End User License Agreement

This End User License Agreement (this “EULA”) is a legal agreement between AiRysk Inc. (“AiRysk,” “we,” or “us”) and the company or other legal entity on whose behalf the AiRysk Products are installed, accessed, or used (“Customer”, “you,” or “your”).

If Customer and AiRysk have executed a separate written agreement governing the AiRysk Products, that agreement controls over this EULA to the extent of any conflict. If Customer obtained the AiRysk Products through an authorized Partner, this EULA governs Customer's use of the AiRysk Products as described in Section 3.

1. Definitions

1.1 “AiRysk Products” means the AiRysk software and services identified on an Order, which may include the AiRysk endpoint agent, the AiRysk browser extension, the AiRysk cloud platform (web portal and APIs), and the AiRysk industry agent modules (including the modules marketed as Leo, Capra, Veris, and Skorven), together with related components, in each case in object code form only, and including Updates and the Documentation.

1.2 “Authorized Users” means Customer's employees and individual contractors who access or use the AiRysk Products on Customer's behalf.

1.3 “Customer Data” means data, content, and information that is processed by the AiRysk Products on Customer's Endpoints or that Customer or its Authorized Users submit to the AiRysk Products, including the alerts, reports, and outputs generated for Customer.

1.4 “Documentation” means the user guides, deployment guides, and technical documentation that AiRysk makes generally available for the AiRysk Products, as updated from time to time.

1.5 “Endpoint” means a physical or virtual device (such as a laptop, desktop, workstation, server, or virtual desktop instance) on which any component of the AiRysk Products is installed or that is monitored or protected by the AiRysk Products.

1.6 “Order” means an ordering document, order form, quote, or online purchase flow entered into by Customer with AiRysk or with an authorized Partner that identifies the AiRysk Products, the number of licensed Endpoints, the Subscription Term, and the applicable fees.

1.7 “Partner” means a reseller, distributor, or managed security services provider authorized in writing by AiRysk to resell or deliver the AiRysk Products.

1.8 “Subscription Term” means the subscription period stated in the applicable Order, together with any renewals.

1.9 “Updates” means bug fixes, patches, error corrections, detection model updates, and modified or new versions of the AiRysk Products that AiRysk makes generally available to its subscription customers at no additional charge.

2. License Grant

2.1 License. Subject to Customer's compliance with this EULA and payment of the applicable fees, AiRysk grants Customer a limited, non-exclusive, non-transferable, non-sublicensable license, during the Subscription Term, to: (a) install and run the AiRysk endpoint agent and browser extension on up to the number of Endpoints licensed under the applicable Order; (b) access and use the AiRysk cloud platform; and (c) use the Documentation, in each case solely for Customer's internal business purposes.

2.2 Per-Endpoint Licensing. The AiRysk Products are licensed on a per-Endpoint basis. Customer may reassign a license from one Endpoint to another (for example, when a device is replaced), provided that the total number of concurrent Endpoints does not exceed the licensed quantity. If Customer's deployment exceeds the licensed quantity, Customer will promptly notify AiRysk or the applicable Partner and purchase the additional Endpoint licenses as described in Section 15.

2.3 Evaluation Use. If the AiRysk Products are provided for evaluation, pilot, or proof-of-value purposes, Customer may use them solely for internal evaluation during the period stated by AiRysk (or thirty (30) days if no period is stated). Evaluation use is provided “AS IS,” Section 10.1 does not apply to it, and AiRysk may suspend or terminate evaluation use at any time.

2.4 Responsibility for Users. Customer is responsible for the acts and omissions of its Authorized Users and affiliates in connection with the AiRysk Products as if they were Customer's own.

3. Orders Through Authorized Partners

3.1 If Customer obtains the AiRysk Products through a Partner: (a) pricing, invoicing, payment terms, and any support or service-level commitments beyond those stated in this EULA are as agreed between Customer and the Partner; (b) this EULA is solely between AiRysk and Customer and exclusively governs Customer's use of the AiRysk Products; and (c) no Partner is authorized to modify this EULA or to make any representation, warranty, or commitment on AiRysk's behalf.

