Post-market monitoring (Article 72)
Post-market monitoring under Article 72 of the EU AI Act is the obligation on providers of high-risk AI systems to actively and systematically collect, document, and analyse data on how the system performs throughout its lifetime, so that ongoing compliance with Articles 9 to 15 can be checked and emerging risks addressed. It complements serious-incident reporting under Article 73.
What the obligation requires
Providers of high-risk AI systems must set up a post-market monitoring system proportionate to the system's nature and risks, based on a documented monitoring plan. The system gathers and reviews performance data drawn from real-world use and from interaction with other systems, and feeds findings back into the risk-management system under Article 9. Where monitoring reveals non-compliance or a serious incident, corrective action and reporting duties follow, including serious-incident reporting to authorities under Article 73.
How it fits the lifecycle
- Pre-market - classify the system, meet Articles 9 to 15, and complete conformity assessment.
- In market - run post-market monitoring under Article 72 and report serious incidents under Article 73.
- On change - reassess after substantial modifications and update technical documentation.
- Most high-risk obligations, including this one, apply from 2 August 2026.
Last reviewed June 2026 by the ComplyAgent team.
See also our EU AI Act compliance guide, ISO/IEC 42001 and NIST AI RMF, or browse the full glossary.