Laki.ai Organization Customer Terms

Version 4 – 3 September 2026

1.Agreement, Customer, and authority to represent

1. 1.1.
   These terms apply to the Laki.ai service provided by Helsinki AI Labs Oy (Business ID 3296587-8, the Service Provider) when the customer is a private-sector company, registered association, foundation, or sole trader acting in a professional or business capacity (the Customer). The Service is acquired only for the Customer’s business or other professional activities. A consumer cannot enter into an Agreement under these terms.
2. 1.2.
   The Service means Laki.ai legal-research functionality, content, software, and interfaces. A User is a natural person authorised by the Customer and given personal access. A Team is the organisation workspace in the Service. A Subscription is a self-service or separate order for the Service. Organization Capacity means the quantity accepted at checkout or in an Order Document that limits the organisation’s use of the Service as described in section 5. An accepted proposal, order form, or other written Order Document may supplement these terms, for example as to price, subscription term, and service level. An Order Document prevails over these terms only where it expressly agrees a deviation. The Agreement consists of the Subscription, these terms, the Laki.ai Data Processing Addendum (DPA) incorporated by reference into these terms, and any Order Document. Other Laki.ai terms are not part of the Agreement. In a conflict concerning personal data processing, the DPA prevails over the other parts of the Agreement; for other matters, the DPA does not change the order of precedence among the parts of the Agreement.
3. 1.3.
   The Agreement is formed when a sole trader identifies themself as the Customer and accepts the terms personally, an authorised representative identifies the Customer and accepts the terms on its behalf, an Order Document is accepted, or either such person orders a Team for the Customer. The Customer is identified by its official name, registration number, and country of registration or, where the Agreement is formed by a Subscription, by the information supplied with the Subscription and billing. The person entering into the Agreement warrants the professional purpose and, if acting as a representative, their authority to represent the Customer. A sole trader accepting for their own business is personally the Customer and a party to the Agreement; any other representative does not personally become the Customer or a party to the Agreement.
4. 1.4.
   On reasonable grounds, the Service Provider may request reasonable evidence of the Customer’s identity or the accepting person’s authority and suspend onboarding or use while that evidence is reviewed.
5. 1.5.
   Team owners, administrators, and members are Users. A Team role does not by itself make a User a party to the Agreement; a sole trader who is the Customer remains a party in that capacity. The Customer is responsible for their acts, access rights, and roles. Within the limits of the user interface, an owner may manage the Team name, members, roles, member cap, allowed email domains, billing, payments, and the Subscription and may delete the Team. Within the available limits, an administrator may manage members, invitations, join links, billing, payments, and the Subscription, but not actions reserved for the owner. A member may end their own membership. Actions within these limits bind the Customer. A role alone does not authorise a person to accept a new Agreement or Order Document.
6. 1.6.
   Version 4 of these terms applies when it is accepted for a new Customer in accordance with section 1.3 or, if the Customer’s Agreement has until then been governed by version 3, when a person entitled under section 1.3 first acquires Laki.ai for Microsoft Copilot for the Customer. Version 3 continues until then to govern the existing Customer’s ordinary use that does not include Laki.ai for Microsoft Copilot. Acceptance of version 4 replaces version 3 for the Customer’s entire Agreement and does not create a separate agreement for the Microsoft channel. Under section 1.5, a Team role alone does not establish authority to accept version 4.

