What is an AI system?
An AI system is the complete, deployed combination of one or more AI models and everything required to put them to work: the user interface, the data pipelines that feed them, the integrations to business applications, the rules that act on their output, and the monitoring and access controls around the whole. The model is a component. The system is what a customer, an employee, or a regulator actually encounters.
The distinction matters because most of the behavior a business cares about is decided outside the model, and because the same model can sit inside very different systems. A general-purpose language model behind an internal search tool for policy documents is one AI system. The same model, connected to a credit decision workflow that declines applicants, is another, with a different risk profile and different obligations. Buying a good model does not produce a good system, and a mediocre model inside a well-designed system often outperforms a better model deployed carelessly.
AI system in the EU AI Act
The EU AI Act regulates AI systems, defined broadly as machine-based systems that infer outputs such as predictions, recommendations, or decisions from the inputs they receive. Obligations attach according to the system’s purpose and risk classification rather than to the underlying model. A general-purpose AI model has its own, separate set of transparency duties, but a company that builds the model into a hiring tool or a credit scoring product becomes the provider or deployer of a high-risk AI system and must meet the requirements that follow. The NIST AI Risk Management Framework applies the same system-in-context logic for companies outside the EU.
AI system in practice
A regional bank licenses a document model to read loan applications. On its own the model is a text extractor. Inside the bank’s system it is combined with identity verification, a rules engine for eligibility, a queue for underwriter review, and an audit log. The bank’s AI inventory lists the system, its purpose, its data sources, and its owner. When the regulator asks how automated the lending decision is, the answer describes the whole system rather than the model alone.
What to watch for
- Define and document the system boundary, including every data source and every downstream action, before assessing risk.
- Assign one accountable owner to each AI system and record it in the AI inventory.
- Reassess the classification whenever the purpose, the users, or the connected systems change, even if the model does not.
- Ask vendors to state clearly whether they are selling a model, a component, or a complete system, since the obligations differ.