Quick Answer
Free AI summariser tools condense long articles, PDFs and videos into short summaries at no cost. The strongest picks in 2026 are NotebookLM for sourced research, ChatGPT for pasted text, and TLDR This for no-signup URL summaries. All of them omit more than they invent, so spot-check before you rely on one.
What Are the Best Free AI Summariser Tools in 2026?
The best free AI summariser in 2026 depends on one thing: whether you need to verify the summary afterwards. If you do, Google's NotebookLM wins easily, because it cites the exact source sentence behind every claim. If you just want a fast gist with no account, TLDR This and Summarizer.org both take a URL and hand back a summary with nothing asked of you. And ChatGPT's logged-out mode handles pasted text well enough for most everyday jobs.
That's the short answer. The longer one is more interesting, because the gap between these tools isn't really about summary quality any more. Free tiers got genuinely good over the past year. The gap is about whether you can tell when the tool got something wrong, and that's what most roundups skip entirely.
How Accurate Are AI Summaries, Really?
Here's the number that should shape how you use these tools, and it's probably not the one you expected.
A team led by Elham Asgari built a clinician-in-the-loop framework for grading AI summaries and published it in npj Digital Medicine in 2025. Across 18 experimental configurations, clinicians worked through 49,590 sentences of source transcript and 12,999 sentences of LLM-generated output. They measured a hallucination rate of 1.47 percent and an omission rate of 3.45 percent.
Read those two numbers next to each other. Omissions ran more than twice as often as hallucinations. The thing AI summarisers do wrong most often isn't making stuff up. It's quietly leaving things out. And of those omissions, 17 percent were rated major, against 44 percent of the (rarer) hallucinations.
That flips the usual advice. Everyone tells you to watch for AI inventing facts. The bigger everyday risk is that your summary is accurate and incomplete, which is much harder to notice, because nothing in it looks wrong.
Worth being straight about where that study sat, though. It graded clinical notes generated from doctor and patient consultations, running through a purpose-built medical pipeline, not TLDR This chewing on a blog post. The absolute percentages won't transfer to whatever you paste into a free web tool, and a consumer tool with no clinical prompt engineering behind it will almost certainly do worse. What does transfer is the shape of the finding: omission is the dominant failure mode, and it's the one you're least likely to catch.
The one thing never to trust: references. Mikaël Chelli and colleagues checked 471 references across 11 systematic reviews and published the results in the Journal of Medical Internet Research in 2024. Hallucination rates were 28.6 percent for GPT-4 (34 of 119 references), 39.6 percent for GPT-3.5 (55 of 139) and 91.4 percent for Bard (95 of 104). They counted a reference as hallucinated if any two of title, first author or year were wrong. Those are older models, and Bard has since become Gemini, so today's numbers are probably better. Nobody has published figures good enough to skip checking. If a summariser hands you a citation, confirm it exists before you use it.
Does Picking Sentences Beat Rewriting Them?
Not as cleanly as you'd hope, and understanding why explains most of what goes wrong above.
There are two ways to build a summary. Extractive means the tool picks sentences out of the original and staples them together. Nothing gets reworded. Abstractive means the tool reads the thing and writes something new, in its own words. Every tool in this article is abstractive, because that's what large language models do.
The obvious conclusion is that extractive must be safer. If the summary is only ever copied sentences, it can't invent a fact that wasn't there. And that reasoning does hold for one specific failure: a genuinely extractive tool won't hallucinate a statistic or a citation, because it isn't generating text.
But the research says that's a much smaller win than it sounds.
Shiyue Zhang, David Wan and Mohit Bansal ran the study that makes the point, published at ACL 2023 and titled Extractive is not Faithful. They had human annotators work through 1,600 English summaries produced by 16 different extractive systems. Thirty percent had at least one unfaithfulness problem.
How does copying go wrong? Mostly through what gets dropped between the sentences. A pulled sentence says "the effect disappeared in the second group" without the sentence that said which group. A pronoun loses whoever it referred to. Two sentences that sat three pages apart end up next to each other and read as cause and effect. Nothing was invented. The meaning still changed.
Joshua Maynez, Shashi Narayan, Bernd Bohnet and Ryan McDonald documented the other side at ACL 2020 in On Faithfulness and Factuality in Abstractive Summarization, finding the abstractive models they tested highly prone to producing content unfaithful to the source document.
