Terms and Conditions.

Important — please read carefully. These Terms and Conditions form a binding legal agreement governing your purchase and use of the Confir platform. By completing checkout, clicking “I accept,” or accessing or using the Service, you agree to be bound by these Terms. If you are entering into these Terms on behalf of an organisation, you confirm that you are authorised to bind that organisation. The Service is offered only to businesses and professionals, not to consumers.

Confir is a software tool that supports your own assessment of, and documentation for, the EU AI Act. It does not provide legal advice and does not guarantee compliance with the EU AI Act or any other law (see Section 11).

1. Definitions

In these Terms, the following capitalised terms have the meanings set out below.

• “Agreement” means these Terms and Conditions together with the Order, the Data Processing Agreement, and any documents expressly incorporated by reference.
• “Confir,” “we,” “us,” “our” means Confir OÜ, a private limited company (osaühing) incorporated in the Republic of Estonia under registry code [Registry code], with its registered office at [Registered address], Estonia.
• “Authorised User” means an individual whom you permit to access and use the Service under your account, such as an employee, contractor, or agent acting on your behalf.
• “Confidential Information” has the meaning given in Section 13.
• “Customer,” “you,” “your” means the business or professional entity that purchases or uses the Service.
• “Customer Data” means all data, documents, information, and other materials that you or your Authorised Users submit to, or generate within, the Service, including information you provide about your AI systems, products, processes, and organisation.
• “Data Processing Agreement” or “DPA” means the data processing agreement between the parties governing the processing of personal data, available at confir.eu/legal/dpa and incorporated into this Agreement by reference.
• “Documentation” means the user guides, help materials, and technical documentation we make available for the Service.
• “EU AI Act” means Regulation (EU) 2024/1689 of the European Parliament and of the Council laying down harmonised rules on artificial intelligence, as amended or replaced from time to time, together with related implementing and delegated acts.
• “Intellectual Property Rights” means all patents, utility models, copyright and related rights, trademarks, trade names, database rights, rights in designs, rights in know-how and trade secrets, and all other intellectual property rights, whether registered or unregistered, anywhere in the world.
• “Order” means the purchase you complete at checkout on our website, including the selected License Package, billing frequency (monthly or annual), and price.
• “Output” means the assessments, classifications, scoping results, findings, checklists, reports, and other materials that the Service generates based on the inputs you provide.
• “License Package” means the tier, plan, or bundle of features and usage limits you select in your Order.
• “Service” means the Confir software-as-a-service platform made available at confir.eu (and related domains), together with the Documentation and any updates, but excluding Third-Party Services.
• “Subscription Term” means the period during which you are entitled to access the Service, as described in Section 8.
• “Third-Party Services” means products, services, integrations, or content provided by a party other than Confir.

2. The Agreement and eligibility

2.1 Scope. This Agreement governs your access to and use of the Service. It applies to the entity identified in the Order and to all Authorised Users.

2.2 Business use only. The Service is intended exclusively for use by businesses, professionals, and other organisations acting in the course of their trade, business, craft, or profession. By entering into this Agreement, you represent and warrant that you are not a consumer. The mandatory consumer-protection provisions of EU and Estonian law (including the right of withdrawal under Directive (EU) 2011/83) do not apply to this Agreement.

2.3 Capacity. You represent that you have full legal capacity and authority to enter into this Agreement and that the individual accepting it is authorised to do so on your behalf.

2.4 Order of precedence. In the event of a conflict between the documents that make up the Agreement, the following order of precedence applies, unless expressly stated otherwise: (a) the DPA, in respect of the processing of personal data; (b) the Order; and (c) these Terms and Conditions.

3. The Service and license grant

3.1 License. Subject to your compliance with this Agreement and payment of the applicable fees, Confir grants you a non-exclusive, non-transferable, non-sublicensable, revocable right to access and use the Service and Documentation during the Subscription Term, solely for your internal business purposes and within the limits of your License Package.

3.2 Authorised Users. You may permit Authorised Users to use the Service on your behalf. You are responsible for the acts and omissions of your Authorised Users as if they were your own, and you must ensure they comply with this Agreement. Account credentials must not be shared beyond the seats or users permitted by your License Package.

3.3 License Packages and limits. The features, seats, usage volumes, and any other limits applicable to you are those of the License Package selected in your Order. We may offer different License Packages with different features and prices.

3.4 Updates. We may modify, enhance, or update the Service from time to time. We will not materially reduce the core functionality of your License Package during a paid Subscription Term without giving you reasonable notice and, where the reduction is material and to your detriment, the option to terminate under Section 8.6.

