Terms and Conditions – eyreACT: AI Compliance Automation Platform

Effective date: 1 April 2025 Last updated: March 2026 Version: 2.0

1. About These Terms

These Terms and Conditions (“Terms”) govern your access to and use of the EYREACT website (eyreact.com) and the EYREACT platform and associated services (collectively, the “Services”) provided by EYREACT LTD (“EYREACT”, “we”, “us”, “our”).

EYREACT LTD is a company registered in England and Wales (Company No. 16711574). EYREACT also operates an EU entity, EYREACT OÜ, registered in Estonia, for the purposes of serving clients within the European Economic Area.

By accessing our website or using our Services, you agree to be bound by these Terms. If you do not agree, you must not use our Services. If you are accepting these Terms on behalf of an organisation, you represent that you have authority to bind that organisation.

These Terms should be read alongside our Privacy Policy (eyreact.com/privacy-policy), which is incorporated by reference.

2. Definitions

“Agreement” means these Terms together with any Order Form, Statement of Work or separate written agreement executed between the parties.

“Client” means the business or organisation that has entered into an Agreement with EYREACT to access the platform.

“User” means any individual who accesses the Services on behalf of a Client or as a registered account holder.

“Platform” means the EYREACT AI compliance automation software, including the Living Compliance Binder™ and associated tools, accessed via eyreact.com or any successor domain.

“Content” means any data, documents, evidence, records or materials uploaded, submitted or generated by a Client or User through the Platform.

“Documentation” means any user guides, technical specifications or other materials provided by EYREACT in connection with the Services.

“Subscription” means a paid licence to access the Platform during a defined subscription period, as set out in the applicable Order Form.

“Applicable Law” means all laws, regulations and regulatory guidance applicable to a party in connection with these Terms, including but not limited to those listed in Section 3.

3. Regulatory Compliance Framework

EYREACT operates within a complex multi-jurisdictional regulatory environment. These Terms are drafted to comply with the following applicable frameworks:

Consumer Rights Act 2015
Unfair Contract Terms Act 1977
Supply of Goods and Services Act 1982
Electronic Commerce (EC Directive) Regulations 2002
UK GDPR and Data Protection Act 2018
Computer Misuse Act 1990
Intellectual Property Act 2014 and related IP legislation
Defamation Act 2013

European Union

EU GDPR (Regulation (EU) 2016/679)
EU AI Act (Regulation (EU) 2024/1689)
Digital Services Act (Regulation (EU) 2022/2065)
Digital Markets Act (Regulation (EU) 2022/1925)
NIS2 Directive (Directive (EU) 2022/2555)
DORA (Regulation (EU) 2022/2554) — where applicable to regulated-sector clients
eCommerce Directive (2000/31/EC) as implemented in member states
Consumer Rights Directive (2011/83/EU) — where applicable to individual consumers
Unfair Contract Terms Directive (93/13/EEC)

Where EYREACT’s Services are accessed by users in the EEA, EU law applies in addition to UK law where relevant. In the event of a conflict between applicable UK and EU provisions, EYREACT will apply the standard most protective of the user’s rights.

4. Eligibility and Account Registration

4.1 The Services are intended for business users only. By registering for an account, you confirm that you are acting in a professional or commercial capacity and not as a consumer for the purposes of the Consumer Rights Act 2015 or the EU Consumer Rights Directive.

4.2 You must be at least 18 years of age to register for an account or use the Services.

4.3 You agree to provide accurate, current and complete information during registration and to keep your account details up to date. EYREACT reserves the right to suspend or terminate accounts where information is found to be false or misleading.

4.4 You are responsible for maintaining the confidentiality of your account credentials and for all activity that occurs under your account. You must notify us immediately at support@eyreact.com if you become aware of any unauthorised access to your account.

4.5 One account may not be shared across multiple individuals unless expressly permitted under your Subscription plan.

5. Licence to Use the Platform

5.1 Subject to your compliance with these Terms and payment of applicable Subscription fees, EYREACT grants you a limited, non-exclusive, non-transferable, revocable licence to access and use the Platform for your internal business compliance purposes during the applicable Subscription period.

5.2 This licence does not include the right to:

sublicence, resell, or make the Platform available to third parties outside your organisation without EYREACT’s prior written consent;
copy, modify, reverse engineer, decompile or disassemble any part of the Platform or its underlying technology;
use the Platform to build a competing product or service;
access the Platform through automated means (bots, scrapers, crawlers) other than through EYREACT’s published API;
remove or obscure any proprietary notices, trademarks or branding within the Platform.

5.3 EYREACT reserves all rights not expressly granted under these Terms.

6. Subscriptions, Fees and Payment

6.1 Access to the Platform requires a paid Subscription. Subscription tiers, features and pricing are set out on our website or in an Order Form agreed between the parties.