So neither approach is trustworthy by construction. What changes is the shape of the mistake. Abstractive tools, which is everything you'll actually use, fail by rewriting something into a claim the source didn't make. Extractive tools fail by lifting something true into a context where it reads as something else.
The practical upshot is the same either way, and it's the reason the checking section further down exists. Whichever kind of tool produced it, a summary is a claim about a document, not the document. The sentences that look most quotable are exactly the ones worth opening the original to confirm.
Do Summaries Quietly Overstate What a Study Found?
Yes, and this is the failure mode that should worry you most, because nothing in the output looks wrong. The summary reads clean. It's just claiming more than the source did.
Uwe Peters and Benjamin Chin-Yee tested this properly and published it in Royal Society Open Science in 2025. They ran 10 well-known models over scientific texts and compared 4,900 generated summaries against the originals. What they were hunting for wasn't invented facts. It was scope creep: dropping the words that limit a finding, so "participants in this sample showed" quietly becomes "people show."
The numbers are worse than you'd guess.
- DeepSeek, ChatGPT-4o and LLaMA 3.3 70B overgeneralised in 26 to 73 percent of cases, depending on the model and the text.
- LLM summaries were nearly five times more likely than human-written ones to contain broad generalisations, at an odds ratio of 4.85 with a 95 percent confidence interval of 3.06 to 7.70. That's not a marginal effect.
- Newer models tended to do worse than older ones, which is the opposite of what everyone assumes about upgrades.
And here's the part that stings. Explicitly prompting for accuracy didn't fix it. Most models still produced generalisations broader than the source when told to be careful. So the obvious workaround, adding "be accurate" to your prompt, is not the safety net it feels like.
That's worth holding next to the prompting advice further down this page. Chain of density prompting is genuinely good at the omission problem, getting facts back into a summary that dropped them. It is not a fix for scope inflation, because that failure adds confidence rather than losing detail. Different disease, different treatment.
What actually helps is knowing which words to go looking for. When a summary hands you a flat claim, open the source and check for the qualifiers around it:
- Who was studied. One country, one age group, one clinic, 40 undergraduates. A summary that says "people" has usually eaten this.
- Hedging verbs. "May", "suggests", "was associated with". If those turned into "does", "shows", or "causes", the meaning changed.
- Tense and scope. Past tense about one sample becoming present tense about everyone is the classic tell.
- Correlation language. Watch for an association in the paper arriving as cause and effect in the summary.
None of this makes summarisers useless for research reading. It makes them a first pass rather than a citation. If you're going to repeat a number or a finding to anyone else, that's the moment to open the original, and it's usually one paragraph of checking rather than a full reread.
What Happens When AI Summarises the News?
That clinical study above had a real limitation, and it's fair to ask what happens when you point these tools at ordinary web content instead of a purpose-built medical pipeline. As it turns out, somebody ran that experiment at serious scale.
The European Broadcasting Union coordinated it and the BBC led it, published in October 2025 as News Integrity in AI Assistants. Twenty-two public service media organisations across 18 countries, working in 14 languages, had professional journalists grade more than 3,000 AI responses about news. The tools tested were the ones you'd actually reach for: ChatGPT, Copilot, Gemini and Perplexity.
Forty-five percent of the answers contained at least one significant issue.
The breakdown is where it gets useful. Sourcing was the biggest single problem at 31 percent, covering missing attributions, misleading ones, and citations that didn't support the claim attached to them. Major accuracy problems, meaning hallucinated details or outdated information presented as current, showed up in 20 percent. And the spread between tools was wide: Gemini came out worst, with significant issues in 76 percent of its responses, largely on sourcing.
Set that beside the 1.47 percent hallucination rate from the clinical study and you can see how much the setup matters. Same underlying technology, wildly different reliability, because one was a controlled pipeline over a single transcript and the other was a general assistant pulling from the open web. When a summariser has to go and find the source itself, that's where things fall apart. When you hand it the text directly, it does much better.
Two practical things follow. First, pasting the article in beats asking a chatbot what an article said, every time. You remove the retrieval step, which is the step doing most of the damage. Second, the sourcing figure explains why NotebookLM's inline citations keep coming up in this guide. Sourcing is the single most common failure mode across the whole category, and it's the one feature that lets you catch it in seconds.
