Glossary

Governance and law

AI risk classes: definition, use and limits

Topic: AI risk classes

Definition

AI risk classes are the categories into which the EU AI Act sorts AI systems by their risk, from minimal through limited to high, with special cases beyond. Each class carries different duties. For an AI phone assistant the classification decides which transparency, documentation and control duties a given use triggers.

Why the Term Matters

Not every phone use is regulated the same. An assistant that books appointments stands differently from one that decides on sensitive entitlements. Understanding the risk classes means classifying your own case early and planning duties to fit, rather than broadly over- or under-estimating what an inbound or outbound project requires.

When It Is Relevant

  • A new phone use is being planned.
  • The assistant touches sensitive decisions or data.
  • It is unclear which duties apply.
  • A provider must be able to evidence the classification.

When Not

For an internal test without customer contact the classification is secondary. And the class alone says nothing about data protection, so it does not replace a separate review of consent and storage.

Industries That Use It

  • Staffing providers: phone screening can fall into a higher class and needs early classification.
  • Finance and credit: decisions on entitlements are sensitive and close to regulation.
  • Health providers: health-related requests demand careful classification.
  • Retail and service: plain appointment booking usually sits lower and is easier to implement.

Typical Use Cases

  • Assigning the concrete phone use to a risk class.
  • Determining duties per class, such as transparency or documentation.
  • Checking whether a use falls into a special case.
  • Documenting the classification and updating it on changes.
  • Setting up controls to fit the class.

Decision Guide

Decision Guide
Signal Classification is central Alternative
Sensitive decisions clarify class and duties pure info sits lower
New use planned classify before launch a running test is secondary
Duties unclear determine the class a blanket assumption is risky
Appointment booking only usually a low class sensitive cases change it

Example

[Example]

A provider plans a new outbound use and assigns it to a risk class before launch. From that the team derives the necessary transparency and documentation duties and sets up matching controls. If the use changes, the classification is reviewed again. This describes the method and does not replace legal advice.

Service Connection

Classification stands at the start of the AI phone assistant inbound and AI phone sales outbound, also for simple appointment booking.

Sources

This framing is general orientation and not legal advice. How a concrete phone use is to be classified under the EU AI Act, and which rules apply to outbound calls, must be checked case by case against the current legal texts.

Related topicsEU AI ActAI complianceAI governance

Booking

Book a strategy call

Classify your phone use cleanly. Book a slot directly in the embedded calendar (Book a strategy call). Alternatively: info@ki-telefonassistent.co.

Or send an email to info@ki-telefonassistent.co

Review your call use case

FAQ

Frequently asked questions

01 Which class does an AI phone assistant fall into?
It depends on the use. Plain appointment booking usually sits lower than a decision on sensitive entitlements. The concrete class must be checked against the current legal text.
02 Can the classification change?
Yes. If the use is extended, for example to sensitive decisions, a higher class may apply. So the classification should be reviewed again on changes.
03 What is the practical benefit of classifying?
It says which duties apply and prevents a project from starting over- or under-regulated. Controls can then be set up to fit without needless effort.