Terms of Service

• "Platform" means the Arelis AI web application, dashboard, and all associated tools accessible at arelis.ai and its subdomains
• "API" means the Arelis AI programmatic interface accessible under /api/v1/, including all endpoints, SDKs, and client libraries
• "Customer Data" means any data, content, or information submitted to the Services by or on behalf of the Customer, including audit events, compliance artifacts, risk decisions, and AI system metadata
• "Organization" means the entity or team account created by the Customer within the Platform
• "Project" means a logical grouping of resources and data within an Organization
• "Environment" means an isolated context within a Project (e.g., production, staging, development)
• "Metered Operation" means a billable API call, including audit events, compliance proofs, risk decisions, and replay verifications
• "DPA" means a Data Processing Agreement as defined under Article 28 of the GDPR

By creating an account, accessing the Platform, or making API calls, you confirm that you have read, understood, and agree to these Terms and our Privacy Policy. If you are accepting these Terms on behalf of a company or other legal entity, you represent that you have the authority to bind that entity. If you do not agree to these Terms, you must not use the Services.

3.1 Account Requirements

You must be at least 18 years old and able to form a legally binding contract to use the Services. You must provide accurate, current, and complete information during registration and keep your account information up to date.

3.2 Account Security

You are responsible for maintaining the security of your account credentials, including passwords and API keys. You must immediately notify us at contact@arelis.digital if you suspect unauthorized access. We are not liable for losses resulting from unauthorized use of your account.

3.3 Organizations and Team Access

The account owner who creates an Organization is the administrative owner and is responsible for all activity under that Organization, including actions taken by invited team members. You may assign roles with varying permission levels to team members.

The Arelis AI platform provides the following core services:

• Audit event ingestion and storage: Capture, index, and query structured governance events from your AI systems
• Compliance proof generation: Generate cryptographic compliance artifacts against configurable policy sets
• Risk decision routing: Evaluate AI operations against risk policies and produce scored decisions
• Replay verification: Replay recorded events to verify deterministic compliance behavior and produce causal graphs
• Policy management: Define, version, and enforce governance policies for AI systems
• Approval workflows: Route operations through configurable approval chains scoped to environments
• MCP server registry: Register and manage Model Context Protocol server integrations
• Export and evidence: Export governance records in standard compliance formats for external audits

Services are provided on an "as available" basis. We continuously improve the platform and may add, modify, or discontinue features with reasonable notice.

5.1 Metered Operations

The Services operate on a usage-based pricing model. You are billed for four types of metered operations: audit events, compliance proofs, risk decisions, and replay verifications. Current pricing is displayed on our website and within your account dashboard.

5.2 Quotas

Your subscription plan includes operation quotas. We enforce quotas automatically and will notify you when usage approaches plan limits. When quotas are exceeded, additional operations may be throttled or billed as overage, depending on your plan configuration.

5.3 Payment Terms

All fees are processed through Stripe, our payment provider. Payments are due according to your billing cycle (monthly or annually). Past-due invoices may result in service suspension after a 14-day grace period and written notice. All prices are quoted in EUR unless otherwise specified and are exclusive of VAT, which will be added where applicable.

5.4 Refunds

Prepaid fees are non-refundable except as required by applicable law. If we materially fail to deliver the Services, you may request a pro-rata credit for the affected period.

6.1 Ownership

You retain all rights, title, and interest in your Customer Data. We do not claim ownership of any data you submit to the Services.

6.2 License to Process

You grant us a limited, non-exclusive license to process your Customer Data solely for the purpose of providing, maintaining, and improving the Services. This license terminates when your account is deleted.

6.3 Data Processing Agreement

Where we act as a data processor under the GDPR, processing is governed by a Data Processing Agreement (DPA). Enterprise customers may request a DPA that specifies the scope, nature, and duration of processing, sub-processor management, and data subject rights assistance. Contact contact@arelis.digital to request a DPA.

6.4 Data Isolation

Customer Data is logically isolated at the Organization, Project, and Environment level. No Customer may access another Customer's data. All database queries are scoped to the authenticated tenant context.

6.5 Data Retention

Governance data retention depends on your subscription plan, with options ranging from 90 days to indefinite retention (90 days, 1 year, 3 years, 5 years, or indefinite). Upon account termination, we will delete your Customer Data within 30 days unless a longer retention period is required by law.

Access to the API is authenticated via API keys issued through the dashboard. You must keep your API keys confidential and not share them publicly (e.g., in client-side code, public repositories, or forums).

• API rate limits are applied per API key and vary by subscription plan. Current limits are documented in our API reference
• Exceeding rate limits will result in HTTP 429 responses with retry-after headers
• Automated systems must implement exponential backoff when receiving rate limit responses
• We reserve the right to throttle or suspend API access that degrades service quality for other customers

8.1 Our IP

The Platform, API, SDKs, documentation, and all associated intellectual property are owned by Arelis AI. These Terms do not grant you any rights to our trademarks, logos, or brand assets except as necessary to use the Services.

