AiAiAi terms of service

The Estonian version prevails if the two differ.

1. Parties

AiAiAi is provided by OÜ Kratikaitse (registry code 17470678, Estonia; Kratikaitse). The service is used by the organisation that creates a workspace in AiAiAi (the Customer). AiAiAi is for businesses and public bodies, not consumers.

The person creating the workspace confirms they may represent the Customer. These terms take effect when that person accepts them. The version accepted, the time and the person are recorded in the workspace.

The data processing agreement and the plan price stated on the invoice or quote are an integral part of these terms.

2. What the service is, and what it is not

AiAiAi is a working tool for the Customer to agree how AI is used at work and to keep track of it: a list of AI tools with responsible people, risks and decisions, rules for staff, and quarterly reviews. Its design is rooted in the principles of ISO/IEC 42001.

AiAiAi is not:

• legal advice. The EU AI Act notes shown on tools are rule-based orientation. The final assessment of obligations is made by the Customer or its legal adviser;
• certification or conformity assessment. Using the service does not demonstrate conformity with any standard or law;
• a substitute for the Customer's decisions. The Customer makes, and is responsible for, decisions such as accepting risks and approving tools.

3. Accounts and access

• Users log in with a one-time email link. The Customer keeps its users' mailboxes secure, because access to a mailbox means access to the workspace.
• The Customer assigns roles in the workspace and is responsible for its users' actions.
• If the Customer suspects unauthorised access, it tells us without delay at tehisaru@ai3.ee.

4. Customer data

• Data entered into the workspace belongs to the Customer. Kratikaitse uses it only to provide the service and under the data processing agreement. Kratikaitse does not sell it or use it to train AI models.
• The Customer does not enter special categories of personal data (such as health data), or data it has no legal basis to process.
• The Customer can get its data in machine-readable form under section 7 of the data processing agreement.

5. Acceptable use

The Customer and its users must not:

• use the service unlawfully or in breach of anyone's rights;
• try to access other workspaces' data, bypass security measures, or disrupt the service with load;
• resell or share access outside the Customer unless separately agreed.

Security issues. If you find a vulnerability, write to tehisaru@ai3.ee. We respond to good-faith reports and will not take action against you, provided you did not access other people's data or disrupt the service.

6. Plans and fees

• Snapshot is free. The paid plans are Foundation and Ongoing, with prices and content stated on the quote or invoice.
• Paid plans are billed 12 months in advance. The payment term is 14 days. The plan activates once payment is received. Prices exclude VAT where applicable.
• Plans do not renew automatically. We send a new invoice before the period ends. If it is not paid, the workspace moves to the free plan at the end of the period. Data is kept, but paid views and features are locked.
• Fees paid are not refunded, except where Kratikaitse terminates without good reason, or where the Customer terminates because of a material change (section 9). In those cases the unused part of the period is refunded.

7. Availability

Kratikaitse keeps the service running with due care but does not guarantee any specific availability (there is no service level agreement, SLA). We try to announce maintenance in advance. There is no 24/7 on-call, and faults are handled on business days.

8. Intellectual property

The service, its code, texts, list of basic controls and templates belong to Kratikaitse. The Customer may freely use the outputs created from its workspace (the staff rules, the customer summary, printed and saved copies) in its business, including sharing them with its customers, auditors and authorities. Kratikaitse may use feedback about the service to improve it, free of charge.

9. Changes

Kratikaitse may change the service and these terms. We tell workspace owners about significant changes by email at least 30 days in advance. If the Customer does not accept a change, it may terminate before the change takes effect.

10. Liability

• The service is provided as is. Kratikaitse is not liable for the Customer's decisions or their consequences, including compliance and risk decisions made on the basis of the service's output.
• Kratikaitse is not liable for indirect loss or lost profit.
• Kratikaitse's total liability is limited to the fees the Customer paid for the service in the 12 months before the loss arose, and never less than EUR 100.
• These limits do not apply to intentional breach or gross negligence.

11. Term and termination

• The agreement runs indefinitely.
• The Customer may terminate at any time by writing to tehisaru@ai3.ee.
• Kratikaitse may terminate with 30 days' notice.
• Kratikaitse may suspend access immediately if the Customer materially breaches section 5 or endangers the security of the service.
• We may delete a free-plan workspace nobody has logged in to for 12 months, after at least 30 days' notice by email.
• When the agreement ends, data is handled under section 7 of the data processing agreement.

12. Confidentiality

Each party keeps confidential the other's business secrets and any information received through the service. Customer data is always treated as confidential.

13. Governing law

These terms are governed by Estonian law. We try to settle disputes by negotiation. If that fails, they are settled in Harju County Court. If the Estonian and English texts differ, the Estonian text prevails.

OÜ Kratikaitse · registry code 17470678 · tehisaru@ai3.ee