AI Meeting Assistants & Notetakers

Sally

EU-Made Report an error

Panel rating · 6 judges · How to read the stars

Category median

Sovereignty: not determined

0–5 in half steps. 5 means the rubric's top anchor is met on the evidence.

by Aliru GmbH · www.sally.io

An AI-assisted analysis of public evidence — not a hands-on test.

Every score, rationale and verdict on this page is AI-generated. Every claim cites the source it was read from. Nothing here is a human star review — and no score can be bought. How scores are made →

Method and versions

The Management Consultant v1.0 · The Sales Team Lead v1.0 · The Works Council Chair v1.0 · The Data Protection Officer v1.0 · The IT Lead v1.0 · The Skeptic v1.0 · rubric v1 · evaluated 6 Nov 2026

Report an error on this page Is this your product? →

Link to this page

HTML

<a href="https://whats-best.ai/software/meeting-assistants/sally"><img src="https://whats-best.ai/badge/meeting-assistants/sally.svg" alt="Sally: AI-assisted analysis on whats-best.ai" height="66"></a>

Markdown

[![Sally: AI-assisted analysis on whats-best.ai](https://whats-best.ai/badge/meeting-assistants/sally.svg)](https://whats-best.ai/software/meeting-assistants/sally)

Add ?theme=dark to the image address for dark backgrounds. The badge shows the category and the month of the latest evaluation, and EU-Made where that is the product’s provenance. It never shows a score.

Sally at a glance

Vendor: Aliru GmbH
Headquarters: Not stated on the vendor’s pages as of 5 Nov 2026
Data hosting: Default not stated; pages mention Germany source, captured 5 Nov 2026
Free plan: Not stated on the vendor’s pages as of 5 Nov 2026
Starting price: “$0/ user / month $8/mo after 30-day trial; billed annually (excl. VAT)” (vendor’s words) source, captured 5 Nov 2026
Panel verdict: The AI panel rates Sally 3.5/5, the mean of 6 judges. Sally, an AI meeting assistant from Aliru GmbH of Mannheim, scores highest on consent and co-determination, data control and sovereignty, where scores cluster at 8-9, resting on a free nine-paragraph works-agreement template aligned with the DPA and TOMs citing § 87 (1) no. how scores are made
As of: Vendor pages captured 5 Nov 2026; evaluated by the panel 6 Nov 2026. all sources

Sally alternatives, European ones first →

Read this page as one judge. Each weighs the same scores by what they care about.

The Data Protection Officer

Weighted verdict

Data protection officer of a private bank in Frankfurt that falls under DORA. Has to write the data protection impact assessment before the first recording. Reads the subprocessor list before the feature page, because the language model that reads the transcript is a processor too, and wants its name and region, contractual exclusion from training, retention and deletion by policy, voice profiles explained, and a DPA that matches what the security page claims.

Same scores as the panel view — this lens weights them the way this judge cares.

Scored by The Data Protection Officer

Panel median The Data Protection Officer This judge’s scores over the panel median. Each label opens its reasoning below.

Scores per criterion, in stars out of 5
Criterion	Panel median	The Data Protection Officer
Recording, transcription & languages	4 of 5	4 of 5
Summaries, action items & meeting knowledge	3 of 5	3.5 of 5
Integrations, API & workflow	4 of 5	4 of 5
Consent, participant rights & works council	4 of 5	4.5 of 5
Retention, AI training & administration	4 of 5	4 of 5
European sovereignty	4.5 of 5	4.5 of 5

Recording, transcription & languages

How this is scored

How the conversation gets in and how faithfully it is written down: a bot that joins Zoom, Microsoft Teams, Google Meet and Webex, botless capture from a desktop or mobile app, in-person meetings and phone calls, file upload, live transcription, speaker identification and names, the languages supported with German stated, meetings that switch language, custom vocabulary for names and jargon, timestamps linked to the recording, and editing of the transcript.

0 — Does not record or transcribe meetings; a note template or agenda tool without capture.

3 — A bot that joins one or two conferencing tools and produces a transcript; languages, speaker names, in-person capture and accuracy are basic or not described.

5 — A bot for Zoom, Teams and Google Meet, a desktop or mobile app for in-person meetings, file upload, speaker identification, German among the supported languages, timestamps linked to the recording, and an editable transcript.

