Terms of Service

Effective and last updated 13 July 2026. This version describes Veillo’s current service and production requirements. Product guidance is not legal advice.

1. Contracting party and acceptance

Your agreement for Veillo is with Arbos Folk, a sole proprietorship registered in Denmark, which builds Veillo under the Arbos Techne name. You can reach us at hello@veillo.eu.

These terms are between Arbos Folk and the organisation identified in the account or order. The person accepting them confirms that they can bind that organisation. If an executed order conflicts with these terms, the executed order controls for that order.

2. Business use

Veillo is offered for business and professional use. It is not a consumer service. You may use it only for the organisation that holds the account, except where a Partner plan or signed order expressly permits client workspaces.

3. The service

Veillo provides software for recording AI systems and use cases, supporting risk classification, preparing compliance work products, tracking reviews and obligations, discovering connected-service activity where enabled, and preserving an audit record. Features and limits follow the plan shown at purchase or in an order.

We may improve, replace, or remove features. We will not materially reduce the paid service as a whole during a current subscription without reasonable notice. Beta, preview, and free features can change or end at any time and may have additional notices.

4. Compliance tool, not legal advice

Veillo is compliance work-product software. It is not a law firm and does not give legal advice. General content, classifications, templates, reminders, and AI-assisted suggestions may not fit your facts or remain current after a legal change. You are responsible for your legal conclusions, filings, notices, human oversight, and compliance programme. Consult qualified counsel where the decision matters to rights, safety, employment, credit, essential services, biometrics, or another high-risk context.

5. Accounts and authorised users

You must provide accurate account information, keep credentials confidential, use appropriate roles, and promptly remove access that is no longer needed. You are responsible for authorised users and activity under your account, except to the extent caused by our breach. Tell us promptly at security@veillo.eu if credentials or an account may be compromised.

6. Trials and free services

A trial or free tool does not become paid unless you choose a subscription or accept an order. We may limit or end free services, prevent abusive repeat trials, and delete free-service data after reasonable notice. Free exports and diagnostics remain subject to the disclaimers in these terms.

7. Orders, fees, and tax

Fees, plan, term, billing interval, and included usage appear at checkout or in the order. Self-serve subscriptions are billed in advance by Stripe and renew for the same interval until cancelled. Prices exclude VAT and similar taxes unless stated. You are responsible for applicable taxes other than taxes on our income.

Fees are non-refundable except where these terms, an order, or mandatory law says otherwise. We may suspend paid features after notice if an undisputed amount remains overdue. Price changes take effect at the next renewal after reasonable notice.

8. Cancellation

You can cancel a self-serve subscription through the available billing portal or by contacting us. Cancellation takes effect at the end of the paid period. An order with a committed term follows its stated cancellation rights.

9. Customer data

You retain ownership of data and content you submit. You grant us the limited right to host, copy, process, display, transmit, and generate outputs from that data to provide, secure, support, and improve the service for you. We do not use Customer Data to train a general-purpose model.

You confirm that you have the rights, notices, instructions, and legal bases needed for Customer Data. Avoid unnecessary special-category, criminal-offence, payment-card, or confidential identity data in free-text fields. The Data Processing Agreement governs Customer Data for which we act as processor.

10. AI-assisted features

An AI-assisted classification is a suggestion. A person must confirm or override it, and the product routes high-risk or prohibited suggestions to human sign-off. You must review generated outputs before using or sharing them. Model output can be incomplete or wrong. Do not use Veillo output as the sole basis for a decision with legal or similarly significant effects on a person.

11. Acceptable use

You must not:

• break the law, violate another person’s rights, or process data without authority;
• probe, scan, defeat, overload, disrupt, or bypass security or access controls, except under the responsible disclosure policy;
• share credentials, misrepresent identity, or access another customer without permission;
• introduce malware, destructive code, or automated traffic that harms the service;
• scrape, copy, resell, sublicense, or build a competing dataset from the service, except where law prevents this restriction;
• reverse engineer the service except to the limited extent mandatory law permits;
• use the service to create unlawful discriminatory decisions or prohibited AI practices.

We may investigate suspected misuse and restrict the affected account where reasonably necessary to protect people, customers, or the service.