3.5 Reservation of rights. Except for the limited license expressly granted in this Section, no rights are granted to you in or to the Service, the Documentation, or any related Intellectual Property Rights, whether by implication, estoppel, or otherwise.

4. Acceptable use and customer responsibilities

4.1 Your responsibilities. You are responsible for: (a) the accuracy, quality, and legality of Customer Data and the means by which you acquired it; (b) maintaining the confidentiality and security of account credentials; (c) all activity occurring under your account; and (d) using the Service in compliance with this Agreement and applicable law.

4.2 Acceptable use. You must not, and must not permit any Authorised User or third party to:

• copy, modify, translate, or create derivative works of the Service, except as expressly permitted;
• reverse engineer, decompile, or disassemble the Service, or attempt to derive its source code, underlying ideas, algorithms, or rule logic, except to the extent this restriction is prohibited by mandatory law;
• resell, rent, lease, sublicense, distribute, or otherwise make the Service available to any third party, or use the Service to provide a service bureau, time-sharing, or similar service to third parties;
• circumvent or disable any usage limits, security, or access controls, or access the Service to build a competing product or service;
• upload or transmit any malicious code, or use the Service in a manner that impairs, overburdens, or disrupts the Service or its infrastructure;
• use the Service in violation of any applicable law, or to infringe the rights of any third party; or
• submit Customer Data that you are not entitled to submit or process.

4.3 Suspension. We may suspend your or an Authorised User's access to the Service, in whole or in part, where: (a) we reasonably believe the Service is being used in breach of Section 4.2; (b) suspension is necessary to protect the security, integrity, or availability of the Service or other customers; (c) required by law or a competent authority; or (d) fees are overdue as described in Section 6.5. We will, where practicable and lawful, give you advance notice and limit any suspension to what is reasonably necessary. Suspension does not relieve you of your payment obligations.

5. Free trial

5.1 Trial period. If you sign up for a free trial, we grant you access to the Service (or to the applicable trial features) free of charge for a period of seven (7) days from the start of the trial, unless we state a different period at sign-up.

5.2 Conversion to paid subscription. Unless you cancel before the end of the trial period, your trial will automatically convert into a paid subscription for the License Package and billing frequency you selected, and we will charge the applicable fee using the payment method on file. By starting a trial, you authorise this charge.

5.3 Cancelling during the trial. You may cancel at any time during the trial via your account settings or by contacting us. If you cancel before the trial ends, you will not be charged.

5.4 Trial terms. Free trials are provided “as is” and “as available,” without warranties of any kind. We may limit trials to one per customer, modify or discontinue trials at any time, and exclude certain features from a trial. Sections 9 (Warranties and disclaimers), 11 (No legal advice), 12 (Limitation of liability), and 13 (Confidentiality) apply fully to trial use.

6. Fees and the Order

6.1 Fees. You agree to pay the fees for the License Package and billing frequency set out in your Order. Except as expressly stated in this Agreement, all fees are non-refundable, including where you do not use the Service or cancel mid-cycle (see Section 8).

6.2 Checkout and payment processor. Purchases are completed through the checkout on our website. Payments are processed by our third-party payment provider(s). By submitting payment details, you authorise us and our payment provider to charge the applicable fees, including recurring fees on each renewal, to your selected payment method. You are responsible for providing accurate, current payment information and for keeping it valid.

6.3 Billing frequency. You may select monthly or annual billing at checkout. Monthly plans are billed in advance each month; annual plans are billed in advance for the full year. Your billing cycle begins on the date your paid subscription starts (including on conversion from a trial under Section 5.2).

6.4 Taxes. All fees are exclusive of value added tax (VAT) and any other applicable taxes, duties, or levies, which you are responsible for paying. Where you are a business established in an EU Member State other than Estonia and provide a valid VAT identification number, the reverse-charge mechanism will apply where legally available, and you are responsible for accounting for VAT in your jurisdiction. If you are required by law to withhold any taxes from fees payable to us, the fees will be increased so that we receive the amount we would have received absent the withholding.

6.5 Late payment. If a payment fails or any undisputed amount is overdue, we may: (a) retry the charge; (b) charge default interest at the statutory rate applicable to commercial transactions under Estonian law; and (c) after reasonable notice, suspend the Service until payment is made. You will reimburse our reasonable costs of collecting overdue amounts.

6.6 Price changes. We may change our fees. Any change to recurring fees will take effect from your next renewal, and we will give you at least thirty (30) days' notice before the renewal to which the change applies. If you do not agree to the new fees, you may cancel before the change takes effect, and the change will not apply to your current paid period.