3.2 AiRysk may suspend or terminate Customer's licenses upon notice if the fees applicable to Customer's subscription are not received by AiRysk, whether from Customer or from the Partner.

3.3 Where a Partner delivers the AiRysk Products as a managed service, the Partner may configure, monitor, and administer the AiRysk Products on Customer's behalf, and Customer authorizes that access and administration.

4. License Restrictions

Customer will not, and will not permit any third party to:

• copy the AiRysk Products, except for a reasonable number of backup copies that reproduce all proprietary notices;
• modify, translate, or create derivative works of the AiRysk Products;
• reverse engineer, decompile, disassemble, or otherwise attempt to derive the source code, detection models, or underlying algorithms of the AiRysk Products, except to the extent this restriction is prohibited by applicable law;
• sell, resell, rent, lease, lend, sublicense, distribute, or otherwise transfer the AiRysk Products, or use them to provide services to third parties on a service-bureau, hosted, or time-sharing basis, except as expressly permitted in a written agreement with AiRysk;
• circumvent, disable, or interfere with license keys, Endpoint metering, or other technical protection measures in the AiRysk Products;
• remove, alter, or obscure any proprietary rights notices;
• use the AiRysk Products to develop, or assist in developing, a competing product or service, or publicly disclose benchmark or performance test results without AiRysk's prior written consent;
• use the AiRysk Products in violation of applicable law, including to monitor any individual without any legally required notice, consent, or authority; or
• exceed the licensed number of Endpoints or permit access to the AiRysk Products by anyone other than Authorized Users.

5. On-Device Processing; Customer Data

5.1 On-Device Architecture. The AiRysk Products are designed to run locally on the Endpoint: detection and redaction of sensitive data occur on the device before screened content reaches any external AI model or service. In normal operation, the content that the AiRysk Products screen is not transmitted to AiRysk. AiRysk receives only the telemetry, alerts, and management metadata described in the Documentation, as needed to operate, secure, and support the AiRysk Products.

5.2 Ownership of Customer Data. As between the parties, Customer owns all Customer Data. AiRysk processes the limited data it receives solely to provide the AiRysk Products, in accordance with the AiRysk Privacy Policy and any data processing addendum executed between the parties. AiRysk does not sell Customer Data and does not use one customer's data to train models that serve other customers.

5.3 Configuration and Control. Customer (or its Partner acting on Customer's instructions) controls the configuration of the AiRysk Products, including monitoring scope, detection policies, retention settings, and administrator access.

5.4 Service Statistics. AiRysk may generate and use aggregated, de-identified statistics regarding the operation and performance of the AiRysk Products to operate, secure, and improve its products, provided such statistics do not identify Customer or any individual and do not include the content of Customer Data.

6. Customer Responsibilities

6.1 Employee Notice and Consent. The AiRysk Products enable monitoring and screening of activity on Customer's Endpoints. Customer is solely responsible for providing any legally required notices to, and obtaining any legally required consents or authorizations from, its employees, contractors, and other individuals before deploying the AiRysk Products, and for configuring monitoring scope, retention, and access in accordance with applicable law and Customer's internal policies.

6.2 Lawful Use. Customer will use the AiRysk Products in compliance with all applicable laws and regulations, including employment, privacy, data protection, and electronic-monitoring laws.

6.3 Credentials. Customer is responsible for safeguarding administrator and Authorized User credentials and for all activity occurring under its accounts, and will promptly notify AiRysk of any suspected unauthorized access.

6.4 Environment. Customer will deploy the AiRysk Products only on supported operating systems, browsers, and configurations described in the Documentation.