8.2 SDK and Client Libraries

Our SDKs and client libraries are made available under open-source licenses as specified in their respective repositories. Your use of these libraries is governed by the applicable open-source license in addition to these Terms.

8.3 Feedback

If you provide suggestions, ideas, or feedback about the Services, we may use them without restriction or compensation. You are not obligated to provide feedback.

You agree not to use the Services to:

• Violate any applicable law, regulation, or third-party rights
• Submit data that contains malware, viruses, or other harmful code
• Attempt to gain unauthorized access to other accounts, systems, or networks
• Reverse-engineer, decompile, or disassemble any part of the Platform (except as permitted by applicable law)
• Use the Services to build a competing product or service
• Circumvent or disable any security, quota, or access control features
• Resell, sublicense, or redistribute the Services without our written consent
• Submit fraudulent, misleading, or falsified governance data for the purpose of generating deceptive compliance artifacts

Violation of this policy may result in immediate suspension or termination of your account.

We target 99.9% uptime for the Platform and API. Scheduled maintenance windows are communicated at least 48 hours in advance via email and the Platform dashboard. Uptime excludes scheduled maintenance, force majeure events, and outages caused by third-party providers (including cloud infrastructure).

Enterprise customers may negotiate custom Service Level Agreements (SLAs) with specific uptime commitments and service credits. Contact contact@arelis.digital for enterprise SLA terms.

The Services are provided "as is" and "as available" without warranties of any kind, whether express, implied, or statutory. To the fullest extent permitted by law, we disclaim all warranties, including implied warranties of merchantability, fitness for a particular purpose, and non-infringement.

We do not warrant that the Services will meet your specific requirements, operate without interruption, or be error-free. Compliance artifacts generated by the platform are tools to support your governance processes and do not constitute legal advice or guarantee regulatory compliance.

To the maximum extent permitted by applicable law, in no event shall Arelis AI, its directors, employees, or agents be liable for any indirect, incidental, special, consequential, or punitive damages, including but not limited to loss of profits, data, or business opportunity, arising out of or in connection with your use of the Services.

Our total aggregate liability for all claims arising from or related to these Terms or the Services shall not exceed the amounts paid by you to Arelis AI during the twelve (12) months preceding the claim.

Nothing in these Terms excludes or limits liability for (a) death or personal injury caused by negligence, (b) fraud or fraudulent misrepresentation, or (c) any liability that cannot be excluded under applicable law, including mandatory provisions of German law (BGB).

You agree to indemnify, defend, and hold harmless Arelis AI and its officers, directors, employees, and agents from any claims, damages, losses, or expenses (including reasonable legal fees) arising from: (a) your use of the Services in violation of these Terms, (b) your Customer Data, or (c) your violation of applicable laws or third-party rights.

14.1 Term

These Terms become effective when you create an account and remain in effect until terminated. Your subscription term (monthly or annual) auto-renews unless cancelled before the end of the current billing period.

14.2 Termination by You

You may terminate your account at any time through the Platform settings. Upon termination, your access to the Services will end at the close of your current billing period. Prepaid fees are non-refundable.

14.3 Termination by Us

We may suspend or terminate your account immediately if you: (a) breach these Terms, (b) fail to pay fees after the grace period, (c) engage in conduct that we reasonably believe harms the Services or other customers. We will provide notice except in cases requiring immediate action for security or legal reasons.

14.4 Effect of Termination

Upon termination, your right to access the Services ceases immediately. We will retain your Customer Data for 30 days to allow for data export, after which it will be permanently deleted. Provisions that by their nature should survive termination (including Sections 8, 11, 12, 13, and 17) will survive.

You may export your Customer Data at any time using the Platform's self-service export tools. Exports are available in standard formats (JSON, CSV) and include audit events, compliance proofs, risk decisions, and policy configurations.

Upon account termination, you will have 30 days to export your data before permanent deletion.

We may revise these Terms from time to time. When we make material changes, we will: (a) update the "Last updated" date at the top of this page, (b) notify you via email or a prominent notice on the Platform at least 30 days before the changes take effect. Your continued use of the Services after the effective date constitutes acceptance of the revised Terms. If you do not agree to the changes, you must stop using the Services and may terminate your account.

These Terms are governed by and construed in accordance with the laws of the Federal Republic of Germany, excluding its conflict-of-law provisions and the United Nations Convention on Contracts for the International Sale of Goods (CISG).

The exclusive place of jurisdiction for all disputes arising from or in connection with these Terms is Cologne (Köln), Germany, to the extent permitted by law.

If any provision of these Terms is held to be invalid, illegal, or unenforceable, the remaining provisions shall continue in full force and effect. The invalid provision shall be replaced by a valid provision that achieves the economic purpose of the original provision as closely as possible.

For questions about these Terms, please contact us: