[{"data":1,"prerenderedAt":415},["ShallowReactive",2],{"uc-reg-pci-dss":3},{"regulation":4,"includeUnpublished":11,"indexable":12,"useCases":13},{"id":5,"label":6,"issuer":7,"region":8,"url":9,"description":10},"pci-dss","PCI DSS","PCI Security Standards Council","global","https://www.pcisecuritystandards.org/","Security standard for any system that stores, processes or transmits cardholder data.",false,true,[14,53,71,89,114,137,156,177,197,215,234,254,266,289,315,330,352,370,381,397],{"slug":15,"title":16,"shortTitle":17,"definition":18,"status":19,"industries":20,"functions":23,"patterns":26,"audience":31,"autonomy":32,"adoptionStage":33,"segment":34,"evidenceCount":35,"publicEvidenceCount":36,"organizations":37,"bestGrade":40,"headline":41,"lastVerified":50,"indexable":12,"euAiActTier":51,"euAiActBasis":52},"account-and-card-servicing-agent","AI agent for account and card servicing","Account and card servicing","An AI agent that resolves routine account and card requests end to end, such as balances, statements, card blocks and replacements, PIN resets and limit changes, across app, web, messaging and phone, and hands anything sensitive or unusual to a human with the full context.","published",[21,22],"banking","payments",[24,25],"customer-service","operations",[27,28,29,30],"conversational-agent","voice-agent","agentic-workflow","rag-knowledge-assistant","customer-facing","supervised-agent","mainstream","front-office",4,2,[38,39],"Commonwealth Bank of Australia","DBS Bank","B",{"kpi":42,"label":43,"unit":44,"n":36,"nUpTo":45,"kind":46,"value":47,"qualifier":48,"claimant":49,"organization":39,"vendorReported":11},"containment-rate","Containment rate","percent",0,"reported",90,"approximately","organization","2026-09-27","limited","Article 50(1): people must be informed that they are interacting with an AI system, unless that is obvious from the context. Servicing existing accounts and cards is not an Annex III use. It would become high risk under Annex III point 5(b) if the agent itself evaluated the creditworthiness of a natural person, for example to decide a credit limit increase.",{"slug":54,"title":55,"shortTitle":56,"definition":57,"status":19,"industries":58,"functions":59,"patterns":60,"audience":31,"autonomy":32,"adoptionStage":61,"segment":34,"evidenceCount":62,"publicEvidenceCount":62,"organizations":63,"bestGrade":40,"headline":65,"lastVerified":50,"indexable":12,"euAiActTier":51,"euAiActBasis":70},"atm-and-self-service-device-assistance","AI agent for ATM and self service device assistance","ATM and device assistance","An AI agent that helps customers with problems at or around ATMs and other self service devices, such as a withdrawal that did not pay out, a retained card, a blocked PIN or finding a working machine with cash, over the app, chat or phone, and that opens and tracks the claim or hands it to a person when it cannot be resolved.",[21],[24,25],[27,28,29],"emerging",1,[64],"NatWest Group",{"kpi":66,"label":67,"unit":44,"n":62,"nUpTo":45,"kind":46,"value":68,"qualifier":69,"claimant":49,"organization":64,"vendorReported":11},"customer-satisfaction-uplift","Satisfaction uplift",150,"exact","A customer facing assistant must tell people they are interacting with an AI system unless that is obvious (Article 50(1)). It does not evaluate creditworthiness (Annex III point 5(b)) or eligibility for public assistance benefits (point 5(a)), so it is not high risk; biometric verification whose sole purpose is to confirm identity is excluded from Annex III point 1(a).",{"slug":72,"title":73,"shortTitle":74,"definition":75,"status":19,"industries":76,"functions":77,"patterns":79,"audience":31,"autonomy":32,"adoptionStage":82,"segment":34,"evidenceCount":35,"publicEvidenceCount":83,"organizations":84,"bestGrade":40,"headline":87,"lastVerified":50,"indexable":12,"euAiActTier":51,"euAiActBasis":88},"card-dispute-and-chargeback-intake","AI agent for card dispute intake","Card dispute intake","A customer facing AI agent that handles the \"I do not recognise this charge\" moment: it finds the transaction, separates suspected fraud from merchant disputes and simple confusion, explains the customer's rights and timelines, collects the details and evidence the rules require, and opens a correctly classified dispute case for the operations team.",[21,22],[24,78,25],"fraud-prevention",[27,28,80,81,29],"classification-and-routing","document-processing","early-adopters",3,[38,85,86],"Klarna","Visa",null,"A customer facing assistant