Terms of Service

These terms cover the hosted ArtzAIn service at app.cognexuslabs.ai: the dashboard, the Decision API, the audit log and its exports, the SDK and CLI when they talk to this service, and the account that ties them together. They are written for the people who will actually read them: the engineer who signs up, and the Legal, Procurement and Security reviewers who come after.

1. Who we are, and who you are

CogNEXUS Labs LLC (“CogNEXUS Labs”, “we”) provides the service. “You” means the person who creates the account and, if you sign up for a company or other organisation, that organisation too; by doing so you confirm you are allowed to bind it. Questions about these terms, or anything else about your account: [email protected].

2. The service

ArtzAIn is a decision layer for autonomous systems. Your agents and applications submit proposed actions to the Decision API; the service evaluates each one against the policies you configure and returns allow, deny or review. Every decision is written to a tamper-evident audit log, hash-chained, sealed and signed, so that it can be verified later by you or by an auditor without trusting us. The dashboard, the artzain SDK and CLI, and the REST API are the ways in.

We add, change and occasionally retire features. We will not remove your ability to export your audit history without the notice described in section 12.

3. Accounts and API keys

• One person per account. An account belongs to a named individual. Give colleagues access through teams and roles, not by sharing a password. You must be at least 18 and able to enter a contract.
• Keep credentials secure. You are responsible for what happens under your account and your API keys. Use a strong password, turn on two-factor authentication (Team & Settings → Account security), and tell [email protected] promptly if you believe a credential has been exposed; we will revoke it and help you rotate.
• API keys are shown once, when they are created. Treat them as secrets: keep them out of source control and client-side code, and revoke and reissue them from the dashboard when people or machines change. Every decision made with a key is attributed to your tenant and recorded.
• A verified email address is required before an API key is issued. The verification link comes from mail.cognexuslabs.ai.

4. Plans, prices and billing

This table is the commercial record for the self-serve plans. The Plan & Billing panel in the dashboard shows your plan's current figures and how much of this month's allowance you have used. Open is free and self-serve with no checkout (section 10); Build, Starter and Growth are bought monthly by self-serve checkout, or annually by invoice; Scale and Enterprise are invoiced under a signed order form.

• The calendar month. Your included decisions reset on the first day of each calendar month, not on the anniversary of your subscription. A subscription that starts on the 17th gets that month's full allowance, and it resets before your first invoice. One period for everyone is easier to read on a dashboard and to reconcile in an audit, and the difference errs in your favour.
• Overage. Decisions above the allowance are metered per decision and billed monthly in arrears, at the overage rate in the table above, on the invoice that follows the month they were made. Exceeding your included volume never interrupts service: it meters. Separate from the allowance, each plan carries request-rate limits per hour and per day, sized at several times the flat average of the allowance so that ordinary bursts pass and only abusive load is shaped.
• Annual prepay is by invoice: contact [email protected]. Annual plans are billed once, in advance, at ten months' price for twelve months of service. Overage on an annual plan is trued up as agreed in the invoice.
• Renewal. Monthly plans renew every month and annual plans renew every year, at the price in force at renewal, until you cancel (section 5).
• Payment. Monthly subscriptions are paid through Stripe, our payment processor. Card details go to Stripe directly and never touch our servers. Annual plans, Scale and Enterprise are invoiced, and the payment terms on the invoice or signed order form apply to them.
• Taxes. Prices exclude taxes. Where we are required to collect sales tax, VAT, GST or similar, it is added at checkout based on the billing address and tax ID you supply; keep both current.
• Price changes. We may change prices with at least 30 days' notice, sent to your account email and shown in the dashboard. A change applies from your first renewal after the notice period. If you do not accept it, cancel before then and the old price applies to the end of your paid period.

5. Cancelling, and refunds

You can cancel at any time through the billing portal (Plan & Billing → Manage billing). Cancellation takes effect at the end of the period you have already paid for: access continues until then, and the account then moves to the Open tier.

• Monthly plans: if you cancel within 14 days of your first purchase, we refund the first monthly charge in full.
• Annual plans: if you cancel within 30 days of purchase, we refund the unused months pro-rata.
• Not refundable: metered overage, partial months, and any charge older than those windows.

Refunds go back to the original payment method. To claim one, cancel in the portal and email [email protected] from your account email within the window.

6. If a payment fails

If a renewal payment fails, Stripe retries the payment and notifies you. Your plan is held unchanged for a 14-day grace period while you update the payment method in the portal. Only after that process has run without a successful payment may we suspend paid features or move the account to the Open tier. Suspension for non-payment never alters, deletes or re-seals anything already written to the audit log: records that were sealed stay sealed and remain exportable (section 9).

7. Acceptable use

Use the service for what it is for: governing the actions of software you are responsible for. Do not:

• Place abusive load on the service: flood it, deliberately circumvent the rate limits, scrape it, or run security scans or penetration tests against it without written permission from [email protected].
• Submit content you have no right to submit, or use the service to break the law or the rights of others, including export-control and sanctions law.
• Attempt to defeat the audit chain or the licence controls: alter, forge, back-date or delete audit records, interfere with sealing or signature verification, tamper with metering, licence attestation or plan limits, or help anyone else do so.
• Resell, sublicense or white-label the service, or offer it to third parties as a service bureau, without a written agreement with us.
• Reverse-engineer the hosted service or use it to build a competing one. (The open-source SDK is yours to read and fork under its own licence.)

