Scheduling, recall, and the questions the agent must not answer.
Sectors
Every sector adds a layer on top of the European rules.
Germany: active · Netherlands in progress
Article 50 of the AI Act and the GDPR reach every AI conversation in Europe. What differs per sector is the layer above them: a dental practice works under professional-conduct limits on what may be said, a law firm under professional secrecy, a financial client under DORA and MiCA, a public authority under high-risk classification and the sandbox route. These pages set out, per sector, which rules come on top and what Audact does about them.
The five
Which layer sits on which sector.
- Sector
- Dental
- The layer on top
- Professional-conduct rules; health data under Art. 9 GDPR; product liability from 9 December 2026.
- What it changes in the call
- The agent schedules and informs, and hands every clinical question to a person.
- Sector
- Healthcare communications
- The layer on top
- Special-category data, duty of care towards vulnerable callers, the medical-device question.
- What it changes in the call
- Minimal data collection, no clinical advice, and an adapted approach when a caller is in distress.
- Sector
- Legal
- The layer on top
- Professional secrecy, and the confidentiality a client assumes without being told.
- What it changes in the call
- Compartmentalisation is In development; intake and routing only, never advice.
- Sector
- Financial services
- The layer on top
- DORA, MiCA, and the national rules on outbound calling and collection.
- What it changes in the call
- Eligibility decided before the line opens; only approved statements may be made.
- Sector
- Public sector
- The layer on top
- High-risk classification under Annex III, the Article 27 impact assessment, the Article 57 sandbox.
- What it changes in the call
- Disclosure in citizen interactions (in controlled testing), and a record that survives the procurement file.
What stays the same
The base is identical in all five.
Underneath the sector layer, the base is the same across all five. The Article 50 disclosure is spoken inside the flow at the position the policy for that jurisdiction requires; the voice gate is In controlled testing. Germany: national policy layer active. Netherlands: in development. Belgium and Austria: planned. The scope the agent may speak within is enforced while the call runs, so anything outside it is refused rather than improvised. A call leaves a receipt: the input hash, the output hash, the link to the receipt before it, and Merkle inclusion (three values anyone can recompute without a key and without an account; the fourth, inclusion in the Merkle root, is checked against the published root with the inclusion proof from the call's Article 50 report).
What the sector layer changes is the policy on top: which sentences are approved, which questions must be handed to a person, which warnings are compulsory, and which national rules decide whether a call may be placed at all.
Note
Information, not legal advice.
This page sets out the rules as we read them, with the article numbers so you can check us. It is not legal advice, and your own position depends on facts this page cannot know. Take advice from qualified counsel before you rely on it.
Questions
- My sector is not listed. Does that mean Audact does not fit?
- No. These five are the ones documented in depth because they are where the rules bite hardest and where the questions repeat.
- Does a policy pack exist for every country?
- Not yet. The German pack is active, checked by a person against the national text; the Dutch one is in progress. A country layer is only switched on once the national rules behind it have been checked by a person against the national text, because a half-checked pack is worse than no pack. Netherlands and Flanders (BE): intake open. Germany and Austria: intake is a conversation and not a start date.
The same engine, a different policy
What separates the sectors is the policy, not the platform. See how the policy engine decides what an agent may say, refuse, and hand over.
Related
Dental Healthcare communications Patient contact, minimal data, no clinical advice.
Legal Intake and routing, with confidentiality held apart.
Financial services Outbound eligibility and approved messaging.
Public sector High-risk duties and the sandbox route.
The calendar Which European dates already apply.