2.Service and permitted use

1. 2.1.
   The Service is an AI-assisted legal-research aid. It is not a law firm or legal service, legal opinion, or official legal source. An output may be incorrect, incomplete, outdated, or hallucinated by AI. The Customer must ensure that Users verify material information against the original source and apply qualified human judgement before using an output in a decision, advice, document, or proceeding before a public authority. The Customer is responsible for its use of outputs. The Service Provider may change functionality and data sources, but may not materially impair the core purpose of a paid Subscription during a paid term without the procedure in section 6.4.
2. 2.2.
   The Service may be used on the website, in AI assistants approved by the Service Provider, through the Model Context Protocol (MCP), and through documented headless software agents. Channels may vary by Subscription and technical compatibility. An assistant, agent, operating environment, or other third-party service selected by the Customer is not part of the Service. For these terms, a third-party service chosen by a User authorised to choose it on the Customer’s behalf is deemed to have been selected by the Customer. The Customer is responsible for acquiring it and for its costs, terms, privacy, security, and access rights. The Service Provider is not responsible for the availability, changes, or connection restrictions of such a service. An interruption caused by a third-party service is not in itself a breach of the Agreement by the Service Provider. Deployment, licensing, or other acquisition of a third-party service does not by itself include or activate a Laki.ai Subscription or Organization Capacity.
3. 2.3.
   During the Agreement, the Customer may grant active Users a limited, non-exclusive, non-transferable right to use the Service for its internal business and ordinary professional client work. Use requires personal credentials and documented interfaces. Reasonable documented automation is permitted within Subscription limits when it does not endanger the Service or circumvent restrictions.
4. 2.4.
   The Customer must not, and must not permit a User to:

1. a)
   share credentials or allow several people to use the same account;
2. b)
   collect the Service or its content through undocumented automation, systematically, or in bulk outside the Subscription or documented interfaces;
3. c)
   resell, rent, offer as a service, or embed the Service in a customer-facing product without written permission;
4. d)
   use the Service or outputs to develop, train, test, or improve a competing database, search service, AI system, or model, or investigate the Service source code, algorithms, or safeguards except to the extent permitted by mandatory law; or
5. e)
   circumvent restrictions, interfere with the Service, test vulnerabilities without authorisation, or use the Service unlawfully, in violation of rights, or to spread misleading or harmful content.

A reviewed output or excerpt may be incorporated into an ordinary professional work product, such as a memorandum, opinion, contract draft, or court filing. The Service must not be presented as a standalone Laki.ai function or as a replacement for a legal professional.

1. 2.5.
   A public-sector body, court, arbitral tribunal, or other adjudicative or alternative dispute-resolution body is not a Customer under section 1.1 and may use the Service only under a separate written agreement. These terms apply to that separate agreement only if it expressly so provides. Without a separate agreement, the Service may not be used in the decision-making of such a body or on its behalf. This restriction does not prevent a lawyer or other representative from assisting a client in an ordinary professional engagement.