12. Intellectual property

We and our licensors own the service, software, brand, interface, and authored reference content. Subject to payment and these terms, we grant you a limited, non-exclusive, non-transferable right to use the service during the subscription. You may use and adapt outputs created from your Customer Data for your internal business and compliance work. Third-party names and marks remain their owners’ property.

13. Feedback

If you choose to provide feedback, we may use it without restriction or payment, provided we do not identify you publicly without permission.

14. Confidentiality

Each party will protect the other party’s non-public business, technical, security, and commercial information with reasonable care and use it only for the agreement. Confidential information excludes information lawfully known without restriction, independently developed, publicly available without breach, or lawfully received from another source. A party may disclose information where law requires it after notice where permitted.

15. Security and privacy

We maintain measures described on the security page and in the DPA. The privacy policy explains processing for which we are controller. No internet service is completely secure, and you are responsible for secure devices, networks, exports, and account administration on your side.

16. Third-party services

Optional integrations and checkout can direct data to Google, Stripe, or another provider at your instruction. Their services have their own terms. We are responsible for our integration code and processor duties, but we do not control the independent availability or product decisions of a third-party service.

17. Availability and support

We use reasonable skill and care to operate the service. Unless an order includes a service-level agreement, we do not promise a specific uptime, response time, recovery point, or recovery time. Planned maintenance, emergencies, provider outages, internet failures, and events outside reasonable control can affect availability.

18. Warranties and disclaimers

We warrant that the paid service will materially perform as documented and that we will provide it with reasonable skill and care. Your remedy for a verified breach is correction or re-performance; if we cannot provide that within a reasonable time, you may terminate the affected service and receive a refund for the unused prepaid period.

To the extent law permits, all other warranties are excluded. We do not warrant that the service is uninterrupted, free from every vulnerability, or legally sufficient for your circumstances. Reference content and outputs do not replace investigation, human judgment, or professional advice.

19. Indemnity

You will defend and indemnify us against a third-party claim caused by Customer Data that infringes rights or by your unlawful use of the service, provided we promptly notify you, give reasonable cooperation, and allow you to control the defence. You may not settle a claim in a way that admits our fault or imposes obligations on us without consent.

20. Liability

Nothing limits liability that cannot lawfully be limited, including liability for fraud or wilful misconduct. Subject to that rule, neither party is liable for indirect or consequential loss, loss of profit, revenue, goodwill, anticipated savings, or data, except for direct costs of restoring data caused by the liable party.

Each party’s total liability arising from the service in any 12-month period is limited to fees paid or payable for the service in that period. For a free service, our total liability is EUR 100. These limits apply across contract, tort, statutory duty, and other causes, and do not multiply by the number of claims. The cap does not limit your payment obligations or misuse of our intellectual property.

21. Suspension and termination

Either party may terminate for a material breach not cured within 30 days after written notice, or immediately if the other party becomes insolvent where law permits. We may suspend access sooner where reasonably necessary for security, unlawful use, or material harm, and will narrow and lift the suspension as soon as practical.

On termination, access ends and accrued fees remain due. Customer Data is returned or deleted under the DPA. Terms that by nature should survive do survive, including confidentiality, ownership, disclaimers, liability, and dispute terms.

22. Changes

We may update these terms for legal, security, operational, or product reasons. Material changes are notified before they take effect. Changes do not retroactively reduce rights for a current committed order. Continued use after the effective date constitutes acceptance where law permits.

23. General terms

Neither party is liable for delay caused by events outside reasonable control, except payment obligations. You may not assign the agreement without our consent, except with a sale of substantially all relevant business and on notice. We may assign it in a reorganisation or business transfer that does not materially reduce your rights. The parties are independent contractors. No third party receives rights under these terms.

Notices about breach or termination must be in writing to the account contact and hello@veillo.eu. If a provision is unenforceable, it is adjusted only as needed and the rest remains effective. A waiver must be explicit. The agreement, order, DPA, and referenced policies are the entire agreement for the service.

24. Governing law and disputes

The agreement is governed by Danish law, excluding conflict-of-law rules. The courts of Denmark have exclusive jurisdiction, unless mandatory law requires another forum. Before filing a claim, each party will give the other a reasonable chance to resolve the dispute through a person with authority to settle it.

25. Contact

Questions about these terms can be sent to hello@veillo.eu.