must tell people they are interacting with an AI system (Article 50(1)). It triages and opens cases but does not evaluate creditworthiness (Annex III point 5(b), which in any case excludes systems used to detect financial fraud) or decide access to an essential service, so it is not high risk under Annex III.",{"slug":90,"title":91,"shortTitle":92,"definition":93,"status":19,"industries":94,"functions":100,"patterns":102,"audience":31,"autonomy":32,"adoptionStage":82,"segment":103,"evidenceCount":83,"publicEvidenceCount":36,"organizations":104,"bestGrade":107,"headline":108,"lastVerified":50,"indexable":12,"euAiActTier":51,"euAiActBasis":113},"collections-and-hardship-agent","AI agent for early collections and hardship support","Collections and hardship agent","A voice and messaging agent that contacts customers in early arrears and answers their inbound calls, takes payments and sets up payment arrangements within preapproved rules, and recognises signs of hardship or vulnerability so those customers go straight to a trained person.",[95,21,22,96,97,98,99],"cross-industry","telecommunications","energy-and-utilities","automotive","professional-services",[101,24],"collections-and-recovery",[28,27,29,80],"lending",[105,106],"Day Knight & Associates","SameDay Auto Finance","C",{"kpi":109,"label":110,"unit":44,"n":36,"nUpTo":45,"kind":46,"value":111,"qualifier":69,"claimant":112,"organization":106,"vendorReported":12},"cost-reduction","Cost reduction",75,"vendor","A customer facing collections agent must disclose that it is AI (Article 50). It is not listed in Annex III as long as it applies preapproved arrangement rules and does not itself evaluate creditworthiness; an affordability model that decides who gets which arrangement for individuals should be assessed separately against Annex III point 5(b).",{"slug":115,"title":116,"shortTitle":117,"definition":118,"status":19,"industries":119,"functions":121,"patterns":122,"audience":31,"autonomy":32,"adoptionStage":82,"evidenceCount":124,"publicEvidenceCount":124,"organizations":125,"bestGrade":40,"headline":132,"lastVerified":50,"indexable":12,"euAiActTier":51,"euAiActBasis":136},"flight-disruption-and-rebooking-agent","AI agent for flight disruption and rebooking","Flight disruption and rebooking","An AI agent that tells passengers proactively when their flight is delayed, cancelled or misconnected, explains why, and lets them rebook, request a refund or voucher, or claim care such as meals and hotels in one conversation on app, messaging, web or phone, within the airline's reaccommodation rules and passenger rights, handing complex itineraries and upset customers to a human with the context attached.",[120],"travel-and-hospitality",[24,25],[27,28,29,123],"content-generation",6,[126,127,128,129,130,131],"Air India","Delta Air Lines","JetBlue","Lufthansa Group","Pegasus Airlines","United Airlines",{"kpi":133,"label":134,"unit":44,"n":62,"nUpTo":45,"kind":46,"value":135,"qualifier":69,"claimant":112,"organization":126,"vendorReported":12},"automation-rate","Automation rate",97,"A customer facing assistant must tell people they are interacting with AI (Article 50). It is not a high risk use under Annex III: it applies the airline's reaccommodation rules and does not decide on access to an essential public service or on creditworthiness.",{"slug":138,"title":139,"shortTitle":140,"definition":141,"status":19,"industries":142,"functions":143,"patterns":144,"audience":31,"autonomy":32,"adoptionStage":61,"segment":34,"evidenceCount":145,"publicEvidenceCount":145,"organizations":146,"bestGrade":40,"headline":151,"lastVerified":50,"indexable":12,"euAiActTier":51,"euAiActBasis":155},"fraud-alert-confirmation","AI agent for fraud alert confirmation with cardholders","Fraud alert confirmation","A customer facing AI agent that contacts the cardholder as soon as the fraud engine flags a card transaction, in the channel they actually respond to, verifies them, asks whether they made the transaction and acts on the answer: releasing the block so a retry succeeds, or freezing the card and starting the fraud claim.",[21,22],[78,24],[27,28,29],5,[147,38,148,149,150],"Capital One","Macquarie Bank","Revolut","Westpac",{"kpi":152,"label":153,"unit":44,"n":36,"nUpTo":45,"kind":46,"value":154,"qualifier":69,"claimant":49,"organization":38,"vendorReported":11},"fraud-loss-reduction","Fraud loss reduction",76,"Confirming flagged transactions with cardholders is not listed in Annex III, and point 5(b) expressly