AI transparency
Last updated: 19 April 2026 · Per EU AI Act Art. 50
Allegro uses artificial intelligence (AI) to read, classify and summarise contracts. This page describes exactly which AI features are active, which models power them, and what rights you have as a user under EU AI Act Art. 50 and Norway's AI Act (expected in force August 2026).
1. Features that use AI
- Contract extraction — automatic detection of parties, dates, amounts and clauses from PDFs.
- Classification — determines contract type (lease, service, NDA, employment etc.).
- Summarisation — short form of long contracts and key-point lists.
- Chat copilot — question and answer over your own contracts (RAG-based semantic search).
- Task generation — reminders and tasks derived from contract deadlines.
2. Which models we use
All models run inside Microsoft Azure — Norway East (Oslo) or Sweden Central (Stockholm) — via Azure OpenAI. No data is sent to OpenAI the company, and no data leaves the EU/EEA.
| Model | Region | Task |
|---|---|---|
| gpt-4.1 | Norway East | Primary extraction |
| gpt-4.1-mini | Norway East | Validation, summaries |
| gpt-4.1-nano | Norway East | Classification, RAG |
| o4-mini | Norway East | Complex reasoning |
| gpt-5.1 | Sweden Central | Frontier extraction (Enterprise) |
| gpt-5.4-mini | Sweden Central | Frontier validation |
| gpt-5.4-nano | Sweden Central | Frontier classification |
| text-embedding-3-large | Norway East | Semantic search / RAG |
OCR runs on Azure Document Intelligence and local Docling — also in Norway East, never against third-party OCR.
3. Your rights
- Right to human review — every AI-generated extraction can be overridden per field. Contact personvern@allegronordic.com for a formal review.
- Right to opt out of AI summarisation — per contract, call
POST /api/contracts/[id]/analyze?skip=trueto skip AI analysis and just store the PDF. - Right of access — export everything Allegro holds about you via
GET /api/me/exportor from the dashboard. GDPR Art. 20. - Right to erasure — request account deletion via
POST /api/me/delete-request(7-day grace period, Norwegian Bookkeeping Act §13 may extend certain accounting-relevant retention). - Complain to Datatilsynet — the Norwegian Data Protection Authority at datatilsynet.no/en
4. Limitations
- AI output is advisory, not legally binding. You are responsible for verifying extracted values before making decisions.
- AI can hallucinate details or misread complex legal language. AI-generated content is identifiable in context — for example, contract analysis displays extracted values alongside source citations (quotes from the document), and chat responses identify which AI model answered. You can always override extracted values manually or request human review (see §6).
- Allegro's AI use is classified as limited risk under the EU AI Act — we do not make autonomous legal decisions and are not subject to the high-risk obligations.
5. Processors and sub-processors
- Microsoft Azure (Norway East + Sweden Central) — infrastructure, database, AI models
- Azure OpenAI Service — within Azure, not forwarded to OpenAI the company
- Azure Communication Services — email delivery (reminders)
Full Record of Processing Activities available in the admin section (ROPA) for account owners.
EU AI Act Art. 50 · Norwegian AI Act (draft June 2025)