Terms of service

TERMS AND CONDITIONS

for the EU AI Act Compliance Evaluator

1. Introduction

These Terms and Conditions (hereinafter: the “Terms”) set out the terms governing the use of the artificial intelligence-based compliance evaluation service known as the EU AI Act Compliance Evaluator (hereinafter: the “Service”). The Service is operated by AITIA International Zrt. (hereinafter: the “Service Provider”).

1.1. Details of the Service Provider

  • Company name: AITIA INTERNATIONAL Informatikai Zártkörűen Működő Részvénytársaság (AITIA INTERNATIONAL IT Private Company Limited by Shares)
  • Registered seat and postal address: 1031 Budapest, Záhony street 7., Hungary
  • Company registration number: 01-10-045197
  • Tax number: 13447393-2-41
  • Website: https://www.aitia.ai/hu/
  • E-mail address: aitia@aitia.ai

1.2. Hosting and infrastructure providers

The Service Provider may use third-party infrastructure and platform providers for the operation of the Service and the webshop, including in particular:

  • Microsoft Ireland Operations Limited – cloud infrastructure provider (Microsoft Azure) used for hosting and operating the Service.
  • Shopify International Ltd. – e-commerce platform provider used for operating the webshop and processing purchases.

1.3. Acceptance of the Terms; Formation of Contract

Acceptance of these Terms is a precondition for use of the Service. The natural person or other legal entity registering for and paying for the Service (hereinafter: the “User”) expressly accepts these Terms by ticking the relevant checkbox and by using the Service.

In addition to these Terms, the Service Provider publishes a separate Privacy Notice, which sets out in detail how personal data are processed in connection with the use of the Service.

1.4. Time of Acceptance

The agreement between the User and the Service Provider is concluded when:

  1. the User finalises the purchase in the Service Provider’s webshop; and
  2. the User accepts these Terms through the Service interface.

The Service Provider shall be entitled to refuse access to the Service until the User has accepted these Terms.

1.5. Method of Acceptance and Logging

Acceptance takes place by means of a checkbox. Proceeding further and accessing the Service is not possible without such acceptance.

For the purpose of evidencing the contractual relationship, the Service Provider may record the following data: the version of the Terms accepted, the time of acceptance, the user identifier (or identifier linked to the User’s e-mail address), the IP address, and the user agent, where technically available.

The retention period and further details relating to such records are set out in the Privacy Notice.

2. Definitions

For the purposes of these Terms, the following capitalised terms shall have the meanings set out below:

Service (EU AI Act Compliance Evaluator): an artificial intelligence-based, cloud-based online compliance evaluation tool which, on the basis of documents uploaded by the User and a predefined expert questionnaire prepared by the Service Provider, generates a preliminary assessment and textual summary regarding risk classification under the AI Act.

Platform: the web interface of the Service and its related subsystems.

User: a natural person or legal entity that has registered and subscribed, thereby obtaining access to the Platform and the Service and using the same.

Account: the access profile associated with the User’s e-mail address.

GPAI Model: an artificial intelligence language model capable of generating natural-language text responses (hereinafter: “Output”) on the basis of uploaded documentation and information provided by the User (hereinafter: “Input”).

Input: the documents uploaded by the User and the information provided by the User through the Platform on the basis of which the Service performs processing.

Output: the risk classification and textual summary generated by the Service, as well as any related result generated by the Service.

Credit: a prepaid unit of usage; the Service operates on a credit-based model.

Run / Processing: an operation whereby the User initiates an evaluation within the Service based on the uploaded Input.

Trial: a limited trial use of the Service made available by the Service Provider.

 

3. Description and Scope of the Service

3.1. Purpose and Intended Use of the Service

The purpose of the Service is to assist the User by providing preliminary, informational support in the assessment of risk categories under the AI Act, in particular by means of a document-based compliance review.

3.2. Nature of the Service

The Service is intended to provide preliminary, automated risk assessment and informational support in relation to the European Union’s regulatory framework applicable to artificial intelligence, in particular the provisions of the EU AI Act.

The Service:

  • does not constitute the practice of law;
  • does not provide legal advice;
  • does not constitute compliance consultancy or certification; and
  • does not replace the services of a lawyer, in-house counsel, compliance expert, or any other professional adviser.

The Output generated by the Service:

  • constitutes an automated and informational preliminary risk assessment only;
  • does not constitute legal advice, compliance certification, or an official opinion; and
  • may not be used on a standalone basis as the sole basis for regulatory decisions, compliance declarations, or official proceedings.

