AESIA strengthens its structure: new AI Certification Subdirector in 2026

Key data

The Spanish Agency for Artificial Intelligence Supervision (AESIA) has just filled one of its most relevant management positions: the Subdirectorate of Certification, AI Trends Evaluation, Coordination and Training. The appointment, published in the BOE on 2 November 2026, falls to Mario Hernández Ramos, a civil servant from the Body of Associate Professors of University assigned from the Complutense University of Madrid.

For companies in the technology sector and for any organization using AI systems classified as high-risk under the Regulation (EU) 2024/1689 on Artificial Intelligence, this appointment has a direct reading: AESIA is building its institutional muscle to supervise, certify and evaluate. The regulatory machinery is being set in motion.

What does this regulation establish?

The resolution resolves the free appointment call published on 12 September 2026 to fill the Subdirectorate of Certification, AI Trends Evaluation, Coordination and Training at AESIA, headquartered in A Coruña.

Level 30 is the maximum usual in the General State Administration for subdirector general positions. It indicates the maximum management responsibility within the AESIA structure for this specific area.

The resolution can be appealed for reconsideration within one month from its publication, or directly to the administrative litigation jurisdiction within two months.

Economic and operational impact

This appointment does not generate direct costs for private companies, but has clear operational implications for those under AESIA's radar:

• Greater certification capacity: The covered subdirectorate is precisely responsible for AI system certification processes. With a responsible in place, conformity evaluation procedures can move forward more swiftly.
• Active trends evaluation: The area also covers AI trends evaluation, which means AESIA will actively monitor the technological evolution of the sector to anticipate regulatory risks.
• Training and coordination: The subdirectorate has competencies in training and coordination, which can translate into guides, interpretive criteria and communications directed at companies required to comply with the AI Regulation.
• Academic profile in the position: The appointment of an Associate Professor of University (UCM) suggests a technical and rigorous approach to AI system evaluation, with potential impact on how high-risk system requirements are interpreted.

Who does it affect?

• Technology companies that develop AI systems classified as high-risk under the European AI Regulation (healthcare, employment, education, critical infrastructure, etc.).
• AI providers that commercialize products in the Spanish market and must obtain certifications or pass conformity evaluations.
• Public bodies that deploy AI systems in their administrative processes.
• Consultancies and audit firms specialized in AI regulatory compliance that operate as intermediaries with AESIA.
• Public officials who aspire to positions at AESIA or who are affected by the free appointment structure resolved.

Practical example

A software company that commercializes an AI system for personnel selection — classified as high-risk under the European Regulation — needs to pass a conformity evaluation before launching it on the Spanish market.

Until now, AESIA lacked a formal responsible in the Certification Subdirectorate. With Mario Hernández Ramos in the position (level 30, A Coruña headquarters), the company can expect that evaluation processes have a defined contact, clearer criteria and more predictable response times. The academic profile of the new subdirector also suggests that the technical evaluation of systems will be rigorous and evidence-based.

In practice: if your company plans to submit an AI system for evaluation before AESIA in the coming months, this appointment is a signal that the body is operationally ready to manage those procedures.

What should companies do now?

1. Identify if your AI system is high-risk according to the annexes of the European AI Regulation. If it is, AESIA is your competent supervisor in Spain and this subdirectorate will manage your certification.
2. Review your compliance roadmap with the AI Regulation. With AESIA's structure already operational, regulatory deadlines are becoming real and enforceable.
3. Establish a monitoring channel with AESIA. With a Certification Subdirector in place, now is the time to initiate formal contacts if you have systems pending evaluation.
4. Update your regulatory risk analysis to include active AESIA supervision as an operational variable, not just as a future risk.
5. If you are a public official and consider that the resolution affects you, remember that the deadline to appeal for reconsideration is one month from 2 November 2026, and two months for the administrative litigation route.

Official source

Consult complete regulation at official source

Notice: This article is purely informational in nature and does not constitute legal advice. For specific decisions, consult a qualified professional. Source: https://www.boe.es/diario_boe/txt.php?id=BOE-A-2026-22898