RedactAgent Terms and Conditions

These terms are a practical public draft for checkout, demos, pilots, and self-service use. Signed client terms, an order form, MSA, DPA, or security schedule override this page where they expressly conflict.

1. Service

RedactAgent provides cloud-assisted document review, redaction, extraction, DSAR support, audit, and export workflows. The service is intended for authorised professional use by legal, privacy, compliance, HR, investigation, and regulated-data teams.

2. Account and authorised users

Customers are responsible for ensuring that only authorised users access their tenant, matters, documents, exports, billing settings, and integrations. Account credentials, magic links, SSO sessions, and API keys must be protected and must not be shared except as permitted by the applicable plan and written agreement.

3. Customer data and client documents

Customers retain all rights in their uploaded documents and matter data. RedactAgent may process customer data only to provide, secure, support, bill, maintain, and improve the service, comply with law, and follow documented customer instructions where RedactAgent acts as a processor.

Customers must have the right to upload, process, redact, disclose, or withhold the documents and data they submit to the service.

4. Confidentiality

Each party must protect confidential information using reasonable safeguards and must not disclose it except to provide the service, comply with law, or as allowed by a written agreement. Client documents, redaction decisions, exports, and matter content are treated as confidential customer information.

5. AI, OCR, and reviewer responsibility

AI, OCR, sensitive-data detection, and DSAR Agent outputs are workflow aids. They are not legal advice and may be incomplete or incorrect. Reviewers remain responsible for validating redactions, privilege calls, responsiveness decisions, exports, and disclosures before production or external release.

RedactAgent does not train or fine-tune AI models on customer documents. AI and OCR provider boundaries are described in the AI Data-Use and Model-Training Assurance document.

6. Beta features

Features labelled beta, preview, experimental, roadmap, or early access may change, be limited, produce unexpected results, or be withdrawn. Customers should not rely on beta features for high-risk production disclosure without human validation and appropriate approval.

7. Plans, AI credits, billing, and payment

Plan limits, included AI credits, overage, and AI credit-pack rules are shown at checkout, in the application, or in the signed order form. Payment processing is handled by Stripe or another approved billing provider. Fees are non-refundable except where required by law or expressly agreed in writing.

RedactAgent may suspend or limit processing if payment fails, AI credit limits are exceeded, trial limits are reached, or usage breaches fair-use or security limits.

8. Acceptable use

Customers must not misuse the service, bypass limits, probe security controls, upload unlawful material, process data without authority, reverse engineer the service, or use the service to harm individuals. The Acceptable Use Policy forms part of these terms.

9. Integrations and third-party services

Customer-enabled integrations such as Relativity, SSO, Stripe billing, Google Cloud processing, Supabase authentication/database services, Cloudflare Access, and other providers are subject to their own contracts and security boundaries. The subprocessor register identifies core providers used by RedactAgent.

10. Security

RedactAgent will use reasonable technical and organisational measures designed to protect customer data. Customers must configure users, matter access, exports, retention, and integrations appropriately for their risk profile.

11. Suspension and termination

RedactAgent may suspend access where needed to protect the service, prevent abuse, comply with law, address non-payment, or respond to security risk. On termination, customer data will be returned or deleted according to the applicable agreement, retention schedule, and technical limitations described in the retention and deletion policy.

12. Intellectual property

RedactAgent owns the service, software, workflows, interface, documentation, and related intellectual property. Customers own their customer data and documents. Feedback may be used to improve the service without obligation, provided RedactAgent does not disclose customer confidential information.

13. Disclaimers

The service is provided with reasonable skill and care, but no automated redaction, AI, OCR, extraction, or classification system is guaranteed to identify every relevant item or produce legally sufficient results. Customers must perform appropriate human review.

14. Liability

Liability limits, exclusions, and indemnities should be set out in the applicable order form, MSA, DPA, or signed client agreement. For self-service use, liability is limited to the fees paid by the customer for the affected service during the three months before the event giving rise to the claim, except for liability that cannot legally be limited.

15. Governing law

Unless a signed agreement states otherwise, these terms are governed by the laws of England and Wales, and the courts of England and Wales have exclusive jurisdiction.

16. Contact

Questions about these terms should be sent to team@redactagent.io.

17. Electronic acceptance and changes

For self-service accounts, the person creating or administering the account must affirmatively accept the version of these terms presented at signup or before paid activation. RedactAgent records the account, tenant, document version and hash, timestamp, acceptance method, request identifier, and security metadata needed to evidence that acceptance.

Material changes that require renewed agreement will be presented for re-acceptance before affected services continue. A privacy notice is provided for transparency and is acknowledged rather than treated as consent to processing that relies on another lawful basis.

18. Enterprise agreements and precedence

Enterprise service is activated only after authorised representatives execute the applicable order form, master SaaS agreement, and data processing agreement. Any signed enterprise agreement governs in the order of precedence stated in that agreement and overrides these online terms only to the extent of an express conflict.