Skip to main content

Intended Purpose and Responsibilities – nori

Working Translation

This translation is NOT legally binding and a working translation only. Legally binding and relevant, particularly in case of any discrepancies, is solely the German text.

Version date: 17 August 2026 · Status: Approved

Part of the License and Terms of Use Agreement

1. Parties and purpose​

  • Provider: azuma healthtech GmbH – makes nori available.
  • Deployer: external deployer – uses nori within its own area of responsibility.
  • Purpose: ensuring provision in conformity with the AI Act, in particular the information and documentation obligations.

2. Obligations of the provider​

  1. Provision of the information and documentation required for conformant operation, in particular:

    • model/system card
    • assessment report "not high-risk"
    • information on the intended use and on limitations.

  2. Information on the marking of AI-generated outputs (Art. 50) and their use as intended.

  3. Support for the deployer regarding AI literacy, insofar as this is required on the provider's side.

  4. Information on substantial changes affecting the classification/obligations (re-assessment trigger).

3. Obligations of the deployer​

  1. Use as intended in accordance with the provider's specifications; final human decision on findings.
  2. Compliance with the transparency/marking obligations within its own area of responsibility (Art. 50(1)/(4)), in particular when passing outputs on to external parties.
  3. Ensuring sufficient AI literacy of its own users (Art. 4).
  4. Observance of data protection/DPA and, where applicable, third-country transfers per model provider used (reference #03).

4. Internal use (provider = deployer)​

In the case of internal use, a separate agreement is not required. The obligations set out above are allocated internally (product, operations and legal responsibility).

5. Relationship to data protection​

This agreement does not replace a data processing agreement (DPA) under data protection law. A DPA is to be concluded separately wherever personal data are processed.