Terms of Service

Last reviewed 2026-09-30. Served live at /legal/terms.

These Terms govern use of eudr.dev, operated by Vortx AI Private Limited (the "Provider"). The runtime is closed; the per-cell Earth-memory facts the agent cites are sourced from emem, the open-source Earth-memory protocol the Provider also publishes.

1. Subject of the service

The Provider operates eudr.dev, an independent AI agent that compiles a signed Annex II Due Diligence Statement under Regulation (EU) 2023/1115 (as amended by Reg. (EU) 2025/2650). The service exposes a JSON-RPC + HTTP surface (A2A v1.0 + MCP), plus account management, retention sweep, and audit-log surfaces.

2. Eligibility and acceptable use

The hosted service is offered for use by operators within the meaning of Reg. 2023/1115 Art. 2(15) and their authorised agents under Art. 6 of the Regulation. By signing in, the Customer warrants that:

The Customer is acting as such an operator or authorised agent.
The Customer will not scrape the service, attempt to extract third-party data, or use it to enumerate accounts.
The Customer will not impose an abusive load — automated callers must respect the published rate limits (5 magic links per email per hour, 30 per IP per hour; per-org API quotas as documented in the dashboard) and the Retry-After headers the service emits.
The Customer will not use the service to file a Due Diligence Statement the Customer knows or ought to know to be false. The engine emits a signed non-attestation document on non-negligible verdicts (Reg. 2023/1115 Art. 4(1)); the Customer must not submit that document to TRACES as a DDS.

3. Service levels

The service is provided on a best-effort basis. No service level is contractually guaranteed on the standard plan. A Customer that needs a guaranteed availability target should contact the Provider at avijeet@vortx.ai to negotiate an enterprise side letter.

Maintenance windows are announced on the status channel — the account email on file until a status page ships — at least 48 hours in advance where planned. Emergency maintenance for security fixes may be performed without prior notice.

4. Pricing

Current pricing is published in Payment terms. The hosted instance runs on prepaid credits: 100 free credits once per organisation, 5 credits for each compiled, signed Annex II statement (from 30 October 2026, 5 credits for its first plot and 1 for each further plot), and everything else free. Credits are bought through Razorpay Checkout in EUR. Enterprise plans, where offered, are quoted per calendar month under a separate order form. VAT, GST and similar transfer taxes are added at the prevailing rate where applicable; see Payment terms.

5. Customer data

The processing of personal data is governed by the Privacy Notice and the Data Processing Agreement. The Customer retains all rights in its scenarios, plot data, and the receipts issued by the engine.

6. Limitation of liability

In a B2B context, the following limits apply:

The Provider is liable without limitation for damages caused by intent or gross negligence, for damages from injury to life, body, or health, and where liability is mandatory under applicable product-liability law or under any guarantee expressly given.
For breach of a material contractual obligation caused by simple negligence, liability is limited to typical, foreseeable damage.
For any other case of simple negligence, liability is excluded.
In every case, the Provider's aggregate liability under or in connection with these Terms is capped at the fees the Customer paid for the hosted service in the 12 months preceding the event giving rise to the claim.
Nothing in this section limits the Customer's rights under applicable mandatory consumer-protection law to the extent any such law applies.

No warranty. The hosted service is provided AS IS and AS AVAILABLE, with all faults. To the maximum extent permitted by applicable law, the Provider disclaims every warranty (express, implied or statutory), including but not limited to warranties of merchantability, fitness for a particular purpose, non-infringement, accuracy of the regulatory verdict, freshness of upstream Earth-observation data, uninterrupted operation, and freedom from error. The receipts the engine signs are content-addressed and verifiable; the Provider warrants only the cryptographic correctness of the signature, not the underlying compliance conclusion.

6.5 Customer indemnification

The Customer indemnifies, defends and holds harmless the Provider, its directors, officers, employees, contractors and sub-processors against any third-party claim, demand, fine or loss (including reasonable legal fees) arising out of: (a) the Customer's use of the hosted service in breach of these Terms or the Acceptable Use Policy; (b) the Customer's failure to obtain or maintain a lawful basis under GDPR (Art. 6 read with Art. 5(1)(a)) for processing personal data sent to the engine; (c) the Customer's filing of a Due Diligence Statement under Reg. (EU) 2023/1115 Art. 4 that misrepresents the underlying shipment; and (d) any infringement of a third party's rights by content the Customer submits. The Provider will give the Customer prompt written notice of any claim and reasonable cooperation.

7. Governing law and jurisdiction

These Terms are governed by the law of India, specifically the laws applicable in the State of Jharkhand, excluding conflict-of-laws rules and excluding the UN Convention on Contracts for the International Sale of Goods. This aligns with the Provider's incorporation (Vortx AI Private Limited, India) and with the parent Vortx AI Terms of Service under which the eudr.dev hosted instance is offered.

Exclusive jurisdiction for any dispute arising out of or in connection with these Terms is the competent courts of Jharkhand, India.

Operators based in the EU retain every mandatory protection of EU consumer / data-protection law. Nothing in this section deprives an EU-based Customer of any non-waivable right available under the law of their habitual residence; in particular, statutory data-subject rights (GDPR Arts. 12–22) and the EUDR competent-authority complaint mechanism (Reg. 2023/1115 Art. 27) remain available regardless of the choice of law above.

The hosted service is operated from AWS Stockholm (eu-north-1) to keep the primary data store inside the EEA. Hosting region is a data-residency decision; it does not change the governing law of the contractual relationship.

8. No tax or legal advice

eudr.dev is operational tooling under Reg. (EU) 2023/1115. The Provider is not a law firm, is not a tax adviser, and does not provide legal, regulatory, tax or financial advice. Nothing in these Terms, in any output of the engine, in any documentation, or in any communication from the Provider constitutes legal, regulatory, tax or financial advice. The legal interpretation of the Regulation, and the act of submitting a Due Diligence Statement to TRACES, remain the sole responsibility of the operator.

9. Changes

The Provider may amend these Terms on at least 30 days' notice. A Customer who does not accept an amendment may terminate the subscription with effect from the date the amendment would otherwise take effect.

This page last changed on 2026-09-30. It describes the Regulation as it stood then; where a date or a code matters to a decision, check it against the EUR-Lex text it cites.