Bounded Terms of Use

1. General

1.1 These Terms of Use ("Terms") govern your use of the Bounded service provided by Bounded Systems AB ("Bounded", "we", "us", "our") and your ordering of the Service under a written order form or agreement executed by you and Bounded (each an "Order"). If there is a conflict between these Terms and an Order, the Order prevails for that subject.

1.2 Acceptance; documents.

(a) Visitors. By accessing or using the Site (including https://www.boundedsystems.com/ and https://bounded.se/ and any subdomains or successor URLs operated by Bounded), you agree to these Terms and acknowledge that you have read our Privacy Notice.

(b) Customers. If you use the Service under an Order, you agree to these Terms and your Order. The Data Processing Agreement (DPA) is attached to, and forms part of, your Order and applies to our processing of personal data as your data processor when providing the Service.

(c) Order of precedence. If there is a conflict among the legal documents applicable to the Service, the following order controls: (1) Order (including any Service-specific addenda), (2) DPA, (3) these Terms, (4) Service documentation/Bounded Materials.

1.3 Authority. If you accept these Terms on behalf of an entity, you represent that you have authority to bind that entity. "You" means that entity.

1.4 Definitions. "Site" means Bounded's public websites and web pages, including https://www.boundedsystems.com/ and https://bounded.se/ (and any subdomains or successor URLs operated by Bounded). "Service" means the subscribed SaaS described in Section 2 and provided under an Order. "Visitor" means a person accessing the Site only. "Customer" means an entity using the Service under an Order. "Bounded Materials" has the meaning set out in 4.2.

2. Service

2.1 The System

The Service is Bounded's cloud-hosted vendor and AI supply chain visibility platform that provides continuous mapping and monitoring of your organization's operational dependencies across vendors, software, infrastructure, and AI systems, and delivers decision-grade visibility through dashboards, reports, and compliance-ready documentation based on the information you submit or make available to Bounded (collectively, the "Service"). Bounded also provides legal services on a consulting basis, which may be purchased separately and are not part of the Service unless expressly agreed in writing.

2.2 Legal Consulting Services

Bounded may provide legal consulting services, advice, assessments, drafting support, or similar professional services ("Legal Services") only if and to the extent expressly set out in a separate written statement of work, engagement letter, or other agreement signed by both parties (a "Legal Engagement"). Unless a Legal Engagement expressly states otherwise, (i) no attorney–client relationship is created, (ii) Legal Services are limited to the scope described in the Legal Engagement, (iii) any work product is provided for your internal use only and may not be relied on by any third party without Bounded's prior written consent, and (iv) Legal Services are not part of the Service and are not covered by any Service-level commitments.

3. Orders, Fees, Licence, Accounts, Term

3.1 Placing an Order

An Order must be in writing (e.g., countersigned order form, master/order form, or equivalent) and becomes binding when accepted by Bounded.

No offer; separate agreement required. Information on the Site about services (including any consulting, implementation, assessments, or Legal Services) is provided for informational purposes only and does not constitute an offer to provide services. Any such services are provided only under an Order or a separate written agreement (as applicable).

3.2 Service Fees and Billing

Fees and payment terms are stated in the Order ("Service Fees"). Unless otherwise agreed, Service Fees are invoiced in advance per Subscription Period and are non-cancellable and non-refundable except as expressly stated in these Terms.

Price changes. We may adjust prices to reflect increased costs (e.g., indexation) by up to 5% per 12-month billing year on notice. If the Service's scope has materially changed since the Order began, the parties will negotiate in good faith any further pricing changes; if no agreement is reached, your remedy is to non-renew under 3.5.

3.3 Licence (Right to Use)

Subject to timely payment and compliance with these Terms, we grant you a non-exclusive, non-transferable, non-sublicensable, revocable licence to access and use the Service solely for your internal business purposes during the Subscription Period, in accordance with the Order and these Terms.

Acceptable use. You must not: (a) reverse engineer or attempt to derive source code; (b) remove/alter proprietary notices; (c) access the Service to build a competing product; (d) use the Service unlawfully or to process unlawful content; (e) conduct security testing without our prior written consent; (f) exceed agreed usage limits; or (g) introduce malware.

Suspension. We may suspend access (with prompt notice when practicable) if: (i) you breach these Terms (including non-payment after any cure period), (ii) suspension is necessary to protect the Service or third parties, or (iii) required by law. We will resume access if and when the issue is remedied.

Connected systems. You are solely responsible for (i) configuring and authorizing integrations, (ii) ensuring you have all rights and permissions to grant Bounded access to connected systems and data sources, and (iii) complying with applicable third-party terms. Bounded is not responsible for availability, accuracy, or completeness of third-party systems or data feeds.

