Thalus – Terms of Service

Last updated: 15 June 2026

These Terms of Service (“Terms”) govern your access to and use of the website, platform, application programming interfaces (APIs), software development kits (SDKs), dashboards, documentation, Outputs and related services (collectively, the “Services”) provided by Thalus, Inc. (“Thalus”, “we”, “us”, “our”). The Services are offered exclusively for business and professional use and are not intended for personal, consumer purposes. By accessing or using the Services, you represent and warrant that you are acting on behalf of a business or other legal entity and that you have the authority to bind such entity to these Terms. If you do not have such authority, you may not access or use the Services.

Your access to and use of the Services constitutes acceptance of these Terms on behalf of the applicable business entity.

1. Who We Are

Thalus provides a business-to-business (B2B) software-as-a-service platform and application programming interfaces (APIs) designed to support organizations in assessing, managing, and governing risks associated with artificial intelligence systems. The Services, including any outputs, analyses, classifications, recommendations, reports, dashboards, or other information generated through the platform or APIs (“Outputs”), are provided for informational and decision-support purposes only.

The Services are intended to be used by enterprises, developers, and compliance, legal, risk, and governance teams in a professional capacity (each, a “User”). Thalus operates as a technology and information provider and does not act as a legal advisor, regulator, auditor, or certification body.

The Services and Outputs:

Do not constitute and must not be relied upon as legal advice, regulatory, or professional advice; compliance determinations, audit opinions, certifications, or professional advice of any kind.

Do not provide regulatory approval, certification, or assurance of compliance.

Do not make automated decisions about individuals or produce legally binding determinations. The Services are provided solely as decision-support and governance tooling. They do not produce binding determinations, do not enforce compliance outcomes, and do not replace independent legal, regulatory, or professional review. All conclusions, risk acceptance decisions, and compliance actions remain the responsibility of the User.

2. Scope of the Services

The Services process information submitted by the User to support the identification, assessment, and governance of risks associated with artificial intelligence systems.

The Services may be accessed through multiple interfaces, including application programming interfaces (APIs), online dashboards or platforms accessible via login (where available), and related documentation. Certain features or functionality may be available only to registered or enterprise Users. The Services are designed to integrate into a User’s existing development, compliance, and governance environments, including software development lifecycle (SDLC), GxP, and internal governance tools.

Thalus may also provide:

Options to request a demo, explore product functionality, or otherwise contact Thalus.

We may update, enhance, modify, or discontinue aspects of the Services from time to time, including by adding, removing, or changing features or functionality.

3. Your Account

Access to certain features of the Services (including, without limitation, enterprise dashboards, APIs, or other restricted functionality) may require the creation of an account or the use of login credentials issued or approved by Thalus. In addition, the User may submit requests for demonstrations or otherwise communicate with Thalus through the website or other channels.

The User agrees to:

Provide accurate, complete, and up-to-date information when creating or maintaining an account;

Safeguard and maintain the confidentiality of all account credentials, including usernames, passwords, API keys, and access tokens, and not share such credentials with any unauthorized person;

Promptly notify Thalus upon becoming aware of any actual or suspected unauthorized access to or use of the account or credentials.

The User authorizes Thalus to use the contact details provided to respond to inquiries, schedule or conduct demonstrations, provide information about the Services, and engage in related business communications. Thalus may retain records of such communications for customer support, sales follow-up, security, and quality assurance purposes, in accordance with its Privacy Policy. Any demonstrations, trials, or evaluations are provided for informational purposes only, and Thalus makes no guarantees as to outcomes or results.

The User is responsible for all activities conducted through its account, including activities performed by its employees, contractors, or other authorized users, whether or not such activities were expressly authorized.

4. User Responsibilities

The User is solely responsible for its access to and use of the Services and shall:

Ensure that all information and data submitted to the Services is accurate, complete, and lawfully obtained and shared;

Use the Services only for lawful business and professional purposes;

Apply appropriate human oversight and independent review prior to relying on any Outputs for governance, compliance, or operational decisions;

Comply with all applicable laws and regulations, including, where applicable, the EU Artificial Intelligence Act, data protection laws, and any sector-specific legal or regulatory requirements;

Retain responsibility for all governance, compliance, and risk management decisions relating to the design, development, deployment, and use of AI systems.

