Personio under the EU AI Act: where is AI in a DACH SME platform and what does it mean for compliance?

Personio is the dominant HR suite for SMEs in DACH and is gaining ground in the Netherlands. For a long time Personio was positioned as a workflow platform — master data, payroll, absence management — more than an AI system. With the rollout of Personio Conversations, AI sourcing and AI assistance in Recruiter Inbox that story has shifted. For the EU AI Act this means: SME employers using Personio also need to do a feature audit.

This analysis describes Personio's public 2026 AI features, places them against Annex III point 4(a), and ends with vendor questions relevant specifically to the SME context.

What Personio publicly offers

Based on public product pages, release notes and Personio's AI announcements:

• Personio Conversations — candidate and employee communication with AI support
• AI assistance in Recruiting — candidate suggestions, screening summaries, automated email templates
• Sourcing AI — candidate discovery via integrated sourcing tools
• Document AI — automatic extraction from CVs and certificates
• Automation — workflows and triggers, partly rule-based, partly ML
• Performance & Development — newer modules with AI elements for feedback and goals

Personio's position: AI as productivity layer for HR teams of 10-2000 employees. No enterprise-level model documentation like SAP or Workday, but a growing AI presence.

The seven checks applied to Personio

1. Does the AI rank or score candidates?

AI assistance in Recruiting produces candidate suggestions and screening summaries. If those suggestions influence shortlisting, it falls within 4(a). SME employers often use AI suggestions more intensively than large organizations because HR teams are smaller.

2. Does the AI optimize who sees a vacancy?

Personio integrates with more than 600 job boards. AI-driven targeting within those integrations sits partly at platform level (LinkedIn, Indeed), partly in Personio Sourcing. Check which distribution channels you use.

3. Is CV parsing really only parsing?

Document AI parses CVs and extracts fields. So far ordering. If Personio infers skills or bases suggestions on inferred attributes, it is more than parsing and you must document it.

4. Is the chatbot logistical or selective?

Personio Conversations is deliberately designed to answer candidates and employees. For candidate communication during an active application process the line is sharp: if the chatbot supports decisions or advances candidates to next stages based on responses, it falls within 4(a).

5. Does the assessment tool measure behavior or performance?

Personio itself does not offer psychometric assessments. Integrations with TestGorilla, Harver and other assessment vendors fall under the classification of that specific vendor.

6. Does the system continue post-hire?

Yes, Performance & Development and automation around HR matters affect workers. For feedback tools and goals with AI suggestions: review classification under 4(b) once they have material influence on assessments.

7. Can you substantiate the vendor claim?

Personio publishes less detailed AI documentation than enterprise vendors. For SME deployers that means: request in writing what exists, document what is missing, and compensate with your own controls (recruiter training, override procedures).

The classification call

Personio deployments vary widely:

• Personio without active Recruiting AI or Conversations: workflow tool, limited AI Act relevance
• Personio with AI suggestions in Recruiting and Conversations active: defensive starting point is 4(a) high-risk
• Personio with Performance/Development AI in use: 4(b) also in scope

For a Dutch SME employer with 50-500 employees using Personio as one-stop HR suite who has deliberately enabled AI features: yes, you have an Annex III point 4 deployment.

Vendor due diligence for Personio

What to do now

For SME Personio users the practical order: feature audit of your workspace this week, vendor due diligence question in writing within 30 days, SME-proportional documentation via the HR AI hub. No enterprise overkill, but the minimum that a regulator or HR lawyer can verify.