6.5 Customer's Compliance Obligations. The AiRysk Products are tools that assist Customer's data-protection and compliance efforts. They do not constitute legal advice, and their use does not by itself ensure compliance with any law, regulation, or standard (including HIPAA, GLBA, PCI DSS, or the GDPR). Customer remains solely responsible for its own regulatory and compliance obligations.

7. Ownership; Feedback

7.1 Ownership. The AiRysk Products are licensed, not sold. AiRysk and its licensors retain all right, title, and interest in and to the AiRysk Products, the Documentation, and all related intellectual property rights, including all detection models, algorithms, and improvements. No rights are granted to Customer except as expressly stated in this EULA.

7.2 Feedback. If Customer provides suggestions or feedback regarding the AiRysk Products, AiRysk may use that feedback without restriction or obligation, provided AiRysk does not identify Customer as its source without Customer's consent.

8. Updates; Support; Changes

8.1 Updates. AiRysk may provide Updates from time to time. Updates form part of the AiRysk Products and are governed by this EULA. Certain Updates, including security fixes and detection model updates, may be installed automatically in order to maintain the security and efficacy of the AiRysk Products.

8.2 Support. AiRysk provides standard support for the AiRysk Products as described in the applicable Order or Documentation. Support requests may be directed to support@airysk.com.

8.3 Changes. AiRysk may enhance or modify the features of the AiRysk Products, provided that the changes do not materially reduce the core functionality of the AiRysk Products during a paid Subscription Term.

9. Term; Termination

9.1 Term. This EULA is effective from the earlier of Customer's acceptance or Customer's first installation or use of the AiRysk Products, and continues for the Subscription Term unless terminated earlier in accordance with this Section 9.

9.2 Termination for Cause. Either party may terminate this EULA if the other party materially breaches it and fails to cure the breach within thirty (30) days after written notice. AiRysk may suspend or terminate Customer's licenses immediately upon notice for Customer's breach of Section 2 or Section 4, or for non-payment as described in Section 3.2.

9.3 Effect of Termination. Upon expiration or termination of this EULA: (a) all licenses granted under it end; (b) Customer will promptly cease all use of the AiRysk Products, uninstall the endpoint agent and browser extension from all Endpoints, and delete all copies in its possession or control; and (c) upon AiRysk's request, Customer will certify in writing that it has done so. Customer may export its reports and alert data from the AiRysk cloud platform prior to termination; thereafter, AiRysk will delete or de-identify such data in accordance with its Privacy Policy and applicable law.

9.4 Survival. Sections 4, 5.2, 6.5, 7, 9.3, 9.4, 10.2, 11, 12, 13, 14, and 16 survive any expiration or termination of this EULA, together with any accrued payment obligations.

10. Limited Warranty; Disclaimers

10.1 Limited Warranty. AiRysk warrants that, during the Subscription Term, the AiRysk Products will perform materially in accordance with the Documentation. Customer's exclusive remedy, and AiRysk's entire liability, for breach of this warranty is that AiRysk will use commercially reasonable efforts to correct the non-conformity and, if AiRysk is unable to do so within a reasonable period, either party may terminate the affected subscription, in which case AiRysk will refund the prepaid fees covering the unused remainder of the Subscription Term for the affected AiRysk Products.

11. Limitation of Liability

11.3 The limitations in this Section 11 do not apply to Customer's breach of Section 4, Customer's indemnification obligations under Section 12.2, Customer's payment obligations, or any liability that cannot be excluded or limited under applicable law.

12. Indemnification

12.1 By AiRysk. AiRysk will defend Customer against any third-party claim alleging that the AiRysk Products, as provided by AiRysk and used in accordance with this EULA, infringe a United States patent, copyright, or trademark, or misappropriate a trade secret, and will pay damages finally awarded against Customer for such claim. If such a claim is made or appears likely, AiRysk may, at its option: (a) procure the right for Customer to continue using the AiRysk Products; (b) modify or replace them so they are non-infringing without materially reducing functionality; or (c) terminate the affected licenses and refund the prepaid fees covering the unused remainder of the Subscription Term.

