AI transparency

Last updated: 9 August 2026

PuroCRM provides AI-assisted features (including content generation, email prioritisation and drafting, call transcription and summarisation, and an assistant). Under the EU AI Act, PuroCRM acts as the provider of the AI system in these features, and the customer organisation (tenant) as the deployer. We do not build our own general-purpose foundation models; instead we rely on third-party models as described below.

Models and providers used

Text generation and assistant: Anthropic Claude and Google Gemini via Google Cloud Vertex AI.
Image generation: Google Gemini image models via Vertex AI.
Speech transcription: ElevenLabs Scribe or Amazon Transcribe (depending on configuration).

Data location and processing

Text and image generation runs in the EU region (Vertex AI eu multi-region). We do not use global endpoints or Google Search grounding.
Your inputs and customer data are not used to train the models.
Usage and cost logs are stored for AI calls (model, action type, token counts). Retention periods are defined for the underlying raw material.

Transparency and human oversight

When you interact with the AI assistant, a clear notice is shown that the interaction is with an AI.
AI-generated content (offers, contracts, campaigns, posts, images) is marked with a machine-readable indicator (e.g. file metadata and email headers).
The AI makes no autonomous final decisions: responses, drafts and suggestions are always reviewed and approved by a human before use or sending.

AI-assisted attachment filing

When a user files an email attachment to a file-storage service they have connected (Dropbox), AI may propose a destination folder, file path and filename. The proposal processes the email's sender, subject and text together with the attachment's filename, MIME type and size. When a user saves their own filing instruction, the AI is additionally given the names of the connected account's folders down to three levels, so that the instruction can be matched to the right folder. The contents of the attachment are not sent to the AI model. Processing takes place in Vertex AI's EU multi-region (eu), as with every other AI feature.

The user reviews the proposed destination before the transfer, and no attachment is transferred to the external file-storage service without the user's confirmation. A short user-interface description is also generated by AI for a saved filing instruction; that function does not process the contents of any attachment.

Labelling of published content (deployer responsibility)

When a customer organisation publishes AI-generated or AI-edited content to the public, it may be obliged to label that content as AI-generated. PuroCRM provides labelling tools for this in the publishing views; the publisher decides whether to apply the label.

Limitations

PuroCRM's AI features are not intended for the high-risk use cases listed in Annex III of the AI Act (e.g. recruitment and employee evaluation, creditworthiness assessment, insurance pricing, or public services) without a separate agreement and assessment.