The one caveat worth stating: this study looked at news queries specifically, where recency and attribution matter more than in most tasks. Summarising a PDF you uploaded yourself is a much easier job than answering "what happened this week." Don't read 45 percent as the failure rate for everything you'll ever do.
Why Do Summaries Get Worse Towards the End?
This one is genuinely useful and almost nobody mentions it.
Errors in long AI summaries are not spread evenly. Joonho Yang, Seunghyun Yoon, Hwan Chang, Byeongjeong Kim and Hwanhee Lee studied exactly this in a 2025 paper titled Hallucinate at the Last in Long Response Generation. Their finding: hallucinations concentrate disproportionately in the latter parts of a long generated response. The model starts strong and drifts.
So if you're going to spot-check one section of a long summary, check the end. That's where the model was running on the least reliable footing. The same logic applies to summaries of long documents: the material from the last third of your source is the most likely to be garbled or missing.
There's a second effect stacked on top of that one, and it runs on a different axis. The Yang finding is about the summary the model writes. This one is about the document it reads. Nelson Liu, Kevin Lin, John Hewitt, Ashwin Paranjape, Michele Bevilacqua, Fabio Petroni and Percy Liang tested where in a long input models actually find things, publishing in Transactions of the Association for Computational Linguistics in 2024 under the title Lost in the Middle. Accuracy traced a U-shape: models used information near the start or the end of the input well, and got noticeably worse at reaching material buried in the middle.
Put the two together and you get a fuller picture than either gives alone. The middle of what you paste in is the part most likely to be skipped over. The end of what comes back out is the part most likely to be wrong. Those aren't the same claim and they don't cancel out, because one is about reading and the other is about writing.
Practical version: paste a 40-page report in one go and the back half gets thin treatment. Split it into three chunks and summarise each separately, and you'll get noticeably better coverage of the later material. It's more clicks. It's also the difference between a summary you can use and one you can't.
Do These Tools Work as Well in Malay, Thai, or Tamil?
No, and this is the gap nobody puts in the marketing. Every accuracy problem covered above gets worse once you move off English, and if you work across Southeast Asia that affects a lot of what lands on your desk.
Start with what the research actually shows. Pritika Rohera, Chaitrali Ginimav, Gayatri Sawant and Raviraj Joshi tested factual accuracy across English and 19 Indic languages in a 2025 paper titled Better To Ask in English?, running GPT-4o, Gemma-2-9B, Gemma-2-2B and Llama-3.1-8B. Two findings matter here. The models answered more accurately in English even when the question was rooted in an Indic context. And they hallucinated more when answering in the low-resource languages. So asking in the local language can cost you twice, once on accuracy and once on invented detail.
The regional picture is thinner still. The team behind SEA-LION, built at AI Singapore with the National University of Singapore and Nanyang Technological University, supports 11 Southeast Asian languages including Indonesian, Malay, Thai, Vietnamese, Burmese, Lao, Filipino, Tamil and Khmer. But their own paper flags a limitation worth sitting with. SEA-HELM, the benchmark built specifically to measure Southeast Asian performance, covers only four of those languages: Indonesian, Vietnamese, Thai and Tamil. Their Gemma-SEA-LION-9B-IT model scored 69.35 on average across those four, and 64.13 across the 31 indigenous languages in the SEACrowd-NLU set.
Read that carefully, because the useful bit is not the scores. It's that most Southeast Asian languages are not being measured at all. If a tool has never been benchmarked in Malay, nobody can tell you how it performs in Malay, including the people who built it. Absence of a bad score is not a good score.
What to actually do about it:
- Summarise in English where the source allows it. If your document is already in English, do not ask for the summary in another language just for convenience. You add a translation step and a hallucination risk in one move.
- For a non-English source, ask for an English summary first. Then translate the summary yourself if you need it. Two clean steps beat one muddy one.
- Spot-check names, places and numbers. These are what degrade first. Local place names and person names are exactly the material the model has seen least of.
- Treat mixed-language documents as the hardest case. A contract that switches between English and Bahasa mid-clause is where summaries quietly drop things.
None of this means the tools are useless outside English. It means the confidence they show is calibrated on English, and it does not drop when the language changes. You have to supply the caution yourself.
Which Tool Should You Pick for Your Job?
