Terms of Service

These Terms of Service (the "Terms") govern your access to and use of the BIOS website (nordixbios.com), application (app.nordixbios.com), API (api.nordixbios.com), platform, playground, and related services (collectively, the "Services"). The Services are operated by Nordix Systems, an affiliated operating entity of the NCS Group. By accessing or using the Services, you agree to be bound by these Terms.

If you do not agree to these Terms, you must not access or use the Services.

These Terms apply to all users, including visitors, registered users, customers, partners, resellers, developers, API consumers, and the end users who interact with the Services through a partner (each a "user", "you", or "your"). If you use the Services on behalf of an organization, you represent that you have the authority to bind that organization to these Terms, and "you" refers to that organization.

BIOS is a brand operated by Nordix Systems, an affiliated operating entity of the NCS Group. The NCS Group comprises NCS — Nordic Compute System, operated by Easy Drift AS (Norway), together with its affiliated operating entities (including Nordix Systems) and the brands, platforms, and products they operate. References to "BIOS", "we", "us", or "our" mean Nordix Systems and the relevant NCS Group entity that provides the Services.

BIOS is a white-label AI assistant platform that connects to a partner's software and operates an assistant across messaging channels on behalf of the partner's end users — a business-to-business-to-consumer ("B2B2C") model.

Product-specific agreements. Specific Services may be provided under, or contracted through, an affiliated NCS Group entity and may be governed by a separate product-specific agreement, such as a Master Services Agreement (MSA), Order Form, or product-specific terms. Where a product-specific agreement exists, it supplements these Terms, and in the event of a conflict the product-specific agreement prevails for that Service.

BIOS provides a white-label AI assistant platform whose features include, without limitation:

• Code connection and tooling generation. You connect your software by uploading a ZIP archive, by connecting a Git repository (GitHub, GitLab, or Bitbucket), or by providing an OpenAPI specification. The platform analyzes the source and automatically generates the integration tooling (tools, skills, and a navigable manual) that the assistant uses to operate your system.
• Autonomous maintenance loop. On each commit or upload, the platform performs incremental diff analysis, regenerates only the affected tooling, runs generated contract tests, publishes versioned releases, and supports one-click rollback to any prior version.
• MCP server, skills, and manual. Generated tooling materializes as a Model Context Protocol (MCP) server, accompanied by skills and a navigable, exportable manual, interoperable with MCP-compatible clients.
• Emulated authentication. A webhook-based identity bridge resolves per-user identity without OAuth, using HMAC signatures with timestamp and nonce, proof-of-possession (such as a one-time code), key rotation, and step-up confirmation for destructive operations.
• Multi-channel runtime. The assistant operates across WhatsApp (Meta Cloud API or Twilio), Telegram, Microsoft Teams, Slack, Messenger, Instagram, an embeddable web widget, and email.
• Playground. A simulation environment with a dry-run mode (blocking writes while allowing reads) and per-message cost inspection.
• White-label branding. Partners define the assistant's name, avatar, tone, and languages; end users see the partner's brand.
• Documentation, support, billing, and related websites and applications.

We reserve the right to modify, suspend, or discontinue any aspect of the Services at any time. Where a change materially and adversely affects a paid Service you actively use, we will provide reasonable advance notice.

The Services are intended for business and professional use. You must be at least 18 years old (or the age of majority in your jurisdiction) and capable of forming a binding contract to use the Services.

When registering and maintaining an account, you agree to:

• Provide accurate, current, and complete information, and keep it up to date.
• Maintain the confidentiality and security of your account credentials, API keys, verification keys, webhook secrets, and access tokens.
• Notify us immediately of any unauthorized access to or use of your account.
• Accept responsibility for all activities that occur under your account or credentials.

We reserve the right to suspend or terminate accounts that violate these Terms or engage in unauthorized, fraudulent, or harmful activity.