7. Customer Data, security, and data protection

7.1 Ownership of Customer Data. As between the parties, you retain all right, title, and interest in and to Customer Data. You grant us a non-exclusive, worldwide license to host, copy, process, transmit, and display Customer Data to the extent necessary to provide and support the Service, to prevent or address technical or security issues, and to comply with law.

7.2 Your warranties regarding Customer Data. You represent and warrant that you have all rights, consents, and lawful bases necessary to submit Customer Data to the Service and to authorise the processing described in this Agreement and the DPA.

7.3 Data protection. Where we process personal data on your behalf in providing the Service, we act as a processor and you act as the controller (as defined in the GDPR, Regulation (EU) 2016/679). Such processing is governed by the DPA, which is incorporated into this Agreement by reference. We will process personal data only on your documented instructions, as set out in the DPA, and will implement appropriate technical and organisational measures to protect it.

7.4 Security. We will maintain commercially reasonable administrative, technical, and physical safeguards designed to protect the Service and Customer Data against unauthorised access, loss, or disclosure. No method of transmission or storage is completely secure, and you are responsible for security within your own systems and for the configuration choices you make within the Service.

7.5 Aggregated and anonymised data. We may collect and use technical, usage, and statistical data relating to the operation of the Service, and may generate aggregated or anonymised data that does not identify you, any Authorised User, or any individual. We may use such aggregated or anonymised data for any lawful purpose, including operating, improving, and developing the Service. We do not use identifiable Customer Data to develop products or services for other customers except as permitted by this Agreement or the DPA.

7.6 Data export and deletion. During the Subscription Term you may export Customer Data using the functionality of the Service. Following termination or expiry, deletion and any return of Customer Data are handled as described in Section 8.7 and the DPA.

8. Term, renewal, cancellation, and termination

8.1 Term. This Agreement starts when you first accept it (including by starting a trial or completing checkout) and continues until all Subscription Terms have expired or the Agreement is terminated in accordance with this Section.

8.2 Subscription Term and automatic renewal. Your subscription runs for the billing period selected in your Order (one month or one year) and renews automatically for successive periods of the same length, at the then-current fee, unless cancelled in accordance with this Section. By purchasing, you authorise recurring charges for each renewal until cancellation.

8.3 Renewal reminders. For annual subscriptions, we will send a reminder to the email address associated with your account a reasonable time before each renewal. We may, but are not obliged to, send reminders for monthly subscriptions.

8.4 Cancellation by you. You may cancel renewal at any time via your account settings or by contacting us. Cancellation stops the next renewal and takes effect at the end of your current paid period. You will retain access until the end of the period for which you have already paid. Cancellation does not entitle you to a refund of fees already paid, and we do not provide partial-period or pro-rata refunds, except where required by mandatory law.

8.5 No refunds. Except for the trial period described in Section 5 and any rights you have under mandatory law, all fees are non-refundable.

8.6 Termination for cause. Either party may terminate this Agreement (or the affected Order) with immediate effect by written notice if the other party: (a) commits a material breach that it fails to cure within thirty (30) days after written notice (or, for non-payment, within ten (10) days); or (b) becomes insolvent, enters liquidation, or is subject to comparable insolvency proceedings. We may also terminate for cause where you commit a material breach that is incapable of cure, including a serious breach of Section 4.2.

8.7 Effect of termination. On termination or expiry: (a) your right to access the Service ends; (b) you must stop using the Service and Documentation; (c) any accrued payment obligations remain due; and (d) we will, on request made within thirty (30) days, make Customer Data available for export, after which we may delete it in the ordinary course, subject to the DPA and any legal retention obligations. Sections that by their nature should survive termination (including Sections 6, 7, 9, 10, 11, 12, 13, 14, and 17) will survive.

9. Warranties and disclaimers

9.1 Limited service warranty. We warrant that we will provide the Service with reasonable skill and care and substantially in accordance with the Documentation. Your exclusive remedy, and our sole obligation, for breach of this warranty is for us to use commercially reasonable efforts to correct the non-conformity or, if we cannot do so within a reasonable time, to allow you to terminate the affected Order and, for prepaid annual subscriptions, refund the fees for the remaining unused period.

9.2 Availability. We aim to make the Service available on a continuous basis and will use commercially reasonable efforts to do so. Our target service levels are described in our Service Level Agreement. However, we do not guarantee any particular level of availability, uptime, or uninterrupted operation. The Service may be unavailable during planned maintenance, emergency maintenance, or due to factors beyond our reasonable control. No service credits are offered except as expressly set out in the Service Level Agreement or separately agreed in writing.

