Terms of Service

1. Introduction

These Terms of Service govern access to and use of Veritrellis, including the websites, hosted application, APIs, SDKs, documentation, sandbox environments, status page, and related services provided under the Veritrellis name.

The service is provided by Waditech B.V., trading as Veritrellis, a private limited company incorporated in the Netherlands, registered with the Dutch Chamber of Commerce under number 99644843, with VAT identification number NL869074040B01, and registered address at Notelaan 11, 1185RS Amstelveen, the Netherlands.

References to “Veritrellis,” “we,” “us,” or “our” mean Waditech B.V. trading as Veritrellis, unless and until the service is transferred to a separate Veritrellis legal entity. If such transfer occurs, these Terms may be assigned to that successor entity in accordance with these Terms.

References to “Customer,” “you,” or “your” mean the company, organization, or other legal entity on whose behalf the service is used, and the individual users acting for that entity.

2. B2B-only use

Veritrellis is intended for business and professional use only. It is not offered as a consumer service.

By creating an account, accessing the service, or using Veritrellis on behalf of an organization, you represent that:

1. you are acting for business or professional purposes;
2. you are authorized to bind the organization you represent;
3. you are at least 18 years old;
4. your use of the service is not subject to consumer-protection rules applicable to personal, household, or non-business use; and
5. you will ensure that all users under your account comply with these Terms.

We may refuse, suspend, or terminate accounts that appear to be created for consumer, personal, unlawful, abusive, or unsupported purposes.

3. What Veritrellis does

Veritrellis provides a permit-based authorization control plane for high-risk product and AI-agent actions.

The service is designed to sit between a proposed action and execution of that action, and may support:

1. action request submission;
2. action schema validation;
3. policy evaluation;
4. human approval workflows;
5. signed execution permits;
6. permit verification;
7. audit trails; and
8. sandbox and production environments.

The core operating principle is: no permit, no action.

Veritrellis does not execute your downstream business action unless a specific integration or execution gateway has been separately configured. Your systems remain responsible for enforcing permit verification before executing the relevant action.

4. Account registration and access

You must provide accurate account, company, billing, and contact information. You are responsible for:

1. maintaining the confidentiality of account credentials and API keys;
2. all activity under your workspace, account, API keys, and integrations;
3. configuring users, roles, policies, approval groups, and environments correctly;
4. promptly revoking access for users who should no longer have access;
5. keeping administrative and billing contacts current; and
6. notifying us immediately of suspected unauthorized access.

We may use third-party authentication providers, including WorkOS and supported social login providers. Your use of such login methods may also be subject to the provider’s own terms.

5. Workspaces, environments, APIs, and SDKs

Veritrellis may provide workspaces, sandbox environments, production environments, API keys, SDKs, connectors, webhook endpoints, signed permits, and documentation.

You are responsible for:

1. separating sandbox and production use;
2. not using sandbox credentials or sandbox permits for production execution;
3. validating permits as documented before executing high-risk actions;
4. storing and rotating API keys securely;
5. implementing retries, polling, webhook handling, and failure modes safely;
6. ensuring that your systems fail closed where appropriate; and
7. testing integrations before production use.

Unless expressly agreed in writing, sandbox and free-tier environments are provided for evaluation, development, and demonstration purposes only and must not be relied on for production, regulated, safety-critical, or legally binding operations.

6. Customer Content

“Customer Content” means data, payloads, policies, configurations, action requests, approval decisions, comments, metadata, audit records, logs, identifiers, and other materials submitted to or generated through the service by or for Customer.

You retain ownership of Customer Content. You grant Veritrellis a limited right to process Customer Content only as necessary to provide, secure, maintain, support, and improve the service; comply with law; enforce these Terms; and perform our obligations under applicable agreements.

You are responsible for the accuracy, legality, appropriateness, and completeness of Customer Content.