The User expressly acknowledges that the Output does not replace professional, legal, or compliance review and may be used solely at the User’s own risk. The User shall remain solely responsible for all final compliance, legal, and risk-related decisions.

The Service Provider continuously seeks to improve the accuracy, reliability, security, and usefulness of the Service and to reduce possible hallucinations and inaccuracies. However, due to the nature of the technology, Output generated using the GPAI models employed by the Service may not in all cases be accurate, complete, or up to date.

Accordingly, by using the Service, the User acknowledges and accepts that:

  • Output generated by the Service may not always be accurate, complete, or fit for the User’s intended purpose. The User shall not rely exclusively on such Output as a source of factual or legally authoritative information, and such Output cannot replace expert, legal, or compliance review. Independent verification and, where appropriate, consultation with qualified professionals are essential.
  • The User is responsible for assessing the accuracy, suitability, and applicability of generated content prior to any use, implementation, dissemination, or reliance thereon. This may require human review, in particular where the Output is used in sensitive, regulatory, or business-critical contexts.
  • By using the Service, the User acknowledges these technological limitations and undertakes to use the Output responsibly, with appropriate professional care and with all necessary checks and verifications.
  • The Service Provider does not individually review the content uploaded by Users or the Output generated in response thereto.
  • The User remains responsible for the interpretation, application, and use of the Output, including, in particular, any conclusions drawn regarding compliance under the EU AI Act.

3.3. Regulatory and Methodological Changes

The Service Provider endeavours to align the methodology of the Service with the applicable regulatory environment; however, it does not warrant or represent that the Output will in every case reflect the latest legislative developments, regulatory guidance, or interpretative practice. The Service produces results on the basis of the methodology and model configuration implemented by the Service Provider at the relevant time.

 

4. General Conditions of Use

4.1. Access and Registration

Use of the Service requires registration. Registration is linked to an e-mail address.

Purchased Credits are associated with the Account linked to the relevant e-mail address.

Following payment, the Service Provider shall send confirmation and the information necessary for access by e-mail, including, where applicable, a registration link and username.

The Service Provider offers a limited Trial of the Service, under which the User may run the first question block of the AI Act Evaluator. The purpose of the Trial is to demonstrate the basic operation and functionalities of the Service. The Trial does not provide full access to all functionalities of the Service.

4.2. Purchase Through the Webshop and Creation of Access

The Credits required for use of the Service may be purchased through the Service Provider’s online Shopify webshop (hereinafter: the “Webshop”).

During the purchase process, the User selects the desired Credit package, provides the required information, and finalises payment through the payment interface.

Upon successful completion of payment, the Service Provider’s systems automatically process the purchase and send a confirmation e-mail to the User.

The contract between the Service Provider and the User is concluded upon dispatch of the confirmation of successful payment.

4.3. Delivery of Registration Access and User Credentials

Following successful payment, the User shall receive at the e-mail address provided:

  • a confirmation e-mail regarding the purchase;
  • a registration link to the Platform; and
  • the data required to create the User Account, including the username.

The transmission of access credentials is performed automatically between the Service Provider’s systems and the Platform.

The User shall ensure that the e-mail address provided is valid, operational, and accessible only to the User. The Service Provider shall not be liable for any loss or damage resulting from the provision of an incorrect, inaccessible, or compromised e-mail address.

If the access credentials are not received within a reasonable period following payment, the User shall promptly notify the Service Provider.

4.4. Payments, Payment Providers, and Invoicing

Payments in the Webshop are processed through an external payment service provider engaged by the Service Provider. Payment card data and payment details provided during the payment process are not, or only to a limited extent, made available to the Service Provider; such data are processed by the payment service provider in accordance with its own terms and privacy practices.

Following successful payment, the User shall receive confirmation by e-mail evidencing completion of the transaction.

Invoices are issued through the billing service provider used by the Service Provider (Számlázz.hu) and delivered electronically to the e-mail address provided by the User.

Detailed rules concerning the processing of payment and billing data are set out in the Privacy Notice.

4.5. Activation of Access

Credits are credited and access to the Service is activated following confirmation of successful payment.

The User may create or activate the User Account by means of the registration link and username, and the purchased Credits shall then be assigned to that Account.

The Service may be used after access has been activated.

4.6. Lawful Use and Prohibited Conduct

The User shall use the Service lawfully, in accordance with its intended purpose, in compliance with all applicable laws, and with due regard to the rights and legitimate interests of third parties.

In using the Service, the User may upload only such content as the User is duly authorised to upload and submit for processing.

The User expressly represents and warrants that:

  • the User is entitled to use the uploaded documents, data, and information and to upload them to the Service;
  • the processing of the uploaded content does not infringe the rights of any third party; and
  • the User has obtained all necessary consents, permissions, approvals, or other rights required for the upload and processing of such content.

The User shall not be entitled to:

  • upload or share any content for which the User lacks an appropriate legal basis or authorisation;
  • upload content that infringes the intellectual property rights of another person where the User is not authorised to use such content;
  • act in the name of another person or entity without authorisation or impersonate any person or entity;
  • use the Service for any unlawful purpose or in any manner contrary to its intended purpose; or
  • use the Service in a manner capable of creating the impression, in the name of the Service Provider, that legal, compliance, or professional advice is being provided to third parties.

The Service Provider does not individually review the lawfulness of uploaded Input and assumes no responsibility for its content.

Where the Service Provider reasonably suspects that the User is using the Service unlawfully or in breach of these Terms, the Service Provider shall be entitled to temporarily restrict or suspend the User’s access, and, where necessary, terminate the Account.

The User shall in particular refrain from:

  • excessively loading the Service through automated tools (including bots or scripts), scraping, or carrying out DoS/DDoS activity;
  • conducting security testing of the Platform without authorisation, reverse engineering, or vulnerability probing;
  • interfering with the operation of the Service, gaining unauthorised access, or using another person’s Account;
  • using the Service in bad faith or for misleading or unlawful purposes.

4.7. Modification of the Service

The Service Provider shall be entitled to modify the functionalities, pricing, Credit packages, methodology, and technical parameters of the Service, and to temporarily restrict, suspend, or discontinue the Service in whole or in part. Such changes shall become effective upon publication, unless otherwise indicated.

4.8. Availability and Capacity

The Service Provider endeavours to ensure that the Service remains continuously and reliably available; however, uninterrupted and error-free operation is not guaranteed.

The User acknowledges that the operation of the Service may from time to time be affected by:

  • scheduled or unscheduled maintenance;
  • capacity limitations;
  • temporary outages or slowdowns; or
  • technical or infrastructure-related disruptions.

In order to maintain the stability and security of the system, the Service Provider shall be entitled to:

  • apply usage limitations (including rate limits);
  • queue processing requests; and
  • temporarily restrict or suspend certain functionalities.

The Service relies in part on the infrastructure of third-party technology and cloud service providers, and its availability may therefore depend on the operation of such providers. Downtime or disruption resulting from such third-party dependencies shall not in itself constitute a breach of contract by the Service Provider.

4.9. Account Security

The User is responsible for keeping login credentials confidential. If the User suspects unauthorised use or abuse, the User shall notify the Service Provider without delay.

4.10. Restriction of Access; Termination of Account

The Service Provider shall be entitled to suspend or terminate the User’s access if the User breaches these Terms, uses the Service unlawfully, or jeopardises the security of the Platform.

In the event of Account deletion, the Service Provider shall act in accordance with the Privacy Notice; certain data, including data relating to billing documents, may need to be retained in order to comply with legal obligations.

 

5. Credit System, Fees, Accounting, and Refunds

5.1. Purchase and Use of Credits

The Service is made available on a Credit basis. Credits are associated with the Account linked to the User’s e-mail address. The Service Provider reserves the right to modify the composition and price of Credit packages.

Each Run or Processing consumes a new Credit. As a general rule, the relevant Credit is deducted upon initiation of processing. Under the current operational logic of the Platform, by commencing processing the User acknowledges and accepts the consumption of the applicable Credit.

5.2. Technical Errors; Interrupted Processing

In the event of a technical error, the Output may fail to generate, may be delayed, or may be incomplete. The Service Provider shall make reasonable efforts to remedy such issues; however, uninterrupted operation is not guaranteed.

5.3. Refunds

Given the nature of Credits and the digital nature of the Service, the Service Provider does not provide automatic refunds. The Service Provider may, however, at its sole discretion, consider granting a Credit reinstatement or partial compensation in individual cases, in particular where a verified system error attributable to the Service Provider has occurred.

