Terms of Service

Effective date: 29 May 2026
Version: 0.4 — Cloudflare-only pilot publish candidate

These Terms of Service (Terms) govern access to and use of Mosaic Theory AI, a cloud-hosted research-intelligence service provided by Senex Intelligence Ltd (Senex, we, us, or our).

By signing an order form, accepting a pilot agreement, creating an account, or using the Service, the customer identified in the relevant order form or account record (Customer, you, or your) agrees to these Terms.

1. Parties and contracting entity

The Service is provided by:

Senex Intelligence Ltd
Company number: 17114748
Registered office: 167-169 Great Portland Street, 5th Floor, London, United Kingdom, W1W 5PF
Phone: +1 302 252 5588
General contact: hello@senex.ch

These Terms apply between Senex and the Customer. The person accepting these Terms on behalf of a Customer confirms that they have authority to bind that Customer.

2. Definitions

Account means the Customer's account for accessing the Service.

Authorised User means an employee, contractor, officer, adviser, or other individual authorised by the Customer to access the Service under the Customer's account.

Cloudflare-only default configuration means the default pilot and Entry-tier configuration in which Cloudflare is the only Approved Sub-processor for Customer Data, and Anthropic, Modal, OpenAI, Google artificial-intelligence services, and any other non-Cloudflare artificial-intelligence or document-conversion provider are not enabled for Customer Data unless separately authorised.

Customer Data means all documents, text, files, prompts, queries, metadata, outputs, feedback, and other information submitted to or generated through the Service for the Customer, including Customer Content and Outputs.

Customer Content means documents and other materials uploaded to the Service by or on behalf of the Customer.

Customer-enabled Third-Party Service means a third-party service that the Customer chooses to enable using the Customer's own account, credentials, contract, or application programming interface key, and for which the Customer is responsible for the relevant third-party relationship unless an Order Form says otherwise.

DPA means Senex's Data Processing Agreement, which governs processing of personal data in Customer Data.

Order Form means an order form, pilot agreement, online checkout flow, quote, statement of work, or other written ordering document accepted by Senex and the Customer.

Outputs means answers, summaries, citations, extracts, or other results generated by the Service from Customer Data.

Service means Mosaic Theory AI and related hosted software, documentation, interfaces, and support made available by Senex.

3. The Service

Mosaic Theory AI is a cloud-hosted software service for compliance-sensitive investment-research teams. The Service allows Authorised Users to upload their own investment-research documents, currently including Word documents and PDFs, into a private per-customer library. The Service reads and indexes those documents so that Authorised Users can ask questions in plain language and receive answers with citations back to the Customer's source documents.

The Service is designed for use by analysts, portfolio managers, compliance officers, and related investment-research personnel. It includes audit records of key user and system activity, including questions, retrievals, and answers, to support review and compliance workflows.

The current Entry-tier Service is offered in active beta or pilot availability using the Cloudflare-only default configuration. Senex configures Customer Content storage, audit archives, D1 control-plane data, and worker-log storage for European Union jurisdiction where supported by the relevant Cloudflare service and confirmed in Senex's technical configuration.

The Cloudflare-only default configuration is not a blanket European-Union-only processing commitment. Cloudflare edge compute, artificial-intelligence inference, vector search, key-value storage, queues, Durable Objects, analytics, support, administrative processing, and operational metadata may operate on Cloudflare's global network or under service-specific regional controls and documented exceptions. Unless an Order Form expressly states otherwise, Senex does not represent that every Cloudflare processing operation, metadata item, log event, inference operation, or vector-search operation occurs only in the European Union.

A Swiss-sovereign Enterprise edition may be offered by separate arrangement when available. Unless an Order Form expressly says otherwise, references to the Service do not include any not-yet-released enterprise, sovereign, customer-managed-key, bring-your-own-model, or bespoke deployment feature.

4. Business use only

The Service is intended for business customers only and is not offered to consumers. The Customer must ensure that all Authorised Users use the Service only for the Customer's internal business purposes and in accordance with these Terms, the Order Form, and applicable law.

5. Accounts and access

Access is provided through authenticated accounts and, where configured, single sign-on. The Customer is responsible for:

1. selecting and managing its Authorised Users;
2. ensuring that Authorised Users keep access credentials secure;
3. all activity under its Account, except to the extent caused by Senex's breach of these Terms;
4. promptly notifying Senex of suspected unauthorised access; and
5. ensuring that access rights are updated when personnel join, change role, or leave.

Unless the Order Form states otherwise, the Entry plan includes up to five Authorised Users. Additional seats, enterprise access, support arrangements, or bespoke deployment terms must be agreed in an Order Form.

6. Acceptable use

The Customer must not, and must ensure that Authorised Users do not:

1. use the Service unlawfully or in breach of applicable financial-services, market-abuse, confidentiality, data-protection, employment, sanctions, export-control, or professional rules;
2. upload Customer Content that the Customer is not authorised to process;
3. upload market-sensitive non-public information, inside information, or other restricted information where the Customer's own compliance rules prohibit that upload;
4. use the Service to make, automate, or execute investment decisions without appropriate human review and source verification;
5. attempt to access, test, scan, or interfere with another customer's data, account, infrastructure, or systems;
6. reverse engineer, decompile, copy, resell, sublicense, or commercially exploit the Service except as expressly permitted by these Terms;
7. overload, disrupt, or circumvent the Service, usage limits, security controls, authentication, or monitoring;
8. introduce malware or harmful code; or
9. use the Service to develop a competing service by copying Senex's software, architecture, interface, or non-public functionality.

Senex does not review, classify, or screen Customer Content for legal, regulatory, confidentiality, market-sensitivity, or compliance status. The Customer remains responsible for deciding what may be uploaded and processed in the Service.

7. Customer Data

As between the parties, the Customer owns all Customer Data. Senex does not claim ownership of Customer Content, the text derived from Customer Content, prompts, questions, answers, citations, or Outputs.

The Customer grants Senex a limited right to host, copy, process, transmit, display, and otherwise use Customer Data only as necessary to provide, secure, support, maintain, and improve the Service for that Customer, comply with law, and enforce these Terms.

Senex does not train AI foundation models on Customer Data. Senex does not use one customer's data to provide answers, retrievals, recommendations, or other services to another customer.

Personal data contained in Customer Data is governed by the DPA. If there is a conflict between these Terms and the DPA on a data-protection matter, the DPA controls for that matter.

8. Outputs and investment responsibility

The Service uses AI and information-retrieval technology. Outputs may be incomplete, inaccurate, misleading, outdated, or based on incorrect interpretation of Customer Content. The Service provides citations to help Authorised Users verify source material, but citations do not guarantee that an Output is complete or correct.

The Customer is responsible for reviewing Outputs, checking cited sources, applying its own professional judgement, and complying with its investment, compliance, fiduciary, regulatory, and client obligations. Senex does not provide investment, legal, tax, accounting, regulatory, or compliance advice.

9. Security and separation

Senex will maintain technical and organisational measures designed to protect Customer Data against unauthorised access, loss, alteration, or disclosure. These measures may include encryption, access controls, logging, separation of customer environments, and operational security procedures appropriate to the beta or production status of the Service.

Each customer's data is intended to be stored in separate per-customer logical infrastructure and encrypted under a unique customer-specific key or keying arrangement where the relevant data class is under Senex-controlled application encryption. Some derived search-index data, operational metadata, and Cloudflare-managed service data may be protected by infrastructure-managed controls rather than the same customer-specific application key. Where an enterprise customer-managed-key option is offered, the details must be agreed in an Order Form.

10. Service availability and service level

10.1 Uptime target

For paid Entry subscriptions, Senex will use commercially reasonable efforts to make the core hosted Service available at least 99.5% of the time in each calendar month (Uptime Target).

Enterprise or bespoke customers may receive a different service level only if stated in an Order Form.

10.2 Measurement

Availability is measured by Senex's monitoring of the production Service. A minute counts as unavailable only when the core hosted Service is unavailable to substantially all Authorised Users of the affected Customer due to a failure within Senex's reasonable control.

The following are excluded from downtime calculations:

1. scheduled maintenance notified in advance where reasonably practicable;
2. emergency maintenance required to protect security, availability, or data integrity;
3. issues caused by the Customer, Authorised Users, Customer systems, identity providers, devices, networks, or configuration;
4. internet, Domain Name System, routing, connectivity, hosting, infrastructure, or third-party-provider failures outside Senex's reasonable control;
5. beta, pilot, trial, preview, sandbox, or non-production features;
6. suspension under these Terms;
7. force majeure events; and
8. unavailability caused by unlawful, malicious, or abusive activity, including denial-of-service attacks.

10.3 Service credit

If Senex fails to meet the Uptime Target for a paid Entry subscription in a calendar month, the Customer may request a service credit equal to 10% of the monthly subscription fee for the affected month.

To receive a credit, the Customer must notify Senex within 30 days after the end of the affected month and provide reasonable details of the suspected unavailability. Credits are applied to future fees and are not payable in cash. No service credit is available for free trials, unpaid pilots, or beta access provided without charge.

The service credit is the Customer's sole and exclusive remedy for failure to meet the Uptime Target.

11. Read-only continuity commitment

If Senex decides to permanently discontinue the Service for all or substantially all customers, or begins an orderly wind-down of the business line that provides the Service, Senex will use commercially reasonable efforts to provide each paid Customer that is not in material breach with a read-only continuity period of up to six months from the date Senex gives notice of discontinuation or wind-down.

During the read-only continuity period, Senex may provide access through the existing application, a reduced read-only version of the application, or a secure export package, at Senex's option. The commitment is limited to enabling the Customer to view, retrieve, and export Customer Content and reasonably available audit records and Outputs. It does not include new document uploads, new indexing, new AI queries, new integrations, new users, custom development, full production support, or continued feature development.

This commitment is subject to payment of outstanding fees, applicable law, provider availability, security requirements, and events outside Senex's reasonable control. Nothing in this section requires Senex to continue operating the Service where doing so would be unlawful, technically impossible, or materially unsafe.

12. Fees and payment

Unless an Order Form states otherwise, the Entry subscription starts at CHF 80 per month, billed monthly in advance, exclusive of applicable taxes. Enterprise, bespoke, pilot, annual, usage-based, or additional-seat pricing must be set out in an Order Form or written quote.

The Customer must pay all fees when due. Fees are non-refundable except as expressly stated in these Terms or an Order Form. Senex may suspend access for overdue amounts after giving reasonable notice, unless the Customer disputes the amount in good faith and cooperates to resolve the dispute.

The Customer is responsible for all taxes, duties, levies, bank fees, foreign-exchange charges, and similar amounts arising from its purchase or use of the Service, except taxes on Senex's income.

13. Confidentiality

Each party may receive confidential information from the other. Confidential information includes non-public business, technical, financial, security, product, customer, and operational information. Customer Content, prompts, queries, Outputs, and Customer-specific audit records are the Customer's confidential information.

The receiving party must protect the disclosing party's confidential information using at least reasonable care and must use it only to perform or receive the Service, exercise rights, or meet obligations under these Terms. The receiving party may disclose confidential information only to its personnel, contractors, advisers, service providers, and affiliates who need to know it and are bound by confidentiality duties, or where required by law.

These confidentiality obligations do not apply to information that is publicly available without breach, already known without confidentiality restriction, independently developed without use of the confidential information, or lawfully received from a third party without confidentiality restriction.

14. Intellectual property

Senex and its licensors own all rights in the Service, software, documentation, interfaces, workflows, models, prompts, systems, designs, trade marks, and know-how, excluding Customer Data.

Subject to these Terms and the Order Form, Senex grants the Customer a limited, non-exclusive, non-transferable, non-sublicensable right during the subscription term to allow Authorised Users to access and use the Service for the Customer's internal business purposes.

The Customer may provide feedback or suggestions. Senex may use feedback without restriction or payment, provided that Senex does not disclose Customer confidential information in doing so.

15. Support and beta status

The Service is in active beta or pilot development. Some controls, including customer onboarding, offboarding, deletion, configuration, and support processes, may be handled manually during the pilot period. Features may change, be unavailable, or be subject to usage limits.

Senex will provide support through the contact route stated in the Order Form or, if none is stated, through hello@senex.ch. Unless an Order Form states otherwise, support is provided on a reasonable-efforts basis during Senex's normal business hours.

16. Third-party services, sub-processors, and customer-enabled features

The Service may depend on third-party hosting, infrastructure, communications, security, artificial-intelligence, and software providers. Where those providers process personal data for Senex in order to provide the Service, they are handled under the DPA.

Cloudflare is Senex's core infrastructure provider and the sole Approved Sub-processor for the Cloudflare-only default configuration. Cloudflare processing is subject to Cloudflare's data-processing terms, applicable transfer safeguards, and service-specific data-localisation capabilities.

Anthropic, Modal, OpenAI, Google artificial-intelligence services, and any other non-Cloudflare artificial-intelligence or document-conversion provider are not enabled for Customer Data under the Cloudflare-only default configuration unless separately authorised under the DPA, an Order Form, a product setting, or another written instruction accepted by Senex.

If the Customer enables a Customer-enabled Third-Party Service, including a bring-your-own-key artificial-intelligence provider using the Customer's own provider account and application programming interface key, the Customer is responsible for that third-party relationship, its instructions to Senex, and any required transfer or compliance assessment unless an Order Form says otherwise.

Senex is not responsible for Customer-side third-party services, including the Customer's identity provider, network, devices, browsers, document systems, third-party accounts, or third-party services enabled using Customer-supplied credentials, except to the extent caused by Senex's breach of these Terms or the DPA.

17. Warranties and disclaimers

Each party warrants that it has authority to enter into these Terms.

Senex will provide the Service using reasonable skill and care. Except as expressly stated in these Terms or an Order Form, the Service is provided as is and as available. Senex does not warrant that the Service will be uninterrupted, error-free, vulnerability-free, or that Outputs will be accurate, complete, or suitable for any particular investment, compliance, legal, or business purpose.

To the fullest extent permitted by law, Senex excludes all implied warranties, conditions, and representations, including implied warranties of merchantability, satisfactory quality, fitness for a particular purpose, non-infringement, and any warranty arising from course of dealing or usage of trade.

18. Limitation of liability

Nothing in these Terms limits or excludes liability that cannot legally be limited or excluded, including liability for death or personal injury caused by negligence, fraud, fraudulent misrepresentation, or wilful misconduct.

Subject to the previous paragraph, neither party is liable for indirect, incidental, special, consequential, exemplary, or punitive damages, or for loss of profits, revenue, goodwill, anticipated savings, business opportunity, or data, whether arising in contract, tort, negligence, breach of statutory duty, or otherwise.

Subject to the first paragraph of this section, Senex's total aggregate liability arising out of or relating to the Service, these Terms, the DPA, and all Order Forms is limited to the fees paid or payable by the Customer to Senex for the Service in the 12 months before the event giving rise to liability. For unpaid pilots, free trials, or beta access provided without charge, Senex's total aggregate liability is limited to CHF 100.

The Customer's payment obligations and each party's confidentiality obligations are not limited by the liability cap to the extent a court determines that they may not reasonably be capped.

19. Term and termination

The subscription term is stated in the Order Form. If no term is stated, the Entry subscription continues month to month until either party gives at least 30 days' written notice of non-renewal or termination.

Either party may terminate for material breach if the breach is not cured within 30 days after written notice. Senex may suspend or terminate access immediately if continued access creates a security risk, legal risk, material risk to another customer, or material risk to the Service.

On termination or expiry, the Customer's right to use the Service ends, except for any read-only continuity period expressly provided under these Terms.

20. Data export and deletion on termination

During the subscription term and any applicable read-only continuity period, the Customer may request export of Customer Content in a reasonably available format.

After termination, expiry, or non-renewal, Senex will delete Customer Content and data derived from Customer Content within 30 days after a valid written deletion request or the end of the agreement, unless a different period is required by law, the DPA, an Order Form, or a legal hold.

Audit records are retained separately for compliance, security, and accountability purposes for at least 365 days. During that retention period, audit records may not be deletable on the same timetable as Customer Content. Backups and disaster-recovery copies are overwritten or deleted in accordance with Senex's normal retention cycles.

21. Data protection

The DPA forms part of the agreement between Senex and the Customer where Senex processes personal data on behalf of the Customer. The DPA governs the subject matter, duration, nature, purpose, categories of data, categories of data subjects, subprocessors, security measures, international transfers, deletion, and audit rights for personal data in Customer Data.

22. Changes to the Service or Terms

Senex may update the Service from time to time, including by adding, changing, or removing features. Senex will not materially reduce the core functionality of a paid subscription during its current term without reasonable notice where practicable.

Senex may update these Terms by giving notice or posting the updated Terms. Material changes will not apply retroactively. Continued use after the effective date of updated Terms constitutes acceptance of those updates.

23. Notices

Notices to Senex must be sent to hello@senex.ch or to the registered office stated above. Senex may send notices to the email address associated with the Customer's Account or Order Form.

24. Assignment

The Customer may not assign or transfer these Terms without Senex's prior written consent, except to a successor in connection with a merger, reorganisation, or sale of substantially all assets, provided that the successor is not a competitor of Senex and agrees to be bound by these Terms. Senex may assign these Terms to an affiliate or successor in connection with a merger, reorganisation, financing, corporate restructuring, or sale of substantially all assets.

25. Force majeure

Neither party is liable for delay or failure to perform caused by events outside its reasonable control, including natural disasters, war, terrorism, labour disputes, internet or hosting failures, denial-of-service attacks, government action, power failure, epidemic, or failure of third-party services outside the affected party's reasonable control.

26. Governing law and jurisdiction

These Terms, the DPA, and any Order Form are governed by the laws of England and Wales. The courts of England and Wales have exclusive jurisdiction over disputes arising out of or relating to these Terms, the DPA, any Order Form, or the Service, except that either party may seek urgent injunctive or equitable relief in any court of competent jurisdiction.