Terms of Service

Veratum provides cryptographic audit trail infrastructure designed to create tamper-proof, immutable records of AI decisions and computational events. Our service enables organizations to:

• Generate cryptographic evidence of AI decision-making processes
• Create auditable, timestamped records for regulatory compliance
• Maintain transparent logs of system behavior and outputs
• Verify the integrity of historical records through cryptographic verification

Veratum is a technical infrastructure platform, not a legal advisory service. Customers are responsible for determining whether Veratum's records satisfy their specific regulatory obligations under applicable laws including but not limited to the EU AI Act, GDPR, Fair Lending regulations, and other jurisdictional requirements.

You agree not to use Veratum for any unlawful purpose or in any way that could damage, disable, overburden, or impair our service. Specifically, you agree that you will not:

• Engage in illegal activity: Use the service to facilitate, conceal, or participate in any illegal activity, including fraud, discrimination, money laundering, or circumvention of sanctions
• Circumvent audit trails: Attempt to modify, delete, forge, or bypass cryptographic records, timestamps, or any component of the audit trail system
• Reverse engineer: Attempt to decompile, reverse engineer, or discover the underlying algorithms, cryptographic methods, or proprietary systems powering Veratum
• Unauthorized access: Attempt to gain unauthorized access to the platform, other users' data, or Veratum systems
• Abuse API: Use automated tools, bots, or scripts to excessively access the API or interfere with normal service operation
• Malicious content: Transmit malware, viruses, or other harmful code
• False representation: Misrepresent the source, authenticity, or integrity of audit data when presenting Veratum records to third parties

Veratum reserves the right to investigate violations of this policy and take appropriate legal action, including termination of service and reporting to law enforcement where necessary.

Rate Limiting

Veratum implements rate limits on API endpoints to ensure fair access and system stability. Specific limits vary by service tier and account type. Current limits are available in our API documentation. Customers who exceed rate limits may experience service degradation or temporary access restrictions.

Fair Use

While we do not impose hard caps on API usage for paid accounts, you agree to use the API in accordance with fair use principles. This means:

• You will not use the API for purposes other than your intended use case
• You will not resell, redistribute, or provide API access to third parties without explicit authorization
• You will not attempt to profit from Veratum's infrastructure in ways not contemplated in your service agreement
• You will implement reasonable caching and request batching to minimize unnecessary API calls

Abuse and Suspension

Veratum may throttle, suspend, or terminate API access for accounts engaging in abusive behavior, including excessive requests that degrade service quality for other users. We will notify you of suspected abuse and provide an opportunity to remediate before taking enforcement action, except in cases of egregious or security-critical violations.

Veratum Platform

You acknowledge that Veratum retains all right, title, and interest in the Veratum platform, service, software, algorithms, documentation, user interface, and all improvements or modifications thereof. The Veratum platform is protected by copyright, patent, trademark, and other intellectual property laws. Your use of the platform does not grant you any ownership interest or intellectual property rights in Veratum's technology.

Your Data and Receipts

You retain all right, title, and interest in data you submit to Veratum ("Customer Data"), including AI decisions, model outputs, inputs, and other information. You also retain ownership of cryptographic receipts and attestations generated by Veratum. Veratum's ownership of its platform does not extend to the Customer Data or receipts generated therefrom.

License to Use

By submitting Customer Data to Veratum, you grant us a limited license to process, store, and use such data solely for the purpose of providing the Veratum service, including generating audit records and receipts. This license does not permit Veratum to use your data for training, marketing, or any purpose other than service provision without your explicit written consent.

Feedback

If you provide feedback, suggestions, or ideas about Veratum, you grant us a non-exclusive, royalty-free right to use such feedback to improve our service without compensation or attribution.

Full Ownership

Veratum confirms that you retain full ownership and control of all data submitted to our platform. This includes:

• All Customer Data (inputs, outputs, decisions, metadata)
• All cryptographic receipts and attestations generated by Veratum
• All historical audit records and logs associated with your account

Data Access and Export

You may access, download, and export your data and audit records at any time through the Veratum platform or API. Veratum will not impose artificial restrictions on your ability to retrieve or export your data. In the event of account termination, we will provide you with a complete export of all your data upon request.

Data Retention

Veratum retains Customer Data according to your service plan and settings. You may request deletion of specific records or your entire account at any time. Upon deletion, Veratum will remove your data from active systems within thirty (30) days, except where data retention is required by applicable law or our legal obligations.

Restricted Use

Veratum will not access, use, or disclose your Customer Data except as necessary to provide the service, comply with law, or as you explicitly authorize. Veratum will not sell, trade, or otherwise commercialize your data.