You agree to use the Services only for lawful purposes and in compliance with all applicable laws, regulations, and third-party terms. You must not:

• Use the Services to process, store, or transmit data in violation of any applicable law, regulation, or third-party right.
• Attempt to gain unauthorized access to any part of the Services, other accounts, connected systems, or related infrastructure.
• Interfere with, disrupt, or place an undue load on the Services, or circumvent rate limits, usage limits, or security controls.
• Reverse engineer, decompile, or disassemble any part of the Services, or attempt to extract source code or models, except to the extent permitted by law.
• Use the AI assistant or agents to generate unlawful, fraudulent, infringing, harassing, deceptive, or abusive content, or to operate systems intended to cause harm or violate human rights.
• Send messages or communications through the Services without a valid legal basis and any required consent, or in violation of anti-spam, electronic-communications, or messaging-platform policies.
• Upload or transmit malicious code, or any material intended to damage, disrupt, or compromise the Services or any connected system.
• Resell, sublicense, white-label, or redistribute the Services except as expressly authorized in a written agreement with us.

We may investigate suspected violations and may suspend or remove content or access to protect the Services, other users, or third parties.

The Services use artificial intelligence, including large language models and autonomous or semi-autonomous agents that can act on behalf of a partner's end users. You acknowledge and agree that:

• Probabilistic output. AI-generated output may be inaccurate, incomplete, outdated, or otherwise unsuitable. You are responsible for reviewing and validating output before relying on or acting upon it.
• Not professional advice. AI output does not constitute legal, medical, financial, or other professional advice, and is not a substitute for the judgment of a qualified professional. You remain solely responsible for decisions made using the Services.
• Agent actions. The assistant operates your connected system under the configuration, tools, permissions, approval thresholds, and step-up confirmations you set. Destructive operations can require explicit user confirmation in chat. You are responsible for configuring appropriate limits and human oversight for high-impact actions, and for reviewing the audit trail we make available.
• Human oversight. You will maintain meaningful human oversight of automated actions and will not use the Services as the sole basis for decisions requiring professional or regulatory judgment.
• Model training. We do not use your Customer Data to train shared or foundation AI models except with your explicit instruction or consent, as further described in our Privacy Policy and Data Processing Agreement (DPA).

We are not liable for actions taken by the assistant in accordance with your configuration and instructions, or for your reliance on AI output, except to the extent caused by our breach of these Terms.

The Services connect to, and interoperate with, the software and third-party services you authorize — including your application's API, code repositories (GitHub, GitLab, Bitbucket), and messaging channels (such as WhatsApp via the Meta Cloud API or Twilio, Telegram, Microsoft Teams, Slack, Messenger, Instagram, the web widget, and email).

By connecting your software or a third-party service, you:

• Authorize us to access that service and to take actions within it on your behalf and on behalf of your end users, as needed to provide the Services and as configured by you.
• Represent that you hold the necessary rights, licenses, and consents to grant that access and to enable the actions performed.
• Agree to comply with the applicable third-party terms and platform policies (including messaging-platform business policies), and to keep your credentials and connected accounts secure.

Third-party services are operated by their respective providers, not by us. We are not responsible for the availability, accuracy, security, or acts or omissions of third-party services, or for changes, suspensions, fees, or discontinuations imposed by their providers.

The Services send and receive messages across messaging channels on your behalf and on behalf of your end users.

Where you use these features:

• You act as the sender and the controller of those communications. You are responsible for ensuring a valid legal basis and any required consent for contacting recipients, and for honoring opt-out requests.
• You are responsible for compliance with applicable anti-spam, electronic-communications, and consumer-protection laws, and with the policies of the relevant messaging providers (such as Meta, Twilio, Telegram, Microsoft, and Slack).

We provide the tooling and infrastructure to deliver these communications but do not endorse, and are not responsible for, the content sent through your assistant.

BIOS is offered on a subscription basis across plans (Essential, which is free; Professional; and Enterprise), each with limits on products, environments, deployments, messages per month, syncs, and active channels. By subscribing to a paid plan, you agree to:

• Pay all applicable fees as described in the pricing plan, Order Form, or product agreement, in euros (EUR).
• Provide valid, current billing information and authorize us or our payment processors to charge it.
• Pay applicable taxes, and accept that fees are non-refundable unless otherwise stated in your agreement or required by law.