5. API and SDK Use

Where the Services are accessed through application programming interfaces (APIs), software development kits (SDKs), or similar technical interfaces, the User shall comply with all applicable documentation, technical requirements, usage limits, and rate limits.

The User shall not, and shall not permit any third party to:

Share, disclose, sell, sublicense, or otherwise misuse API keys, credentials, or access tokens;

Exceed applicable usage limits or circumvent technical restrictions;

Reverse engineer, decompile, disassemble, or otherwise attempt to derive the underlying models, algorithms, logic, or methodologies of the Services;

Extract, scrape, or reuse models, data, or Outputs for purposes other than the User’s internal business use;

Use the Services to develop, train, or improve competing products or services;

Use the Services in connection with prohibited or unlawful AI practices.

6. Acceptable Use and Prohibited Activities

The User shall not use the Services in any manner that:

Supports, enables, or facilitates unlawful or prohibited AI systems or practices;

Involves unauthorized surveillance, monitoring, or tracking activities;

Involves biometric categorization, identification, or profiling in violation of applicable law;

Results in discriminatory, harmful, or rights-infringing outcomes;

Circumvents, disables, or interferes with technical, contractual, or security safeguards implemented by Thalus;

Misrepresents the Outputs as regulatory approval, certification, or assurance of compliance.

Thalus reserves the right to suspend, restrict, or terminate access to the Services where it reasonably determines that the User’s use presents legal, regulatory, security, or reputational risk.

7. Intellectual Property

7.1 Our Content and Technology

All intellectual property rights in the Services, including without limitation the website, platform, APIs, dashboards, software, underlying technology, models, methodologies, designs, text, graphics, logos, and trademarks (“Thalus Content”), are owned by or licensed to Thalus and are protected by applicable intellectual property laws.

Subject to your compliance with these Terms, we grant you a limited, non-exclusive, non-transferable, revocable license to access and use the Services solely for your internal business use, strictly in accordance with these Terms.

You may not copy, modify, distribute, sell, lease, or otherwise exploit Thalus Content, except as expressly permitted by us or by law.

7.2 User Content

If you submit or upload any content through the Services (for example, as part of a support request, feedback, or user-generated input), you represent and warrant that:

You have the necessary rights to provide such content; and

Your content does not infringe any third-party rights or violate applicable law.

You grant Thalus a non-exclusive, worldwide, royalty-free license to use, reproduce, and process your content solely to provide and improve the Services and to respond to your requests, in accordance with our Privacy Policy.

7.3 Feedback

If you choose to provide us with feedback, comments, or suggestions about the Services (“Feedback”), you agree that we may use such Feedback freely and without restriction, without any obligation to compensate you, and you hereby assign to us any rights you may have in such Feedback to the maximum extent permitted by law.

8. Confidentiality

Each party agrees to keep confidential and not disclose to any third party any non-public, confidential, or proprietary information of the other party obtained in connection with the Services, whether disclosed orally, electronically, or in writing, including, without limitation, API outputs, reports, documentation, technical information, and information relating to security measures or security posture (“Confidential Information”). Confidential Information shall be used solely in connection with the Services and protected with at least a reasonable standard of care. Confidential Information excludes information that is publicly available through no breach of these Terms, lawfully known or received by the receiving party, or independently developed without use of the Confidential Information. Disclosure may be made if required by law or court order, subject to prompt notice where legally permitted.

9. Non-Disparagement

During the term of the Services and thereafter, the User agrees not to make or publish any false, misleading, or disparaging statements about Thalus, its Services, technology, personnel, or business, whether publicly or privately, including through social media, press statements, or third-party platforms. Nothing in this Section restricts the User from making truthful statements required by law or responding accurately to lawful inquiries from regulators or authorities. Public reviews or statements regarding the Services must be fair, accurate, and made in good faith, and must not misrepresent the nature of the Services, Outputs, or Thalus’s role as a technology and information provider or as a regulatory approval, certification, or assurance of compliance.

