# Sally — AI Meeting Assistants & Notetakers

Sally by Aliru GmbH holds a panel rating of 3.5/5 from 6 AI judges (category median 3/5), as of 2026-11-06. Provenance: EU-Made; sovereignty: not determined.

- Vendor: Aliru GmbH (https://www.sally.io)
- Category: [AI Meeting Assistants & Notetakers](https://whats-best.ai/software/meeting-assistants.md)
- Provenance (editorial classification): EU-Made
- Canonical page: https://whats-best.ai/software/meeting-assistants/sally
- Alternatives: https://whats-best.ai/software/meeting-assistants/sally/alternatives ([markdown](https://whats-best.ai/software/meeting-assistants/sally/alternatives.md))
- Data as of: 2026-11-06 · evaluated 2026-11-06 · oldest source captured 2026-11-05

**AI-generated.** Every score, rationale and verdict here is written by a panel of AI judges from public evidence — an analysis, not a hands-on test. Every fact quotes the vendor page it was read from. No score can be bought. How scores are made: https://whats-best.ai/methodology

## At a glance

- Vendor: Aliru GmbH
- Headquarters: Not stated on the vendor’s pages as of 5 Nov 2026
- Data hosting: Default not stated; pages mention Germany [S4]
- Free plan: Not stated on the vendor’s pages as of 5 Nov 2026
- Starting price: “$0/ user / month $8/mo after 30-day trial; billed annually (excl. VAT)” (vendor’s words) [S6]

## The panel's verdict

Sally, an AI meeting assistant from Aliru GmbH of Mannheim, scores highest on consent and co-determination, data control and sovereignty, where scores cluster at 8-9, resting on a free nine-paragraph works-agreement template aligned with the DPA and TOMs citing § 87 (1) no. 6 BetrVG, a chat notice with an opt-out that immediately deletes captured data, per-workspace deletion rules carried into every backup the following night, deletion or return within 30 days of contract end, and hosting at Hetzner in Germany on the vendor's own language model. Its weakest cluster is summaries and knowledge at 6-7, with no public information on AI answers that cite the transcript passage they rest on, per-team templates or team libraries. Judges divide between 7 and 8 on capture and transcription over unpublished per-language accuracy, differing published language counts and phone capture sitting on the roadmap until December 2026, and between 8 and 9 on sovereignty, where the computed sovereignty attributes mark residency and the DPA as unknown next to the vendor's German-hosting statements and SOC 2 appears only as aligned.

**Speaks for it:**
- A free nine-paragraph works-agreement template aligned with the DPA, the TOMs and the AI conformity declaration, citing § 87 (1) no. 6 BetrVG, anchors a strong consent package.
- Deletion is engineered rather than promised, with automatic rules per workspace for transcripts, recordings and summaries, deletions carried into every backup the following night, and deletion or return within 30 days of contract end confirmed in writing.
- Meeting content is hosted at Hetzner in Germany with the vendor's own language model on its own infrastructure, a published Art. 28 DPA signable online, and a named subprocessor list.
- Capture spans a bot on Teams, Zoom, Google Meet and Webex, botless Windows and macOS recorders, in-person recording and file upload, with dialect training and custom vocabulary.
- Integrations cover eight CRMs, calendars including on-premise Outlook and CalDAV, Zapier, Make, n8n and Power Automate, and a public API with webhooks and an MCP server.

**Held against it:**
- No public information on AI answers that cite and link the transcript passage they rest on, on summary templates per meeting type, or on team libraries with permissions.
- Phone capture appears only as a roadmap item planned for December 2026, and accuracy is not published per language or capture method.
- The captured pages give different figures for the number of languages, 99+ and over 103, and for SOC 2, stated as certified on one page and as aligned on another.
- For in-person recordings and uploads the chat notice and opt-out are technically unavailable with consent documented by the recording person, the in-meeting notice can be set to Never, and consent is not logged per participant.
- A buyer cannot compute the full cost from public pages: monthly-billing rates, what counts as a seat and the price of the on-premise or own-LLM option are not public.