9.3 Disclaimer. Except for the express warranties in this Agreement, and to the maximum extent permitted by applicable law, the Service, Documentation, Output, and any trial are provided “as is” and “as available,” without warranties of any kind, whether express, implied, or statutory, including any implied warranties of merchantability, fitness for a particular purpose, accuracy, title, or non-infringement. We do not warrant that the Service will be error-free, that defects will be corrected, that the Service is free of harmful components, or that Output will meet your requirements or any regulatory standard.

9.4 Customer environment. We are not responsible for issues arising from your equipment, networks, configurations, Third-Party Services, or your failure to follow the Documentation or our reasonable instructions.

10. Intellectual property

10.1 Our IP. The Service, the Documentation, and all underlying software, technology, rule logic, content, design, and Intellectual Property Rights are and remain the exclusive property of Confir and its licensors. Other than the license expressly granted in Section 3, you receive no rights in our Intellectual Property Rights.

10.2 Output. Subject to your payment of fees and compliance with this Agreement, you may use the Output generated from your inputs for your internal business purposes. You acknowledge that Output is produced by automated processing of the inputs you provide and is provided subject to Sections 9 and 11.

10.3 Feedback. If you provide suggestions, ideas, or feedback about the Service, you grant us a perpetual, irrevocable, worldwide, royalty-free license to use and incorporate that feedback into our products and services without restriction or obligation to you.

10.4 Trademarks. “Confir” and our logos are our trademarks. You may not use them without our prior written consent, except to factually identify your use of the Service.

11. No legal advice; no guarantee of regulatory compliance

11.1 Software tool, not advice. The Service is a software tool designed to help you organise information, perform structured assessments, and produce documentation in connection with the EU AI Act. The Service does not constitute legal, regulatory, compliance, or professional advice, and use of the Service does not create a lawyer–client or advisory relationship.

11.2 How the Service works. The Output is generated by applying predefined rules and logic to the information you input. The accuracy, completeness, and usefulness of the Output depend entirely on the accuracy and completeness of the information you provide. The Service does not independently verify your inputs.

11.3 No guarantee of compliance. We do not warrant or guarantee that use of the Service, or reliance on any Output, will result in or ensure compliance with the EU AI Act or any other law, regulation, standard, or requirement, or that any Output reflects the most current legal position. Laws and their interpretation change, and individual circumstances vary.

11.4 Your responsibility. You remain solely responsible for your own legal and regulatory compliance, including determining the risk classification and obligations applicable to your AI systems, and for any decisions you make. You should obtain advice from qualified legal and compliance professionals before relying on any Output for compliance, regulatory filings, or other significant decisions. To the maximum extent permitted by law, we are not liable for any decision made, or action taken or not taken, in reliance on the Service or any Output.

12. Limitation of liability

12.1 Exclusion of indirect damages. To the maximum extent permitted by applicable law, neither party will be liable for any indirect, incidental, special, consequential, or punitive damages, or for any loss of profits, revenue, business, anticipated savings, goodwill, or for any loss or corruption of data, in each case however arising, whether in contract, tort (including negligence), or otherwise, even if advised of the possibility of such damages.

12.2 Liability cap. To the maximum extent permitted by applicable law, our total aggregate liability arising out of or in connection with this Agreement will not exceed the total fees actually paid by you to us for the Service in the twelve (12) months immediately preceding the event giving rise to the liability.

12.3 Carve-outs. Nothing in this Agreement excludes or limits either party's liability where, and to the extent that, it cannot be excluded or limited under applicable mandatory law. This includes, under Estonian law, liability for damage caused intentionally or by gross negligence, and any other liability that may not lawfully be limited. Your obligation to pay fees and the indemnities in Section 14 are not subject to the cap in Section 12.2.

12.4 Allocation of risk. You acknowledge that the fees reflect the allocation of risk set out in this Agreement, and that the limitations and exclusions in this Section are an essential basis of the bargain between the parties.

13. Confidentiality

13.1 Definition. “Confidential Information” means non-public information disclosed by one party (the “Discloser”) to the other (the “Recipient”) that is identified as confidential or that a reasonable person would understand to be confidential, including the Service's non-public features, pricing, and business and technical information. Customer Data is your Confidential Information.

13.2 Obligations. The Recipient will: (a) use the Discloser's Confidential Information only to perform under this Agreement; (b) protect it using at least reasonable care; and (c) not disclose it except to its personnel, advisers, and subcontractors who need to know it and are bound by confidentiality obligations no less protective than these.