10. Privacy and Data Protection

Your use of the Services is also governed by our Privacy Policy and Cookie Policy, which explain how we collect, use, and protect your personal data and how cookies and similar technologies are used.

By using the Services, you acknowledge that you have read and understood these policies.

Cookie Policy: [Cookie Policy URL — to be inserted]

11. Paid Services (If Applicable)

Access to certain features of the Services may be provided on a paid basis pursuant to a subscription, enterprise offering, order form, or similar commercial arrangement agreed with Thalus.

The applicable commercial terms, including fees, scope of services, service levels (if any), term, and termination rights, shall be set forth exclusively in the applicable written agreement between Thalus and the User.

To the extent of any conflict between these Terms and a signed written agreement between Thalus and your organisation, the signed agreement will prevail for the subject matter of that agreement.

Where the User does not subscribe to or purchase any paid Services, this Section applies only to the extent relevant and does not create any obligation to pay fees.

12. Service Availability and Changes

We aim to provide reliable and high-quality Services, but we do not guarantee uninterrupted or error-free operation.

We may:

Modify or update the Services, including introducing new features or removing existing ones, including features, functionality, framework mappings, risk models, and methodologies, in whole or in part;

Perform maintenance, which may temporarily affect availability;

Discontinue part or all of the Services (for example, a particular public feature or beta).

Where practicable and appropriate, we may provide notice of material changes or discontinuations. Any changes may be made, in particular, to reflect regulatory developments, changes in applicable law or guidance (including updates to the EU AI Act or related frameworks), technical improvements, or operational considerations. Thalus shall have no liability for any modification, suspension, or discontinuation of the Services, except as otherwise required by applicable law or expressly agreed in writing.

13. Disclaimers

To the maximum extent permitted by law, the Services are provided on an “as is” and “as available” basis, and we make no representations or warranties of any kind, whether express, implied, or statutory, including but not limited to:

Warranties of merchantability, fitness for a particular purpose, non-infringement, or title;

Warranties that the Services will be uninterrupted, secure, or free of errors or harmful components;

Warranties regarding the accuracy, completeness, or reliability of any content or outputs.

Any decisions you make based on information or outputs from the Services are your responsibility. You should not rely on the Services as a substitute for professional advice (legal, compliance, financial, etc.).

Thalus makes no representation or warranty that use of the Services or Outputs will result in compliance with any law, regulation, standard, or framework, or that any Output will be accepted, approved, or relied upon by any regulatory authority, supervisory body, or third party.

To the maximum extent permitted by applicable law, the User assumes all risk arising from use of the Services and any reliance on the Outputs. Some jurisdictions do not allow the exclusion of certain warranties, so some of the above exclusions may not apply to you.

14. Limitation of Liability

To the maximum extent permitted by law:

14.1 Exclusion of Certain Damages

Thalus and its affiliates, directors, employees, and agents will not be liable for any indirect, incidental, consequential, special, exemplary, or punitive damages, or for loss of profits, revenue, data, or business opportunities, arising out of or in connection with the use of or inability to use the Services, even if we have been advised of the possibility of such damages.

14.2 Cap on Liability

Our total aggregate liability arising out of or relating to the Services or these Terms, whether in contract, tort, or otherwise, will be limited to the greater of: (a) the amount you have paid us for access to the Services in the twelve (12) months preceding the event giving rise to the claim (if any), or (b) $100 (or equivalent in local currency).

Nothing in these Terms excludes or limits liability that cannot be excluded or limited under applicable law (for example, liability for death or personal injury caused by negligence, or for fraud).

15. Indemnification

You agree to indemnify, defend, and hold harmless Thalus and its affiliates, directors, employees, and agents from and against any claims, damages, liabilities, costs, and expenses (including reasonable legal fees) arising out of or related to:

Your use of the Services in violation of these Terms or applicable law; or

Your content or your violation of any rights of a third party.

