Terms of Service

AIGov / Terms of Service

(“Terms”)

These Terms govern access to and use of the AIGov Platform provided by AIMLGov s.r.o., company ID: 29742188, registered office at Příčná 1892/4, Nové Město, 110 00 Praha 1, Czech Republic (“Provider”), by the customer identified in the applicable Order Form (“Customer”). These Terms, the applicable Order Form, and the annexes incorporated by reference form one agreement between the Provider and the Customer. By entering an Order Form or using the Application, the Customer agrees to these Terms.

DEFINITIONS

For purposes of these Terms:

“AIGov Core” means the open-source component of the AIGov product made available by the Provider under the GNU Affero General Public License version 3 or another open-source license identified by the Provider.

“AIGov Platform” means the Provider’s proprietary commercial platform made available as software-as-a-service or, if expressly agreed in an Order Form, in another deployment model.

“Application” means the AIGov Platform made available to the Customer under the applicable Order Form, including its hosted interface, modules, APIs, integrations, user management features, updates, and related proprietary technology. Unless expressly agreed otherwise, the Application does not include AIGov Core, Open-Source Components, third-party services, or professional services.

“Authorized User” means an employee, contractor, consultant or other individual authorized by the Customer to access or use the Application.

“Customer Data” means data, records, documents, configurations, metadata, prompts, logs, model documentation, risk classifications, user inputs, integration data, evidence packs, and other materials submitted to, processed by, or generated through the Application by or on behalf of the Customer.

“Customer System” means any AI system, AI agent, agentic workflow, multi-agent system, machine learning model, automated decision-support system, data pipeline, model configuration, deployment, application, service, infrastructure component, or related technology developed, operated, deployed, monitored, governed, or otherwise used by or on behalf of the Customer.

“Open-Source Components” means AIGov Core and any third-party software, libraries or components made available under open-source licenses.

“Order Form” means an order form, subscription order, purchase document, or other commercial document agreed between the parties that identifies the Application, subscription term, fees, deployment model, usage limits, support level, service levels, license scope, and any special terms.

“Output” means any report, documentation, summary, classification, risk score, governance record, audit export, recommendation, generated text, evidence pack, or other output generated by or through the Application.

“Services” means support, maintenance, hosting, onboarding, implementation assistance, integration assistance, professional services, or other services provided by the Provider as specified in the applicable Order Form.

DESCRIPTION

The Application is described in Annex 1 and the applicable Order Form. The Provider may update, improve, modify, replace, or discontinue features, provided that such changes do not materially reduce the core functionality of the Application during the applicable subscription term.

The Application is provided primarily as SaaS unless the Order Form expressly specifies a self-hosted, private cloud, on-premise, customer-managed, or hybrid deployment. For any non-SaaS deployment, the Order Form must specify the license scope, permitted environment, hosting responsibilities, support model, update policy, and security responsibilities.

Support and service levels are governed by Annex 3 and the applicable Order Form.

Unless expressly agreed in a separate written agreement, these Terms do not grant the Customer any right to resell, distribute, white-label, sublicense, commercialize, or make the Application available to third parties in any form including any white-label arrangement. White-label, reseller, distributor, marketplace, OEM, or partner arrangements require a separate written agreement.

LICENSE AND RESTRICTIONS

Subject to the Customer’s compliance with these Terms and payment of all applicable fees, the Provider grants the Customer a limited, non-exclusive, non-transferable, non-sublicensable right during the applicable subscription term to access and use the Application solely for the Customer’s internal business purposes.

The Customer shall not, except to the extent expressly permitted by the applicable Order Form, open-source licenses, or mandatory law:

copy, modify, adapt, translate, or create derivative works of the Application;

reverse engineer, decompile, disassemble, or attempt to derive source code, algorithms, models, underlying structure, or architecture of the Application;

bypass, disable, or interfere with security, access control, rate limits, usage limits, licensing, authentication, or technical restrictions;

use the Application for unlawful, harmful, deceptive, infringing, discriminatory, or unauthorized purposes;

upload malicious code, malware, spyware, corrupted files, or harmful content;

provide access to anyone other than Authorized Users;

resell, rent, lease, sublicense, distribute, commercially exploit, white-label, or make the Application available to third parties;

access or use the Application to build, benchmark, train, develop, or improve a competing product or service.

Support and Service Levels

The Provider may provide support, maintenance, onboarding, integration assistance, or other related services as specified in the applicable Order Form or Annex 3.

Service levels, availability commitments, support response times, exclusions, maintenance windows, incident management procedures, and service credits, if any, are governed by Annex 3.

Any service credits or remedies specified in Annex 3 shall be the Customer’s sole and exclusive remedy for failure to meet the applicable service level commitments, unless expressly agreed otherwise.

OPEN-SOURCE Components

AIGov Core and other Open-Source Components are licensed exclusively under their applicable open-source licenses and not under these Terms.

Use of AIGov Core or any other Open-Source Component does not create any entitlement to access or use the AIGov Platform, hosted infrastructure, SaaS services, support, maintenance, updates, integrations, professional services, service levels, or other commercial services of the Provider.

If these Terms conflict with the applicable open-source license terms, the open-source license terms prevail solely for any such Open-Source Component.

AUTHORIZED USERS

The Customer is responsible for identifying, authorizing, managing, and disabling Authorized Users and for all activity under its accounts, credentials, API keys, and integrations. The Customer shall promptly notify the Provider of any suspected unauthorized access, credential compromise, security incident, or misuse.

The Provider may suspend or restrict access to the Application if it reasonably believes that an account, credential, API key, or integration has been compromised or is being used in violation of these Terms.

The Customer is solely responsible for:

the Customer Systems used in any way in connection with the Application;

the accuracy, completeness, legality, and quality of Customer Data;

determining the appropriate governance, risk, compliance, privacy, security, and regulatory treatment of Customer Systems;

maintaining appropriate human oversight, internal controls, escalation procedures, and approval workflows, and validating all Outputs before relying on them;

obtaining all consents, notices, authorizations, licenses, and legal bases required for Customer Data and Customer Systems;

configuring the Application appropriately.

The Customer shall not use the Application as the sole basis for any decision producing legal effects or similarly significant effects concerning an individual, or for any high-risk, regulated, safety-critical, employment, credit, education, healthcare, law enforcement, migration, or essential-services decision.

AI-SPECIFIC PROVISIONS

The Application may use automation, machine learning, artificial intelligence, rule-based systems, classification logic, retrieval systems, or other algorithmic functionality to generate, structure, classify, summarize, or recommend Outputs.

The Customer acknowledges that Outputs may be incomplete, inaccurate, outdated, inconsistent, based on incomplete Customer Data, unsuitable for a particular jurisdiction or use case, or require independent legal, technical, security, or professional review.

The Application does not provide legal, regulatory, compliance, audit, certification or other professional advice. The Application is designed to support governance, documentation, evidence management, traceability and oversight activities that may assist organizations in implementing AI governance processes under the EU AI Act and other applicable regulatory frameworks. The Provider does not guarantee legal compliance or certification.

INTELLECTUAL PROPERTY, CUSTOMER DATA

The Provider and its licensors retain all rights, title, and interest in and to the Application, software, documentation, platform architecture, workflows, algorithms, know-how, trade secrets, models, methods, designs, interfaces, templates, configurations, developments, improvements, and related intellectual property.

The Customer retains all rights, title, and interest in and to Customer Data, Outputs, exports, and evidence packs, to the extent generated from or based on Customer Data or Customer Systems.

The Provider may collect and use aggregated or anonymized usage, telemetry, performance, and diagnostic data to operate, analyze, secure, and improve the Application, provided that such data does not identify the Customer or Authorized Users and does not disclose Customer confidential information.

DATA PROTECTION, SECURITY

The parties shall enter into and comply with the Data Processing Agreement (DPA) attached as Annex 2 or otherwise incorporated by reference. The Provider is not required to process personal data on behalf of the Customer unless and until the applicable DPA has been agreed or validly incorporated.

To the extent the Provider processes personal data on behalf of the Customer in connection with the Application, the Customer acts as controller and the Provider acts as processor, unless expressly agreed otherwise in the DPA.

The Provider shall maintain commercially reasonable administrative, technical, and organizational measures designed to protect the confidentiality, integrity, availability, and resilience of the Application. The Customer is responsible for securing its own systems, devices, integrations, configurations, and credentials.

FEES AND PAYMENT

The Customer shall pay all fees specified in the applicable Order Form.

Fees are invoiced in advance and are payable within thirty (30) days from the invoice date, fees are non-cancellable and non-refundable. Fees are exclusive of VAT, sales tax, withholding tax, duties, levies, or similar charges, unless expressly stated otherwise.