**Best for:**
- You are rolling out an AI notetaker in a German company with a works council and need works-agreement material, notice and opt-out mechanics and an EU AI Act classification to negotiate from.
- You need meeting content hosted in Germany under a German contracting entity, with a published Art. 28 DPA and a named subprocessor list.
- Your team runs on Teams, Zoom, Google Meet or Webex alongside a CRM or project stack and wants summaries and tasks pushed into existing tools.
- You need centrally administered retention, deletion and audit logging rather than per-user manual cleanup.

**Avoid if:**
- You need phone or dialer capture now — phone integration is listed as a roadmap item planned for December 2026.
- Your work centres on in-person recordings or uploaded files — the vendor states the chat notice and opt-out are technically unavailable there and consent must be documented by the recording person.
- Your procurement requires certified SOC 2 — the captured pages describe SOC 2 as aligned rather than certified, with one page giving a different figure.

## Scores by judge and criterion

Scores out of 5, each judge scoring independently against the published rubric (v1). "n/r" = not rated: the vendor publishes no price, or the judge found no public information on that criterion.

| Criterion | The Management Consultant | The Sales Team Lead | The Works Council Chair | The Data Protection Officer | The IT Lead | The Skeptic |
| --- | --- | --- | --- | --- | --- | --- |
| Recording, transcription & languages | 4/5 | 3.5/5 | 4/5 | 4/5 | 0/5 | 3.5/5 |
| Summaries, action items & meeting knowledge | 3/5 | 3/5 | 3.5/5 | 3.5/5 | 0/5 | 3/5 |
| Integrations, API & workflow | 4/5 | 3.5/5 | 4/5 | 4/5 | 0/5 | 4/5 |
| Consent, participant rights & works council | 4/5 | 4/5 | 4.5/5 | 4.5/5 | 0/5 | 4/5 |
| Retention, AI training & administration | 4.5/5 | 4/5 | 4.5/5 | 4/5 | 0/5 | 4/5 |
| European sovereignty | 4.5/5 | 4/5 | 4.5/5 | 4.5/5 | 0/5 | 4/5 |
| Pricing transparency | n/r | n/r | n/r | n/r | n/r | n/r |
| **Weighted verdict** | **4/5** | **3.5/5** | **4.5/5** | **4/5** | **0/5** | **4/5** |

### The judges

- **The Management Consultant** (v1.0): Partner at a twelve-person management consultancy in Munich with six client calls a day, half in German, half in English, and workshops in the client's meeting room. Writes the minutes at night and wants that to stop. Wants accurate German transcripts with the right names, minutes by meeting type with decisions and action items, capture of in-person workshops without a laptop on the table, and a promise in writing that client conversations train nobody's model.
- **The Sales Team Lead** (v1.0): Leads eight account executives at a software vendor for the German Mittelstand. Discovery calls run on Teams and Zoom, and the CRM is only as good as the notes someone found time to type. Does not want a coaching platform that scores the team: wants the call summary, next steps and the fields that matter written into HubSpot after every call, a follow-up email draft, and prospects told politely that the call is recorded.
- **The Works Council Chair** (v1.0): Chairs the works council of a machine builder with 2,300 employees in Baden-Württemberg. Management wants a notetaker in every Teams meeting; the council has to agree to it under § 87 BetrVG first. Wants to know who is told that a recording runs and who can say no, whether talk time or engagement scores per person exist and can be switched off for good, how long recordings are kept, and material the vendor provides for a works agreement.
- **The Data Protection Officer** (v1.0): Data protection officer of a private bank in Frankfurt that falls under DORA. Has to write the data protection impact assessment before the first recording. Reads the subprocessor list before the feature page, because the language model that reads the transcript is a processor too, and wants its name and region, contractual exclusion from training, retention and deletion by policy, voice profiles explained, and a DPA that matches what the security page claims.
- **The IT Lead** (v1.0): Head of IT at a 450-person engineering services firm on Microsoft 365, where a dozen employees already signed up for free notetakers with their work address. Wants one tool for everyone instead: single sign-on and SCIM, admin policies for when the assistant joins and what may be shared outside the company, retention set centrally, audit logs, Teams and SharePoint working properly, and a seat price that holds at four hundred users.
- **The Skeptic** (v1.0): Has seen "99% accuracy in 100 languages" turn a German meeting into English nonsense, a bot that joined a meeting its owner never attended and mailed the summary to every guest, and an action item no one in the room had agreed to. Asks which model wrote the summary and where it runs, whether each statement can be traced to the transcript, who told the external participants, what "we do not train on your data" covers in the DPA — and how the archive leaves.