Match the tool to the task rather than hunting for one winner:
- NotebookLM for research and anything you'll be held to. Free, takes up to 50 sources per notebook including PDFs and YouTube, and every answer carries inline citations back to the source sentence. The citation trail is the feature, not a nice extra.
- ChatGPT (logged out) for pasted text with zero friction. Good summaries, no account, no email. Tighter limits and no history.
- TLDR This or Summarizer.org for a URL you want gisted in ten seconds. No signup, no depth either.
- Claude when you need the summary to explain what the author actually argues rather than list what the piece covers. Needs a free signup.
- Scholarcy for academic papers, breaking a PDF into structured cards. Free tier is capped at roughly one summary a day.
- ChatPDF for the occasional PDF with no account, at a couple of documents per day.
If you're building a wider free stack, our guide to free AI productivity tools in 2026 covers what pairs well with a summariser, and our roundup of free AI tools with no account required lists the other tools that skip the signup wall.
Advertisement
How Should You Actually Ask For a Summary?
Here's the free upgrade nobody uses. If your tool has a prompt box, the words you type in it matter more than which tool you picked, and almost everyone types "summarise this" and takes whatever comes back.
That default gets you a generic summary that leans heavily on the opening of whatever you pasted. Researchers call that lead bias, and it's the same failure as the end-of-document drift covered above, viewed from the other end: the model over-weights what it read first and thins out from there.
There's a documented fix. Griffin Adams, Alexander Fabbri, Faisal Ladhak, Eric Lehman and Noémie Elhadad published From Sparse to Dense: GPT-4 Summarization with Chain of Density Prompting through the ACL Anthology in 2023. The method is almost silly in its simplicity. You ask for a first summary, then ask the model to rewrite it adding the salient facts it missed, without making it any longer. Repeat a few times. Each pass has to earn space by cutting filler, so detail gets packed in rather than appended.
What they measured is the interesting bit. Compared against a plain prompt, the resulting summaries were more abstractive, showed more fusion of information across the source, and had less lead bias. That last one is exactly the failure you're trying to beat.
The paste-able version, which takes about thirty seconds:
- Round one. "Summarise this in five sentences."
- Round two. "Rewrite that summary at the same length, adding the three most important specific facts you left out. Cut vague phrasing to make room."
- Round three. Run it again. Stop when the additions stop feeling important.
Two more prompts worth knowing, both aimed squarely at the omission problem that this article keeps coming back to:
- Ask what it dropped. "What did you leave out of that summary that a careful reader would want?" It's a strange question to ask software, and it surfaces gaps that reading the summary alone never would, because nothing in an incomplete summary looks wrong.
- Name the sections. Paste the source's headings and ask for a sentence on each. This forces coverage instead of leaving the model to choose what mattered, and it's the same logic as the heading scan in the checking section below, just applied before the summary exists rather than after.
And here's the tradeoff nobody spells out in these roundups. Prompting only works where there's a prompt to write. TLDR This and Summarizer.org give you a button, not a text box, so you get one shot at whatever summary they've decided to produce. That's the real cost of skipping the signup, and it's a bigger deal than the feature lists suggest. If a summary actually matters, paste the text into something that lets you argue with it.
Can You Summarise YouTube Videos for Free?
Yes, and the best free option is one you're probably already looking at. NotebookLM takes a YouTube URL as a source, same as a PDF or a web page, so you can drop a two-hour conference talk in and question it like any other document.
Google's own documentation on adding sources spells out the limits, and they're more generous than most people assume: 50 sources per notebook on the free tier, and up to 500,000 words or 200MB per individual source. That's a lot of talk.
But there are real gaps, and they're the kind that waste your time if you don't know them upfront. Only public videos with captions work, either uploaded or auto-generated. Videos posted in the last 72 hours aren't supported yet. Neither are private or deleted videos, or videos in languages it doesn't cover. Videos with no speech in them aren't supported either, which catches people out with silent screen recordings. So a brand new upload will simply fail, and it won't always be obvious why.
One more thing that almost nobody flags, and it can quietly cost you work. Your YouTube sources aren't permanent. Google's documentation states that if a video is deleted or made private, the source is automatically removed from your notebook within 30 days. So a notebook you built around a conference talk can lose that talk months later, without you doing anything wrong. If a video matters to your research, pull the key quotes into a note of your own instead of trusting the source to still be sitting there.
