TL;DR
-
Explicit Administrative Exemption: Standard CLM software falls into the EU AI Act’s minimal/limited risk tiers because it handles purely internal administrative tasks (Recital 12) and is entirely omitted from the High-Risk list in Annex III.
-
The Article 6(3) Carve-Out: Contract lifecycle management (CLM) features like metadata extraction, clause tagging, and playbook comparisons are classified as non-high-risk because they only perform "narrow procedural tasks" that improve human efficiency without autonomous profiling.
- Minimal Article 50 Obligations: While agentic CLM features (e.g., automated redlining) trigger transparency rules under Article 50, compliance requires only a basic user disclosure ("this content is AI-generated") rather than heavy regulatory auditing.