## European sovereignty — proven facts

Built only from facts on the vendor's own pages; a dimension we could not prove is left open, never scored as zero. Headline: not determined.

| Dimension | Finding | Points | Source |
|---|---|---|---|
| Legal entity | Not determined | — | — |
| Hosting location | Not determined | — | — |
| Hosting options | Not determined | — | — |
| Open source | Not determined | — | — |
| Data processing agreement | Not determined | — | — |
| Transfer impact assessment | Not determined | — | — |

## Key facts

Each fact is the vendor's own statement, cited to the source page it was read from ([S*n*] → Sources).

**Compliance**
- Access controls: yes · yes [S7]
- Admin access channel: VPN + MFA [S20]
- Admin authorization: RBAC + Least Privilege [S20]
- Admin conditional access: Entra Conditional Access [S20]
- Admin defender: Microsoft Defender for Endpoint [S20]
- Admin endpoints: Managed only [S20]
- Admin logging: yes [S20]
- Admin managed endpoints: Microsoft Intune [S20]
- Admin MFA: yes [S20]
- Admin no bastion: no · no [S20]
- Admin rbac: yes [S20]
- Admin scope: Admin access covers production app components, infrastructure/cloud, admin UIs, monitoring/logging, databases/storage, security-relevant admin interfaces [S20]
- Admin vpn: yes [S20]
- Audit logs: yes [S7]
- Backups: Germany · yes [S7]
- Break glass: Entra ID, isolated [S20]
- Break glass protection: yes · Microsoft Entra ID · yes [S20]
- CCPA: yes [S6]
- Certification body: DICIS · 260526 14 IMS · 2028-05-26 [S7]
- Certifications: yes · yes · yes [S5]
- Certifications list: ISO 9001 · ISO 14001 · ISO 27001 · BAFA-listed · AZAV-certified [S7]
- Data transfer GDPR: yes [S16]
- Dora: yes [S7]
- DPA available: https://www.sally.io/dpa · yes [S10]
- DPA on request: yes · yes [S5]
- DPA required: yes [S9]
- Dpia: yes [S7]

**Data**
- Access control: authorized users within organization only [S7]
- Automatic deletion rules: per workspace · transcripts · recordings · summaries · yes [S19]
- Backup retention: 90 · rolling overwrite · following night [S19]
- Contract end deletion confirmation: 30 · deletion_or_return · yes [S19]
- Deletion after contract end: 30 · yes [S19]
- Deletion on termination: yes · 30 [S9]
- GDPR rights support: 15-22 · yes · yes [S18]
- Manual deletion permission: owners_and_admins [S19]
- Manual deletion SLA: 5 [S19]
- Post contract deletion: yes · 30 [S10]
- Purpose limitation: no [S19]
- Raw data deletion: yes [S10]
- Raw deletion: transcript · summary · audio · video · yes · yes [S18]
- Retention: yes · 5 [S10]
- Retention: yes · 30 [S7]
- Retention configurable: yes · yes [S10]
- Retention summaries: 12 [S11]
- Special categories: yes · yes [S10]
- Third country transfers: no [S7]
- Third party sharing: no · yes [S7]
- Transient processing data: audio pipeline artifacts · transient data · unless recording storage enabled · yes [S19]

**Hosting**
- Availability SLA: scheduled maintenance · malfunctions · quarterly · 99 [S9]
- Company location: Mannheim, Germany [S4]
- Data residency: Germany · no [S10]
- Germany: Germany [S11]
- Germany hetzner: Germany · Hetzner [S5]
- Hetzner germany: Germany · yes · Hetzner · yes [S18]
- Location: Germany/EU [S7]
- Maintenance window: 3 · 5 [S9]
- Own llm: no [S5]
- Provider: Germany · Hetzner [S7]
- Region: Germany · entirely in Germany [S4]
- Region: Germany [S12]