3.4 User Accounts

(a) You are responsible for accurate and up-to-date account information.

(b) You may invite users (including from third-party organisations) to act on your behalf. If you do so, you remain responsible for their use.

(c) If admin details or credentials are compromised, notify us immediately.

(d) We are not liable for actions in the Service by your personnel or authorised users to the maximum extent permitted by law.

3.5 Subscription Period; Renewal

The Subscription Period is stated in the Order. Each Subscription Period automatically renews for successive terms equal to the current term unless you give written non-renewal notice at least 30 days before the end of the then-current term.

4. Service Performance and No Guarantee

4.1 Availability

(a) We aim for availability of >99% monthly, excluding planned maintenance and events beyond our reasonable control.

(b) We will use commercially reasonable efforts to notify you in advance of essential interruptions and schedule maintenance to minimise disruption.

Sole remedy. Any failure to meet availability targets will be addressed, if at all, through the service credit mechanism set out in the Order (or, if none, no credits apply), and this will be your sole and exclusive remedy for availability issues.

4.2 Bounded Materials; Forums; Beta

You are responsible for decisions and actions taken using the Service and any Bounded guidance, documentation, sample materials, and similar content made available with the Service ("Bounded Materials").

Beta features. Features marked beta/preview are provided AS IS, may change or be withdrawn, and are excluded from any SLAs/indemnities to the extent permitted by law.

4.3 Automated Outputs

Certain outputs may be generated through automated analysis, heuristics, or machine-assisted techniques. You acknowledge such outputs may contain errors, omissions, or outdated information and must be validated by you before use in operational, legal, procurement, or compliance decisions.

4.4 No Certification; No Guarantee

The Service is decision-support tooling and is not an audit, certification, or independent verification of compliance, security, or operational resilience. See Section 7.2.

5. Intellectual Property

5.1 Ownership; Licence to Bounded Materials

(a) Ownership. Bounded and its licensors own all right, title, and interest (including all intellectual property rights) in and to the Service, Bounded Materials, documentation, features, functionality, and all modifications, enhancements, and derivative works (together, "Bounded IP"). No rights are granted by implication.

(b) Your limited licence. During the Subscription Period, we licence you to access and use Bounded IP solely within the Service and solely for your internal business purposes as permitted by these Terms and the Order. Except for that limited licence, you obtain no rights in Bounded IP. You must not copy, reproduce, distribute, publicly display, publish, or create derivative works from Bounded IP, except as expressly allowed in the Service to export your reports/records for internal use.

(c) Feedback. If you provide feedback, suggestions, or improvements, you grant Bounded a perpetual, irrevocable, worldwide, royalty-free licence to use and exploit that feedback without restriction.

(d) Third-party services. Standard third-party platforms (e.g., public cloud, LLMs, analytics) used to deliver the Service are subject to their terms. We remain responsible for our subcontractors as set out in 9.3.

5.2 IP Claims (Third-Party Infringement)

If any part of the Service, when used by you as permitted under these Terms, is alleged or in our reasonable opinion likely to infringe a third party's intellectual property right, we may, at our option and expense: (a) procure the right for you to continue using the Service; (b) modify or replace the Service so that it is non-infringing and materially equivalent; or (c) terminate the affected Order and refund prepaid fees for the unused portion of the then-current Subscription Period.

These remedies are available only if you promptly notify us in writing of the allegation and provide reasonable cooperation at our expense. We have no obligations under this Section to the extent the allegation arises from: (i) use of the Service not in accordance with these Terms or the documentation; (ii) combination with any product, service, data, or process not supplied by us; (iii) modification of the Service by anyone other than us; (iv) your use of Bounded Materials outside the Service or beyond the limited licence; or (v) Customer Data.

This Section 5.2 states your sole and exclusive remedies, and our entire liability, for any alleged or actual infringement or misappropriation.

5.3 Customer Data

(a) Ownership. You retain all rights in your data, content, and materials provided to or ingested by the Service ("Customer Data").

(b) Licence to us. You grant Bounded a non-exclusive, worldwide licence to host, copy, process, transmit, and display Customer Data as necessary to provide/support the Service and to comply with applicable laws.

(c) Responsibility. You are responsible for the legality and accuracy of Customer Data (including personal data), for obtaining all necessary rights/permissions, and for ensuring Customer Data does not infringe third-party rights or violate applicable laws.