 

6. Handling of Inputs and Outputs; Upload and Storage

6.1. Technical Parameters of Upload

The permitted file types and applicable file size and page limits are indicated on the Platform from time to time.

The Service Provider shall be entitled to reject certain file formats or excessively large files.

Where a file is defective, corrupted, or otherwise incapable of being processed, processing may fail.

6.2. Responsibility for Content and Restrictions

The User is solely responsible for the content and lawfulness of the Input.

The Service Provider shall be entitled to restrict access where it reasonably suspects unlawful use or use contrary to these Terms.

6.3. Nature and Content of Outputs

On the basis of the uploaded Input, the Service performs automated processing and generates for the User two types of textual document (hereinafter together: the “Output”):

  • a detailed, structured risk assessment document analysing AI Act risk factors and relevant compliance considerations; and
  • a shorter summary document containing the principal findings and key risk conclusions in concise form.

The Output is generated automatically, through the use of artificial intelligence, on the basis of the Input uploaded and information provided by the User.

The User acknowledges that the Service can process only the information and documentation made available to it. If the Input is incomplete, inaccurate, misleading, or otherwise unsuitable, the Output may likewise be incomplete, inaccurate, misleading, or irrelevant.

The Service Provider shall not be liable for any Output resulting from incomplete, inaccurate, or misleading information provided by the User.

The Service Provider does not warrant that the Output will in every case comprehensively address all compliance aspects relevant to the User’s specific operations or systems. The Output is provided solely for preliminary and informational risk assessment purposes and does not constitute official compliance documentation, an audit, or certification.

Following completion of processing, the Output shall become available through the Platform in the manner provided therein.

6.4. Storage Period and Deletion

The Service Provider stores uploaded Input for the purposes of performing the Service, troubleshooting, and operation for a period of up to 7 days from upload.

The Output shall be available to the User on the Platform for 7 days from completion of the Run.

The Platform provides the User with the option of manual deletion.

The Service Provider shall carry out deletions in live systems within a reasonable time. In the case of backups, deletion may occur with delay due to technical characteristics and may be aligned with the applicable overwrite cycle.

6.5. Security Measures and Logging

The Service Provider applies industry-standard security measures in relation to data transmission and storage.

The Service Provider shall be entitled to maintain technical logs for the purposes of operating the system, troubleshooting, and quality assurance, including, for example, processing times, system messages, and the success or failure of Runs.

The scope and retention period of such logs are set out in the Privacy Notice.

 

7. Intellectual Property

7.1. Protection of the Platform and the Service

The Platform and the Service, and all elements thereof, including, in particular, the software, applied technological solutions, prompt structures, processing logic, user interface, and related marks and materials, are the intellectual property of the Service Provider or its licensors and are protected by copyright and other applicable intellectual property rights.

All rights not expressly granted under these Terms are reserved by the Service Provider.

The Service Provider shall be entitled to take action in its own name against infringements relating to the Service and to take all necessary legal steps for the protection of its rights.

7.2. Licence to Use

The Service Provider grants the User a limited, non-exclusive, non-transferable, revocable licence to use the Service solely in accordance with these Terms.

The User may use the Service exclusively for its own internal business or professional purposes and within the limits set out herein.

In particular, the User shall not be entitled to:

  • reverse engineer the source code of the Platform or the Service;
  • copy or reproduce the operation or logic of the system; or
  • resell the Service without authorisation or otherwise make the Service available to third parties.

7.3. Input and Output

In respect of the Input, the User grants to the Service Provider the rights necessary to use, host, process, and handle the Input for the purpose of providing the Service.

The Output is made available to the User; however, the User may use the Output solely at its own risk and responsibility.

 

8. Data Protection and Data Processing

The Service Provider processes personal data in accordance with applicable laws. Detailed rules are set out in the Privacy Notice.

The Service Provider states that it does not use Users’ Input or Output for the training of its own artificial intelligence models.

 

9. Amendments to the Terms

The Service Provider shall be entitled to amend these Terms unilaterally. Unless otherwise stated, amendments shall take effect upon publication. Continued use of the Service after such publication shall constitute acceptance of the amended Terms.

 

10. Governing Law and Jurisdiction

These Terms shall be governed by and construed in accordance with the laws of Hungary.

The parties shall use reasonable efforts to resolve any dispute amicably.

If no amicable resolution can be reached, any dispute arising out of or in connection with these Terms shall fall within the jurisdiction of the competent Hungarian courts, without prejudice to any mandatory consumer protection rights that may apply.