112 × artificial intelligence × the EU AI Act

Who decides it’s an emergency?

Romania’s Special Telecommunications Service has awarded a new 112 platform that must include at least one LLM component or library. Public documents do not yet show where auxiliary automation ends and influence over classification, priority or dispatch begins.

!This page does not claim that the final system will legally be “high-risk”. The effective functions and RADCOM’s technical proposal are not public in enough detail to reach that conclusion.
RON 24.55mvalue of the contract awarded to RADCOMCAN1172992
1+mandatory LLM component/library in the Chatbot/Smart IVR platformcriterion 2.3
12technical points for at least three LLM libraries in totalout of 100 points
02.12.27application date for Annex III high-risk requirementsEU Reg. 2026/1744

The right question

In 112, the question is what authority AI receives.

A similar family of technologies can perform very different public functions. One model can transcribe “my chest hurts”. Another can infer that the call is critical, move it ahead of others and recommend which crew should go.

The technical label does not settle the issue. The boundary is the concrete role of each output: does it merely carry information, or does it change a person’s chance of receiving attention, sooner, and with particular resources?

Where does operator assistance end, and where does AI influence over emergency classification or response priority begin?

The AI Act expressly lists systems intended to evaluate and classify emergency calls, dispatch first response services, or establish dispatch priority as high-risk. It provides exceptions for some narrow or preparatory tasks, but only when the system creates no significant risk and does not materially influence the decision outcome. A provider relying on the exception must document that assessment.

What the procurement proves

A real contract. A real LLM requirement. An operational role that remains only partly visible.

Award notice CAN1172992 became public on 18 August 2026. The contract was signed on 28 July, runs for 20 months, and covers RTT, video, SMS and Chatbot/Smart IVR platforms to be integrated with Romania’s existing 112 system.

24.55

million lei

The value awarded to RADCOM, against an estimated procedure value of RON 38.46 million.

1 → 3

LLM libraries

One was mandatory. One additional library earned 6 points; at least two additional libraries earned 12.

225.52

million lei

The value of the wider 112 programme, run by STS and the Interior Ministry until 6 March 2028.

The LLM criterion was justified by “reliability and general performance”, including modules’ ability to account for context, spoken dialect and terminology. The public award record does not show how many libraries RADCOM proposed, which models they are, which functions they receive, or RADCOM’s score on that criterion.

Government Decision 485/2026 describes an ambition wider than a basic chatbot: AI and ML for conversation, analysis, correlation and prediction to identify the nature of the emergency, its complexity and immediate risks, and to support decisions and resource allocation. This does not prove that every function sits inside the RADCOM contract. It does show why the boundary must be disclosed component by component.

Interactive experiment

Move the boundary of authority.

Follow a fictional emergency call through eight stages. Choose what AI does at each point. The result is not an automated legal opinion; it maps where a function moves from carrying information into evaluation, priority or dispatch.

auxiliary function boundary case / document it likely high-risk use

The categories draw on the AI Act and the Commission AI Act Service Desk’s current examples. Those examples are guidance, not a binding determination of the future STS system.

An important correction

A human in the loop is not a legal eraser.

Current Commission guidance draws the boundary through function. An operator’s ability to confirm or reject an output matters for oversight, but it does not automatically make the system low-risk.

Outside 5(d), in the official example

It transcribes, but does not evaluate.

A system that cleans up or transcribes a difficult call and marks relevant information, without determining urgency or priority, is not treated as an emergency-call evaluation system.

Source: AI Act Service Desk, “Essential services”.

High-risk, in the official example

It listens for danger and helps classify.

A real-time assistant that looks for signs of a life-threatening emergency and helps the call-taker classify severity is high-risk, even when a human operator makes the final decision.

Source: AI Act Service Desk, “Essential services”.

The consequence for 112: “the operator decides” is necessary information, but it is not enough. We need to know what the model produced before the decision, how that output was displayed, and how strongly it structured the human’s options.

What the tender rewarded

Architecture received points. Operational safety needs different measures.

The number of LLM libraries was a material technical criterion. But three models are not automatically safer than one, and the public notice does not show the acceptance matrix for errors that matter in an emergency service.