Payment processing. We are not a bank, payment institution, or money transmitter. Payments are processed by licensed, PCI-DSS-compliant third-party payment processors, and your use of those processors may be subject to their terms. Card and financial-instrument data is handled by those processors; we do not store full payment-card numbers.

We may modify pricing with at least 30 days' advance notice; continued use after a price change constitutes acceptance. If payment is overdue, we may suspend access after providing reasonable notice and an opportunity to cure.

Where you use the Services to deliver an assistant to your own end users under your brand, you are a "Partner" and the following applies:

• Partner responsibility for end users. You are responsible for your relationship with your end users, including presenting your own terms of service and privacy notice, obtaining any required consents, and providing first-line support. You are the controller and, where applicable, the merchant of record for your end-user relationships.
• Our role. We provide the underlying platform and, with respect to personal data processed on your behalf, act as a processor under the DPA. You act as the controller (or as a processor for your own customers, in which case we act as a sub-processor).
• Per-user identity. Through the emulated-authentication webhook, end-user identity is resolved by your system and passed through to authorize interactions; it is not stored by us as an end-user profile.
• Permitted use. You may use the platform to serve your end users only as authorized in your agreement. You must not misrepresent your relationship with us, imply endorsement, or use our trademarks except as permitted in writing.
• Indemnity. You will indemnify us for claims arising from your products, your branding, the content and instructions you configure, and your end users' use of the white-labeled Services, as set out in the Indemnification section.

Your Data. You retain full ownership of all data you upload, submit, process, or generate through the Services ("Customer Data"), including your source code, specifications, configurations, and the conversation data of your end users. We do not claim ownership of Customer Data.

Our Processing. We process Customer Data to provide, secure, and improve the Services as described in our Privacy Policy and DPA. Where we process personal data on your behalf, we act as your processor (or sub-processor) under the DPA, which forms part of these Terms.

No training without consent. We do not use Customer Data to train shared or foundation AI models unless you provide explicit written instruction or consent.

Data region. Where the Services offer a choice of processing region, you may select it, and we will not transfer Customer Data outside the selected region without your authorization, except as required to provide the Services or by law.

Our Property. All intellectual property rights in the Services — including software, the platform, AI models, designs, trademarks, documentation, and the generated integration tooling, skills, MCP servers, and templates produced by the platform — belong to us or our licensors. These Terms do not grant you rights to use our trademarks, logos, or branding without prior written consent.

Your Content and Brand. You retain rights in your Customer Data and in your own brand, content, and configurations. You grant us a limited license to host, process, and display such material solely to provide the Services.

Your License. Subject to these Terms and payment of applicable fees, we grant you a limited, non-exclusive, non-transferable, revocable license to access and use the Services for your internal business purposes and, for Partners, to serve end users as authorized.

Feedback. If you provide feedback or suggestions regarding the Services, you grant us a non-exclusive, royalty-free, perpetual license to use such feedback for any purpose.

We endeavor to maintain high availability of the Services. Specific uptime commitments, if any, are set out in an applicable Service Level Agreement (SLA) or product agreement.

We may perform scheduled maintenance with advance notice. Emergency maintenance may occur without prior notice when necessary to protect the integrity, security, or availability of the Services.

We are not liable for service interruptions caused by circumstances beyond our reasonable control, including force-majeure events, third-party infrastructure or platform failures, or customer-side configuration or network issues.

We may offer features or environments identified as beta, preview, sandbox, dry-run, evaluation, or free-tier (the Essential plan) ("Pre-Release Features"). Pre-Release Features are provided "as is" and "as available", may be changed or discontinued at any time, may not be supported, and may have lower reliability or different security characteristics than generally available Services. Service levels, warranties, and indemnities do not apply to Pre-Release Features unless we state otherwise in writing.

We warrant that the generally available Services will perform materially as described in our documentation. To the maximum extent permitted by law:

• THE SERVICES, INCLUDING ALL AI MODELS, AGENTS, AND AUTOMATED FEATURES, ARE PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED.
• WE DISCLAIM ALL IMPLIED WARRANTIES, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, ACCURACY, AND NON-INFRINGEMENT.
• WE DO NOT WARRANT THAT THE SERVICES WILL BE UNINTERRUPTED, ERROR-FREE, OR COMPLETELY SECURE, OR THAT AI OUTPUT WILL BE ACCURATE OR FIT FOR YOUR PURPOSE.

