Business Terms of Service

1. The Service

RFP Genius provides an AI-assisted workspace for responding to Requests for Proposal, security questionnaires, and similar documents, grounded in Customer-curated knowledge bases.

2. Subscription & Fees

Subscriptions are sold per workspace and billed in advance for the term stated in the applicable Order Form. Fees are non-refundable except where required by law or expressly stated. Term auto-renews for equal periods unless either party gives 30 days' written notice before renewal.

3. Customer Data & Ownership

Customer owns all Customer Data — every document uploaded, every answer drafted, every knowledge-base entry, and every output generated. RFP Genius receives only a limited license to host, process, and display Customer Data strictly to operate the Service for that Customer.

4. Data Isolation & No-Training Commitment

Customer Data is logically siloed per workspace. Customer Data is never used to train, fine-tune, or evaluate any general-purpose large language model, whether operated by RFP Genius or by a model provider. All sub-processor agreements with model providers (e.g. OpenAI, Google, Anthropic) explicitly disable training on inputs and outputs.

Aggregate, fully de-identified telemetry (e.g. token counts, latency) may be used solely to operate and improve the Service.

5. Data Residency & Tenancy

Customer selects the region in which Customer Data is stored and processed:

• EU — Frankfurt and Stockholm regions
• US — Virginia and Oregon regions
• APAC — Singapore and Sydney regions

Customer also selects a tenancy model:

• Multi-tenant (default) — shared infrastructure with logical isolation, dedicated encryption keys per workspace.
• Single-tenant — dedicated database, dedicated compute, dedicated vector store, and optional dedicated model endpoint, deployed in Customer's chosen region.

Customer Data does not leave the selected region except where Customer initiates an export or where required to deliver a feature Customer has expressly enabled.

6. Security

RFP Genius maintains a security program aligned with SOC 2 Type II and ISO 27001 principles, including encryption in transit (TLS 1.2+) and at rest (AES-256), role-based access control, least-privilege production access, and continuous logging.

7. Acceptable Use

Customer shall not upload content it lacks rights to, use the Service to violate law, attempt to reverse-engineer model weights, or use the Service to build a competing product.

8. Confidentiality

Each party shall protect the other's Confidential Information with the same degree of care it uses for its own (and never less than reasonable care). Customer Data is Customer's Confidential Information. See the NDA for full terms.

9. Warranties & Disclaimers

RFP Genius warrants that the Service will perform materially as described in the documentation. AI-generated outputs are probabilistic; Customer is responsible for human review before external use. Except as expressly stated, the Service is provided "as is".

10. Liability

Each party's aggregate liability is capped at the fees paid by Customer in the 12 months preceding the claim. Neither party is liable for indirect or consequential damages. Caps do not apply to data-protection breaches, IP infringement, or wilful misconduct.

11. Term & Termination

Either party may terminate for uncured material breach on 30 days' notice. On termination, Customer may export all Customer Data for 30 days; thereafter it is permanently deleted within 60 days, except for backups which expire on their normal cycle (max 90 days).

12. Governing Law

These terms are governed by the laws of Denmark, with exclusive venue in the courts of Copenhagen, unless the Order Form specifies otherwise.