12.2 By Customer. Customer will defend AiRysk against any third-party claim arising from: (a) Customer Data; (b) Customer's deployment or use of the AiRysk Products to monitor any individual without legally required notice, consent, or authority; or (c) Customer's use of the AiRysk Products in violation of applicable law or this EULA, and Customer will pay damages finally awarded against AiRysk for such claim.

12.3 Procedure. The indemnified party must promptly notify the indemnifying party of the claim, grant the indemnifying party sole control of the defense and settlement, and provide reasonable cooperation at the indemnifying party's expense.

13. Confidentiality

13.1 “Confidential Information” means non-public information disclosed by one party to the other that is designated as confidential or that reasonably should be understood to be confidential given its nature and the circumstances of disclosure.

13.2 Each party will protect the other party's Confidential Information using at least reasonable care, will use it only to perform under this EULA, and will not disclose it except to employees, contractors, and professional advisors who have a need to know and are bound by confidentiality obligations at least as protective as those in this Section.

13.3 Confidential Information does not include information that: (a) is or becomes publicly available through no fault of the receiving party; (b) was rightfully known to the receiving party without restriction before disclosure; (c) is rightfully received from a third party without breach of any obligation; or (d) is independently developed without use of the disclosing party's Confidential Information.

14. Export Controls; Government Use

14.1 Export. The AiRysk Products may be subject to United States export control and sanctions laws and regulations. Customer will not export, re-export, or provide the AiRysk Products to any prohibited country, person, or entity, or use them for any end use prohibited by such laws.

14.2 Government Use. The AiRysk Products are “commercial computer software” and “commercial computer software documentation.” If Customer is a United States Government entity or contractor, use, duplication, and disclosure of the AiRysk Products are governed solely by the terms of this EULA in accordance with FAR 12.212 and DFARS 227.7202.

15. License Verification

15.1 The AiRysk Products include Endpoint metering functionality. No more than once in any twelve (12) month period, AiRysk may request, on reasonable written notice, a report of Customer's deployed Endpoint counts, and Customer will provide the report within thirty (30) days. If Customer's deployment exceeds its licensed quantities, Customer will purchase the additional Endpoint licenses at the rates in the applicable Order (or, if none are stated, at AiRysk's then-current rates), effective from the date the excess use began.

16. General

16.1 Order of Precedence. If Customer has a separately executed written agreement with AiRysk governing the AiRysk Products, that agreement controls over this EULA to the extent of any conflict.

16.2 Assignment. Customer may not assign this EULA without AiRysk's prior written consent, except to a successor in connection with a merger, reorganization, or sale of substantially all of Customer's assets, upon written notice to AiRysk.

16.3 Notices. Legal notices to AiRysk must be sent to AiRysk Inc., Attn: Legal, by email to support@airysk.com.

16.4 Governing Law; Venue. This EULA is governed by the laws of the State of Delaware, United States, without regard to its conflict of laws provisions. The state and federal courts located in Delaware will have exclusive jurisdiction over any dispute arising out of or relating to this EULA.

16.5 Force Majeure. Neither party is liable for any delay or failure to perform (other than payment obligations) caused by events beyond its reasonable control.

16.6 Entire Agreement. This EULA, together with the applicable Order and any executed data processing addendum, constitutes the entire agreement between the parties regarding the AiRysk Products and supersedes all prior or contemporaneous discussions and agreements on that subject.

16.7 No Third-Party Beneficiaries. This EULA does not create any third-party beneficiary rights. The parties are independent contractors.

16.8 Electronic Acceptance. This EULA may be accepted electronically, including by click-through acceptance or by installing or using the AiRysk Products, and such acceptance has the same legal effect as a signed writing.

17. Contact

Questions regarding this EULA may be directed to:

AiRysk Inc.
Email: support@airysk.com
Website: https://airysk.com

AiRysk End User License Agreement | v1.0 (April 7, 2026)