6.2 Subscription fees are invoiced in advance on a monthly or annual basis as agreed. All fees are exclusive of VAT or applicable sales taxes, which will be added at the prevailing rate where applicable.

6.3 Payment is due within 14 days of the invoice date unless otherwise stated in the Order Form. EYREACT reserves the right to suspend access to the Platform where fees remain unpaid after the due date, following written notice.

6.4 EYREACT may adjust Subscription pricing on no less than 60 days’ written notice before the start of a new Subscription period. If you do not accept a price increase, you may terminate your Subscription at the end of the current period.

6.5 Refunds are not provided for partial periods of unused Subscription, except where required by Applicable Law or where EYREACT has materially failed to deliver the Services as described.

6.6 Where you are a VAT-registered business in the EU and EYREACT supplies Services from the UK, the reverse charge mechanism may apply under EU VAT rules. It is your responsibility to account for VAT in your jurisdiction as required.

7. Free Trials and Pilot Access

7.1 EYREACT may offer free trial or pilot access to the Platform for a defined period. Unless otherwise agreed in writing, free trial access:

is limited to the features and data volumes specified at sign-up;
may be terminated by EYREACT at any time without notice;
does not create any obligation on EYREACT to continue providing access beyond the trial period.

7.2 Any Content uploaded during a free trial period may be deleted upon expiry of the trial if you do not convert to a paid Subscription, unless EYREACT agrees otherwise in writing.

8. Client Content and Dat

8.1 You retain ownership of all Content you upload to the Platform. By uploading Content, you grant EYREACT a limited, non-exclusive licence to process, store and use that Content solely for the purpose of delivering the Services to you.

8.2 You are responsible for ensuring that:

you have all necessary rights, licences and permissions to upload Content to the Platform;
the Content does not infringe the intellectual property rights of any third party;
the Content does not contain unlawful material, malware or harmful code;
you comply with all applicable data protection obligations in respect of any personal data included in the Content, including entering into a Data Processing Agreement with EYREACT where required.

8.3 EYREACT does not review Client Content for accuracy, legality or compliance and accepts no liability for any errors or omissions in Content uploaded by Clients.

8.4 EYREACT will process any personal data contained in Client Content in accordance with the Data Processing Agreement and our Privacy Policy.

9. Data Processing

9.1 To the extent that EYREACT processes personal data on behalf of a Client in connection with the Services, EYREACT acts as a data processor and the Client acts as the data controller, as those terms are defined under UK GDPR and EU GDPR.

9.2 The parties shall enter into a Data Processing Agreement (DPA) which forms part of the Agreement and sets out:

the subject matter, nature and duration of the processing;
the categories of personal data and data subjects;
the obligations and rights of the controller;
EYREACT’s obligations as processor, including sub-processor management, security measures and breach notification.

9.3 EYREACT will not process Client personal data for any purpose other than delivering the Services, unless required to do so by Applicable Law.

9.4 EYREACT maintains all personal data within EU data centres (Google Cloud Platform, Frankfurt and the Netherlands) and will not transfer Client personal data outside the EEA or UK without the Client’s prior written consent and appropriate transfer safeguards in place.

10. EYREACT’s Obligations

EYREACT agrees to:

provide the Services with reasonable care and skill, in accordance with the description on our website and in any agreed Documentation;
use commercially reasonable efforts to maintain Platform availability in line with our published Service Level Agreement (SLA), which forms part of any Subscription agreement;
notify Clients of planned maintenance windows in advance where reasonably practicable;
keep the Platform updated to reflect material changes to the EU AI Act and associated regulatory requirements within a reasonable time of those changes taking effect;
maintain appropriate technical and organisational security measures as described in our Privacy Policy and DPA;
comply with all Applicable Law in the provision of the Services.

EYREACT does not warrant that the Platform will be error-free or uninterrupted, or that its outputs will be legally conclusive. The Platform is a compliance management tool and does not constitute legal advice.

11. Client Obligations

You agree to:

use the Services only for lawful purposes and in accordance with these Terms;
not attempt to gain unauthorised access to any part of the Platform, its infrastructure or other users’ accounts;
not use the Services in any way that could damage, disable or impair the Platform or interfere with other users’ use of it;
comply with all Applicable Law in your use of the Services, including data protection, export control and sector-specific regulations;
promptly notify EYREACT of any suspected security incident or data breach involving the Platform;
ensure that Users within your organisation are made aware of and comply with these Terms.

12. Intellectual Property

12.1 All intellectual property rights in the Platform, its underlying technology, methodology, Documentation and all EYREACT-produced content (including but not limited to the Living Compliance Binder™ architecture, rule engine logic and compliance framework) are owned by or licensed to EYREACT and are protected by UK and international intellectual property law.

