Terms of service

"Service" means the Pritect Veil software-as-a-service application, its public interface, and the documentation we publish for it.

"Customer Data" means everything you or your users submit to or generate within the Service, including source documents, entity decisions, generated bundles, manifests and quality reports.

"Document" means one source file processed by the Service. A file extracted from an archive or an email attachment counts as its own Document.

"User" means an individual authorised by you to use the Service under your account. "Plan" means the subscription tier and entitlements you select.

"Billable page" means a page counted under clause 4.3. Billable pages are the unit of metering.

We grant you a non-exclusive, non-transferable right to access and use the Service during the term, for your own internal business purposes, subject to these Terms and to your Plan.

The Service extracts text from the Documents you upload, detects personal data within it, resolves detections into entities, applies a redaction policy, generates new documents containing only the text it decided to emit, verifies those documents independently, and packages them for release.

The Service is a tool. It is not legal advice, and it does not determine whether a disclosure obligation applies to you, what its scope is, or whether a particular redaction is lawful. Those decisions are yours.

Output is generated from extracted text. Original page imagery, including scans and signatures, is not reproduced in the current version, and each bundle records that.

We improve the Service continuously and may change how it works. We will not make a change that materially reduces its core functionality during a paid term without giving you notice and the option to terminate for the unused portion.

We aim to keep the Service available and will use commercially reasonable efforts to do so, but the Service is provided without a contractual uptime commitment unless one is separately agreed in writing. Planned maintenance will be announced in advance where practicable.

You are responsible for the accuracy of your account details, for the security of credentials, for keeping the list of Users current, and for everything done under your account.

You must have a lawful basis for processing every Document you upload, and the authority to upload it. You must comply with the Acceptable use policy.

You are responsible for reviewing the entity registry, resolving flags, and deciding whether to release a bundle. Marking an entity as the data subject is a decision only you can make, and it is audit logged.

You must not use the Service to build a profile of individuals, to train a machine learning model, or for any purpose outside preparing documents for a disclosure obligation.

You may create API keys, which act under your account with the role and permissions you give them and are Users for the purposes of these Terms. You are responsible for keeping them secret and for revoking one you no longer need.

Where you register an endpoint to receive event notifications, you choose that endpoint and you are responsible for it. We deliver to it and our obligations for the data end at that point.

Fees are metered on billable pages, together with any subscription fee for your Plan. Current pricing is published on the pricing page and applies from the date you subscribe.

Metered usage is counted per calendar month and invoiced in arrears. Subscription fees are invoiced in advance. All fees are exclusive of VAT and other applicable taxes.

A billable page is one page of the output bundle Veil generates for you. Pages are counted from the generated output at the moment you release a case, and never from the file you uploaded. A document that you do not release is never billed, and a document the verifier withholds is never billed. An email attachment, and a file inside an archive, is its own document with its own pages. Every document counts as at least two pages. A spreadsheet counts as at most fifty pages, however many rows it holds.

A case is metered once. Re-rendering after you resolve a flag does not count again.

Invoices are payable within 14 days. We may suspend the Service on written notice if an undisputed invoice is more than 30 days overdue.

We may change pricing with 30 days' notice, effective at your next renewal. If you do not accept the change, you may terminate before it takes effect.

(a) We may, at our discretion and on invitation only, grant your organisation a trial of a Plan we name. A trial lasts the number of days stated in the invitation, which is 14, 30 or 60, and starts when the trial is granted. We may end a trial early on notice.

(b) No fee is charged for a trial. Pages released during a trial are not invoiced, even if you later subscribe.

(c) Apart from this clause 4.6 and clause 10.5, these Terms and the Data processing agreement apply in full during a trial. You are the controller of the personal data you upload during a trial, and we are your processor, exactly as on a paid Plan.

(d) When a trial ends without a subscription, your organisation becomes read only under clause 11.5.

(e) You may subscribe at any time, during the trial or after it ends, by card through the checkout offered in the Service, or, if we approve it, by invoice. Subscribing ends the trial and the read only state.

(f) A trial is limited to 9,200 billable pages, which is the number of pages the Business plan includes in one month. The limit covers every trial your organisation has had, and pages count when a case is released. A case that would take the trial past that limit is not processed or released until you subscribe, and nothing in it is lost.

You own Customer Data, including every bundle the Service generates for you. We claim no rights in it beyond those needed to provide the Service.

We own the Service, its software, models, prompts, detection rules and documentation, and all intellectual property in them. Nothing in these Terms transfers that.

We do not use Customer Data to train, fine-tune or evaluate any machine learning model, and we do not permit our sub-processors to do so. Model calls are stateless.

You grant us a limited licence to process Customer Data solely to provide the Service and to comply with law. That licence ends when the data is deleted.

If you send us suggestions, we may use them without restriction and without obligation to you. Feedback must not contain Customer Data.

