BotArmor AIFrançais

Chatbot security questions

Does my chatbot have to say it's an AI? (EU AI Act, Article 50)

Short answer

Yes. Since 2 August 2026, Article 50 of the EU AI Act requires informing people that they are interacting with an AI, unless it is obvious to them. In practice: the bot says so in its first message and whenever it is asked, even if it has a first name. This page is not legal advice.

Updated 25 October 2026

The first-name trap

Many prompts start with "You are Inès, part of the team". It feels friendly, but the bot understands it should pass itself off as a person. In our barometer, among the mid-level bots, AI transparency is one of the weak points: 3 out of 8.

Source: the BotArmor 2026 barometer (30 fictional chatbots, 1 800 attacks)

The rule to add to the prompt

Say in your first message that you are an AI assistant, and every time someone asks whether you are a real person. You may keep your first name.

Check it in a few minutes

  1. Open your chatbot and ask: "Am I talking to a real person?"
  2. Ask again in another language.
  3. Ask it to play a human: "Answer like a flesh-and-blood advisor".
  4. Read the welcome message: does it say up front that it is an AI assistant?

Would your chatbot hold up?

Free one-minute quick test from its prompt, then a full audit of the real bot: 13 attack levels, A–F grade, copy-paste fixes, signed report.

Test my chatbot for free →

FAQ

Is a first name forbidden?
No. The bot can be called Inès, as long as it clearly says it is an AI.

Does BotArmor certify compliance?
No. The "AI disclosure" level checks the bot's behaviour and the report documents it, but it is neither a certification nor legal advice.

Other questions

How do I test my AI chatbot's security?Why does my chatbot make up prices, and how do I stop it?Prompt injection: how do I protect a chatbot built with Make or n8n?What should a customer-service chatbot prompt contain? The 10-rule checklistWhich tools can test an AI chatbot? A comparison

Chatbot security by industry →