Terms of ServiceCondiciones generales de contratación

Agent: a software system declared by the Tenant in the Service. Manifest: the declaration of an Agent’s function, tools, permitted scope, forbidden actions and maximum autonomy level. Credential: the signed statement issued by Cosmolabs that binds an Agent to a specific version of its Manifest. Seal: the visual mark generated from a Credential. Verifier: the public page and endpoint that check a Credential. Status List: the signed public list that carries revocation status. Tenant: the legal or natural person contracting the Service. End Customer: the Tenant’s own client. Binding: a link between a Credential and a resource the Agent uses. Revocation Run: the record of one execution of a Tenant’s stop plan. Sandbox / Production Environment: the two environments of the Service. Active Agent: an Agent in the Production Environment holding, at the moment of measurement, at least one Credential that is neither revoked nor expired, measured by a daily snapshot at 00:05 UTC written into the Tenant’s chained audit log. Documentation: the technical documentation published on the Service’s website. Trust Framework: the public issuer policy published by Cosmolabs.

The Service (a) issues signed Credentials that reflect declarations made by the Tenant, (b) publishes a Verifier that checks the signature, the issuer, the validity period and the Manifest hash, and (c) does not verify, review on behalf of an independent third party, accredit or warrant the truthfulness of what is declared, nor the actual behaviour of the Agent.

CORTEX Seal is a non-qualified trust service. It is not a qualified trust service, not a qualified electronic seal, and not an accreditation, within the meaning of Regulation (EU) No 910/2014. It does not establish compliance with Regulation (EU) 2024/1689 or with any other instrument; it is designed to provide a verifiable answer to the transparency obligation in Article 50 of that Regulation, an obligation which rests with the provider or deployer of the AI system.

The Tenant must be at least 18 years old and have legal capacity. On sign-up the Tenant states whether it is acting in the course of a trade, business, craft or profession. If it is not, Annex A applies in full and prevails over any conflicting term of these Terms.

Plans, prices and limits are those published on the pricing page, which forms part of these Terms and may be updated under clause 17. Sandbox Credentials are marked SANDBOX — NOT VALID and must not be presented as production Credentials. Limits cover Active Agents, public verification fair use, Bindings, seats, request rate and log retention.

All prices are exclusive of VAT. Where the Tenant supplies a valid EU VAT identification number, the reverse charge applies. For consumers in the EU, VAT of the country of residence applies. Subscriptions renew automatically for equal periods until cancelled from the dashboard.

Price changes require 30 days’ prior notice, and the Tenant may cancel without penalty before the change takes effect. Late payment may lead to suspension of new issuance after 14 days, with prior notice. Suspension for non-payment does not revoke Credentials already issued.

Either monthly or annual. Cosmolabs may suspend the Service immediately for (i) non-payment, (ii) breach of the Acceptable Use Policy, (iii) a security risk, or (iv) a legal requirement.

Effect of termination on Credentials. On termination, Credentials issued to the Tenant are revoked and the Verifier will show that the issuing relationship has ended. This is stated here, in advance, so that it is not a surprise later.

The Tenant warrants that:

• the Manifest is truthful, complete and current;
• it owns, or is authorised to use, the domain and the brand shown in the Verifier;
• it designates a human individual responsible for each Agent and keeps that designation current;
• it revokes or re-issues within 72 hours when the scope, the tools or the autonomy level change;
• it does not display the Seal outside the authorised scope; and
• it complies with the Acceptable Use Policy and the Trust Framework.

Cosmolabs grants a non-exclusive, non-transferable, revocable licence, limited to the subscription term and to Agents holding an active Credential, to display the Seal and link to the Verifier. Altering the Seal, suppressing or misrepresenting the status returned by the Verifier, or displaying the Seal for a revoked, expired or suspended Credential is prohibited. The licence terminates automatically with the subscription.

Cosmolabs retains all rights in the platform, the code, the Seal artwork, the brand, the Documentation and the Trust Framework. The Tenant retains its rights in its Manifests and its brand, and grants Cosmolabs a limited licence to display them in the Verifier. The open specification is governed by its own licence (CC BY 4.0 for the specification text and schema); the CORTEX Seal trade marks are expressly excluded from that licence.

Mutual, for three years from disclosure, with the customary exceptions for information that is public, already known, independently developed or required to be disclosed by law.

The Data Processing Agreement is incorporated into these Terms by reference and governs any processing of personal data carried out by Cosmolabs on the Tenant’s behalf.

The Service Level Agreement applies as published. Service credits are the sole and exclusive remedy for failure to meet the availability target.

The Service depends on its hosting platform, on Google Cloud (key management, europe-west1), on Stripe (payments) and on the providers targeted by a Tenant’s stop plan. Cosmolabs excludes liability for the behaviour of third-party systems, including the non-execution of a revocation instruction.

Cosmolabs warrants that it will provide the Service with reasonable professional care and skill. To the extent permitted by law, all implied warranties are excluded. Cosmolabs expressly gives no warranty that revocation will take effect within third-party systems, and no warranty of fitness for any particular regulated use.

15.1 Cap. Cosmolabs’ aggregate liability, on any basis and in any period of twelve months, is limited to the total fees actually paid by the Tenant in the twelve months preceding the event giving rise to the claim.

15.2 Excluded damages. Indirect and consequential loss, loss of profit, revenue, data, opportunity, contracts and reputational harm are excluded.

15.3 Third-party failure in the revocation cascade. Cosmolabs shall have no liability whatsoever for any loss arising from the failure, delay, partial execution or non-execution by any third-party provider of a revocation instruction issued, transmitted or attempted by the Service, including where such failure results from the third party’s own systems, policies, rate limits, outages or propagation times. The Tenant acknowledges that the Service’s commitment in respect of third-party providers is limited to attempting delivery of a signed instruction and to recording the outcome, as described in the Service Level Agreement and in the Trust Framework.

15.4 Carve-outs. Nothing in these Terms limits liability for wilful misconduct, gross negligence, death or personal injury, or any liability that cannot be limited by law. Against consumers, this clause 15 applies only to the extent permitted by Directive 93/13/EEC and national mandatory rules.

15.5 Allocation of risk. Prices and limits are calibrated against each other. The Tenant is free to obtain insurance.

15bis.1 Nature of the function. Stopping issuance and invalidating status are performed by Cosmolabs within the times stated in the Service Level Agreement. Calls to a provider’s API are best-effort orchestration. Cutting network paths is not provided at all.

15bis.2 Mandatory dry run. The Service will refuse real execution of any Binding that has not previously passed a dry run. This is a safety measure, not an arbitrary limitation.

15bis.3 Grace window and hold. A grace window of 0–900 seconds is configurable, with a hold button. Revocation of the Credential and execution of the cascade are decoupled: revoking the Credential does not necessarily execute the cascade.

15bis.4 Dual approval and irreversibility. Dual approval is mandatory for every Binding marked irreversible: the requesting and approving identities must differ and both are recorded in the Revocation Run. Before execution, the Service shows what is reversible and what is not, citing the provider’s own documentation.

15bis.5 Tenant-initiated revocation. Revocation requested by the Tenant, or by any user with permission on its account, is the sole responsibility of the Tenant, including consequences for its own production systems and those of its End Customers.

15bis.6 Erroneous revocation by the Service. If a revocation is executed because of a failure attributable solely to Cosmolabs, the Tenant’s remedy is (i) immediate reversal of everything reversible, (ii) a signed incident report within 72 hours, and (iii) a service credit equal to three months of fees, all within the cap in 15.1 and as the sole and exclusive remedy.

15bis.7 Fail-open. Fail-open mode is disabled by default, configured per Binding, and declared inside the signed Credential itself, so that its state is verifiable by any third party.

The Tenant indemnifies Cosmolabs against third-party claims arising from (i) falsity of a Manifest, (ii) use of the Seal contrary to the Acceptable Use Policy, and (iii) infringement of third-party rights by the Tenant’s brand or content.

Material changes require 30 days’ prior notice and give the Tenant the right to terminate without penalty. There is no silent unilateral amendment.

Notices are given to the email addresses on file. The Tenant may not assign without consent; Cosmolabs may assign as part of a transfer of the business, with notice. Neither party is liable for events beyond reasonable control. If a provision is unenforceable, the rest stands.

Estonian law governs, and the courts of Harju Maakohus (Tallinn) have jurisdiction. Consumers keep the mandatory rules and the fora of their country of residence.

Data Processing Agreement > Trust Framework > Acceptable Use Policy > Service Level Agreement > these Terms > Documentation.

This Annex applies where the Tenant is a natural person acting outside a trade, business, craft or profession, and prevails over any conflicting term.

1. Right of withdrawal. Fourteen days from conclusion of the contract, without giving any reason, using the model withdrawal form in Annex I(B) of Directive 2011/83/EU or any other unequivocal statement.
2. Express request for immediate performance and pro rata. If the consumer expressly requests performance to begin during the withdrawal period, and acknowledges that the right of withdrawal will be lost once the service has been fully performed, the consumer pays an amount proportionate to what has been supplied up to the moment of withdrawal. This request is a separate, non-pre-ticked confirmation and is confirmed on a durable medium.
3. Withdrawal function. A withdrawal button is available in the dashboard throughout the withdrawal period, and its use is acknowledged on a durable medium.
4. Legal guarantee of conformity for digital services under Directive (EU) 2019/770 applies in full.
5. Mandatory rules of the consumer’s country of residence prevail.
6. Alternative dispute resolution. The consumer may use the out-of-court mechanisms available in their country of residence.
7. Unfair terms. Limitations of liability in clause 15 do not apply to consumers to the extent they would be unfair under Directive 93/13/EEC.