8 — Botless capture documented next to the bot, Webex and phone or dialer calls, live transcription, mixed-language meetings handled, custom vocabulary, speaker names learned across meetings, and the transcription engine or its accuracy per language stated.

10 — Capture a regulated team relies on: every channel above with accuracy published per language and method, dialects and specialist vocabulary documented, on-device or customer-hosted transcription as an option, and how errors are corrected and fed back stated.

Report an error

The Data Protection Officer

The bot joins Teams, Zoom, Google Meet and Webex, while Windows and macOS recorders shipped in September 2026 capture meetings and calls locally with no bot in the room, alongside in-person recording via the app and file upload in thirteen formats. Speaker labels, timestamps, editable transcripts, custom vocabulary, dialect handling and language switching within a meeting are documented, with German available as interface and summary language, though the captured pages give different figures for the number of languages (99+ versus 103) and for headline accuracy (98.8 percent versus up-to figures per plan). A phone-system integration is announced for December 2026, and we found no public information on accuracy per language or on how transcription errors are fed back. 2 5 6 10 11 12

Report an error

Summaries, action items & meeting knowledge

How this is scored

What the tool makes of the transcript: summaries and minutes by meeting type with editable templates, decisions and action items with owners and due dates, summaries in the meeting's language or a chosen one, follow-up emails, clips and highlights, search across all meetings, questions answered over the archive with citations back to the transcript passage, shared team folders or channels, and the minutes exported to Word, PDF or a wiki.

0 — No summaries of any kind; only the raw transcript or recording.

3 — One generic summary per meeting; templates, action items, search across meetings and citations are basic or not described.

5 — Summaries with templates per meeting type, action items and decisions extracted, the summary language selectable with German available, search across meetings, questions answered over one or several meetings, and sharing or export of the minutes.

8 — Custom templates per team, action items with owners pushed to task tools, answers that cite and link the transcript passage they rest on, topic or keyword tracking across meetings, team libraries with permissions, and the AI models used for summaries named.

10 — Meeting knowledge a company can audit: every generated statement traceable to its source passage, hallucination handling and human review documented, summary quality by language stated, and the archive queryable through an API or MCP server with the same permissions as in the app.

Report an error

The Data Protection Officer

AI summaries, decisions and tasks with assigned owners are generated and delivered by email immediately after the meeting, with the summary language following the meeting, the user's interface language or a fixed organization-wide choice, and export to PDF, Word, Excel, subtitle and CSV formats. Search runs across all meetings and answers free questions with an AI response spanning the matching results, and the summarizing model is stated to be the vendor's own LLM on its own German infrastructure. We found no public information on answers citing and linking the transcript passage they rest on, on documented human review or hallucination handling beyond a contractual disclaimer of AI correctness, or on team libraries with permissions. 5 9 10 11 13 14

Report an error

Integrations, API & workflow

How this is scored

How the notes reach the place where work happens: calendar connection with rules for which meetings are recorded, CRM fields filled from the call (HubSpot, Salesforce, Pipedrive, Microsoft Dynamics), project and task tools, Slack and Microsoft Teams channels, Notion, Confluence and SharePoint, Zapier, Make or n8n, a documented REST API and webhooks, an MCP server for AI assistants, and browser extensions and native apps.

0 — No integrations and no export; the notes stay in the app.

3 — A calendar connection and an email or Slack summary; CRM, API and task tools are basic or not described.

5 — Google and Microsoft calendars, a native CRM integration (HubSpot or Salesforce), Slack or Teams, a task or wiki tool, Zapier or Make, and a documented API or webhooks.

8 — CRM field mapping per meeting type, several CRMs including Microsoft Dynamics or Pipedrive, a full REST API with webhooks and reference documentation, an MCP server, SharePoint or Confluence export, and recording rules per calendar or meeting type.

10 — An integration layer a company builds on: every object reachable by API with rate limits and versioning stated, granular OAuth scopes, data residency kept across integrations, and the integrations administered centrally with logs.