13.3 Exceptions. Confidential Information does not include information that is or becomes public through no fault of the Recipient, was lawfully known to the Recipient without obligation of confidence, is independently developed without use of the Confidential Information, or is rightfully received from a third party. The Recipient may disclose Confidential Information where required by law or a competent authority, giving prior notice where lawfully permitted.

14. Indemnification

14.1 By you. You will defend, indemnify, and hold harmless Confir and its affiliates, officers, and personnel from and against any third-party claims, and any resulting losses, damages, liabilities, costs, and reasonable legal fees, arising out of or relating to: (a) Customer Data, including any claim that it infringes the rights of, or has caused harm to, a third party; (b) your use of the Service in breach of this Agreement or applicable law; or (c) your breach of Section 4 or Section 7.2.

14.2 Procedure. Our right to indemnification is conditional on us promptly notifying you of the claim, giving you control of the defence and settlement (provided no settlement imposes any non-monetary obligation or admission on us without our consent), and providing reasonable cooperation at your expense.

15. Third-Party Services

The Service may interoperate with or provide access to Third-Party Services. We do not control and are not responsible for Third-Party Services, and your use of them is governed by the relevant third party's terms. Any exchange of data between you and a Third-Party Service is solely between you and that third party.

16. Changes to the Service and to these Terms

16.1 Changes to the Service. We may modify, add, or discontinue features of the Service as described in Section 3.4. We may discontinue the Service as a whole on reasonable prior notice; in that case, for prepaid subscriptions, we will refund the fees covering the unused remainder of your then-current paid period.

16.2 Changes to these Terms. We may update these Terms from time to time. For material changes, we will give you reasonable prior notice (for example, by email or in-product notice) before they take effect, normally at least thirty (30) days in advance. Changes apply from the stated effective date or, for changes affecting an ongoing Subscription Term, from your next renewal. If you do not accept a material change, your remedy is to cancel before it takes effect. Continued use of the Service after the effective date constitutes acceptance.

17. General provisions

17.1 Governing law. This Agreement and any dispute or claim arising out of or in connection with it (including non-contractual disputes) are governed by the laws of the Republic of Estonia, excluding its conflict-of-laws rules and the United Nations Convention on Contracts for the International Sale of Goods (CISG).

17.2 Jurisdiction. The parties submit to the exclusive jurisdiction of the Harju County Court (Harju Maakohus) in Tallinn, Estonia, as the court of first instance, save that we may bring proceedings to recover overdue amounts or to protect our Intellectual Property Rights in any court of competent jurisdiction.

17.3 Force majeure. Neither party is liable for any failure or delay in performance (other than payment obligations) caused by events beyond its reasonable control, including acts of God, war, terrorism, civil unrest, epidemics, government action, labour disputes, failures of utilities or telecommunications, internet or hosting provider outages, or cyber-attacks.

17.4 Assignment. You may not assign or transfer this Agreement without our prior written consent. We may assign this Agreement to an affiliate or in connection with a merger, reorganisation, or sale of all or substantially all of our assets or business, on notice to you.

17.5 Subcontractors. We may use subcontractors and sub-processors to provide the Service. We remain responsible for their performance under this Agreement. Sub-processing of personal data is governed by the DPA.

17.6 Notices. We may give notice by email to the address associated with your account or by posting in the Service. You must send legal notices to us at legal@confir.eu and, where requested, to our registered office. Notices are deemed received on the day of sending by email (or the next business day if sent outside business hours).

17.7 Entire agreement. This Agreement constitutes the entire agreement between the parties regarding the Service and supersedes all prior or contemporaneous understandings on that subject. You have not relied on any statement or representation not expressly set out in this Agreement.

17.8 Standard terms. These Terms are standard terms within the meaning of the Estonian Law of Obligations Act. By accepting them at checkout, you confirm that you had a reasonable opportunity to review them before entering into the Agreement.

17.9 Severability. If any provision is held invalid or unenforceable, it will be modified to the minimum extent necessary to make it enforceable, or, if it cannot be, severed, and the remaining provisions will continue in full force and effect.

17.10 Waiver. No failure or delay in exercising any right is a waiver of it, and no waiver is effective unless in writing.

17.11 No partnership. Nothing in this Agreement creates a partnership, joint venture, agency, or employment relationship between the parties.

17.12 No third-party beneficiaries. This Agreement does not confer any rights on any person other than the parties, except as expressly stated.

17.13 Language. This Agreement is concluded in English. If we provide a translation, the English version prevails in the event of any conflict, unless mandatory law requires otherwise.

18. Contact

Confir OÜ
Registry code: [Registry code]
Registered office: [Registered address], Estonia
Email: legal@confir.eu
Website: confir.eu