Nothing in these Terms excludes or limits liability that cannot be excluded or limited under applicable law.

To the maximum extent permitted by applicable law:

• Our total aggregate liability under these Terms shall not exceed the amount you paid for the affected Service in the 12 months preceding the event giving rise to the claim.
• We shall not be liable for any indirect, incidental, special, consequential, or punitive damages, including loss of profits, data, business opportunity, or goodwill.
• We shall not be liable for losses arising from AI output or assistant actions taken in accordance with your configuration, from third-party services or connected accounts, from communications you send, or from disputes between you and your end users.

These limitations apply regardless of the form of action and even if a remedy fails of its essential purpose. They do not limit liability that cannot be limited under applicable law.

You agree to indemnify, defend, and hold harmless Nordix Systems, the NCS Group, their affiliates, and their respective officers, directors, employees, and agents from any claims, damages, liabilities, costs, and expenses (including reasonable legal fees) arising from:

• Your use of the Services in violation of these Terms or applicable law.
• Customer Data, content, instructions, or configurations you provide, and the actions the assistant takes under them.
• Communications you send or operate through the Services.
• Your connected software and third-party services, and your breach of any third-party terms.
• For Partners and resellers, your products, branding, and your end users' use of any white-labeled or resold Services.
• Your violation of any third-party rights, including privacy, intellectual-property, and consumer-protection rights.

By You. You may terminate your account and stop using the Services at any time. Pre-paid fees for the current billing period are non-refundable unless otherwise stated in your agreement or required by law.

By Us. We may suspend or terminate your access to the Services if you breach these Terms and fail to cure the breach within 15 days of notice (or immediately, for breaches that cannot be cured or that pose risk); if your use poses a security, legal, or operational risk; or if required by law or by a third-party platform we depend on.

Effect of Termination. Upon termination, your right to use the Services ceases immediately. We will make your Customer Data available for export for 30 days following termination, after which it may be deleted in accordance with the DPA and applicable law. Provisions that by their nature should survive (including ownership, confidentiality, disclaimers, limitations of liability, and indemnification) survive termination.

These Terms are governed by and construed in accordance with the laws of Norway, without regard to conflict-of-law principles, except where a product-specific agreement specifies a different governing law for that Service.

Any dispute arising under these Terms shall first be addressed through good-faith negotiation. If negotiation fails, disputes shall be submitted to the exclusive jurisdiction of the courts of Oslo, Norway, unless a product-specific agreement specifies a different forum.

For consumers in the European Union, this does not affect your right to bring proceedings in the courts of your country of residence, or to rely on mandatory consumer-protection rights, as provided by applicable law.

We may update these Terms from time to time. We will provide at least 30 days' notice of material changes by email or through the Services.

Continued use of the Services after the effective date of updated Terms constitutes your acceptance. If you do not agree to the updated Terms, you must discontinue use of the Services before the changes take effect.

• Entire Agreement. These Terms, together with the Privacy Policy, the DPA, and any applicable product-specific agreement, constitute the entire agreement between you and us regarding the Services.
• Order of Precedence. In the event of a conflict, a signed product-specific agreement prevails over these Terms for the Service it covers; otherwise these Terms prevail over other documents referenced herein, except that the DPA governs the processing of personal data.
• Affiliates. The relevant NCS Group entity providing a Service is the contracting party for that Service and may exercise the rights and benefits set out in these Terms.
• Severability. If any provision is found unenforceable, the remaining provisions continue in full force and effect.
• Waiver. Failure to enforce any right or provision does not constitute a waiver of it.
• Assignment. You may not assign these Terms without our prior written consent. We may assign these Terms to an affiliate or successor in connection with a merger, acquisition, or sale of assets.

For questions regarding these Terms of Service, please contact us at legal@nordixsystems.com, or use the contact form on our website.

Nordix Systems · Oslo, Norway · part of the NCS Group.