Here's the part that matters most and gets mentioned least. NotebookLM imports the transcript only, not the visuals. No slides, no charts, no code on screen, no diagrams. If the speaker says "as you can see here" and gestures at a graph, that graph does not exist as far as your summary is concerned. For a talking-head interview that's fine. For a technical talk where half the content lives on the slides, you're summarising maybe 60 percent of it and the tool won't warn you.
Practical read: use it for podcasts, interviews, lectures and panels, where the value is in what people said. For anything demo-heavy or slide-heavy, treat the summary as an index to help you find the timestamps worth watching properly, not as a replacement for watching.
What About Summarising a Meeting or a Recording?
You can, and it's the use case where accuracy drops the most. Not because the summariser is worse at meetings, but because you've quietly added a second place for things to go wrong. With an article you paste text and get a summary. With a recording, the audio has to become text first, and that step makes its own mistakes before the summariser ever sees a word.
So the pipeline is audio, then transcript, then summary. Two stages, two error rates, and they stack. A name misheard in stage one gets confidently carried into stage two, where it now looks like a fact rather than a guess. The summariser has no way of knowing the transcript was wrong, so it never flags it.
And speech recognition is not equally good for everyone, which is the part that matters most for anyone reading this from Southeast or South Asia.
Allison Koenecke and colleagues at Stanford tested five commercial speech recognition systems for a study in PNAS in 2020. Averaged across all five, the word error rate was 0.35 for Black speakers against 0.19 for white speakers. Same systems, same task, nearly double the error rate depending on who was talking. The researchers traced the gap to the acoustic model, which is a polite way of saying the training audio did not contain enough people who sounded like that.
That was five years ago and the models have improved. The pattern has not gone away. Alexander Graham and Nicholas Roll evaluated Whisper across a range of accents and speaker traits for JASA Express Letters in 2024 and found accuracy was consistently higher for native English accents than non-native ones, and higher for read speech than for conversational speech.
Read those two conditions again and picture an actual meeting in Kuala Lumpur or Manila or Bangalore. Non-native accents, conversational speech, several people talking over each other, and a fair amount of code-switching mid-sentence. That's close to the worst case for a transcription model, and it's a completely ordinary Tuesday. The section on how these tools handle Malay, Thai and Tamil covers the same problem on the text side.
None of this means don't use them. It means know which parts of a meeting summary to trust.
What tends to survive the pipeline intact: the general topic, the rough shape of the discussion, whether a thing was contentious, and roughly how much time went to each agenda item. Gist is robust. Small transcription errors mostly wash out at that level.
What tends to break:
- Who said what. Separating speakers is a separate problem from transcribing them, and it fails often, especially on video calls where two people talk at once. An action item attributed to the wrong person is worse than no action item.
- Names. Proper nouns are the single most fragile thing in any transcript, and names that aren't common in English training data fail most. A summary that confidently assigns a task to a colleague whose name got mangled is a real problem in a real inbox.
- Numbers. Budgets, dates, percentages, quantities. These get transcribed wrong at a normal rate and then reported by the summariser with total confidence, because a number looks like a number.
- Decided versus discussed. This is the failure that costs the most. Meetings are full of half-considered suggestions, and a summariser reading a flat transcript often can't tell a firm decision from a thing someone floated and everyone ignored. It flattens both into the same bullet.
- Anything said quietly or at the end. The tail-off problem from the section above applies here too, and meetings have a habit of putting the actual decision in the last four minutes.
The practical routine that fixes most of this takes about three minutes.
Keep the recording. This is the whole trick. A meeting summary is uniquely checkable because the source is still sitting there with timestamps on it. Don't delete the audio the moment you have the summary.
Spot-check the three fragile categories. Names, numbers, and anything phrased as a decision. Jump to the timestamp and listen. You're not re-listening to the meeting, you're checking four or five specific claims, which is the same targeted approach as the section on checking a summary without rereading everything.
Never send action items straight out. Read the assignments before they leave your drafts. This is the one place where an uncorrected error creates work for other people rather than just for you.
Correct the names up front where you can. Several transcription tools let you supply a vocabulary list or participant names in advance. Two minutes of setup removes most of the proper-noun problem for every future meeting.
One more thing that has nothing to do with accuracy. Recording a conversation and running it through a third-party service is a bigger privacy decision than pasting a public article, and consent rules for recording vary a lot across the region. Get agreement in the room before you hit record, not afterwards. The section on what happens to the text you paste in applies with more force here, because a meeting recording contains other people's voices and other people's words, and they didn't choose your tool. If you want to browse what's available in this space, our audio and voice tools category lists the free options.