7. Sensitive data and regulated use

Veritrellis is not currently designed for regulated production use in healthcare, regulated financial services, government classified systems, defense-critical operations, emergency services, medical decision-making, or other high-risk regulated environments unless we expressly agree in writing.

You must not submit special-category personal data, criminal-offence data, protected health information, payment card data, government identifiers, secrets, credentials, or highly sensitive business data unless:

1. the data is strictly necessary for your authorized use case;
2. you have a lawful basis and all required notices, consents, and authorizations;
3. the use case is supported by your subscription and our written approval where required;
4. the data is limited to the minimum necessary; and
5. the processing is covered by a signed Data Processing Agreement and any required additional terms.

Free-tier and sandbox accounts must not be used to submit production personal data, special-category personal data, regulated data, secrets, credentials, live payment card data, or data requiring heightened compliance controls.

8. Customer responsibilities for policies and approvals

Veritrellis provides tools for policy evaluation, approval routing, permit generation, and auditability. You remain responsible for:

1. determining which actions require approval;
2. writing and maintaining policies;
3. selecting approvers;
4. deciding whether an action should be approved or rejected;
5. configuring thresholds, schemas, roles, environments, and enforcement points;
6. verifying permits before downstream execution;
7. monitoring your own systems and users;
8. complying with laws and internal governance obligations; and
9. preventing misuse of your agents, products, workflows, and integrations.

Veritrellis does not guarantee that your policies are legally sufficient, commercially appropriate, secure, or complete.

9. AI-agent use

You are solely responsible for any AI agent, automation, workflow, model, tool, or system that submits action requests to Veritrellis or consumes permits from Veritrellis.

You must ensure that AI agents and automated systems:

1. submit accurate and complete action requests;
2. do not bypass Veritrellis where permit enforcement is required;
3. do not fabricate approvals, permits, users, or policy outcomes;
4. handle denied and pending requests safely;
5. respect rate limits and abuse controls;
6. do not use Veritrellis to authorize illegal, deceptive, harmful, or abusive activity; and
7. comply with the Acceptable Use Policy.

Veritrellis does not make final business, legal, financial, medical, employment, or regulated decisions for you. Human approvals and customer-configured policies remain under Customer control.

10. Subscriptions, fees, billing, and taxes

Paid subscriptions may be billed monthly or annually through Stripe or another payment provider. Fees, plan limits, seat limits, environment limits, API usage limits, and included features are described on the applicable pricing page, order form, in-app checkout, or written agreement.

Unless otherwise stated:

1. fees are due in advance;
2. subscriptions renew automatically unless cancelled before the renewal date;
3. fees are exclusive of VAT and other applicable taxes;
4. you are responsible for all applicable taxes other than taxes based on our net income;
5. usage beyond plan limits may require upgrade, additional fees, or usage restrictions;
6. failure to pay may result in suspension or termination; and
7. Stripe or another payment processor may process billing information under its own terms and privacy notice.

11. Trials and free plans

We may offer free plans, trials, sandbox accounts, design-partner access, beta access, or promotional credits.

Unless expressly stated otherwise, these are provided:

1. for evaluation only;
2. without service-level commitments;
3. without production-use commitments;
4. with limited support;
5. with usage limits determined by us;
6. subject to change or withdrawal; and
7. without liability for loss arising from reliance on them for production use.

We may suspend or terminate free, trial, beta, sandbox, or design-partner access at any time if we reasonably believe it is being abused, used for unsupported production activity, used unlawfully, or creating security, operational, legal, or reputational risk.

12. Refunds and cancellation

You may cancel a subscription in accordance with the account settings, Stripe checkout flow, order form, or written agreement.

Unless required by applicable law or expressly stated in an order form:

1. monthly fees are non-refundable once a billing period begins;
2. annual fees are non-refundable except at our discretion;
3. we may provide discretionary, pro-rata, or service-credit refunds where commercially appropriate;
4. cancellation stops future renewal but does not automatically refund past fees; and
5. unpaid fees remain due.