12.2 Nothing in these Terms transfers any intellectual property rights in the Platform to you. Your rights are limited to the licence granted under Section 5.

12.3 You retain all intellectual property rights in your Content. EYREACT acquires no rights in your Content beyond the limited licence described in Section 8.

12.4 If you provide feedback, suggestions or ideas about the Services (“Feedback”), you grant EYREACT a perpetual, irrevocable, royalty-free licence to use that Feedback to improve the Services, without any obligation of confidentiality or compensation to you.

12.5 EYREACT’s name, logo and trademarks may not be used without our prior written consent.

13. Confidentiality

13.1 Each party agrees to keep confidential all non-public information received from the other party in connection with the Agreement that is designated as confidential or that reasonably should be understood to be confidential (“Confidential Information”).

13.2 Neither party will disclose the other’s Confidential Information to any third party without prior written consent, except to employees, contractors or advisors who need to know it for the purposes of the Agreement and who are bound by equivalent confidentiality obligations.

13.3 Confidentiality obligations do not apply to information that: (a) is or becomes publicly known through no fault of the receiving party; (b) was already known to the receiving party at the time of disclosure; (c) is independently developed by the receiving party without use of Confidential Information; or (d) is required to be disclosed by law or regulatory authority, provided the disclosing party is given reasonable prior notice where permitted.

13.4 Confidentiality obligations survive termination of the Agreement for a period of 5 years.

14. Disclaimer of Warranties

14.1 The Platform is provided as a compliance management and workflow tool. It is designed to assist organisations in preparing for and managing EU AI Act compliance obligations. It does not constitute legal advice and should not be relied upon as a substitute for qualified legal counsel.

14.2 To the maximum extent permitted by Applicable Law, EYREACT provides the Services on an “as is” and “as available” basis. We do not warrant that:

the Services will meet all of your specific compliance or business requirements;
the Platform’s outputs will be accurate, complete or legally conclusive in all circumstances;
the Services will be uninterrupted, timely, secure or free from errors;
any defects will be corrected.

14.3 Nothing in these Terms excludes or limits any warranty implied by law that cannot be excluded, including under the Consumer Rights Act 2015 where applicable.

15. Limitation of Liability

15.1 To the maximum extent permitted by Applicable Law, EYREACT’s total aggregate liability to you under or in connection with these Terms, whether in contract, tort (including negligence), breach of statutory duty or otherwise, shall not exceed the greater of: (a) the total Subscription fees paid by you in the 12 months preceding the event giving rise to the claim; or (b) £10,000.

15.2 EYREACT shall not be liable for any:

loss of profits, revenue or business;
loss of anticipated savings;
loss of goodwill or reputation;
loss or corruption of data;
indirect, consequential or special loss;

whether or not such losses were foreseeable or EYREACT had been advised of their possibility.

15.3 Nothing in these Terms limits or excludes liability for:

death or personal injury caused by negligence;
fraud or fraudulent misrepresentation;
any liability that cannot be lawfully excluded under the Consumer Rights Act 2015, the Unfair Contract Terms Act 1977 or any equivalent EU consumer protection legislation;
any other liability that cannot be excluded or limited under Applicable Law.

15.4 Where EYREACT’s Services are used in connection with regulated activities (financial services, healthcare, critical infrastructure), it is the Client’s sole responsibility to ensure the Platform outputs are reviewed and validated by qualified professionals before being relied upon for regulatory purposes.

16. Indemnification

You agree to indemnify, defend and hold harmless EYREACT and its officers, employees and contractors from and against any claims, liabilities, damages, losses and expenses (including reasonable legal fees) arising out of or in connection with:

your breach of these Terms;
your violation of any Applicable Law;
any third-party claim arising from your Content;
your misuse of the Platform or Services.

17. Third-Party Services and Links

17.1 The Platform may integrate with or link to third-party services, tools or websites. EYREACT does not endorse and is not responsible for the content, privacy practices or terms of any third-party service.

17.2 Your use of third-party services accessed via the Platform is governed by the terms of those third parties. EYREACT accepts no liability for any loss or damage arising from your use of third-party services.

18. EU AI Act Specific Provisions

18.1 EYREACT’s platform is specifically designed to assist organisations in meeting their obligations under Regulation (EU) 2024/1689 (EU AI Act). The following provisions apply where the Platform is used for EU AI Act compliance purposes.

18.2 EYREACT does not act as a Notified Body, Conformity Assessment Body or legal representative under the EU AI Act. Use of the Platform does not constitute or guarantee conformity with EU AI Act requirements.

18.3 Clients remain solely responsible for: accurately classifying their AI systems under the EU AI Act risk framework; completing required conformity assessments; registering high-risk AI systems in the EU database where applicable; and maintaining technical documentation as required under Article 11 and Annex IV of the EU AI Act.

