Does the EU AI Act apply to AI meeting notetakers?

Meeting assistants that join calls, transcribe them, and produce summaries have quietly become standard. They process what colleagues and clients said, which puts them at the intersection of the AI Act and data protection law. Transcription and summarisation of meetings does not sit in an Annex III domain. It lands in limited risk, where the practical obligations are transparency toward participants and staff literacy.

Which documents are required for AI meeting notetakers?

Based on this classification you need: AI Literacy Policy (Article 4), Risk Classification Memo (Articles 6, 9 and Annex III), Transparency Disclosure (Article 50).

EU AI Act compliance for AI meeting notetakers and transcription

Meeting assistants that join calls, transcribe them, and produce summaries have quietly become standard. They process what colleagues and clients said, which puts them at the intersection of the AI Act and data protection law.

The risk tier is usually low. There is one specific trap worth knowing about, because some products advertise sentiment or engagement analysis that the Act treats very differently.

Typical classification

Limited risk

Your role

Deployer

Documents needed

Are you a provider or a deployer?

The transcription vendor is the provider. Your company is the deployer and carries the literacy, documentation, and disclosure duties toward meeting participants.

How this is classified under the Act

Transcription and summarisation of meetings does not sit in an Annex III domain. It lands in limited risk, where the practical obligations are transparency toward participants and staff literacy.

What changes the answer: Article 5 prohibits inferring emotions of workers in the workplace, outside narrow safety and medical exceptions. A notetaker that scores participant sentiment, engagement, or mood in internal meetings can cross into prohibited practice, not merely high risk.

Want this checked against your own setup?

Run the free 6-question check →

Documents you need

AI Literacy Policy Article 4

A written policy covering which AI tools you use, which roles interact with them, what those people need to understand, who owns the document, and how it gets updated. Enforceable since 2 February 2025.
Risk Classification Memo Articles 6, 9 and Annex III

A documented assessment placing each AI system in the Act’s risk tiers, including the Article 5 prohibited-practice check and the Article 6(3) exception assessment, with article citations.
Transparency Disclosure Article 50

Informs people when they are interacting with an AI system and labels AI-generated or manipulated content. Article 50 applies from 2 August 2026. The narrower Article 50(2) duty on general-purpose models generating synthetic content applies from 2 December 2026.

Obligations that apply

Article 5 No emotion inference about employees

Check whether the product scores sentiment or engagement of participants. If it does, turn that feature off for internal meetings and record the decision.
Article 50 Tell participants

People in the meeting should know an AI system is recording and summarising. This overlaps with consent requirements under data protection law.
Article 4 Literacy for meeting owners

Staff need to understand that transcripts contain errors, that summaries omit context, and that the record may be disclosable later.

Common mistakes

Enabling sentiment analysis on internal meetings without realising Article 5 restricts emotion inference in the workplace.
Bringing a notetaker into external client calls with no notice to the other side.
Retaining transcripts indefinitely with no policy, which creates a data protection problem alongside the AI Act one.
Assuming this is purely a GDPR matter, and so producing no AI Act documentation at all.

Where the deadlines stand

The AI literacy obligation under Article 4 and the Article 5 prohibitions have been enforceable since 2 February 2025. General-purpose AI model rules applied from 2 August 2025. The Omnibus, published in the Official Journal on 24 July 2026, moved the high-risk dates: standalone high-risk systems under Annex III to 2 December 2027, and high-risk AI embedded in regulated products under Annex I to 2 August 2028. Article 50 transparency obligations still apply from 2 August 2026. Only the narrower Article 50(2) duty on general-purpose models generating synthetic content moved, to 2 December 2026, which is also when the new prohibition on AI-generated intimate imagery and child sexual abuse material takes effect.

The delay applies to the high-risk obligations. It does not move Article 4, which is why a written AI literacy policy is the document most companies are missing today.

Generate your 3 documents in about 30 minutes

Answer a short questionnaire and get every document above, pre-filled with your company details and article citations, in 11 EU languages. Preview free, download for €99 one-time. No subscription.

Generate my documents → Check my risk level first

This page describes obligations under Regulation (EU) 2024/1689 as amended by the Omnibus published in the Official Journal on 24 July 2026, and was verified on 29 July 2026. It is general information rather than legal advice, and classification depends on your specific configuration and use. Review by qualified legal counsel is recommended before formal adoption of any compliance document.