We may suspend an account that materially breaches this section, with notice where that is practical. Audit records already sealed are unaffected by any suspension.

8. Your data and your decision records

• Your data is yours. The payloads your agents submit, the policies you write, the documents you upload and the decision records the service produces for you belong to you or your organisation. You grant us only the rights we need to host, process, back up and return them, and to keep the audit log verifiable.
• We process it to run the service: evaluating decisions, writing and sealing the audit log, rendering the dashboard, producing exports, securing the platform, billing, and answering support. The Privacy Notice says exactly what is collected and who processes it. We do not sell your data, and we do not use it to build models for other customers.
• You decide what your agents send us. If that includes personal data or regulated data, you are responsible for having the right to send it and for the policies that act on it. Tell us if you need a data processing agreement before you rely on the service for such data.

9. The audit log: retention, access and export

The audit log is tamper-evident by design: each decision is chained to the one before it, batches are sealed, and seals are signed. Because of that, retention works differently from an ordinary database.

Your plan includes N days of audit history in the dashboard, API and exports. Sealed decisions are retained for seven years regardless of plan; older history is available by upgrading or on request. N for each plan is in the table in section 4.

Nothing in the audit log is deleted by retention, downgrades, cancellation or suspension, and we will not alter a sealed record at anyone's request, including yours; that is what makes it evidence. Export is available at any time during your access window: Audit Log → export in the dashboard, GET /api/v1/audit/export, or artzain audit export, each of which produces a self-contained bundle that artzain audit verify checks offline.

10. The Open tier

Open is free, for evaluation and small workloads: 10,000 decisions a calendar month as a soft cap, 30 days of audit history, no service-level commitment, and no support commitment beyond best effort. We may change or withdraw the Open tier with 30 days' notice; sealed records remain retained and exportable as described in section 9.

11. Availability, maintenance and support

We run the service to be available around the clock and we monitor it, but unless a signed agreement says otherwise there is no service-level agreement: no uptime, latency or support-response commitment, and no service credits. We may take the service down for maintenance, preferring quiet hours and giving notice in the dashboard or by email for planned work; unplanned work happens when it has to. Support is by email at [email protected]; security reports go to [email protected].

12. Ending the relationship

• By you. Cancel at any time (section 5). To close the account entirely, use Team & Settings → Account security. Account deletion pseudonymises the account: your email, name and credentials are removed and your keys revoked, but sealed audit records keep their numeric actor id so that the chain still verifies, and they stay for their retention period. Transfer ownership of any team you solely own, and cancel any active subscription, first.
• By us. We may suspend or terminate for a material breach of these terms that is not fixed within 14 days of notice (or immediately where the breach is serious or the law requires it), for non-payment after the process in section 6, or if we discontinue the service, in which case we give at least 90 days' notice.
• Afterwards. Export what you need before your access ends; section 9 applies to the audit log. Amounts you owe, and sections 13 to 17, survive.

13. Intellectual property

The service, its software and documentation, and the ArtzAIn and CogNEXUS names and marks are ours or our licensors'. You get a non-exclusive, non-transferable right to use the service during your subscription, under these terms, and nothing more. The artzain SDK is open source under the licence published with the package. If you send us feedback or suggestions, we may use them without obligation to you.

14. Warranties, and what we do not promise

The service is provided as is and as available. We do not promise that it is error-free or uninterrupted, that a given policy will catch every bad action, or that a regulator, auditor or court will accept its output. The service is an engineering control, not legal, compliance or audit advice; you remain responsible for your agents, your policies and your obligations. To the extent the law allows, we disclaim implied warranties, including merchantability, fitness for a particular purpose and non-infringement.

15. Limitation of liability

To the extent the law allows: neither party is liable to the other for indirect, incidental, special, consequential or punitive damages, or for lost profits, revenue, data or goodwill, however caused; and our total liability for everything arising out of the service or these terms is capped at the fees you paid us in the twelve months before the event giving rise to the claim. These limits do not apply to a party's fraud, to liability that cannot be limited by law, or to your payment obligations.

16. Indemnity

You will defend and indemnify CogNEXUS Labs against third-party claims, and the costs and damages that come with them, arising from the content your agents submit, from your policies and the actions they allow, or from your breach of these terms or of the law. We will tell you promptly about such a claim and let you control its defence, and we will not settle it on your behalf in a way that admits fault without your consent.

17. Governing law, and where disputes go

These terms are governed by the laws of the State of Washington, without regard to its conflict-of-laws rules. Disputes are heard exclusively by the state or federal courts located in King County, Washington, and both parties consent to their jurisdiction. Talk to us first: most problems are fixed faster by email than by filing.

18. Changes to these terms

We may update these terms. For material changes we give at least 30 days' notice, by email to your account address and in the dashboard, before they take effect; continuing to use the service after that date means you accept them. If you do not, cancel before the change applies. The date at the foot of this page is when the current version took effect.

19. The rest

• Signed agreements win. If you have a signed commercial agreement with us, it prevails over these terms wherever the two conflict.
• Notices to you go to your account email and the dashboard; notices to us go to [email protected].
• You may not assign these terms without our consent, except to a successor to your whole business; we may assign them to a successor to ours.
• If a clause is unenforceable, the rest stands. Not enforcing a clause once is not a waiver of it.
• These terms and the Privacy Notice are the whole agreement between us about the hosted service.

Contact

[email protected] for support, billing and these terms. [email protected] for data-rights requests. [email protected] for security disclosure.

Effective 22 August 2026.