(d) Aggregated/Anonymised use. We may use Customer Data in aggregated and anonymised form to develop and improve the Service, provided neither you nor data subjects are identified and confidentiality is not compromised.

6. Personal Data

6.1 Roles. For personal data we collect via the Site, Bounded acts as controller (as further outlined in our Privacy Notice). For personal data in Customer Data processed to provide the Service, Bounded acts as processor and the DPA attached to your Order governs that processing (including subprocessors, international transfers, and security).

6.2 Upon your written request, we will erase personal data within the Service without undue delay, and in any case no later than six (6) months after the end of the Order unless otherwise agreed or required by law.

7. Warranties; Disclaimers; Liability

7.1 Service warranty. Bounded will provide the Service using commercially reasonable skill and care.

7.2 No compliance guarantee; decision-support only. The Service provides visibility and decision-support functionality and may generate outputs (including reports, documentation, or recommendations) based on Customer Data and connected systems. The Service does not constitute an audit, certification, or independent verification of compliance, security, or operational resilience, and Bounded does not warrant that use of the Service will achieve or maintain compliance with any law, regulation, standard, or contractual framework.

7.3 Automated outputs. Certain outputs may be generated through automated analysis, heuristics, or machine-assisted techniques. You acknowledge such outputs may contain errors, omissions, or outdated information and must be validated by you before use in operational, legal, procurement, or compliance decisions.

7.4 Disclaimers. Except as expressly stated in Section 7.1, the Service and any Bounded Materials are provided "AS IS" and "AS AVAILABLE," and Bounded disclaims all other warranties (express, implied, statutory), including warranties of merchantability, fitness for a particular purpose, and non-infringement, to the maximum extent permitted by law.

7.5 Customer responsibility for configurations and third-party systems. You are responsible for: (a) the accuracy, quality, and legality of Customer Data; (b) obtaining and maintaining all rights, permissions, and notices/consents required to connect systems and provide Customer Data to Bounded; and (c) your configurations, access controls, and use of the Service. Bounded is not responsible for the availability, accuracy, completeness, or security of third-party systems, integrations, or data sources that you connect to the Service.

7.6 Exclusion of indirect damages. To the maximum extent permitted by law, neither party will be liable for any indirect, incidental, special, consequential, or punitive damages, or for any loss of profits, revenue, business, goodwill, or anticipated savings, or business interruption, arising out of or related to these Terms, any Order, or the Service, even if advised of the possibility of such damages.

7.7 Cap on liability (SaaS). Except for the Excluded Claims in Section 7.8, each party's aggregate liability arising out of or related to an Order or the Service will not exceed the Service Fees (excluding VAT) paid or payable by you under the applicable Order in the twelve (12) months immediately preceding the event giving rise to the claim.

7.8 Excluded Claims. Sections 7.6 and 7.7 do not apply to: (a) your payment obligations; (b) your breach of Section 3.3 (Licence (Right to Use)) or Section 9.1 (Confidentiality); (c) either party's wilful misconduct or gross negligence; or (d) liability that cannot be limited or excluded under mandatory law.

7.9 Data loss and security. Bounded will implement the technical and organisational measures described in the DPA and applicable Service documentation. To the maximum extent permitted by law, Bounded will not be liable for destruction, loss, alteration, unauthorised disclosure, or corruption of Customer Data except to the extent caused by Bounded's wilful misconduct or gross negligence.

7.10 Legal Services. Any Legal Services (if any) are provided only under a separate Legal Engagement. To the extent permitted by law, any warranties, liability limits, exclusions, and remedies applicable to Legal Services will be set out in the Legal Engagement and will prevail in the event of any inconsistency with this Section 7. If no Legal Engagement is in place, no Legal Services are being provided.

7.11 Customer indemnity. You will defend, indemnify, and hold harmless Bounded and its affiliates, officers, directors, employees, and subcontractors from and against any third-party claims, damages, liabilities, penalties, fines, and reasonable costs (including attorneys' fees) arising out of or related to: (a) Customer Data (including any allegation that Customer Data infringes rights or violates law); (b) your breach of these Terms; or (c) your failure to obtain necessary rights, permissions, or consents to connect systems or provide data to Bounded.

8. Termination; Data Return

8.1 The Service ends upon expiry of the Subscription Period or earlier termination for material breach (after written notice and a 30-day cure period where curable). On termination/expiry, we will disable access and delete Customer Data per the DPA and Section 6 (Personal Data). You must export any Customer Data you wish to retain before the Order ends. Where requested within 30 days after termination and subject to payment of any applicable fees, we will make commercially reasonable efforts to assist with export.