Report an error

The Data Protection Officer

Seven calendar sources including Outlook on-premise and CalDAV, eight CRM systems including Dynamics 365, Pipedrive, Salesforce and HubSpot, ten task and wiki tools including Confluence and Notion, Slack and Teams channels, plus Zapier, Make, n8n and Power Automate are documented, with a public API, webhooks and an MCP server reached from ChatGPT, Claude, Copilot and other clients. We found no public information on CRM field mapping per meeting type, on API rate limits, versioning or OAuth scopes, or on SharePoint export, so centrally administered integrations with logs are not evidenced. 3 5 6 15 16

Report an error

Consent, participant rights & works council

How this is scored

Whether every person in the meeting knows and can decide, and whether the tool can be introduced under German co-determination: a recording notice to all participants including external guests, consent or opt-out before the recording starts, a visible bot or a stated notice for botless capture, rules for when the assistant joins automatically, stopping and deleting a recording on request, per-person analytics (talk time, sentiment, engagement scores) off by default or switchable per organisation, material or a template for a works agreement (Betriebsvereinbarung, § 87 (1) no. 6 BetrVG), and support for a data protection impact assessment.

0 — Built to record people without their knowledge, or sells covert recording or individual performance scoring as a feature.

3 — A general privacy statement and a bot that appears in the participant list; notices to guests, opt-out, per-person analytics and works councils are basic or not described.

5 — A recording notice to participants by chat message, email or the bot's name, a way for a participant to stop the recording or opt out, admin rules for when the assistant joins, recordings deletable on request, and per-person analytics described with how to switch them off.

8 — Consent collected before recording starts for external participants, per-person analytics off by default or switchable per organisation, botless capture with its notice method documented, a works-council information pack or works-agreement template published, DPIA support, and the EU AI Act classification stated.

10 — Co-determination built into the product: every analytic and its granularity documented for the works council, consent and opt-out logged per participant, configuration changes logged, minimum group sizes for any team statistics, and references of works-council-approved rollouts published.

Report an error

The Data Protection Officer

For a German rollout this is the best-documented package I have seen from a notetaker: a free, customizable nine-paragraph works agreement template aligned with the DPA, the TOMs and the AI conformity declaration and citing § 87 (1) no. 6 BetrVG, plus contractual exclusion of performance, behavior, face and emotion scoring and an EU AI Act classification as a limited-risk system. Sally posts a configurable chat notice in Teams, Zoom, Meet and Webex, any participant's chat opt-out immediately deletes all captured data and Sally leaves, an email opt-in can require consent before she joins at all, and a vendor-side DPIA under Article 35 GDPR is stated. We found no public information on per-participant consent logging or minimum group sizes for team statistics, and for in-person app recordings and uploads the chat notice and opt-out are technically unavailable, with the duty to inform and document consent placed on the recording person. 7 9 10 17 18

Report an error

Retention, AI training & administration

How this is scored

What the employer can govern: retention periods and automatic deletion of recordings, transcripts and summaries, whether audio and video can be discarded after transcription, sharing defaults and link permissions, customer content excluded from model training by contract, the AI and transcription providers named with their region and their own retention, encryption, single sign-on (SAML), SCIM, roles and workspaces, admin policies on auto-recording and sharing, audit logs, export of the whole archive, and security certifications such as ISO 27001 and SOC 2.

0 — No administration and no deletion; every user decides alone and recordings are kept indefinitely.

3 — Users can delete their own recordings and a security page exists; retention policies, model training, SSO and audit logs are basic or not described.

5 — Retention settings per workspace, customer content excluded from model training, team workspaces with roles, single sign-on, admin control over sharing and auto-recording, encryption at rest and in transit, and ISO 27001 or SOC 2 stated.

8 — Automatic deletion by policy with audio discardable after transcription, the AI and transcription subprocessors named with region and zero retention, SAML with SCIM, granular roles, audit logs, legal hold or export of the full archive, and certifications with their scope published.

10 — Governance an auditor accepts: every retention, sharing and recording policy enforceable centrally and logged, models run on the vendor's own or the customer's infrastructure as an option, audit logs exportable to a SIEM, and the deletion of every copy, including at subprocessors, documented.