3.Research inputs and data protection

1. 3.1.
   A Research Input is a prompt, search query, context, attachment, upload, or other material processed by the research functionality of the Service. A Research Input may consist of User Material, which the User intentionally supplies to a third-party AI assistant or the Service, and a Model Tool Call, which an AI model independently generates for a Service tool from User Material and other available context. A Model Tool Call is not material intentionally supplied by the User to the Service.
2. 3.2.
   User Material and Model Tool Calls may include, where necessary for the research task, client, business, and professional secrets, other confidential information, and personal data, including special categories of personal data under Article 9 of the GDPR and personal data relating to criminal convictions and offences under Article 10 of the GDPR. Other regulated sensitive data may be processed only when strictly necessary for the legal task and after the Customer has ensured lawful control and legally adequate consent. A Research Input must not contain PCI-regulated payment-card data, protected health information (PHI), government-issued personal identifiers, authentication credentials, or other secrets, or information that the Customer is not entitled to provide to the processing chain consisting of its selected third-party AI assistant, the Service Provider, and participating subprocessors. Special categories of personal data and personal data relating to criminal convictions and offences may be provided only to the extent that they do not fall within the categories prohibited above; the Customer must remove personal identity codes, health information, and other prohibited data from the material before providing it. These restrictions apply to both User Material and Model Tool Calls. They do not apply to administrative information required in designated account, Team, invitation, billing, contract, and contact fields in the Service, such as names, work email addresses, organisation information, roles, and billing contacts.
3. 3.3.
   The Customer determines the purposes of processing personal data in Research Inputs and is responsible for ensuring an appropriate legal basis and, for special categories of personal data and personal data relating to criminal convictions or offences, an additional condition under Article 9 or Article 10 of the GDPR; compliance with professional confidentiality; minimisation to what the research task requires; suitability of the Customer-selected third-party AI assistant and its version, settings, and permissions for the data; and the Customer’s right to provide the data to that assistant, the Service Provider, and participating subprocessors. The Customer must ensure that User Material does not contain data prohibited by section 3.2 and that such data is not included in a Model Tool Call because of User Material. For information included in a Model Tool Call because of other context held by the third-party AI assistant, the Customer is responsible within the scope of its obligations concerning the assistant’s selection, version, settings, and permissions.
4. 3.4.
   The Service Provider processes Research Inputs and outputs generated from them only for the agreed purpose of providing the Service; protects them with technical and organisational measures appropriate to the risk; does not use them to train or generally improve its own or third-party AI models; and retains them only for as long as the purpose of processing requires. Research Inputs and research outputs produced by the Service are the Customer’s confidential information under section 7 without separate marking. Research Inputs may be processed temporarily and only to the extent needed to perform the requested search, document reading, model-based relevance assessment, or other operation, including in Google services (Google Cloud and Vertex AI). Model and embedding requests containing Research Inputs or research outputs produced by the Service are processed in the Vertex AI EU region. The Service Provider does not pre-screen or classify Model Tool Call content; its confidentiality and security obligations nevertheless apply to material it receives, and the same protection applies to research outputs produced by the Service. The Service Provider is responsible for its subprocessors under the DPA, and the DPA applies to Research Inputs and outputs to the extent they contain personal data. The Service Provider does not apply the content licence in the Laki.ai General Terms of Use personally accepted by a User to Research Inputs or outputs. The Service Provider may retain content-free metadata needed for security, operations, cost, and performance, such as times, statuses, durations, counts, and token and cost data. The Service Provider does not use research-query or context text as product-development material.
5. 3.5.
   Personnel or a person acting on behalf of the Service Provider may access a Research Input only where technically possible and necessary for requested support, separately agreed customer-specific development, investigation of a serious abuse or security concern, a legal obligation, or a binding request from a public authority. Access is limited to what is necessary. The prohibition on training and general improvement in section 3.4 always applies and such access does not create an exception.
6. 3.6.
   A third-party AI assistant, agent, or host service selected by the Customer may process User Material and Model Tool Calls under its own terms, and the commitments in sections 3.4–3.5 do not apply to that processing. The Service Provider has no obligation to detect, classify, filter, or delete Model Tool Call content or prevent its transmission, and, subject to section 8, no responsibility for the content selections or processing of the third-party service. Personal data processing is described in the Laki.ai Privacy Policy. To the extent the Service Provider processes personal data in Research Inputs or outputs on behalf of the Customer, the Service Provider acts as processor and the DPA incorporated into the Agreement applies.

4.Intellectual property and outputs

1. 4.1.
   The Service, software, structure, interfaces, databases, selections, classifications, documentation, and identifiers belong to the Service Provider or its licensors. Rights in openly available source material and its source-specific terms remain in force. The Customer retains its rights in administrative information it lawfully supplies. That information may be processed during the Agreement only to provide and secure the Service and, during and after the Agreement, to the extent necessary for security, debt recovery, establishing, exercising, or defending legal claims, or legal obligations.
2. 4.2.
   If an output is protected and the right can be granted, the Customer receives a perpetual, worldwide, royalty-free, non-exclusive right to use, modify, store, copy, and disclose it in ordinary business and professional work. The right does not cover the Service, source material, or third-party material as such and does not remove the restrictions in section 2.
3. 4.3.
   An output may not be unique. Another user may receive a similar output that is not the Customer’s output. The Customer is responsible for respecting third-party rights.
4. 4.4.
   The Service Provider may not use the Customer’s name, trademark, or logo in a customer list, marketing, or other publicity without prior written consent.