excludes AI used to detect financial fraud from the creditworthiness category, so the system is not high risk. An agent that messages or calls customers must tell them they are dealing with AI under Article 50(1), and synthetic voice output must be marked as AI generated under Article 50(2).",{"slug":157,"title":158,"shortTitle":159,"definition":160,"status":19,"industries":161,"functions":163,"patterns":164,"audience":31,"autonomy":32,"adoptionStage":82,"segment":165,"evidenceCount":124,"publicEvidenceCount":124,"organizations":166,"bestGrade":40,"headline":173,"lastVerified":50,"indexable":12,"euAiActTier":51,"euAiActBasis":176},"insurance-policy-servicing-agent","AI agent for insurance policy servicing","Policy servicing agent","An AI agent that answers policyholders' coverage questions from their own policy documents and completes routine policy changes and document requests (address and vehicle changes, adding a named driver or item, payment method updates, certificates and proof of cover) across chat, messaging and phone, and hands anything complex or sensitive to a human with the context.",[162],"insurance",[24,25],[27,28,30,29],"policy-administration",[167,168,169,170,171,172],"LAQO","Lemonade","Nsure.com","Sun Life","Waterdrop","Zurich Insurance (Hong Kong)",{"kpi":42,"label":43,"unit":44,"n":36,"nUpTo":45,"kind":46,"value":174,"qualifier":175,"claimant":49,"organization":168,"vendorReported":11},50,"at-least","A customer facing assistant must be designed so that people know they are interacting with AI (Article 50(1), applicable from 2 August 2026). It is not high risk as long as it does not carry out risk assessment and pricing in relation to natural persons in life and health insurance (Annex III point 5(c)).",{"slug":178,"title":179,"shortTitle":180,"definition":181,"status":19,"industries":182,"functions":184,"patterns":185,"audience":31,"autonomy":32,"adoptionStage":33,"evidenceCount":145,"publicEvidenceCount":145,"organizations":186,"bestGrade":40,"headline":191,"lastVerified":195,"indexable":12,"euAiActTier":51,"euAiActBasis":196},"order-status-and-returns-agent","AI agent for order status, delivery changes and returns","Order status and returns","An AI agent that answers \"where is my order\", changes delivery details and arranges returns, exchanges and refunds end to end for online and omnichannel shoppers, by reading and writing to the order, carrier and returns systems within the retailer's policy, and hands exceptions such as damaged goods, disputes and upset customers to a person.",[95,183,22],"retail-and-ecommerce",[24,25],[27,29,28,30],[187,188,85,189,190],"BARK","Best Buy","Next","Sun & Ski Sports",{"kpi":192,"label":193,"unit":44,"n":36,"nUpTo":45,"kind":46,"value":194,"qualifier":69,"claimant":112,"organization":187,"vendorReported":12},"customer-satisfaction","Customer satisfaction",98,"2026-09-26","A customer facing service agent must disclose that the customer is interacting with AI (Article 50). It is not high risk: it does not decide on access to essential services, credit or employment.",{"slug":198,"title":199,"shortTitle":200,"definition":201,"status":19,"industries":202,"functions":203,"patterns":205,"audience":31,"autonomy":32,"adoptionStage":61,"segment":34,"evidenceCount":206,"publicEvidenceCount":207,"organizations":208,"bestGrade":40,"headline":87,"lastVerified":50,"indexable":12,"euAiActTier":51,"euAiActBasis":214},"agentic-payment-initiation","AI agent for payment initiation within a customer mandate","Agentic payment initiation","An AI agent that initiates and completes payments or purchases on a customer's behalf, within a mandate the customer set in advance (spending caps, allowed merchants or categories, a tokenized credential and rules for when to ask for confirmation), and then confirms and reconciles every transaction it made.",[22,21,183],[24,204,25],"sales",[29,27],8,7,[39,209,210,211,212,213,86],"ING","Majid Al Futtaim","PayPal","Banco Santander","Ulta Beauty","A customer facing agent must make clear that people are dealing with AI, unless that is obvious from the context (Article 50). Initiating payments within a customer's mandate is not listed in Annex III. It becomes high risk if the same agent evaluates creditworthiness, for example by deciding on a buy now pay later or credit line at checkout (Annex III point 