18.4 EYREACT will use reasonable efforts to update the Platform to reflect material changes to EU AI Act implementing acts, delegated acts and official guidance within a reasonable time of publication. However, EYREACT does not warrant that the Platform will at all times reflect the most current regulatory position, and Clients should monitor official publications independently.

18.5 Where Clients use the Platform to process compliance documentation for GPAI (General Purpose AI) models, Clients confirm they have the necessary rights to process and document such information.

19. Suspension and Termination

19.1 Either party may terminate the Agreement on written notice if the other party: (a) materially breaches the Agreement and fails to remedy the breach within 30 days of written notice; (b) becomes insolvent, enters administration, receivership or liquidation; or (c) ceases to carry on business.

19.2 EYREACT may suspend access to the Platform immediately and without notice where: (a) fees remain unpaid beyond 30 days after the due date; (b) there is a credible security threat or evidence of misuse; (c) required to do so by law or regulatory authority.

19.3 Upon termination of the Agreement: (a) your licence to use the Platform ceases immediately; (b) EYREACT will make Client Content available for export for a period of 30 days following termination, after which it will be deleted in accordance with our data retention schedule; (c) all outstanding fees become immediately payable.

19.4 Sections 12 (Intellectual Property), 13 (Confidentiality), 15 (Limitation of Liability), 16 (Indemnification) and 23 (Governing Law) survive termination of the Agreement.

20. Force Majeure

Neither party shall be liable for any delay or failure to perform its obligations under these Terms to the extent that such delay or failure is caused by circumstances beyond that party’s reasonable control, including but not limited to acts of God, war, civil unrest, pandemic, cyberattack by third parties, failure of third-party infrastructure, or regulatory action. The affected party must notify the other as soon as reasonably practicable and use reasonable efforts to mitigate the impact.

21. Changes to the Services and These Terms

21.1 EYREACT reserves the right to modify, update or discontinue features of the Platform at any time. Where changes materially reduce the functionality of your Subscription, we will provide no less than 30 days’ notice.

21.2 We may update these Terms from time to time. Where changes are material, we will notify you by email and update the “Last updated” date. Continued use of the Services following notification of material changes constitutes acceptance of the updated Terms. If you do not accept material changes, you may terminate your Subscription at the end of the current billing period.

22. Notices

Notices under these Terms must be given in writing. Notices to EYREACT LTD should be sent to legal@eyreact.com or by post to EYREACT LTD, 19 Lake Court, Medway Drive, Tunbridge Wells TN12FH, England. Notices to you will be sent to the email address associated with your account. Notices sent by email are deemed received on the next business day following transmission.

23. Governing Law and Dispute Resolution

23.1 These Terms and any dispute or claim arising out of or in connection with them (including non-contractual disputes) are governed by and construed in accordance with the laws of England and Wales.

23.2 The parties agree to submit to the exclusive jurisdiction of the courts of England and Wales, subject to Section 23.3.

23.3 Where a Client is domiciled in an EU member state, nothing in these Terms prevents that Client from relying on mandatory consumer or business protection provisions of their local law, or from bringing proceedings before the courts of their domicile, to the extent permitted under EU Regulation 1215/2012 (Brussels I Recast) or applicable successor instruments.

23.4 Before commencing formal proceedings, the parties agree to attempt to resolve any dispute through good faith negotiation for a period of 30 days. Either party may escalate to mediation under the CEDR Model Mediation Procedure if negotiation fails, before resorting to litigation.

24. General

24.1 Entire Agreement. These Terms, together with the Privacy Policy, DPA and any Order Form or Statement of Work, constitute the entire agreement between the parties relating to the subject matter herein and supersede all prior agreements, representations and understandings.

24.2 Severability. If any provision of these Terms is found to be invalid, illegal or unenforceable, it shall be modified to the minimum extent necessary to make it valid and enforceable. The remaining provisions shall continue in full force and effect.

24.3 Waiver. Failure to enforce any provision of these Terms shall not constitute a waiver of the right to enforce it at a later date.

24.4 Assignment. You may not assign or transfer any rights or obligations under these Terms without EYREACT’s prior written consent. EYREACT may assign these Terms in connection with a merger, acquisition or sale of all or substantially all of its assets, on written notice to you.

24.5 No Partnership. Nothing in these Terms creates a partnership, joint venture, agency or employment relationship between the parties.

24.6 Third-Party Rights. These Terms do not confer any rights on third parties under the Contracts (Rights of Third Parties) Act 1999 or otherwise.

24.7 Language. These Terms are written in English. Where a translated version is provided for convenience, the English version shall prevail in the event of any conflict.

25. Contact

For any questions about these Terms, please contact us:

Email: legal@eyreact.com
Post: EYREACT LTD, 19 Lake Court, Medway Drive, Tunbridge Wells, TN12FH, England
Website: eyreact.com