EveryAILaw.comDoes Law for the Promotion of Artificial Intelligence and Technologies require Conformity Assessment?
El Salvador • enforcing
Yes — 1 provision
Requirements at a glance
This regulation imposes 5 specific requirements for Conformity Assessment across 1 provision:
- Mandatory operator registration — Before deployment, operators must register systems that meet the consequential-decision criteria and are used in one of the six listed sectors (Resolution Arts. 11-13)
- Registration submission — Identify the applicant and contact, describe the AI activity and deployment context, confirm alignment with the Law's ethical principles, identify the triggering use, and summarize controls and the selected compliance path (Resolution Art. 13)
- Express exclusions — General-purpose providers, infrastructure and development tools, controlled research or testing and personal use, training-phase systems, and ordinary consumer or productivity software are excluded unless later deployed for an Article 11 use (Resolution Art. 12)
- Sector controls — Covered operators must implement proportionate security, incident-response procedures, and regular performance and impact review, demonstrating compliance through a recognized third-party certification or ANIA sandbox participation (Resolution Art. 14)
- Voluntary safeguards registration — Entities may register voluntarily to obtain recognition for the Law's Article 19 safeguards (Resolution Art. 11)
ANIA Registration #
Resolution No. 0001/2025 creates two tracks: voluntary registration for entities seeking the Law's Article 19 safeguards, and mandatory registration for operators deploying consequential-decision AI in six listed sectors. General-purpose model, API, platform, and cloud providers are not required to register solely because they supply those services; developers register only if they also operate a covered deployment. Existing covered systems received a 12-month grace period from the Resolution's effective date.
Requirements
| Requirement | Details |
|---|---|
| Mandatory operator registration | Before deployment, operators must register systems that meet the consequential-decision criteria and are used in one of the six listed sectors (Resolution Arts. 11-13) |
| Registration submission | Identify the applicant and contact, describe the AI activity and deployment context, confirm alignment with the Law's ethical principles, identify the triggering use, and summarize controls and the selected compliance path (Resolution Art. 13) |
| Express exclusions | General-purpose providers, infrastructure and development tools, controlled research or testing and personal use, training-phase systems, and ordinary consumer or productivity software are excluded unless later deployed for an Article 11 use (Resolution Art. 12) |
| Sector controls | Covered operators must implement proportionate security, incident-response procedures, and regular performance and impact review, demonstrating compliance through a recognized third-party certification or ANIA sandbox participation (Resolution Art. 14) |
| Voluntary safeguards registration | Entities may register voluntarily to obtain recognition for the Law's Article 19 safeguards (Resolution Art. 11) |