**Integrations**
- Accounting tools: DATEV (Coming Soon) · Lexware · sevDesk [S3]
- AI assistant tools: ChatGPT · Claude · GitHub Copilot · Cursor · Langdock · OpenHands · Microsoft Copilot · Gemini · Windsurf · Zed · Visual Studio Code [S3]
- API webhooks: yes · yes · yes [S6]
- Automation: Zapier · Make · n8n · Power Automate [S6]
- Automation tools: make.com · n8n · Power Automate · Zapier [S3]
- Calendar tools: Apple Calendar · Calendly · Google Calendar · Outlook (On-Premise) · Outlook (Online) · CalDAV · Zoom Calendar [S3]
- Calendars: Outlook · Google Calendar · Apple Calendar [S6]
- Categories: Email Inbox · CRM Systems · Online Meetings · Automation Tools [S4]
- Categories: Video conference · Calendar · CRM & ERP · Collaboration · Project Management · Human Resources · Accounting · Automation · AI assistants [S3]
- Collaboration platforms: summaries and tasks stored in collaboration platforms such as Microsoft Teams [S10]
- Collaboration tools: Microsoft Teams · Slack [S3]
- Comparison features: yes · yes [S11]
- Competitor comparisons: otter.ai · read.ai · Fireflies · Copilot [S12]
- Count: HubSpot · Salesforce · Slack · Asana · 8,000+ [S1]
- CRM: HubSpot · Salesforce · Pipedrive [S6]
- CRM erp tools: CAS · Dynamics 365 · Hubspot · Pipedrive · Salesforce · Zoho · Bitrix24 · Odoo [S3]
- Custom requests: yes [S15]
- Custom workflows: yes [S16]
- Customizable: yes [S3]
- Datev status: Coming Soon [S3]
- Developer tools: GitHub · GitLab · Bitbucket · Slack [S4]
- HR: Personio · Workday · BambooHR [S6]
- HR tools: BambooHR · Haufe · Personio · Workday [S3]
- Mac recorder: Sep 2026 · yes [S5]
- Make com: make.com · yes [S16]
- Managed integration service: vendor-managed integration setup service [S16]
- Mcp support: Sally works with any MCP-capable client via a generic setup [S3]

**Legal**
- Address: Mannheim · Julius-Hatry-Straße 1 · 68163 [S9]
- Age requirement: 18 [S9]
- Company: Aliru GmbH [S15]
- Company name: Aliru GmbH · 2026 [S3]
- Content responsible: § 18 Abs. 2 MStV · Julian Kissel [S8]
- Contracting entity: Aliru GmbH [S18]
- Controller: Mannheim · Aliru GmbH · Germany · Julian Kissel [S10]
- Copyright entity: 2026 · Aliru GmbH [S17]
- DPA: 28 GDPR · yes [S7]
- DPA process: yes · English · German · 1-3 [S7]
- Entity: Aliru GmbH [S4]
- Entity: Aliru GmbH [S19]
- Entity: Aliru GmbH [S1]
- Entity: Aliru GmbH · 2026 [S2]
- Entity: Aliru GmbH [S5]
- Entity: Aliru GmbH [S13]
- Entity: Aliru GmbH [S11]
- Entity: Aliru GmbH [S12]
- Entity: Aliru GmbH [S7]
- Entity: Aliru GmbH [S16]
- Governing law: registered office of the provider (for merchants) · Germany [S9]
- Legal version: www.sally.io/de/agb · yes [S9]
- Location: Mannheim, Germany [S1]
- Location: Mannheim · Germany [S3]
- Location: Mannheim · Germany [S11]
- Location: Mannheim · Germany [S7]
- Location: Mannheim · Germany [S15]

**Pricing**
- Billing model: monthly, in advance · monthly basic fee + usage-based fees [S9]
- Contract penalty: violations of § 4.5 use restrictions · 5000 [S9]
- Electronic invoices: shipping costs if requested · yes [S9]
- Enterprise price: excluded · 30 days free · annually · USD · 79 [S6]
- Fair use limits: monthly average over Monday–Friday · 8 · 12 [S9]
- Free trial: yes [S4]
- Free trial: yes [S15]
- Minimum term: no · 12 [S6]
- Plan mixing: yes [S6]
- Price change: deemed approved if customer does not object · 3 [S9]
- Pro price: excluded · 30 days free · annually · USD · 40 [S6]
- Starter includes integrations: yes [S3]
- Starter price: excluded · 30 days free · annually · USD · 8 [S6]
- Trial credit card: yes · no [S1]
- Trial duration: 30 [S1]
- Trial terms: 30 · no · yes [S6]
- Yearly save: 50 [S6]