The Service uses automated detection, including large language models operated by a European provider, as described in the Sub-processor list. Detection output is probabilistic.

The Service is designed so that uncertainty resolves toward redaction rather than toward disclosure, and so that a generated document is independently checked before it can be released. Those are engineering controls, not a warranty of a particular outcome.

You remain responsible for the disclosure you make. Nothing in the Service substitutes for your own judgement about the material you are releasing.

Each party will keep the other's confidential information in confidence, use it only for the purposes of these Terms, and protect it with at least reasonable care. Customer Data is your confidential information.

This does not apply to information that is public through no breach, was already known without obligation, is independently developed, or must be disclosed by law. Where disclosure is compelled and we are permitted to tell you, we will.

We warrant that we will provide the Service with reasonable skill and care, and in accordance with the security measures in Annex 2 of the Data processing agreement.

You warrant that you have the right to upload every Document, that you will comply with applicable law, and that you will not use the Service in breach of the Acceptable use policy.

Except as expressly stated, the Service is provided as is. To the fullest extent permitted by law we exclude all other warranties, express or implied, including fitness for a particular purpose and any warranty that the Service will detect every instance of personal data in every Document.

We will defend you against a third-party claim that the Service infringes that party's intellectual property rights, and pay damages finally awarded, provided you notify us promptly, give us control of the defence and reasonable assistance.

You will defend us against a third-party claim arising from Customer Data or from your use of the Service in breach of these Terms or the Acceptable use policy, on the same conditions.

Neither party excludes liability for death or personal injury caused by negligence, for fraud, or for anything else that cannot lawfully be excluded.

Subject to clause 10.1, neither party is liable for indirect or consequential loss, loss of profit, loss of anticipated savings, or loss of goodwill.

Subject to clause 10.1, each party's total aggregate liability arising out of these Terms in any twelve month period is limited to the fees paid or payable by you in that period.

Nothing in this section limits either party's obligations under the Data processing agreement or under applicable data protection law.

During a trial, the limit in clause 10.3 is the fees that would be payable for one month of the Business plan, which is EUR 1,800 at the price published on the pricing page.

These Terms run until terminated. You may end your subscription at any time, effective at the end of the current billing period, and your account then continues in the read only state described in clause 11.5. You may terminate these Terms at any time by closing your account under clause 11.4. Fees already incurred remain payable.

Either party may terminate immediately on written notice if the other commits a material breach that is not remedied within 30 days of notice, or becomes insolvent.

We may suspend the Service, or a specific case, where continued operation threatens the security or integrity of the Service or another customer, where required by law, or on breach of the Acceptable use policy. Where the risk allows, we will notify you first and give an opportunity to fix the problem.

An owner may close the account from the organisation's settings. Closing takes effect 30 days after it is requested. Until then the account stays readable and exportable, and you may withdraw the request. Any subscription ends at the end of its current billing period and is not renewed. On the effective date every case is purged under clause 7 of the Data processing agreement, whatever its retention window, the organisation's members lose access and the organisation's encryption keys are destroyed. A record of the account's existence, holding no personal data, is kept. Clauses on ownership, confidentiality, liability and governing law survive.

(a) Your organisation is read only when a trial has ended without a subscription, or when a subscription has ended and you have not closed your account.

(b) While read only, you cannot open a case, upload or import documents, start processing or release a bundle. You can still sign in, read every case, review decisions already made, export your organisation's data and download any bundle you released earlier.

(c) Read only is not a suspension under clause 11.3 and is not a termination. These Terms and the Data processing agreement continue to apply.

(d) Nothing is deleted because your organisation is read only. Each case continues to be purged on its own retention clock under clause 7 of the Data processing agreement: a released case at the end of the retention window stamped on it at release, and an unreleased case 180 days after it last changed.

(e) Subscribing ends the read only state. Closing your account under clause 11.1 ends it as well, as clause 11.4 describes.

We may update these Terms. Material changes take effect 30 days after we notify you, and continuing to use the Service after that constitutes acceptance. If you object, you may terminate before the change takes effect without penalty.

Notices to you are sent to the contact address on your account. Notices to us go to legal@pritect.ai.

Neither party may assign these Terms without the other's consent, except to an affiliate or in connection with a merger or sale of substantially all assets, on notice.

If a provision is held unenforceable it is modified to the minimum extent necessary, and the rest stands. A failure to enforce a right is not a waiver of it. The parties are independent contractors.

Neither party is liable for a failure to perform, other than a payment obligation, caused by an event beyond its reasonable control.

These Terms, together with the documents they incorporate, are the entire agreement between the parties on their subject matter.

These Terms are governed by the law of the Kingdom of Norway, without regard to conflict of law rules. The parties submit to the exclusive jurisdiction of the courts of Oslo, Norway. Nothing here deprives a consumer of protection under mandatory law where they live.