How Do the Free Limits Compare?
Free never means unlimited. Here's roughly where each one taps out as of August 2026.
| Tool | Signup | Free ceiling |
|---|---|---|
| NotebookLM | Google account | 50 sources per notebook, 500,000 words or 200MB each |
| ChatGPT logged out | None | Message-capped, no history |
| TLDR This | None | URL and pasted text, short output |
| QuillBot | None for basic | About 1,200 words per go |
| Scholarcy | 1 to 3 summaries per day, depending which of its tools you use | |
| ChatPDF | None | About 2 PDFs per day |
Limits move around, so treat this as a starting point rather than a contract. The pattern that holds is that no-signup tools trade features for friction: you get speed and privacy, you lose PDF uploads and structured output.
One thing worth knowing before you hit a wall: NotebookLM's ceiling is per notebook, not per account. So if 50 sources isn't enough, splitting a project across two notebooks costs you nothing. Google's own upgrade documentation is worth reading before you pay for anything, because there isn't one paid tier. There are several, and they're far apart. Plus roughly doubles what you get free: 100 sources per notebook, 200 notebooks, 200 daily chat queries, 6 audio generations. Pro is the one people quote, at 300 sources per notebook, 500 notebooks instead of 100, 500 daily chat queries instead of 50, and 20 daily audio generations instead of 3. So if you've seen that 300 figure floating around and assumed any paid plan gets you there, it doesn't. You'd need the top one. We're deliberately not quoting a monthly price here, because it's bundled into Google's AI plans and the figure varies by country. Check what it actually costs where you are before assuming a number you read somewhere.
What Happens to the Text You Paste In?
Worth asking before you paste your employer's contract into a free web tool. The honest answer is that it depends entirely on the tool, and most people never check.
Free tools have to pay for themselves somehow. Some run ads, some upsell you to a paid tier, and some use what you feed them to improve their models. That last one is the category to think about, because a summariser is unusual: you're not typing a short question, you're handing over an entire document. Whatever was in that document goes with it.
The UK's Information Commissioner's Office has run a consultation series on generative AI and data protection covering exactly this territory, including how purpose limitation should apply across the AI lifecycle. Its position on user data is blunt: any organisation using its users' information to train generative AI models needs to be transparent about how people's data is being used. Transparency is the legal obligation. Reading the resulting policy is on you.
A practical checklist before you paste anything sensitive:
- Look for a training opt-out. Most major tools have one buried in settings. ChatGPT and Claude both let you turn off training on your conversations. If a tool doesn't offer one, assume your input may be retained.
- Logged out isn't the same as private. No account means no history tied to you, but it doesn't automatically mean the text isn't processed or logged. Those are different questions.
- Watch out for the tiny no-name tools. The ones that require nothing and explain nothing are the ones with the least accountability. Convenience and scrutiny tend to move in opposite directions.
- Some documents just shouldn't go in. Client data, medical records, unreleased financials, anything under an NDA. If leaking it would be a problem, a free summariser is the wrong place for it.
None of this means free tools are unsafe for ordinary use. Summarising a news article or a public PDF carries basically no risk. The point is to notice the difference between public content and content that belongs to somebody else, because the tool won't make that distinction for you.
Can a Document Hijack the Summariser?
It can, and almost nobody writing about these tools mentions it. The section above is about your text leaking out. This one runs the other way: text inside the document giving the tool orders.
The trick is simple. A summariser doesn't really distinguish between the document you want summarised and instructions about what to do with it. It's all just text arriving together. So if someone plants a line in a web page or a PDF that reads like a command, the tool may follow it instead of summarising.
The line doesn't have to be visible to you. White text on a white background, a zero-size font, a comment in the page source. You see an ordinary article. The tool sees the article plus an instruction.
This has a name and a research literature. Kai Greshake, Sahar Abdelnabi, Shailesh Mishra, Christoph Endres, Thorsten Holz and Mario Fritz set it out in 2023 in a paper on indirect prompt injection, showing that an attacker who never touches your screen can affect what you get back, simply by putting text somewhere the model will later read.
