact: hello@exploreworldai.com.
Machine-readable summaries for AI agents: /llms.txt and /llms-full.txt.