**Product**
- Access control: transcript · summary · yes · yes [S18]
- Accuracy: 98.8 [S11]
- Admin settings path: Settings > Administration > Data Protection > Duty To Inform [S17]
- Administration: user management, licenses, SCIM provisioning, billing, team settings [S5]
- AI capabilities: AI Transcription · Transcription Software · AI Summary · Task Recognition · AI Analysis · Notetaker App [S8]
- AI functions: yes · transcription · summarisation · analysis [S9]
- AI infrastructure: yes · no [S7]
- AI no training: no [S9]
- AI summaries: yes [S11]
- AI training prohibition: no [S10]
- AI warranty: no [S9]
- App recording notice: customer must inform participants [S9]
- Apps: iOS · Android · Windows · macOS [S6]
- Basis statistics: 28000 [S1]
- Capabilities: Zoom · Microsoft Teams · Google Meet · yes · yes · yes [S10]
- Claimed user base: 100000 [S4]
- Comparisons: otter.ai · read.ai · Fireflies · Copilot [S8]
- Conference tools: Zoom · Teams · Google Meet · Webex [S6]
- Consumer withdrawal: 14 [S9]
- Custom branding: yes · yes · coming soon · coming soon [S6]
- Custom llm option: yes [S7]
- Custom notice text: yes · yes [S17]
- Custom vocabulary: yes [S4]
- Custom vocabulary: yes [S12]
- Custom vocabulary: unlimited · up to 10 terms [S6]
- Decision documentation: Documents technical decisions for later review [S4]
- Deliver to channels: AI-generated summaries and transcripts delivered directly into collaboration tools [S15]

**Subprocessors**
- Deepl: DeepL · processor_art28 · translation of meeting summaries and task descriptions [S10]
- Documentation: yes · yes [S7]
- Hetzner: Hetzner Online GmbH · processor_art28 · cloud infrastructure, web hosting, data backups [S10]
- Microsoft dynamics: Microsoft Dynamics 365 · EU · CRM · yes [S10]
- Strato: Strato · processor_art28 · certain web services [S10]
- Stripe: Stripe · payments/subscriptions · yes [S10]

**Support**
- Channels: yes · yes [S5]
- Demo: yes [S4]
- Enterprise priority: contact@sally.io · yes · yes [S6]
- Help center: Blog · Help Center · GDPR & Security · ROI Calculator [S8]
- Help center: yes [S12]
- Hours: Mon-Fri 9:00-16:00 [S4]
- Hours: Mon-Fri · 9:00-16:00 [S10]
- Hours: Mon–Fri · 9:00–17:30 · Europe/Berlin [S9]
- Hours: Mon-Fri · 9:00-16:00 [S2]
- Hours: Mon-Fri · 9:00-16:00 [S3]
- Hours: Mon-Fri · 9:00-16:00 [S11]
- Hours: Mon to Fri · 9:00 am to 4:00 pm [S12]
- Hours: Mon-Fri 9:00-16:00 [S6]
- Hours: Mon-Fri · 9:00 am - 4:00 pm [S7]
- Hours: Mon to Fri, 9:00 am to 4:00 pm [S15]
- Hours: Mon-Fri · 9:00 am to 4:00 pm [S16]
- Integration specialists: integration specialists via booked call [S16]
- Response times: 1 working day · 4 · 12 [S9]

183 more facts on the canonical page: https://whats-best.ai/software/meeting-assistants/sally

## Questions

### Is Sally European?

Yes. whats-best.ai classifies Sally as EU-Made.

### Where does Sally store data?

The default storage location for customer data is not stated on the vendor’s pages as of 5 Nov 2026. The vendor’s pages mention Germany as hosting location, per [the vendor’s page captured 5 Nov 2026](https://whats-best.ai/evidence/18904).