Because Veritrellis is B2B-only, consumer withdrawal rights are not intended to apply. If a person uses the service for consumer purposes despite these Terms, we reserve the right to reject or terminate such use.

13. Support

Support is provided by email at support@veritrellis.ai, or another channel we make available. Unless a separate agreement states otherwise, support is provided on a reasonable-efforts basis during normal Dutch business days and business hours.

Support does not include legal advice, policy-design consulting, custom engineering, incident response for your systems, managed operations, or implementation work unless separately agreed.

14. Service availability

During the design-partner, beta, free-tier, and early commercial phases, Veritrellis is provided without a formal uptime commitment unless we expressly agree otherwise in writing.

We may modify, suspend, or interrupt the service for maintenance, updates, security, abuse prevention, infrastructure issues, legal compliance, or other operational reasons. We will use reasonable efforts to provide notice where practical, but urgent security or operational work may occur without notice.

15. Changes to the service

We may improve, modify, deprecate, or discontinue features, APIs, SDKs, connectors, policies, plan limits, or environments. For material changes affecting paid production use, we will use reasonable efforts to provide advance notice unless urgent changes are required for security, legal, or operational reasons.

You are responsible for monitoring documentation and release notes relevant to your integration.

16. Intellectual property

Veritrellis and its licensors own all rights in the service, software, APIs, SDKs, documentation, trademarks, logos, designs, workflows, interfaces, and technology, except for Customer Content.

Subject to these Terms and your subscription, we grant you a limited, non-exclusive, non-transferable, revocable right to access and use the service for your internal business purposes.

You must not:

1. copy, modify, reverse engineer, or create derivative works of the service except as permitted by law;
2. remove proprietary notices;
3. use our marks without permission;
4. benchmark or publish performance tests without permission;
5. resell or provide the service to third parties unless expressly authorized; or
6. use the service to build a competing product or train a competing authorization, approval, or permit-control system.

17. Feedback

If you provide ideas, suggestions, bug reports, feature requests, or other feedback, you grant us a perpetual, irrevocable, worldwide, royalty-free right to use that feedback without restriction or compensation.

18. Confidentiality

Each party may receive confidential information from the other. Confidential information includes non-public business, technical, financial, security, product, pricing, customer, roadmap, integration, and operational information.

The receiving party must:

1. use confidential information only for purposes of the relationship;
2. protect it with reasonable care;
3. disclose it only to personnel, advisors, contractors, or subprocessors who need to know and are bound by confidentiality duties; and
4. not disclose it to third parties unless required by law.

Confidentiality obligations do not apply to information that is public, independently developed, lawfully received without confidentiality duties, or already known without restriction.

19. Data protection

Our Privacy Notice explains how we process personal data as a controller. Where we process personal data on behalf of Customer as a processor, the Data Processing Agreement applies.

If there is a conflict between these Terms and the DPA regarding processor obligations, the DPA controls for that processing.

20. Security

We will maintain reasonable technical and organizational measures designed to protect the service and Customer Content. Current measures are described in the Security Measures document.

You are responsible for securing your own systems, users, credentials, API keys, agents, workflows, and downstream enforcement points.

21. Suspension

We may suspend access to all or part of the service if:

1. fees are overdue;
2. use exceeds plan limits;
3. we reasonably believe the service is being abused;
4. use creates security, legal, operational, reputational, or third-party risk;
5. you breach these Terms or the Acceptable Use Policy;
6. we are required to do so by law, regulator, court order, or infrastructure provider; or
7. suspension is needed to protect the service, our customers, or third parties.

Where practical and legally permitted, we will provide notice and an opportunity to remedy. We may suspend immediately where delay would create risk.

22. Termination

Either party may terminate a subscription according to the applicable order form, checkout process, or written agreement.

We may terminate these Terms or your account if you materially breach these Terms and do not cure the breach within 14 days after notice, or immediately for serious abuse, unlawful use, non-payment, security risk, or unauthorized production use of sandbox/free-tier services.