Late payments may result in statutory default interest, recovery costs, suspension of the Application, or termination in accordance with these Terms.

CONFIDENTIALITY

Each party shall protect confidential information from the other party using at least reasonable care. Confidential Information includes, without limitation, Customer Data, non-public technical information, security information, pricing, business plans, trade secrets, source code, architecture, documentation and commercial terms. Confidential Information shall not include information that: is publicly available; was lawfully known prior to disclosure; is independently developed; is required to be disclosed by law.

Confidentiality obligations survive for five (5) years after termination. Trade secrets remain protected for as long as they remain trade secrets under applicable law.

WARRANTIES, LIMITATION OF LIABILITY

The Application is provided “as is” and “as available” to the maximum extent permitted by applicable law. Features marked as beta, preview, trial, sandbox, or experimental may be changed or discontinued at any time.

To the maximum extent permitted by applicable law, the Provider disclaims all warranties, whether express, implied, statutory, or otherwise, including warranties of merchantability, fitness for a particular purpose, title, non-infringement, uninterrupted operation, error-free functionality, accuracy, completeness, regulatory compliance, audit readiness, or suitability for any specific legal, technical, regulatory, or business outcome.

To the maximum extent permitted by applicable law, neither party shall be liable for indirect, incidental, special, punitive, exemplary, consequential, or similar damages, including loss of profits, revenue, business, goodwill, anticipated savings, business interruption, or loss of data.

To the maximum extent permitted by applicable law, the Provider’s total aggregate liability arising out of or relating to these Terms, the Application, Services, or any Order Form shall not exceed the total fees paid by the Customer to the Provider for the Application during the twelve (12) months immediately preceding the event giving rise to liability.

To the maximum extent permitted by applicable law, neither party shall be liable for indirect, incidental, special, punitive, exemplary, consequential, or similar damages, including loss of profits, loss of revenue, loss of business, loss of goodwill, loss of anticipated savings, business interruption, or loss of data, even if advised of the possibility of such damages.

Nothing in these Terms excludes or limits liability to the extent such exclusion or limitation is prohibited by applicable law, including liability for intentional misconduct, gross negligence, fraud, or other liability that cannot be excluded under mandatory law.

The Customer shall defend and indemnify the Provider against third-party claims arising from Customer Data, Customer Systems, the Customer’s unlawful use of the Application, or the Customer’s breach of these Terms.

SUSPENSION, TERM, TERMINATION

The Provider may suspend access to the Application if:

the Customer fails to pay overdue fees or breaches these Terms;

suspension is necessary to prevent harm to the Application, the Provider, the Customer, or any third party;

an account, credential, API key, or integration appears compromised or misused;

suspension is required by law, regulator, court order, sanctions, or security reasons.

These Terms remain effective for the duration specified in the applicable Order Form.

Either party may terminate an Order Form for material breach if the breach remains uncured thirty (30) days after written notice.

The Provider may terminate immediately if the Customer materially violates access restrictions, intellectual property restrictions, security obligations, acceptable use restrictions, sanctions or export restrictions, or fails to pay overdue fees after notice.

Upon expiration or termination, the Customer’s right to access and use the Application ends, the Customer shall stop using the Application, and unpaid fees become immediately due.

Upon termination, the Customer may request export of Customer Data within thirty (30) days. Export shall be provided in the format then generally supported by the Application, subject to technical limitations and payment of any applicable fees specified in the Order Form. Thereafter, the Provider may delete Customer Data unless retention is required by law, dispute resolution, compliance, backup retention, or legitimate business records, subject to confidentiality and the DPA.

Provisions intended by their nature to survive termination shall survive, including confidentiality, intellectual property, fees, disclaimers, limitation of liability, indemnities, data export/deletion, governing law, and dispute resolution.

GOVERNING LAW AND JURISDICTION

These Terms shall be governed by the laws of the Czech Republic. The United Nations Convention on Contracts for the International Sale of Goods (CISG) shall not apply.

Any disputes arising out of or in connection with these Terms shall be resolved by the competent courts of the Czech Republic, with local jurisdiction determined by the registered office of the Provider, unless mandatory law provides otherwise.

MISCELLANEOUS

These Terms, together with the applicable Order Form and incorporated documents, constitute the entire agreement between the parties regarding the Application and supersede all prior or contemporaneous agreements relating to the Application. Customer purchase terms, procurement terms, vendor portal terms, or similar unilateral terms are rejected and do not apply unless expressly signed by the Provider.