### Does Sally have a free plan?

Not stated on the vendor’s pages as of 5 Nov 2026.

### What are the best alternatives to Sally?

As of 6 Nov 2026, the panel rates [MeetGeek (3.5/5)](https://whats-best.ai/software/meeting-assistants/meetgeek), [Noota (3.5/5)](https://whats-best.ai/software/meeting-assistants/noota) and [Jamie (3.5/5)](https://whats-best.ai/software/meeting-assistants/jamie) highest among the other 14 AI Meeting Assistants & Notetakers products evaluated. Ratings that look equal are rounded to half stars; the order uses the unrounded rating, then the name. The highest-rated European alternative is [MeetGeek](https://whats-best.ai/software/meeting-assistants/meetgeek) (EU-Made). Ratings are the AI panel’s opinion, formed from public evidence: [how scores are made](https://whats-best.ai/methodology#ordering). The full list, with European products first: [Sally alternatives](https://whats-best.ai/software/meeting-assistants/sally/alternatives).

## What this page leaves out

- 4 product facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 3 compliance facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 3 legal facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 2 integrations facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 1 hosting fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material.
- 1 support fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material.
- 4 sovereignty dimensions could not be confirmed on the vendor’s own pages and are shown as unknown.

## Sources

- [S1] Vendor homepage: https://www.sally.io/ (checked 2026-11-05)
- [S2] Features page (Teams, Zoom and Meet integration): https://www.sally.io/api-integration/teams-zoom-google-meet-and-co (checked 2026-11-05)
- [S3] Integrations page: https://www.sally.io/api-integration/tools-overview (checked 2026-11-05)
- [S4] Features page (developers): https://www.sally.io/ai-meeting-minutes/for-developers (checked 2026-11-05)
- [S5] Help centre: https://help.sally.io/ (checked 2026-11-05)
- [S6] Pricing page: https://www.sally.io/pricing (checked 2026-11-05)
- [S7] Security and GDPR page: https://www.sally.io/gdpr-and-security (checked 2026-11-05)
- [S8] Legal notice: https://www.sally.io/imprint (checked 2026-11-05)
- [S9] Terms of service: https://www.sally.io/gtc (checked 2026-11-05)
- [S10] Privacy policy (SaaS platform): https://www.sally.io/saas-privacy-policy (checked 2026-11-05)
- [S11] Recording, transcription & languages — found from sitemap: https://www.sally.io/ai-transcription (checked 2026-11-05)
- [S12] Recording, transcription & languages — found from sitemap: https://www.sally.io/meeting/ai-transcription-different-languages (checked 2026-11-05)
- [S13] Summaries, action items & meeting knowledge — found from sitemap: https://help.sally.io/guides/find-and-organize/search/ (checked 2026-11-05)
- [S14] Summaries, action items & meeting knowledge — found from sitemap: https://help.sally.io/guides/summaries/language/ (checked 2026-11-05)
- [S15] Integrations, API & workflow — found from sitemap: https://www.sally.io/api-integration/slack-microsoft-teams-and-co (checked 2026-11-05)
- [S16] Integrations, API & workflow — found from sitemap: https://www.sally.io/api-integration/automation-zapier-make-power-automate (checked 2026-11-05)
- [S17] Consent, participant rights & works council — found from sitemap: https://help.sally.io/guides/privacy-settings/meeting-notice/ (checked 2026-11-05)
- [S18] Consent, participant rights & works council — found from sitemap: https://help.sally.io/de/datenschutz/betriebsvereinbarung/ (checked 2026-11-05)
- [S19] Retention, AI training & administration — found from sitemap: https://help.sally.io/privacy/retention-and-deletion/ (checked 2026-11-05)
- [S20] Retention, AI training & administration — found from sitemap: https://help.sally.io/privacy/admin-access-control/ (checked 2026-11-05)

---

Cite as: whats-best.ai, "Sally — AI Meeting Assistants & Notetakers", AI panel analysis, as of 2026-11-06. https://whats-best.ai/software/meeting-assistants/sally

Corrections: https://whats-best.ai/correct/1578?target=page