Accountants, solicitors and advisers
Most of the AI in an accounting, legal or advisory firm is low-risk under the EU AI Act: drafting, research, meeting notes. The duties are light, but clients now ask. Two things catch firms out: publishing AI-drafted guidance, and client information going into tools nobody approved. Normis handles both and keeps the proof.
What applies to a firm
The risk depends on what you use AI for, not how many people you employ.
Copilot in Word and Outlook, ChatGPT for a first draft, a notetaker in client meetings. None of it is high-risk and none of it needs a label when a person sends the result. Register it, under the general expectation to support your team's AI literacy.
Articles and newsletters on tax changes, legal updates or financial matters, published to inform the public, need a label if AI wrote them, unless a named person genuinely edits them and takes responsibility. A quick sign-off does not count.
If clients or the public can chat with an AI assistant on your site, it must say it is AI at the first interaction. Once it carries your firm's name, check that the notice is there.
See chatbot disclosuresScoring an individual's creditworthiness, or pricing their life or health insurance with AI, is high-risk and also needs a fundamental rights impact assessment. Relevant to brokers and firms that lend. Hiring AI is high-risk too.
AI in hiringHow Normis helps
Tick your tools from the catalogue and answer a few plain questions. Most of what a firm uses comes out minimal, and now you can show it.
The AI use policy template already tells staff not to put confidential or personal information into tools that are not approved for it. Add your approved list and send it round.
Larger clients ask their advisers how they use AI. Your register, policy sign-offs and disclosures come out as one sealed, dated evidence pack.
A client sent you an AI questionnaire? See how to answer it.
Honest scope
Normis covers the EU AI Act: what you use, what applies, the policy, the disclosures and the evidence. It is not a data protection tool, and it does not replace your professional body’s own rules on confidentiality and client consent.
Yes. For drafting, research and summarising, the AI Act asks very little: put the tools on your register and support your team's AI literacy. The bigger questions for a firm are confidentiality and data protection, which the AI Act does not change. A clear policy on which tools are approved for client information covers both.
No. A letter, report or email that a person at your firm reviews and sends to a client is not something the Act requires you to label. The label duty applies to AI-written text published to inform the public on matters of public interest, such as a tax-update article on your website, and only where no named person genuinely edits it.
Yes. The Act has no size threshold. For most small firms the duties are light, and fines for smaller companies are capped at the lower of the two limits in the Act. The free classifier shows which obligations are actually yours.
No. Your regulator or professional body may have its own expectations on AI, confidentiality and client consent, and those still apply. Normis covers the EU AI Act side and keeps the record.
No. Normis gives you plain-English guidance, templates and a record-keeping system, with the article reference kept next to every answer. It is not a substitute for legal advice on a complex or high-stakes case.
The classifier is free, no signup, no card. List the tools your firm uses and see which obligations are actually yours.