What you may do,
and what we owe you.

What these cover

These terms cover two things, and which apply depends on what you are using:

• This website. Everyone reading it.
• The Evidarch platform, however it is deployed — on your premises, in your own cloud account, or as a service we operate. Each deployment is governed by a signed agreement, and where you have one it prevails over these terms.

In short, these are the default terms. A real contract beats them wherever one exists.

Using the website

Read it, quote it, link to it, share it with colleagues and with your auditor. The content is ours, but we are not going to be difficult about ordinary professional use.

Do not misrepresent it as your own product, and do not attempt to disrupt the site or reach parts of it not intended to be public.

The platform

Evidarch is licensed to your organization for its own internal governance of AI use, for the term and the number of people set out in your agreement. You may deploy it on your premises, in your own cloud account, or use the service we operate. The software and the commitments below are identical in all three.

You may not resell it, offer it as a service to others, or remove the attribution from evidence it produces. Reverse engineering is permitted only where the law says it cannot be excluded.

We commit to operating and supporting it with reasonable skill and care, to the availability target in your agreement where we host it, and to telling you about incidents that affect your data rather than waiting to be asked.

We may suspend a hosted account without notice only where continuing would expose other customers or us to serious risk, such as an active compromise or unlawful use. Where suspension is for non-payment or a fixable breach, you get notice and a chance to put it right first.

Your data stays yours

We claim no ownership of anything Evidarch captures. You grant us only the narrow, revocable permission needed to run the service you asked for: store it, transmit it, back it up, restore it.

Specifically, and as a binding term:

• We do not use your data to train models, ours or anyone else's.
• We do not sell, rent or share it, including in aggregate or anonymised form.
• We do not analyse it for our own product, research or commercial purposes.
• We do not access captured content except with your written approval for a specific incident, time-boxed and logged where you can see it.
• We delete it, including backups, within 30 days of termination and confirm in writing.

You can export everything at any time. The ledger is a PostgreSQL database in a documented event format, so leaving is an export rather than a negotiation.

Your responsibilities

Evidarch records what your staff send to AI tools. Deploying it makes you a monitor of your own employees, and that carries duties we cannot discharge for you:

• Tell your staff. Most jurisdictions require notice. Some require consent. Works councils in parts of Europe have a formal say before deployment.
• Get sign-off. From counsel, and from any body with a right to be consulted, before you switch it on.
• Collect proportionately. Set retention to what your obligations justify. Screen capture is off by default for exactly this reason. Turning it on is a deliberate act with its own consequences.
• Secure what you operate. On premises or in your own cloud account, the infrastructure, the database and the credentials are yours to protect.
• Answer your own subject requests. You are the controller; we give you the tools and will help, but the obligation is yours.

Acceptable use

Do not use Evidarch to:

• Monitor people covertly where the law requires them to be told.
• Monitor anyone outside your own organization, or on devices you do not have the right to manage.
• Build a surveillance record for a purpose unrelated to governing AI use — targeting individuals, or gathering material for reasons you would not state openly.
• Break the law, or breach your own obligations to your staff.

This tool exists so organizations can account for AI use honestly. Using it to watch people in ways you would not disclose is a misuse of it. We would rather lose the sale.

What we do not promise

Plainly, because a compliance product overselling itself is worse than useless:

• Evidarch does not make you compliant. It produces evidence. Whether that evidence satisfies a regulator or an auditor is their judgement, not our guarantee.
• Coverage is not total. It records what its collectors see. An AI tool nobody deployed a collector for produces no events. Silence is not proof of absence.
• Detection is not perfect. On-device redaction catches known shapes. Novel or deliberately obfuscated secrets can get through. It reduces exposure a great deal. It does not eliminate it.
• An unanchored chain is weaker evidence. Until chain heads are witnessed externally, the ledger is only self-consistent.
• We are not your lawyers. Nothing on this site or in the product is legal advice.

Liability

Our liability is limited to the fees you paid us in the twelve months before the claim.

Nothing here limits liability for death or personal injury caused by negligence, for fraud, or for anything else that cannot lawfully be limited. Some jurisdictions give you rights that override these terms, and where they do, those rights win.

Ending the agreement

You can stop using Evidarch at the end of your term; we do not lock you into automatic multi-year renewals you have to fight to escape.

When an agreement ends, the ledger is still yours. Where you run Evidarch on your premises or in your own cloud, it never leaves your possession in the first place. Where we host it, we export the complete ledger to you before deletion. Nothing is withheld or held hostage.

Changes

We may update these terms. For changes that materially affect your rights or how your data is handled, we will notify affected customers directly and give reasonable notice before they take effect. We will not rely on you spotting a new date.

Contact

Questions about these terms: [email protected]. Privacy: [email protected]. Security: [email protected].