The 100 points

award criteria
  • Price40
  • 24/7 support14
  • TC conference access12
  • At least 3 LLM libraries12
  • Text-to-speech12
  • Tutorials and lessons5
  • PM experience2
  • Methodology3

Weights and descriptions come from the consolidated procurement record.

1 + 2

One mandatory; two more for maximum points.

STS linked plurality to reliability and performance, including context, dialect and terminology. The public record does not show whether RADCOM offered one, two or at least three libraries, nor how their outputs are combined.

Missed signalsHow many critical signs are not detected or never reach the operator?
MisclassificationHow many cases are wrongly escalated or down-triaged?
msLatencyHow much time does each component add, including at peak demand?
Differential degradationDialect, accent, stress, noise, disability and different types of speech.
24/7AvailabilityWhat level is guaranteed and how does degraded mode work?
FallbackWho takes over, what disappears, and what is logged when outputs conflict?

The implementation meets the law

The high-risk regime becomes applicable during the project.

The 2026 amendment to the AI Act moved the application of Annex III high-risk requirements to 2 December 2027. Romania’s 112 programme runs into March 2028.

  1. The wider 112 programme startsSTS and the Interior Ministry; total funding of RON 225.52 million.
  2. The RADCOM contract is signedRTT, video, SMS and Chatbot/Smart IVR platform.
  3. The general chatbot disclosure rule appliesWhen a person interacts directly with AI, they must be informed, subject to the exceptions in Article 50.
  4. Award notice CAN1172992 is publishedValue: RON 24,548,231; winner: RADCOM.
  5. Annex III high-risk duties applyRisk management, data, logging, documentation, human oversight, robustness, security and accuracy.
  6. Announced end date of the 112 programmeThe regulatory boundary arrives before implementation is due to finish.

Confidence register

What we know. What we do not. What should not be guessed.

Publicly documented

  • The contract was awarded to RADCOM for RON 24,548,231.
  • The platform includes RTT, video, SMS and Chatbot/Smart IVR.
  • At least one LLM component/library was mandatory.
  • At least three libraries in total could earn 12 points.
  • The official programme includes AI/ML assistance, analysis and decision support.
  • The AI Act lists emergency-call evaluation and response prioritisation as high-risk uses.

Not yet publicly documented

  • How many LLM libraries did RADCOM offer and will it deliver?
  • Does the chatbot speak directly to callers or only assist operators?
  • Does it produce scores, categories or severity alerts?
  • Does it recommend resources or alter call priority?
  • What can an operator change, ignore or stop?
  • What Article 6 assessment was made for each component?
  • What are the acceptance thresholds, logs and fallback procedure?
Confidence: very high on the award, the LLM criterion, the programme’s official ambition and the legal text. Deliberately undetermined on the final system’s classification: that depends on the intended purpose, effective workflow and influence of each component.

The missing governance file

The documents with the highest public value.

The public does not need source code or details that expose critical infrastructure. It needs the boundary of authority, acceptance criteria and the allocation of responsibility.

RADCOM’s technical proposalThe LLM components, each role, logical architecture and accepted technical score.
Functional specification 4.2.2.3Inputs and outputs of Chatbot/Smart IVR, and who receives each output.
The AI Act classification assessmentIntended purpose and the reasoning for high-risk status or an Article 6(3) exception.
Testing and acceptance matrixErrors, latency, availability, test populations and rejection thresholds.
Human oversight designWhat operators can change, which warnings they see, how automation bias is managed, and who can stop a component.
Logging and traceabilityWhich output, version, input and human intervention can be reconstructed after an incident.
Fallback and degraded modeBehaviour during unavailability, conflicts between models, or excessive latency.
Provider and deployerWho bears each legal duty: producer, integrator, STS or another actor.

Public instrument

A freedom-of-information request aimed at the real boundary.

The request seeks functional descriptions and governance documents, not vulnerabilities, passwords, network topology or operational details that could endanger the service. It is in Romanian, ready to adapt and send to STS.

Request under Romanian Law 544/2001

Sources and method

The chain of evidence.

Contract facts, programme ambition, legal rule and interpretive examples are kept separate. No fictional interface element is presented as a feature of the contracted system.

Methodological limit: Service Desk examples aid interpretation but do not decide this contract. Legal classification requires the intended purpose and the real workflow. This page should be updated if the technical proposal, full contract, testing matrix or Article 6 assessment becomes public.