5(b)).",{"slug":216,"title":217,"shortTitle":218,"definition":219,"status":19,"industries":220,"functions":221,"patterns":223,"audience":31,"autonomy":32,"adoptionStage":82,"segment":34,"evidenceCount":35,"publicEvidenceCount":35,"organizations":224,"bestGrade":40,"headline":229,"lastVerified":50,"indexable":12,"euAiActTier":51,"euAiActBasis":233},"bill-explanation-and-billing-dispute-agent","AI agent for telecom bill explanation and billing disputes","Bill explanation and disputes","An AI agent that explains a customer's telecom bill line by line, in plain language and on any channel, answers why a charge changed or appeared, corrects clear errors within set limits and opens a billing dispute with the evidence attached when a human has to decide.",[96],[24,222],"case-management",[27,30,29,28],[225,226,227,228],"BT Group","Mobily","Verizon","Vodafone",{"kpi":230,"label":231,"unit":44,"n":62,"nUpTo":45,"kind":46,"value":232,"qualifier":69,"claimant":49,"organization":228,"vendorReported":11},"first-contact-resolution","First contact resolution",60,"A customer facing assistant must be designed so that people know they are interacting with AI (Article 50(1)). Explaining bills, correcting clear errors and opening disputes are not listed in Annex III. The tier changes only if the system is also used to evaluate customers' creditworthiness, for example to set credit limits, which Annex III point 5(b) lists as high risk.",{"slug":235,"title":236,"shortTitle":237,"definition":238,"status":19,"industries":239,"functions":241,"patterns":243,"audience":244,"autonomy":32,"adoptionStage":82,"segment":244,"evidenceCount":83,"publicEvidenceCount":36,"organizations":245,"bestGrade":107,"headline":248,"lastVerified":50,"indexable":12,"euAiActTier":252,"euAiActBasis":253},"account-servicing-execution","AI for back office account servicing execution","Account servicing execution","AI that executes the servicing requests that land in operations queues, such as address and mandate changes, standing instructions, beneficiary updates, reissues, payoff and reference letters and loan maintenance, by reading the request, checking it against policy and entitlements, and preparing or making the change in core systems under dual control.",[21,162,240],"wealth-and-asset-management",[25,242],"lending-and-credit",[29,81,80],"back-office",[246,247],"Banco Supervielle","SS&C Technologies",{"kpi":249,"label":250,"unit":44,"n":36,"nUpTo":45,"kind":46,"value":251,"qualifier":69,"claimant":112,"organization":247,"vendorReported":12},"processing-time-reduction","Cycle time reduction",95,"context-dependent","The tier depends on how the system is built. It stays minimal when the agent only executes changes approved by a person and any letter comes from a fixed template, since executing servicing changes is not listed in Annex III. It moves to limited risk when the same system talks to customers directly (the Article 50 transparency duty, described on the customer facing servicing page) or when generative AI drafts the confirmation or letter text: the provider of that generative function, the bank if it builds the system, then carries the Article 50(2) duty to mark the generated content in a machine readable way, unless the output only gets an assistive role or standard editing that does not substantially alter the input data. An AI system used to evaluate the creditworthiness of natural persons, for example to decide on a loan restructuring, is high risk under Annex III point 5(b); keep that assessment outside this agent, which only executes the decided change.",{"slug":255,"title":256,"shortTitle":257,"definition":258,"status":19,"industries":259,"functions":260,"patterns":261,"audience":244,"autonomy":32,"adoptionStage":82,"segment":244,"evidenceCount":83,"publicEvidenceCount":36,"organizations":262,"bestGrade":40,"headline":87,"lastVerified":50,"indexable":12,"euAiActTier":264,"euAiActBasis":265},"chargeback-and-representment","AI for chargeback and representment operations","Chargeback and representment","AI that runs the dispute engine room for issuers, acquirers and merchants: it maps each dispute to the network reason code, gathers the matching evidence, assembles a network compliant chargeback or representment package, drafts the rebuttal, tracks every deadline and processes pre dispute alerts so a refund can be issued before a chargeback lands.",[22,21,183],[25,78,24],[29,81,123,80],[263,86],"GitHub","minimal","Dispute processing between issuers, acquirers and merchants is not listed in Annex III. It is not an evaluation of creditworthiness or credit scoring under Annex III point 5(b), and because cardholders do not