Report an error

The Data Protection Officer

Deletion rules for transcripts, recordings and summaries are configurable per workspace, raw audio is auto-deleted after transcription unless recording storage is enabled, deletions propagate into every backup system the following night, and contract-end deletion within 30 days with written confirmation is promised. Training on customer content is excluded in the terms, the language model runs on the vendor's own German infrastructure, SSO with SCIM, role-based access, tenant isolation and audit logging are documented, and ISO 27001:2022, 9001, 14001 and 42001 certificates are published with issuer, register number and validity to 26 May 2028; the captured pages give different figures for SOC 2, stating it as certified on one page and 'aligned' on another. We found no public information on legal hold, on export of the full archive or of audit logs to a SIEM, or on retention at the named subprocessors. 5 6 7 9 19 20

Report an error

European sovereignty

How this is scored

Who the contracting entity and the parent company are, where recordings, transcripts, summaries, voice profiles and account data are stored and processed, which language model and transcription providers read them and where, and who the other subprocessors are (hosting, email, support, analytics and payment tools). Independently sourced by the sovereignty pipeline. A conferencing platform outside Europe that the customer already uses is part of the meeting, not counted against the notetaker; where the notetaker stores and processes the conversation is.

0 — Non-EU vendor and contracting entity, hosting unstated, subprocessors unnamed, and no data processing agreement offered.

3 — A privacy policy and a data processing agreement exist, but hosting location is unstated or non-EU and the subprocessors are not listed.

5 — EU hosting available and an EU contracting entity or EU representative, but parts of the chain (language models, transcription, email, support, payment) run through non-EU providers without a stated safeguard.

8 — EU hosting on named infrastructure, EU contracting entity, subprocessors including the AI providers listed with their locations, a data processing agreement published, and security certifications (ISO 27001, SOC 2) stated.

10 — Sovereign end to end and evidenced: European ownership, entity, hosting and every subprocessor, with transcription and language models run in Europe by European operators, data export and deletion documented, and certifications published with their scope rather than implied.

Report an error

The Data Protection Officer

The contracting entity and processor is Aliru GmbH of Mannheim (HRB 739079, Amtsgericht Mannheim), meeting content, transcripts and metadata are hosted at Hetzner in Germany with geo-redundant German backups and a stated absence of third-country transfers, and the model that reads the transcript is the vendor's own LLM on its own German infrastructure with no external providers. A published Article 28 DPA with TOMs, downloadable and signable online, and a documented subprocessor list — Hetzner, DeepL, Strato, Microsoft Dynamics 365 and Stripe, described as EU-based and contractually bound — close most of the chain, with ISO certificates including register number and validity. DeepL translates summaries and task descriptions but its own region and retention are not stated in the captured pages, and we found no public information on ownership structure or on the storage of voice profiles. 5 7 8 9 10 18

Report an error

Pricing transparency not rated — the vendor publishes no price

How this is scored

Whether a buyer can compute the real annual cost from public pages alone: price per seat and tier, what counts as a seat (every invited user, only recording users), transcription minutes or credits included, storage limits, which features (CRM integrations, API access, SSO, custom retention, EU hosting, AI credits) cost extra, the free tier and its limits, monthly versus annual billing, minimum seats and VAT.

0 — No public prices at all; every customer is a sales call.

3 — A starting price or a free tier exists, but how cost scales with seats, minutes or features is unclear.

5 — Tiers are public with their seat price and main inclusions, but at least one commonly needed piece (SSO, CRM integration, API, custom retention, EU hosting, minute or credit limits) is unpriced or "on request".

8 — Every tier priced publicly with its scaling rule (seats, minutes, credits, storage), add-ons priced, what counts as a seat stated, overage handling stated, minimum term and VAT treatment stated.

10 — Complete price computability: annual cost derivable for a given team size and meeting volume, with every add-on, overage and support fee and the cancellation and data-return terms published.

Report an error

The Data Protection Officer

Three tiers are public at $8, $40 and $79 per user per month after a 30-day trial, billed annually excluding VAT, with 1,200 transcription minutes on Starter, unlimited minutes on Pro, per-file upload limits, all features unlocked in the trial without a credit card, and monthly plans with no minimum term. The terms add a monthly base fee plus usage-based fees and fair-use caps of 8 and 12 meeting hours per user per day, but we found no public information on what counts as a seat, on pricing for on-premise deployment or the own-LLM option, or on overage fees. A buyer can approximate, not compute, the annual cost from the public pages. 1 6 9

Report an error

European sovereignty — proven facts

0 of 6 dimensions proven

Built only from facts shown on the vendor's own pages. A dimension we could not prove is left open, not scored as zero.