Upon termination:

1. your right to use the service ends;
2. you must stop using APIs, SDK credentials, permits, and documentation except as permitted by open-source license terms where applicable;
3. unpaid fees become due;
4. Customer Content may be deleted or retained according to the Data Retention Policy and DPA; and
5. provisions intended to survive termination continue to apply.

23. Disclaimers

The service is provided “as is” and “as available” except as expressly stated in a written agreement.

To the maximum extent permitted by law, we disclaim all implied warranties, including merchantability, fitness for a particular purpose, non-infringement, uninterrupted operation, error-free operation, and suitability for regulated, safety-critical, or legally determinative use.

We do not warrant that:

1. all unauthorized or harmful actions will be prevented;
2. all policy configurations will be correct;
3. all action requests will be complete or truthful;
4. all approvals will be appropriate;
5. all permits will be accepted by downstream systems;
6. integrations will remain compatible with third-party systems;
7. audit logs will satisfy every legal, regulatory, or evidentiary requirement; or
8. the service will be suitable for your specific compliance obligations.

24. Limitation of liability

To the maximum extent permitted by law, Veritrellis will not be liable for indirect, incidental, special, consequential, punitive, or exemplary damages, including loss of profits, revenue, goodwill, data, business opportunities, expected savings, or business interruption.

To the maximum extent permitted by law, our total aggregate liability arising out of or relating to the service, these Terms, or any related agreement is limited to the fees paid by Customer to Veritrellis for the service during the 12 months before the event giving rise to liability.

For free-tier, trial, sandbox, beta, or design-partner use not covered by paid production terms, our total aggregate liability is limited to EUR 100.

Nothing in these Terms excludes or limits liability where exclusion or limitation is not permitted by applicable law, including liability for intent or deliberate recklessness by our management.

25. Indemnity

You will defend, indemnify, and hold harmless Veritrellis, Waditech B.V., and their directors, employees, contractors, and affiliates from claims, losses, liabilities, damages, costs, and expenses arising from:

1. Customer Content;
2. your systems, agents, workflows, or downstream actions;
3. your breach of these Terms;
4. your violation of law;
5. your use of Veritrellis in regulated, unsupported, sandbox, beta, or free-tier contexts contrary to these Terms;
6. your failure to verify permits before execution;
7. your policy configuration, approval decisions, or action execution; or
8. claims by your users, customers, employees, contractors, or third parties relating to your use of the service.

26. Export, sanctions, and anti-abuse

You must not use the service in violation of export-control, sanctions, anti-bribery, anti-money-laundering, cybersecurity, privacy, or other applicable laws. You must not use the service from, or for the benefit of, sanctioned countries, entities, or persons.

27. Assignment

You may not assign these Terms without our prior written consent, except to a successor in connection with a merger, acquisition, or sale of substantially all assets, provided the assignee is not a competitor and agrees to be bound by these Terms.

We may assign these Terms to an affiliate, successor, acquirer, or newly incorporated Veritrellis entity as part of a restructuring, sale, transfer, or corporate reorganization. We will provide notice where legally required or commercially reasonable.

28. Changes to these Terms

We may update these Terms from time to time. Material changes will be notified through the website, application, email, or other reasonable means. Continued use after the effective date means acceptance of the updated Terms.

If a material change materially and adversely affects a paid subscription, Customer may terminate the affected subscription by written notice within 30 days after notice of the change, unless the change is required by law, security, third-party provider terms, or operational necessity.

29. Governing law and jurisdiction

These Terms are governed by the laws of the Netherlands.

The courts of Amsterdam, the Netherlands, have exclusive jurisdiction over disputes arising out of or relating to these Terms, the service, or any related agreement, unless mandatory law requires a different forum.

30. Contact

Legal notices: legal@veritrellis.ai
Privacy requests: privacy@veritrellis.ai
Security reports: security@veritrellis.ai
Registered address: Waditech B.V., Notelaan 11, 1185RS Amstelveen, the Netherlands