interact with the system directly, the Article 50(1) transparency duty for AI that talks to people does not apply. Article 50(2) marking of generated text is a duty of the provider of the AI system that generates it, which includes an institution that builds its own dispute drafting agent and puts it into service under its own name. A drafted rebuttal built from attached case evidence performs an assistive function for standard editing of that evidence and does not substantially alter the underlying input, so it falls under the Article 50(2) exception and does not need machine readable marking. With that point checked, the tier stays minimal. A customer facing intake agent is assessed separately.",{"slug":267,"title":268,"shortTitle":269,"definition":270,"status":19,"industries":271,"functions":273,"patterns":276,"audience":244,"autonomy":32,"adoptionStage":82,"evidenceCount":35,"publicEvidenceCount":35,"organizations":280,"bestGrade":40,"headline":284,"lastVerified":50,"indexable":12,"euAiActTier":252,"euAiActBasis":288},"merchant-underwriting-and-risk-monitoring","AI for merchant underwriting and risk monitoring","Merchant underwriting and monitoring","AI that helps acquirers, payment facilitators and software platforms with embedded payments decide which merchants to accept and on what terms, by checking what a business really sells and how risky it is at onboarding, and then watches every active merchant for changes in behaviour, ranking the few that need an analyst so fraud, prohibited trade and credit losses are caught early.",[22,272,21],"technology",[274,78,275],"onboarding-and-kyc","risk-management",[277,278,80,279,29],"prediction-and-scoring","anomaly-detection","summarization",[281,282,86,283],"Airwallex","Tekmetric","Weave Communications",{"kpi":285,"label":286,"unit":44,"n":36,"nUpTo":45,"kind":46,"value":287,"qualifier":48,"claimant":112,"organization":283,"vendorReported":12},"alert-volume-reduction","Alert volume reduction",89,"Assessing businesses and detecting fraud is not an Annex III use as such, and Annex III point 5(b) excludes systems used to detect financial fraud. If the system evaluates the creditworthiness of a natural person, for example a sole trader applying to accept payments, it can fall under Annex III point 5(b), which covers evaluating the creditworthiness of natural persons or establishing their credit score, and be high risk. Keep credit assessment of individuals separate or treat it as a high risk system.",{"slug":290,"title":291,"shortTitle":292,"definition":293,"status":19,"industries":294,"functions":297,"patterns":300,"audience":301,"autonomy":32,"adoptionStage":82,"evidenceCount":207,"publicEvidenceCount":207,"organizations":302,"bestGrade":40,"headline":310,"lastVerified":50,"indexable":12,"euAiActTier":252,"euAiActBasis":314},"security-alert-triage-and-investigation","AI for security alert triage and investigation in the SOC","Security alert triage","An AI agent in the security operations centre that picks up each new alert or user reported phishing email, gathers the evidence from the SIEM, endpoint, identity and threat intelligence tools, gives a verdict with its reasoning and a draft incident summary, and closes clear false positives while an analyst approves every containment action.",[95,295,272,296,99],"healthcare","government",[298,299],"security-operations","it-and-engineering",[29,80,279,30],"employee-facing",[303,304,305,306,307,308,309],"Avanade","Federal Housing Finance Agency","Human Managed","SEP2","St. Luke's University Health Network","TÜV SÜD","U.S. Immigration and Customs Enforcement",{"kpi":311,"label":312,"unit":44,"n":83,"nUpTo":45,"kind":313,"value":232,"qualifier":69,"claimant":87,"organization":87,"vendorReported":11},"productivity-gain","Productivity gain","median","Triage of phishing, endpoint, network and cloud alerts for an organization's own cyber defence is not listed in Annex III. Recital 55 of the AI Act says that components intended to be used solely for cybersecurity purposes should not qualify as safety components, so the agent does not fall under Annex III point 2 (critical infrastructure), and for this scope the tier is minimal. The design changes that when the agent triages identity, data loss prevention, insider risk or user behaviour alerts in a way that scores or monitors individual employees: monitoring and evaluating the behaviour of persons in a work relationship falls under Annex III point 4(b), so that scope needs its own high risk