It's since been written into government guidance. The US National Institute of Standards and Technology covers indirect prompt injection in its 2025 adversarial machine learning taxonomy, NIST AI 100-2e2025, describing it as adversarial instructions hidden in retrieved or tool-supplied content. NIST's listed defences include filtering instructions out of retrieved input, which tells you plainly that the tools themselves are expected to handle this and that not all of them do.
Where this actually touches you:
- Summarising a URL rather than pasted text. The tool fetches the page itself, so whatever's on it arrives unfiltered. Pasting visible text you selected yourself is the safer habit.
- PDFs from somewhere you don't control. A PDF can carry text layers you never see on screen.
- Anything competing for your attention. Job listings, marketing pages, review sites. Wherever there's an incentive to influence a summary, there's an incentive to plant one.
Realistically, you're not being personally targeted when you summarise a news article. The risk is worth understanding rather than worrying about. But there's one tell worth knowing: if a summary reads oddly promotional, skips something you know is in the document, or just doesn't match what you skimmed, don't assume it's ordinary AI vagueness. Open the source.
And the fix is the same one this whole article keeps arriving at. Treat the summary as a lead, not a conclusion.
What If the Document Can't Leave Your Laptop?
Then don't use a web tool at all. Run the model on your own machine instead. The section above tells you what shouldn't go into a free cloud summariser, which is only half an answer, because the contract still needs summarising and the deadline hasn't moved.
The idea is simpler than it sounds. Instead of pasting text into a website, you download a model file once and it runs on your own hardware. Nothing gets uploaded, because there's nowhere for it to go. No account, no terms of service, no opt-out toggle to hunt for in settings. And it stays free after the free tier would have run out, since the only thing you're spending is electricity.
It genuinely works now, which wasn't true a couple of years ago. Khalil, Heilles, Parraga and Heilles benchmarked a quantised 30 billion parameter Qwen3 model on consumer-grade server hardware for an arXiv preprint posted in December 2025, testing latency, tokens per second, time to first token and behaviour under concurrent users. Their conclusion was that a carefully configured on-premises setup with consumer hardware and a quantised open-source model reaches performance comparable to cloud services. Treat that as a directional signal rather than settled fact, since it hasn't been peer reviewed and it's one configuration tested by one team.
Be realistic about the trade, though, because the enthusiast write-ups tend not to be. A model small enough to run on an ordinary laptop is not as sharp as the best free cloud tool. It'll be slower, it'll handle very long documents less gracefully, and setup costs you an evening the first time. Summarising is actually one of the kinder tasks to hand a smaller model, since condensing text you supply is easier than answering from memory, but you should expect a real quality gap rather than a rounding error.
So the sensible split looks like this:
- Public material. News articles, published papers, public reports, your own notes. Use whichever free cloud tool is best. There's no risk to manage here and no reason to make life harder.
- Mildly sensitive material. Internal documents that would be awkward rather than damaging. A mainstream tool with training switched off is a reasonable middle ground, and it's the option most people skip straight past.
- Genuinely confidential material. Client data, NDAs, unreleased financials, medical records, anything covered by a duty of confidentiality. Local, or not at all. This is the category where a free web tool is the wrong instrument no matter how good its summaries are.
One thing worth checking before you install anything: your employer may already have decided this for you. Plenty of organisations now have a written policy on which AI tools are approved for work material, and a fair number of people summarising client documents into free tools have never read it. Ask first. It's a shorter conversation than the one that follows a leak.
The broader principle sits underneath all three rows. The regulators' framing, including the ICO consultation above, keeps returning to the question of whether the data needed to go where it went. Running the model locally is the version of that question with the simplest possible answer.
Does Reading a Summary Actually Help You Learn?
Depends whether you need to know the material or just need to know it exists. And there's now solid evidence that the difference matters more than people assume.
Hamsa Bastani, Osbert Bastani, Alp Sungu and colleagues ran a field experiment with nearly 1,000 high school maths students, published in PNAS in 2025. Students got access to one of two AI tutors: a standard ChatGPT-style interface, or a version built with safeguards to protect learning. While they had access, performance jumped. Grades rose 48 percent with the plain interface and 127 percent with the tutor version.
Then the researchers took the AI away and tested them again. Students who had practised with the plain ChatGPT interface scored 17 percent worse than students who never had access at all. Not just worse than they'd been with the tool. Worse than the control group who'd struggled through unaided.