5.Teams, Organization Capacity, prices, and termination

1. 5.1.
   The Customer must ensure that every User has their own personal access. Unless a supported customer-selected host identifies a User within the Customer’s organisation environment without a separate Laki.ai account, every User must have their own account and work email address. The Customer must ensure that credentials and host access assignments are protected and any compromise is reported immediately. The Customer may authorise an external IT provider to administer the Customer’s Microsoft tenant and make the operational deployment-and-assignment declaration on the Customer’s behalf. The external IT provider acts only as the Customer’s delegate, and the Customer remains responsible for tenant administration, the declaration, deployment, and user or group assignments. The Customer keeps account information, roles, and access rights current and removes unnecessary access without delay. A Team has owner, administrator, and member roles and at least one properly authorised owner. Only persons who need them may receive owner or administrator rights. The Customer is responsible for invitations, join links, allowed email domains, and the member cap restricting approval of new members. Invitations and join links must be kept confidential as access credentials. The member cap is not a prepaid or billable seat count and does not reduce billing for active members. Only persons acting on behalf of the Customer, not private users, may join the Team.
2. 5.2.
   Price, billing period, and commercial terms are shown at checkout or in the Order Document before acceptance. The price of a self-service Team includes value-added tax. Prices and tax treatment for a separate order are governed by the Order Document. Each charge is based on the checkout price or Order Document applicable to the Subscription at the time of charge, subject to any already-paid term. For a Subscription using Organization Capacity, the billable quantity is the capacity accepted at checkout or in the Order Document whether or not it is fully used. The same Organization Capacity separately limits active Team memberships and authorised use through supported organisation channels. Those user populations are not identity-linked or combined when capacity is applied. The billable quantity for another Subscription is determined as shown at checkout or in the Order Document, including by active memberships where applicable.
3. 5.3.
   An increase to Organization Capacity or another billable quantity during a term is charged immediately on a pro rata basis for the remaining term and becomes usable when payment is confirmed. Removing a membership ends its access immediately. A decrease to Organization Capacity or another billable quantity takes effect only at the next renewal and creates no refund, credit, or balance for the current term. A lower future Organization Capacity may immediately limit new memberships or new use through supported organisation channels, but existing access is not ended during the paid term solely to implement the decrease. When a User joins a paid Team for which the Customer pays for the seat, the User’s personal Laki.ai PRO subscription is scheduled to end at the end of its current billing period without refund and any free trial ends immediately. In other cases, a simultaneous personal subscription is not cancelled automatically and may cause duplicate billing; it must be cancelled separately under its own terms.
4. 5.4.
   A self-service Subscription is billed in advance to the stored payment method. The Customer authorises the Service Provider and Stripe to charge the Subscription and additional Organization Capacity or other additional capacity and is responsible for accurate payment, billing, and tax information. If payment fails, the Service Provider may, to the extent permitted by law, retry, prevent new members or new use through a supported organisation channel, suspend the Service, or terminate the Subscription. An overdue payment remains due, and a retry is not a waiver of the receivable.
5. 5.5.
   A self-service Subscription renews monthly unless the Customer cancels before renewal. An Order Document may agree another term, commitment, or notice period, in which case termination is governed by the Order Document. Cancellation of a self-service Subscription takes effect at the end of the billing period, when access ends. A term that has begun is not refunded.
6. 5.6.
   An owner may delete the Team immediately. Deletion ends access and invitations and cancels the Team Subscription without refund. It does not delete Users’ personal Laki.ai accounts or subscriptions. Ending membership likewise does not delete a personal account. Before termination, the Customer saves any necessary work products if the Service provides that functionality.

6.Suspension and changes

1. 6.1.
   The Service Provider may restrict or suspend use immediately only if and to the extent necessary to address a security threat, comply with law or an order from a public authority, or limit the effects of an overdue payment or material breach. The action is limited to what and how long is necessary.
2. 6.2.
   For another material breach by the Customer, the Service Provider gives notice and at least 14 days to cure. The Agreement or a User’s right may be terminated if the breach is not cured in time. No cure period is required for an incurable, intentional, or serious breach or one creating a material legal or security risk. The Customer may terminate if the Service Provider does not cure a material breach within 30 days after specific written notice. A material, incurable breach by the Service Provider that prevents the core purpose of the Service permits immediate termination.
3. 6.3.
   Access rights end when the Agreement ends. Payment obligations incurred before termination and falling due at or after termination, terms concerning confidentiality, intellectual property, liability, law, and disputes, and the terms on Research Inputs and data protection in section 3 survive according to their nature.
4. 6.4.
   The Service, price, or terms may change. A change that materially impairs the core purpose of a paid Subscription during a paid term, or a material price or terms change, is notified in a durable medium at least 30 days before taking effect. The Customer may terminate before the change, and the change does not apply to the period before termination. New law, a binding order from a public authority, or an urgent security threat may require a faster change, which is communicated with reasons as soon as possible. A technical update that does not reduce rights may be made without advance notice.