assessment before it goes live. The Article 50(1) duty to disclose AI interaction does not apply because it is obvious to a reasonably well informed analyst that they are working with an AI agent. An operator that lets AI act autonomously on network or operational technology controls should assess that design separately, and reading employees' emails and sign in data remains subject to data protection law.",{"slug":316,"title":317,"shortTitle":318,"definition":319,"status":19,"industries":320,"functions":321,"patterns":322,"audience":301,"autonomy":324,"adoptionStage":82,"evidenceCount":35,"publicEvidenceCount":35,"organizations":325,"bestGrade":40,"headline":87,"lastVerified":50,"indexable":12,"euAiActTier":264,"euAiActBasis":329},"software-vulnerability-remediation","AI for software vulnerability triage and remediation","Vulnerability remediation","AI that takes security findings from scanners, fuzzers and bug reports, filters out duplicates and false positives, reproduces and ranks the real ones, and drafts a code fix with a test for each, which a developer reviews and merges through the normal change process.",[95,272,295],[298,299],[323,29,80],"code-generation","copilot",[326,327,328],"Google","Labelbox","PatientPoint","Drafting and triaging code fixes for an organization's own software is not an Annex III use, and developers, not the public, interact with the system. The software being fixed remains subject to its own security and resilience rules, whoever wrote the fix.",{"slug":331,"title":332,"shortTitle":333,"definition":334,"status":19,"industries":335,"functions":336,"patterns":338,"audience":244,"autonomy":32,"adoptionStage":82,"evidenceCount":145,"publicEvidenceCount":145,"organizations":340,"bestGrade":107,"headline":346,"lastVerified":50,"indexable":12,"euAiActTier":350,"euAiActBasis":351},"call-quality-and-compliance-monitoring","AI quality and compliance monitoring of every customer interaction","Call quality and compliance","Automated quality assurance that transcribes and scores every customer interaction, voice and chat, against the organization's own rubric, checking required disclosures and script adherence, flagging conduct and mis selling risk, and surfacing coaching opportunities, instead of the small sample a human QA team can review.",[95,21,162,97,96,183],[24,337,25],"regulatory-compliance",[339,80,279],"speech-analytics",[341,342,343,344,345],"British Gas","Central Bank","DoorDash","Oportun","VitalityHealth",{"kpi":347,"label":348,"unit":44,"n":62,"nUpTo":45,"kind":46,"value":349,"qualifier":48,"claimant":112,"organization":341,"vendorReported":12},"quality-score-uplift","Quality score uplift",10,"high","Scoring individual agents' interactions to monitor and evaluate their performance and behaviour falls under Annex III point 4(b), employment and worker management. The Article 6(3) exception does not apply where the system profiles natural persons. Inferring agents' emotions is prohibited under Article 5(1)(f), except for medical or safety reasons. Inferring customers' emotions from their voice is emotion recognition on biometric data: high risk under Annex III point 1(c), and Article 50(3) requires informing the people exposed to it. Analytics that only aggregate interaction themes without evaluating individuals can fall outside the high risk category.",{"slug":353,"title":354,"shortTitle":355,"definition":356,"status":19,"industries":357,"functions":358,"patterns":359,"audience":31,"autonomy":32,"adoptionStage":82,"evidenceCount":124,"publicEvidenceCount":145,"organizations":361,"bestGrade":40,"headline":367,"lastVerified":195,"indexable":12,"euAiActTier":51,"euAiActBasis":369},"travel-and-hotel-booking-concierge","AI travel and hotel booking concierge","Travel and hotel booking concierge","A customer facing AI assistant that turns an open travel question into a concrete trip by searching live inventory for flights, hotels, rentals, cruises and activities, comparing options and answering questions about the property and the booking, then completes or hands off the booking and supports the traveller with changes and questions before and during the stay.",[120],[204,24],[27,360,30,29],"recommendation-and-personalization",[362,363,364,365,366],"Airbnb","Booking.com","Holland America Line","Priceline","Trip.com",{"kpi":133,"label":134,"unit":44,"n":62,"nUpTo":45,"kind":46,"value":368,"qualifier":69,"claimant":49,"organization":363,"vendorReported":11},30,"A customer facing assistant must tell people they