General-Purpose AI Code of Practice and its Signatory Taskforce

What it does

Co-regulatory instrument under Article 56 of the AI Act, published by the Commission in its final form in July 2025 and assessed as adequate by the AI Board and the Commission. Signing is voluntary, but signature is the presumptive route to demonstrating compliance with GPAI obligations, which have applied since 2 August 2025; non-signatories must demonstrate compliance by other means and face greater scrutiny. It has three chapters — Transparency, Copyright, and Safety and Security — with the Safety and Security chapter applying only to providers of models with SYSTEMIC RISK. A Signatory Taskforce, convened by the AI Office, holds ongoing meetings with signatories on implementation. The Code was drafted through an open multi-stakeholder process involving roughly a thousand participants.

Its powers

advise

Honest assessment

The Code's drafting process was, by common consent among AI-governance practitioners, the single most open and most influential frontier-AI policy process to date anywhere — around a thousand stakeholders, published iterative drafts, written comment rounds, and visible textual change between drafts in response to safety-community input. The Safety and Security chapter contains the most detailed frontier-risk obligations in any binding-adjacent instrument in the world: systemic-risk assessment, model evaluations, incident reporting to the AI Office, and cybersecurity of model weights. If you want to influence frontier AI governance and can only do one thing, tracking and responding to the Code's review rounds is it. The Signatory Taskforce itself is closed to non-signatories.

Notes

Confirm which providers have signed before assuming coverage — signature has not been universal, and several major providers signed only some chapters.