9. Miscellaneous

9.1 Confidentiality

(a) Confidential Information. "Confidential Information" means any non-public information disclosed by or on behalf of a party ("Disclosing Party") to the other party ("Receiving Party") in connection with the Service or these Terms that is designated as confidential or that reasonably should be understood to be confidential given the nature of the information and the circumstances of disclosure. Confidential Information includes, but is not limited to, the Service and Bounded IP, non-public product plans, security information, pricing, and Customer Data.

(b) Protection and permitted use. The Receiving Party will: (i) protect the Disclosing Party's Confidential Information using at least the same degree of care it uses to protect its own confidential information of like kind (and no less than a reasonable standard of care); (ii) use the Disclosing Party's Confidential Information only as necessary to perform its obligations or exercise its rights under these Terms and any Order; and (iii) not disclose the Disclosing Party's Confidential Information to any third party except as permitted under this Section.

(c) Permitted disclosures. The Receiving Party may disclose Confidential Information: (i) to its affiliates, employees, contractors, professional advisers, and subcontractors who have a need to know and are bound by confidentiality obligations no less protective than those in these Terms; (ii) to comply with applicable law, regulation, court order, or governmental request, provided that (to the extent legally permitted) the Receiving Party gives the Disclosing Party prompt written notice and reasonably cooperates (at the Disclosing Party's expense) in seeking confidential treatment or limiting disclosure; and (iii) as reasonably necessary to investigate, prevent, or remediate fraud, security incidents, suspected abuse, or technical issues affecting the Service, or to protect the rights, property, or safety of Bounded, Customers, users, or the public.

(d) Exclusions. Confidential Information does not include information that the Receiving Party can demonstrate: (i) is or becomes publicly available through no breach of these Terms; (ii) was lawfully known to the Receiving Party without restriction before receipt from the Disclosing Party; (iii) is received from a third party without breach of any obligation owed to the Disclosing Party; or (iv) is independently developed by the Receiving Party without use of or reference to the Disclosing Party's Confidential Information.

(e) Return or destruction. Upon written request or upon termination/expiry of the applicable Order, the Receiving Party will, within a reasonable time, return or destroy the Disclosing Party's Confidential Information in its possession or control, except that (i) Customer Data will be handled in accordance with the DPA and Section 6, and (ii) the Receiving Party may retain copies to the extent required by law or in routine archival/backup systems, provided that retained information remains subject to this Section for so long as it is retained.

(f) Equitable relief. Unauthorised disclosure or use of Confidential Information may cause irreparable harm. The Disclosing Party may seek injunctive or other equitable relief in addition to any other remedies available at law.

9.2 Assignment

Neither party may assign an Order without the other's prior written consent, except to an affiliate or in connection with a merger, acquisition, corporate reorganisation, or sale of substantially all assets, provided the assignee is not a direct competitor and assumes all obligations.

9.3 Subcontractors

We may use subcontractors (including standard third-party platforms) to provide the Service and remain responsible for their performance as for our own.

9.4 Publicity

We may use your name and logo for customer reference purposes, unless you opt out by written notice.

9.5 Changes to these Terms

(a) We may update these Terms by notifying you at least 30 days before the change takes effect. Price changes (other than as permitted in 3.2) take effect no earlier than the start of your next Subscription Period. The current version is available at https://www.boundedsystems.com/terms/ and is also accessible via the Site.

(b) If a change is materially adverse to you and more than 30 days remain in the current Subscription Period at notice, upon your written request we will apply the previous Terms for the remainder of the current term. Continued use after the effective date constitutes acceptance.

9.6 Export; Sanctions

You must comply with applicable export control and sanctions laws. You represent you are not subject to sanctions or located in a restricted jurisdiction.

9.7 Governing Law; Disputes

These Terms and the Order are governed by Swedish law. Disputes shall first be discussed in good faith. Failing resolution, disputes shall be finally settled by arbitration administered by the SCC Arbitration Institute under the Rules for Expedited Arbitrations, unless the SCC decides that the Arbitration Rules apply due to complexity/amount. Seat: Malmö. Language: Swedish or English. Nothing restricts either party from seeking interim, injunctive, or conservatory relief in any competent court.

9.8 No Third-Party Beneficiaries; No Reliance

These Terms confer no rights on any third party. The Service and any outputs are provided solely for your internal use and may not be relied upon by auditors, regulators, vendors, customers, or other third parties without Bounded's prior written consent.

10. Contact

Bounded Systems AB

Registered office: Kalendegatan 29B, 211 35 Malmö, Sweden

Email: legal@boundedsystems.com

Website: https://www.boundedsystems.com/