EXCEPT AS PROHIBITED BY LAW, IN NO EVENT SHALL VERATUM BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, PUNITIVE, OR EXEMPLARY DAMAGES, INCLUDING DAMAGES FOR LOSS OF PROFITS, GOODWILL, USE, OR DATA, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

EXCEPT AS PROHIBITED BY LAW, VERATUM'S TOTAL LIABILITY UNDER THESE TERMS SHALL NOT EXCEED THE TOTAL AMOUNT YOU PAID FOR VERATUM SERVICES IN THE TWELVE (12) MONTHS PRECEDING THE CLAIM.

Basis of Limitation

Veratum is infrastructure software. These limitations of liability reflect the allocation of risk between you and Veratum and are a fundamental basis of the bargain between us. Veratum would not provide the service on these terms without these limitations.

Exceptions

These limitations do not apply to: (a) either party's indemnification obligations; (b) either party's obligations regarding confidentiality or data protection; (c) Veratum's gross negligence or willful misconduct; or (d) claims that cannot be limited by applicable law.

As-Is Service

VERATUM IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. Veratum does not warrant that the service will be uninterrupted, error-free, or free from viruses or other harmful components.

No Legal Advice

VERATUM'S AUDIT TRAILS AND RECORDS ARE TECHNICAL EVIDENCE, NOT LEGAL PROOF OR LEGAL ADVICE. Veratum makes no warranty regarding the sufficiency of its records for satisfying any regulatory requirement, legal standard, or court proceeding. You are solely responsible for:

• Determining whether Veratum records satisfy your regulatory obligations
• Implementing additional compliance measures as required by law
• Consulting with qualified legal counsel regarding compliance and litigation strategy
• Maintaining records and policies independent of Veratum

Regulatory Compliance

Veratum does not warrant that the service complies with any specific regulatory regime, including the EU AI Act, GDPR, Fair Lending regulations, or other legal requirements. Compliance is context-dependent and depends on factors outside Veratum's control, including how the service is used, your data practices, and your other systems and processes.

No Other Warranties

EXCEPT AS EXPRESSLY PROVIDED IN THIS AGREEMENT, VERATUM DISCLAIMS ALL OTHER WARRANTIES, EXPRESS OR IMPLIED, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT.

Customer Indemnity

You agree to indemnify, defend, and hold harmless Veratum, its officers, directors, employees, and agents from and against any third-party claims, damages, liabilities, costs, and expenses (including reasonable attorneys' fees) arising from or related to:

• Your use of the Veratum service
• Your violation of these Terms or applicable law
• Your Customer Data, including any claims that your data infringes third-party intellectual property rights
• Your misrepresentation of Veratum records or audit trails to third parties
• Any claim arising from your use of audit trails for purposes not authorized by applicable law

Veratum Indemnity

Veratum will indemnify you from third-party claims that the unmodified Veratum platform infringes any U.S. patent, copyright, or trademark, provided you notify Veratum promptly of the claim, grant Veratum sole control of the defense and settlement, and provide reasonable cooperation. If the Veratum platform becomes, or in Veratum's opinion is likely to become, subject to infringement claims, Veratum may modify the service to make it non-infringing or, at its option, discontinue the infringing features.

Sole Remedy

This indemnification section states each party's sole and exclusive remedy for third-party intellectual property infringement claims.

Termination by Either Party

Either you or Veratum may terminate your service agreement at any time, with or without cause, by providing written notice to the other party.

Effect of Termination

Upon termination, your right to access and use the Veratum platform will cease immediately. However, you may continue to access your historical audit records and data through Veratum or via export for a period of thirty (30) days following termination. After thirty (30) days, Veratum may delete your account and data at its discretion, except where retention is required by law.

Data Export Guarantee

Veratum guarantees that you may export all your data, audit records, receipts, and historical logs at any time, including immediately prior to or after account termination. You will not lose access to your cryptographic receipts or the ability to verify historical records.

Surviving Provisions

The following provisions survive termination: Acceptable Use, Intellectual Property Rights, Data Ownership and Control, Limitation of Liability, Warranty Disclaimer, Indemnification, Governing Law, and any provisions regarding payment or outstanding obligations.

These Terms and your use of Veratum shall be governed by and construed in accordance with the laws of the State of Delaware, without regard to its conflict of law principles. Any legal suit, action, or proceeding arising out of or related to these Terms or your use of Veratum shall be brought exclusively in the state and federal courts located in Delaware, and you hereby consent to the personal jurisdiction and venue of such courts.

Veratum reserves the right to modify these Terms at any time. Material changes will be effective upon thirty (30) days' written notice to you via email to the address associated with your account or by posting a notice on the Veratum platform. Your continued use of the service following the notice period constitutes your acceptance of the updated Terms. If you do not agree with any changes, you may terminate your account.

If you have questions about these Terms of Service or the Veratum service, please contact us at: