Determine the organization's role under the EU AI Act — provider (Anbieter), deployer (Betreiber), importer, distributor, or quasi-provider — and assess Art. 25 quasi-provider risk from substantial modifications, rebranding, or changed intended purpose.