Neither party may assign these Terms without the prior written consent of the other party, except that either party may assign them to an affiliate or in connection with a merger, acquisition, corporate reorganization, or sale of substantially all assets, provided that the assignee assumes all obligations.

The Customer shall comply with all applicable export control, trade control, import, sanctions, and anti-boycott laws. The Provider may restrict access to comply with export control, sanctions, or regulatory requirements.

The Provider may identify the Customer as a customer of the Application in customer lists, pitch decks, websites, and other marketing materials, including by using the Customer’s name and logo, unless the Customer objects in writing.

The Provider may use subcontractors to provide the services relating to the Application. The Provider remains responsible for subcontracted performance, subject to these Terms and the DPA.

Neither party is liable for failure or delay caused by events beyond its reasonable control, including natural disasters, war, terrorism, labor disputes, cyberattacks, government actions, internet failures, cloud provider outages, or power failures.

If any provision of these Terms is held invalid or unenforceable, the remaining provisions remain in full force and effect.

The Provider may amend these Terms from time to time in accordance with applicable law. The Provider shall notify the Customer of any material amendment by reasonable means at least thirty (30) days before the amendment becomes effective, unless a shorter period is required due to legal, security, technical, or regulatory reasons. If the Customer does not agree with a material amendment that materially and adversely affects the Customer, the Customer may terminate the affected Order Form by written notice before the effective date of the amendment. If the Customer continues to use the Application after the effective date, the amended Terms shall apply. Non-material amendments, clarifications, corrections, changes required by law, security-related updates, or changes that do not adversely affect the Customer may become effective upon posting or notification.

Annex 1: Specification of the Application

OVERVIEW

AIGov is an AI governance, auditability, and oversight platform designed to support organizations in managing, documenting, monitoring, governing, and reviewing AI systems, machine learning systems, automated decision-making systems, AI agents, and related computational systems.

The Application is governance infrastructure. It does not provide legal advice, regulatory advice, certification services, conformity assessment services, independent audit services, or professional consulting services.

The availability of specific features, modules, integrations, APIs, deployment models, support services, and functionality depends on the applicable Order Form, subscription plan, technical configuration, and current product availability.

MAIN FUNCTIONALITY

The Application may enable the Customer to: (a) create and maintain inventories of AI systems, models, agents, datasets, applications, workflows, deployments, and related assets; (b) document ownership, responsible persons, reviewers, approvers, lifecycle stages, intended purposes, deployment contexts, limitations, assumptions, and dependencies; (c) create and maintain governance records, audit trails, evidence packages, reports, summaries, exports, and supporting documentation; (d) manage governance workflows, review processes, approval processes, escalation procedures, internal controls, and governance decisions; (e) document risks, mitigation measures, controls, monitoring activities, governance measures, and compliance-related activities; (f) integrate with repositories, AI development tools, cloud platforms, ticketing systems, monitoring tools, APIs, SDKs, and internal Customer systems; (g) use automation, machine learning, rule-based systems, classification logic, retrieval systems, or AI functionality to generate, structure, classify, summarize, or recommend Outputs. Outputs generated by the Application may require review, validation, supplementation, or correction by the Customer.

Open-Source and Proprietary Components

AIGov Core may be made available as open-source software under the GNU Affero General Public License version 3 or another open-source license identified by the Provider. Open-Source Components are governed by their applicable open-source licenses. The hosted AIGov Platform, dashboard functionality, tenant management, enterprise APIs, integrations, support services, hosted infrastructure, commercial modules, managed services, and related proprietary capabilities remain the Provider’s exclusive property.

Deployment Model

The Application is provided primarily as SaaS hosted or arranged by the Provider, unless the applicable Order Form expressly specifies another deployment model.

If the Order Form specifies self-hosted, private cloud, on-premise, customer-managed, or hybrid deployment, the Order Form must specify the applicable license scope, permitted environment, installation responsibilities, hosting responsibilities, security responsibilities, support model, update policy, maintenance obligations, access rights, usage limits, and fees.

Unless agreed otherwise, the Customer is responsible for the security, availability, backup, operation, monitoring, configuration, infrastructure, network environment, and regulatory compliance of any self-hosted or customer-managed deployment.

For self-hosted or customer-managed deployments, the Provider is not responsible for downtime, loss of data, security incidents, degraded performance, failed updates, or non-compliance caused by Customer infrastructure, third-party systems, unauthorized modifications, unsupported configurations, or failure to install updates or patches made available by the Provider.