The crucial detail is that the safeguarded version largely avoided this. So the problem isn't AI. It's frictionless AI standing in for the effortful part, which is where the learning actually happens.
That's a maths tutoring study, not a summarising study, so don't over-extend it. But the mechanism transfers cleanly enough to be worth respecting. Reading a summary instead of a paper feels like understanding the paper. It isn't the same thing, and the gap won't show up until you have to use the material without the summary in front of you.
The practical split:
- Summarise freely when you're triaging. Deciding whether to read something, scanning a stack of papers for the relevant three, catching up on a meeting you missed. This is what summarisers are genuinely great at.
- Read the source when you'll be examined, quoted, or held responsible. Use the summary as a map to find the parts that matter, then read those parts properly.
Using a summariser to decide what deserves your attention is a straightforward win. Using it so you never have to give anything your attention is where the trade shows up later.
Can These Tools Make Dense Text More Accessible?
Yes, and it's probably the most useful thing summarisers do that nobody bothers marketing them for.
The section above asked whether summaries help you learn, and the honest answer there was that it depends what you're trying to do. Accessibility is a different question, and here the evidence is cleaner. The gains are also bigger than anything you get from simply reading faster.
The largest test of this is a randomised study by Theo Guidroz and colleagues at Google, posted to arXiv in 2025. They gave 4,563 people either an original text or an LLM-simplified version, across 31 texts covering six subject areas: biomedical, biology, law, finance, literature and philosophy, and aerospace and computer science. Then they asked multiple-choice comprehension questions.
People who read the simplified version got more answers right. The overall gain was 3.9 percentage points. But the uneven part is the interesting part. On biomedical text from PubMed the gain was 14.6 points. Finance came in at 5.5, aerospace and computer science at 3.8, legal at 3.5.
Look at that pattern for a second. The denser and more jargon-heavy the source, the more the simplification helps. Which means these tools earn their keep most on exactly the documents you least want to read.
People also found it easier going. On a shortened version of the NASA Task Load Index, perceived ease rose 0.33 points on a 5-point scale, and that was statistically significant. The effect also held whether or not participants could refer back to the text while answering, so this isn't just people skimming something shorter and guessing well.
There's a separate strand of work aimed specifically at dyslexic readers. Samay Bhojwani, Swarnima Kain and Lisong Xu published a 2026 arXiv paper building a summarisation pipeline that targets a Flesch Reading Ease score of 90 or higher, tested across roughly 2,000 news articles. Most summaries cleared that threshold within four attempts and many managed it first time. They put dyslexia at roughly 10 percent of the global population, and their argument is that the real barrier is linguistic complexity rather than font and spacing, which is where most accessibility effort has historically gone.
The authors are careful to note that their pipeline still needs testing with actual dyslexic readers rather than readability scores alone. That's a fair caveat and worth repeating rather than burying.
So what does this mean for you? If you read English as a second language, or you have dyslexia or ADHD, or you're just trying to get through a technical document well outside your field, a summariser isn't a shortcut you need to feel sheepish about. It's closer to a ramp. And ask it to explain in plain language rather than just to shorten, because plain language is the part actually carrying the measured benefit.
How Do You Check a Summary Without Rereading Everything?
Rereading the source defeats the point. But given the omission rate is the bigger risk, you do need some check. Three that take under a minute:
- Scan the headings, not the body. Pull the source's section headings and confirm each one shows up somewhere in the summary. Missing sections are the commonest omission and this catches them fast.
- Check the end first. Per the Yang and colleagues finding, the last third of a long summary is where errors cluster. Read that part against the source before you trust the rest.
- Verify every number and every name. Figures and citations are where fabrication shows up. Given the 28.6 percent reference hallucination rate even for GPT-4, treat any reference as unverified until you've seen it.
- Paste the text rather than sending a link. Sourcing was the top failure in the EBU study at 31 percent, and handing the tool the content directly removes the retrieval step where most of that goes wrong.
And use the tool that shows its working when the stakes are real. NotebookLM's inline citations turn a five-minute verification job into a ten-second one, which is worth more than a slightly better-written summary. If you want to compare the underlying models rather than the wrappers, our ChatGPT vs Claude vs Gemini comparison covers how they differ on long-context work. For a full comparison of ChatGPT and Gemini against other AI models, see the ChatGPT vs Gemini breakdown on WhichAIBest.