7.Confidentiality

1. 7.1.
   Each party protects the other’s confidential information. Confidential information is non-public information marked confidential or evidently confidential, such as non-public prices, proposals, security or support information, negotiations, or business plans. The recipient uses it only to perform the Agreement, protects it with at least the same care as its own comparable information, and discloses it only to an employee, contractor, or adviser who needs it for the task and is bound by confidentiality.
2. 7.2.
   The obligation does not apply to information lawfully held without confidentiality, becoming public without breach of the Agreement, lawfully received from a third party, or independently developed. Disclosure required by law or order is limited to what is necessary and, where possible, notified in advance.
3. 7.3.
   Confidentiality continues for three years after the Agreement ends and, for a trade secret, for as long as the information remains a trade secret under law.

8.Availability, liability, and force majeure

1. 8.1.
   The Service is provided professionally and with reasonable care. To the extent permitted by applicable law, it is provided as is and as available. Unless an Order Document states otherwise, no service level, uninterrupted or error-free operation, completeness, currency, uniqueness, or fitness for a particular purpose is guaranteed. The verification obligation in section 2.1 always applies. The Service Provider may perform planned maintenance and urgent security fixes and seeks to notify a foreseeable material interruption.
2. 8.2.
   The Service Provider is not liable for indirect loss, such as lost profit, revenue, contract, or data, business interruption, or reputational damage. Its aggregate liability for claims arising from the Agreement or Service is capped at the lower of all fees paid by the Customer under the Agreement or EUR 10,000.
3. 8.3.
   The limitations do not apply to loss caused intentionally or by gross negligence or to liability that mandatory law does not permit to be limited. They apply regardless of the legal basis of the claim and do not limit the Customer’s overdue payments.
4. 8.4.
   Neither party is liable for an unforeseeable impediment beyond its reasonable control that could not reasonably have been avoided or overcome. The party gives prompt notice of the impediment and estimated duration and limits the harm. The impediment does not remove a payment obligation that fell due before it.

9.Other terms, governing law, and venue

1. 9.1.
   Notices concerning the Agreement are delivered in a durable medium by email to the owner, billing, or contract contact address provided by the Customer and to the Service Provider at info@laki.ai. A notice must be capable of being stored and reproduced unchanged by the recipient. Termination and breach notices must be in writing.
2. 9.2.
   The Customer may not assign the Agreement without the Service Provider’s written consent. The Service Provider may assign it to a group company or with a transfer of the business relating to the Service if the Customer’s rights are not materially reduced; notice is given of the assignment. An invalid provision is adjusted as closely as possible to its permitted purpose, while the other provisions remain effective. The Agreement defined in section 1.2 constitutes the parties’ entire agreement on the subject and supersedes prior proposals, negotiations, and statements without limiting liability for intentional misrepresentation.
3. 9.3.
   The Agreement, Service, and these terms are governed by the laws of Finland, excluding choice-of-law rules. Any dispute, controversy, or claim arising out of or relating to the Service, the Agreement, and/or these terms will be finally settled by arbitration in accordance with the Rules for Expedited Arbitration of the Finland Chamber of Commerce. The Arbitration Institute of the Finland Chamber of Commerce may, however, at the request of a party, determine that the Arbitration Rules of the Finland Chamber of Commerce will apply instead of the Rules for Expedited Arbitration if the Arbitration Institute considers this appropriate, taking into account the amount in dispute, the complexity of the case, and other relevant circumstances. The seat of arbitration is Helsinki, Finland. The language of the arbitration is Finnish. The Service Provider also has the right to bring proceedings before the ordinary courts in respect of undisputed receivables owed by the Customer. Before commencing arbitration, the parties seek to negotiate for a reasonable period.
4. 9.4.
   The Service Provider’s contact details are Helsinki AI Labs Oy, Business ID 3296587-8, Sompasaarenlaituri 4 B 46, 00540 Helsinki, Finland, and info@laki.ai.