Regulatory Framework Support

The Application may support documentation, governance activities, evidence management, oversight activities, and workflow management relating to laws, regulations, standards, frameworks, organizational policies, industry guidelines, or governance requirements.

Such functionality is for governance support only and does not constitute legal advice, certification, conformity assessment, regulatory approval, or a determination of compliance with any law, regulation, framework, or standard.

The Customer remains solely responsible for determining whether its activities and Customer Systems comply with applicable legal, regulatory, contractual, organizational, or governance requirements.

Annex 2: Data Processing Agreement (DPA)

Annex 3: Service Level Agreement (SLA)

GovAI

SERVICE LEVEL AGREEMENT

(“SLA”)

This SLA forms part of the Terms and applies to the Application only to the extent specified in the applicable Order Form. Unless expressly agreed otherwise, this SLA applies only to the SaaS deployment of the Application. Self-hosted, on-premise, private cloud, customer-managed, or hybrid deployments are supported only as expressly stated in the applicable Order Form.

DEFINITIONS

For purposes of this SLA:

“Availability” means the ability of the Customer to access and use the core functionality of the Application over the internet as specified in this SLA.

“Business Day” means any day other than Saturday, Sunday, or a public holiday in the Czech Republic.

“Business Hours” means 9:00 a.m. to 5:00 p.m. CET/CEST on Business Days.

“Response Time” means the time between the Provider’s receipt of a support request through the designated support channel and the Provider’s first substantive response. Response Time does not mean resolution time.

“Service Credit” means a credit against future fees payable for the affected Application, calculated in accordance with this SLA.

SUPPORT

The Provider provides support for the Application during Business Hours on Business Days in the Czech Republic, unless the applicable Order Form specifies otherwise.

The available support levels are:

Response targets mean the Provider’s first substantive response after receipt of a support request through the designated support channel. Response targets do not guarantee resolution within a specific time. Support is limited to the Application. Unless expressly agreed otherwise, support does not include Customer Systems, Customer Data, Customer infrastructure, Customer integrations, third-party services, Open-Source Components, legal or regulatory advice, implementation work, custom development, or professional services.

AVAILABILITY

Availability means the ability to access and use the core functionality of the SaaS Application over the internet. Availability is calculated excluding:

scheduled or emergency maintenance;

issues caused by the Customer, Authorized Users, Customer Systems, Customer Data, Customer infrastructure, integrations or configurations;

third-party services, cloud providers, internet providers, identity providers, APIs, repositories, or external systems not controlled by the Provider;

force majeure events, cyberattacks, misuse, unlawful use, unsupported configurations, or breach of the Terms;

beta, trial, demo, sandbox, free-of-charge, or non-production services;

suspension under the Terms.

MAINTENANCE

The Provider may perform maintenance, updates, patches, upgrades, and infrastructure changes necessary to operate, secure, maintain, or improve the Application. The Provider will use commercially reasonable efforts to give advance notice of scheduled maintenance expected to materially affect availability. The Provider may perform emergency maintenance without advance notice where necessary for security, legal, technical, operational, or service-integrity reasons.

SERVICE CREDITS

If Gold Support applies and monthly availability of the SaaS Application falls below 99.0%, the Customer may request a service credit equal to 5% of the monthly fees paid for the affected Application for the affected calendar month. For Enterprise Support, service credits apply only if expressly specified in the applicable Order Form. To claim a service credit, the Customer must submit a written request within thirty (30) days after the end of the affected calendar month, including reasonable details of the alleged unavailability. Service credits are applied only against future fees, are not refundable, are not redeemable for cash, and are the Customer’s sole and exclusive remedy for failure to meet the applicable availability commitment.

FINAL PROVISIONS

The Customer shall provide reasonable cooperation required to investigate and resolve support requests, including relevant information, logs, screenshots, error messages, affected user details, and access to competent personnel. The Provider is not responsible for delays or failure to meet support targets caused by the Customer’s failure to provide reasonable cooperation.

Support under this SLA is technical and operational only. The Provider does not provide legal, regulatory, compliance, audit, certification, cybersecurity, tax, accounting, or other professional advice under this SLA. The Customer remains solely responsible for validating Outputs, assessing Customer Systems, and ensuring compliance with applicable laws and regulations.

If the applicable Order Form provides different support levels, service levels, response times, deployment terms, maintenance terms, or remedies, the Order Form prevails over this SLA.