We reserve the right to assume the exclusive defence and control of any matter subject to indemnification by you, in which case you agree to cooperate with us.

16. Term and Termination

These Terms apply from the time you first access or use the Services and continue until terminated as set out below.

We may, in our discretion, suspend or terminate your access to the Services (or parts of them) if we reasonably believe that:

You have materially breached these Terms;

Your use poses a security or legal risk; or

We are required to do so by law or by a third-party provider.

You may stop using the Services at any time. If you have an account, you may request deletion of your account as permitted in the relevant interface or by contacting us.

Termination of access does not automatically relieve either party of obligations incurred prior to termination (for example, payment obligations under a separate subscription agreement).

17. Governing Law and Jurisdiction

These Terms and any dispute or claim arising out of or in connection with them (including non-contractual disputes or claims) will be governed by and construed in accordance with the laws of:

[INSERT GOVERNING LAW — e.g., the laws of England and Wales / the State of Delaware, USA]

The courts of:

[INSERT JURISDICTION — e.g., the courts of London, England / the federal and state courts of [County, State], USA]

will have exclusive jurisdiction to settle any dispute arising out of or in connection with these Terms or the Services, subject to applicable mandatory law.

If you are a consumer in the EU/UK or in another jurisdiction that grants you specific local rights, you may be able to bring claims in your local courts under local law.

18. Changes to These Terms

We may revise these Terms from time to time. When we do so, we will:

Update the “Last updated” date at the top of this page; and

Where changes are material, provide additional notice (for example, via a banner on the Site or via email, if appropriate).

If you continue to use the Services after the revised Terms become effective, you are deemed to have accepted the updated Terms. If you do not agree to the changes, you should stop using the Services.

19. General

Entire agreement: These Terms, together with any applicable Privacy Policy, Cookie Policy, and (if relevant) separate written agreements between you/your organisation and Thalus, constitute the entire agreement between you and Thalus regarding the Services.

Severability: If any provision of these Terms is held to be invalid or unenforceable, that provision will be enforced to the maximum extent permissible, and the remaining provisions will remain in full force and effect.

No waiver: Any failure by Thalus to enforce a right or provision under these Terms does not constitute a waiver of that right or provision.

Assignment: You may not assign or transfer these Terms or your rights and obligations under them without our prior written consent. We may assign these Terms in connection with a merger, acquisition, corporate reorganisation, or sale of assets.

20. Definitions

For purposes of these Terms, the following definitions apply:

“Services” means the Thalus website, platform, dashboards, application programming interfaces, software development kits, tools, features, documentation, and related services made available by Thalus, whether on a free, trial, or paid basis.

“API” means any application programming interface made available by Thalus, including associated endpoints, credentials, specifications, and access mechanisms, through which the Services may be accessed or integrated.

“SDK” means any software development kit, libraries, code samples, or related tools provided by Thalus to facilitate integration with or use of the Services.

“Customer Data” means any data, information, or content submitted to, processed by, or transmitted through the Services by or on behalf of a User, excluding aggregated or anonymized data derived by Thalus from use of the Services.

“Risk Outputs” means any analyses, classifications, assessments, recommendations, reports, or other outputs generated by the Services based on Customer Data or User inputs.

“Documentation” means user guides, technical documentation, specifications, policies, and other materials made available by Thalus relating to the Services, whether in written or electronic form.

“Applicable Law” means all laws, statutes, regulations, rules, directives, and legally binding guidance applicable to a party’s activities under these Terms, including data protection and artificial intelligence laws.

“EU AI Act” means Regulation (EU) 2024/1689 on artificial intelligence, as amended, supplemented, or replaced from time to time, together with any implementing or delegated acts.

“Enterprise Account” means an account established for an enterprise or organizational User that provides access to additional features, functionality, or services, including dashboards, APIs, or paid offerings.

21. Contact Information

If you have any questions about these Terms, the Services, or related matters, you may contact Thalus at:

Thalus

Email: admin@thalus.ai

Website: https://www.thalus.ai

Communications sent to Thalus will be deemed received when actually received by Thalus through the contact details above.