ArcheVault Terms of Service

1. Acceptance and scope

These Terms govern access to and use of ArcheVault, including the ArcheVault website, application, evaluation environments and associated services, unless a separate signed agreement expressly governs the relevant service.

By accessing or using ArcheVault, you represent that you are authorised to accept these Terms on your own behalf or on behalf of the organisation you represent. If you do not agree, do not access or use the service.

Where a signed order form, subscription agreement or data processing agreement conflicts with these Terms, the signed agreement will govern to the extent of the conflict.

2. Service description and availability

ArcheVault provides data engineering functionality that may include source-data ingestion, profiling, classification, schema discovery, Data Vault 2.0 modelling, SQL/DDL generation, data loading, processing history and related documentation.

Features and connectors may vary by product version, subscription, deployment and configuration. Certain capabilities may be experimental, under development or unavailable in a particular environment.

2.1 Demonstration and evaluation environments

The pre-production environment at demo.archevault.com is provided for demonstration and evaluation. It may be changed, reset, interrupted or withdrawn without the availability commitments that might be negotiated under a separate production agreement.

2.2 Availability and service levels

Unless Aurinko and the customer execute a separate written service-level agreement or order form, ArcheVault is provided without a guaranteed monthly uptime percentage, response time, recovery time or uninterrupted availability commitment.

Any availability or support commitment applies only to the deployment and services expressly covered by the signed agreement. No production SLA applies to the public website or pre-production demonstration environment unless specifically agreed in writing.

3. Customer accounts and access

You must provide accurate account information, keep authentication credentials confidential and promptly notify Aurinko of suspected unauthorised access.

You are responsible for activities performed through your account to the extent permitted by law and for managing access granted to your users. You must not share accounts in a way that bypasses applicable access restrictions or permit unauthorised persons to use the service.

Aurinko may restrict or suspend access where reasonably necessary to address a security risk, suspected misuse, legal requirement or material breach of these Terms.

4. Customer data and authorised use

You retain your rights in data, files and other materials that you provide to ArcheVault (“Customer Data”). You grant Aurinko a limited right to host, access, reproduce, process and transmit Customer Data as reasonably necessary to provide, secure, maintain and support the service in accordance with the applicable agreement.

You represent that:

• You have the necessary rights, permissions and lawful basis to provide Customer Data and authorise its processing.
• Your use of ArcheVault complies with applicable privacy, confidentiality, data-protection and sector-specific requirements.
• You have provided any notices and obtained any permissions required for the source data, connected systems and processing activities.
• You will not upload data to the demonstration environment contrary to Section 2.1.

You must not use ArcheVault to process unlawful content, compromise another organisation's data, bypass access controls or conduct activity that could damage the service or other users.

5. AI-assisted processing and third-party infrastructure

Certain ArcheVault features use third-party cloud services, including AWS Bedrock with Anthropic Claude models, to assist with classification and related tasks.

AI-assisted processing may transmit column names, data types, dataset context and sampled source values to the relevant provider. Sample values may contain personal or confidential information if present in the source data. Customers must evaluate whether their data and regulatory obligations permit this processing before enabling or using the relevant functionality.

ArcheVault may also use cloud storage, database, email and website-form providers to operate the service. Third-party providers are subject to their applicable service terms and processing arrangements.

Customers requiring a particular processing region, local-only processing, a specific AI opt-out, dedicated infrastructure or other deployment restrictions must obtain written confirmation from Aurinko before submitting affected data.

6. Data retention and deletion

The service may create uploaded-file copies, staging artefacts, Parquet checkpoints, execution records, metadata and logs to support pipeline processing, resumability, support and security.

Unless a signed agreement expressly provides otherwise, Aurinko does not warrant that all Customer Data and processing artefacts will be automatically deleted within 24 or 48 hours. Retention and deletion may differ by storage location and data type.

Customers must maintain their own authorised source copies and destination backups as appropriate. Any deletion request, service termination or agreed retention schedule will be handled under the applicable agreement and applicable law. Customers should obtain written confirmation of any required deletion timeline before uploading data subject to strict retention or erasure requirements.

7. Customer ownership and generated outputs

As between Aurinko and the customer, the customer retains its rights in Customer Data.

Subject to third-party rights, applicable law and the terms of any separate agreement, the customer may use schema definitions, DDL and other outputs generated for its own use. Where ArcheVault allows export of generated DDL or related code, the customer is responsible for reviewing, testing and authorising its execution in the intended environment.

Aurinko does not warrant that generated schemas, classifications, mappings, SQL statements or transformations will be complete, error-free or suitable for every regulatory, operational or analytical purpose. The customer must validate generated outputs before relying on them in production.

8. Intellectual property

Aurinko and its licensors retain their rights in ArcheVault, including the application, software, interface, documentation, product design, trademarks and underlying technology, except for rights expressly granted in writing.

No ownership of the ArcheVault platform transfers to the customer under these Terms. Nothing in this section limits the customer's rights in its own Customer Data or any outputs that the customer is entitled to use under Section 7 and the applicable agreement.

9. Security and acceptable use

Aurinko applies security measures appropriate to its service and deployment, but no service can be guaranteed to be free from all vulnerabilities or interruptions. The controls available to a customer depend on the applicable deployment and written commitments.

You must not:

• Attempt to access another customer's data or account.
• Probe, scan, exploit or disrupt the service without prior written authorisation.
• Upload malware or use the service to violate applicable law.
• Circumvent authentication, permissions, usage restrictions or technical safeguards.
• Use the service in a way that creates unreasonable risk to other customers or the service.

Report suspected security issues to [email protected]. Do not include live customer records, passwords, access keys or other secrets in a report.

10. Third-party services and integrations

ArcheVault may connect to third-party databases, cloud storage, AI services and other systems selected or configured by the customer. Those services may have their own terms, availability limits, security controls and processing practices.

The customer is responsible for ensuring that it is authorised to connect to those systems and for configuring the access permissions and credentials it provides. Aurinko is not responsible for outages or changes in third-party services except to the extent expressly stated in a signed agreement or required by law.

11. Suspension and termination

Aurinko may suspend or restrict access where reasonably necessary to protect the service, address a suspected security incident, comply with law, collect amounts due or respond to a material breach of these Terms.

Either party may terminate a subscription or service in accordance with the applicable order form or written agreement. On termination, access may cease and the handling of Customer Data will be governed by the applicable agreement and Section 6. Customers should export any outputs they are entitled to retain before access ends.

12. Disclaimers

To the extent permitted by applicable law, ArcheVault is provided on an “as available” basis unless a signed agreement states otherwise. We do not warrant uninterrupted availability or that automated classifications, data mappings, generated code, schema recommendations or processing results will always be accurate, complete or suitable for a particular purpose.

ArcheVault is a data engineering tool. It does not replace the customer's legal, regulatory, security, accounting or professional review obligations.

Nothing in these Terms excludes or limits a right, remedy or liability that cannot lawfully be excluded or limited.

13. Liability

Any limitation of liability, indemnity, warranty or remedy will be governed by the applicable signed agreement and mandatory applicable law. Where no separate signed agreement addresses these matters, the parties should obtain legal advice and execute appropriate terms before using ArcheVault for production, regulated or sensitive data.

14. Changes to the service or Terms

We may update the service and these Terms as the product evolves. We will publish revised Terms with an updated date. Where required by law or contract, we will provide additional notice or obtain consent.

15. Governing law and contact

These Terms are subject to the governing-law and dispute-resolution provisions of the applicable signed agreement. If no such agreement exists, the parties should confirm the appropriate governing-law and jurisdiction provisions before relying on these Terms.