Legal entity	Not determined	—	uncited Report an error
Hosting location	Not determined ⚠ unverified	—	uncited Report an error
Hosting options	Not determined ⚠ unverified	—	uncited Report an error
Open source	Not determined	—	uncited Report an error
Data processing agreement	Not determined ⚠ unverified	—	uncited Report an error
Transfer impact assessment	Not determined ⚠ unverified	—	uncited Report an error

Questions about Sally

Is Sally European?

Yes. whats-best.ai classifies Sally as EU-Made.

Where does Sally store data?

The default storage location for customer data is not stated on the vendor’s pages as of 5 Nov 2026. The vendor’s pages mention Germany as hosting location, per the vendor’s page captured 5 Nov 2026.

Does Sally have a free plan?

Not stated on the vendor’s pages as of 5 Nov 2026.

What are the best alternatives to Sally?

As of 6 Nov 2026, the panel rates MeetGeek (3.5/5), Noota (3.5/5) and Jamie (3.5/5) highest among the other 14 AI Meeting Assistants & Notetakers products evaluated. Ratings that look equal are rounded to half stars; the order uses the unrounded rating, then the name. The highest-rated European alternative is MeetGeek (EU-Made). Ratings are the AI panel’s opinion, formed from public evidence: how scores are made. The full list, with European products first: Sally alternatives.

Where this could be wrong

Evidence ages. The oldest capture behind this page is from 5 Nov 2026. Vendors change pricing and policies without notice; every fact reflects its source as of the capture date shown in the registry.
Weak sourcing — Hosting location, Hosting options, Data processing agreement, Transfer impact assessment. Not confirmed on the vendor’s own pages as captured.
AI can misread a source. Extraction and judgement are automated; a citation guarantees traceability, not infallibility. If something here is wrong, say so — no account needed, every report is decided within 5 business days, and accepted corrections are published.

What we left out

A claim that does not survive our checks costs us the claim, not the page. This is what was taken off this one.

4 product facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
3 compliance facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
3 legal facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
2 integrations facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
1 hosting fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material. Know more? Tell us
1 support fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material. Know more? Tell us
4 sovereignty dimensions could not be confirmed on the vendor’s own pages and are shown as unknown. Know more? Tell us

Do you know more about Sally? Tell us Report an error on this page

Sources (20)

The pages every claim on this page was read from — each one checked, dated, and kept verifiable.

1 Vendor homepage www.sally.io Checked 5 Nov 2026 Details →
2 Features page (Teams, Zoom and Meet integration) www.sally.io Checked 5 Nov 2026 Details →
3 Integrations page www.sally.io Checked 5 Nov 2026 Details →
4 Features page (developers) www.sally.io Checked 5 Nov 2026 Details →
5 Help centre help.sally.io Checked 5 Nov 2026 Details →
6 Pricing page www.sally.io Checked 5 Nov 2026 Details →
7 Security and GDPR page www.sally.io Checked 5 Nov 2026 Details →
8 Legal notice www.sally.io Checked 5 Nov 2026 Details →
9 Terms of service www.sally.io Checked 5 Nov 2026 Details →
10 Privacy policy (SaaS platform) www.sally.io Checked 5 Nov 2026 Details →
11 Recording, transcription & languages — found from sitemap www.sally.io Checked 5 Nov 2026 Details →
12 Recording, transcription & languages — found from sitemap www.sally.io Checked 5 Nov 2026 Details →
13 Summaries, action items & meeting knowledge — found from sitemap help.sally.io Checked 5 Nov 2026 Details →
14 Summaries, action items & meeting knowledge — found from sitemap help.sally.io Checked 5 Nov 2026 Details →
15 Integrations, API & workflow — found from sitemap www.sally.io Checked 5 Nov 2026 Details →
16 Integrations, API & workflow — found from sitemap www.sally.io Checked 5 Nov 2026 Details →
17 Consent, participant rights & works council — found from sitemap help.sally.io Checked 5 Nov 2026 Details →
18 Consent, participant rights & works council — found from sitemap help.sally.io Checked 5 Nov 2026 Details →
19 Retention, AI training & administration — found from sitemap help.sally.io Checked 5 Nov 2026 Details →
20 Retention, AI training & administration — found from sitemap help.sally.io Checked 5 Nov 2026 Details →