are interacting with AI unless that is obvious from the context (Article 50(1), applicable from 2 August 2026). Recommending and booking travel is not listed in Annex III, so it is not high risk; consumer protection law on price transparency and fair commercial practices still applies to what it says.",{"slug":371,"title":372,"shortTitle":373,"definition":374,"status":19,"industries":375,"functions":376,"patterns":377,"audience":31,"autonomy":32,"adoptionStage":82,"segment":378,"evidenceCount":62,"publicEvidenceCount":62,"organizations":379,"bestGrade":40,"headline":87,"lastVerified":50,"indexable":12,"euAiActTier":252,"euAiActBasis":380},"conversational-insurance-quote-and-buy","Conversational AI for insurance quote and buy","Conversational quote and buy","A customer facing AI agent that sells insurance directly in a conversation: it asks the rating questions in plain language, explains cover options, returns a price from the insurer's rating engine, handles objections and takes payment to bind the policy, with a licensed human available for advice and anything outside its limits.",[162],[204,24],[27,29,360,28],"distribution",[168],"The conversational layer carries the Article 50 transparency duty. If the system assesses risk or sets prices for life or health insurance of natural persons, that part is high risk under Annex III point 5(c); pricing for property and casualty products is not listed.",{"slug":382,"title":383,"shortTitle":384,"definition":385,"status":19,"industries":386,"functions":387,"patterns":388,"audience":301,"autonomy":389,"adoptionStage":33,"evidenceCount":207,"publicEvidenceCount":145,"organizations":390,"bestGrade":40,"headline":394,"lastVerified":50,"indexable":12,"euAiActTier":252,"euAiActBasis":396},"live-agent-assist","Real time AI assist for contact centre agents","Live agent assist","A real time copilot for human contact centre agents during a live call or chat: it transcribes the conversation as it happens, surfaces the relevant knowledge and next step, drafts responses, and writes the after call summary and CRM notes, while the agent stays in control of what is said and done.",[95,21,162,96,295,183,272],[24,25],[339,30,279,123],"assist",[39,391,344,392,393],"Definity","SEB","SIGNAL IDUNA",{"kpi":311,"label":312,"unit":44,"n":36,"nUpTo":45,"kind":46,"value":395,"qualifier":69,"claimant":112,"organization":391,"vendorReported":12},15,"As a pure assist tool for agents it is minimal risk; the customer does not interact with the AI. It becomes high risk under Annex III point 4(b) if its data is used to monitor and evaluate individual agents' performance, and inferring agents' emotions at work is prohibited under Article 5(1)(f).",{"slug":398,"title":399,"shortTitle":400,"definition":401,"status":19,"industries":402,"functions":403,"patterns":404,"audience":244,"autonomy":405,"adoptionStage":33,"segment":406,"evidenceCount":407,"publicEvidenceCount":407,"organizations":408,"bestGrade":40,"headline":413,"lastVerified":50,"indexable":12,"euAiActTier":264,"euAiActBasis":414},"real-time-fraud-scoring","Real time fraud scoring for card and instant payments","Real time fraud scoring","Machine learning that decides in milliseconds, without any conversation, how likely each card authorization and account to account payment is to be fraudulent, combining behavioural, device and network signals, so the bank can approve, challenge or block a payment before the money leaves. Working the resulting alerts and talking to the customer about them are separate use cases.",[21,22],[78],[277,278],"autonomous","middle-office",9,[409,38,410,64,411,149,412,86],"ANZ, Commonwealth Bank, NAB, Suncorp Bank and Westpac (BioCatch Trust Australia)","Mastercard","Pay.UK","Stripe",{"kpi":152,"label":153,"unit":44,"n":83,"nUpTo":45,"kind":313,"value":368,"qualifier":69,"claimant":49,"organization":87,"vendorReported":11},"Annex III point 5(b) lists creditworthiness assessment and credit scoring of natural persons as high risk but explicitly excludes AI systems used for the purpose of detecting financial fraud, and payment fraud scoring is not otherwise listed in Annex III or prohibited by Article 5. Behavioural biometrics used only to confirm that customers are who they claim to be fall under the biometric verification exclusion in Annex III point 1(a). The model does not interact with people, so Article 50 does not apply. GDPR Article 22 can still apply to solely automated declines with significant effects on customers.",1790598319398]