Terms of Service

Draft for legal review. This text has not yet been approved by m11 Solutions' counsel and is not in force. Highlighted passages are still to be confirmed. The page is excluded from search engines until it is final.

1. About these terms

These Terms of Service (“Terms”) are an agreement between m11 Solutions To confirm: (legal name, form of entity and registered address) (“m11 Solutions”, “we”, “us”) and the organization that signs up for or orders Tradecraft (“Customer”, “you”). They govern access to and use of Tradecraft, its documentation and any related support (together, the “Service”).

By creating an organization, signing an order form or using the Service, you accept these Terms on behalf of your organization, and you confirm that you have the authority to do so and are at least 18 years old. If you do not have that authority, or do not agree, do not use the Service.

These Terms incorporate our Data processing terms (“DPA”) and any order form that refers to them. If they conflict, the order of precedence is: the order form, then the DPA (for personal data), then these Terms. Terms in a purchase order or other customer paperwork do not apply, even if we accept or sign it.

The Service is for business use. It is not offered to consumers. Our Privacy policy explains how we handle personal data, including what you enter when you sign up, request access or sign in.

2. Definitions

• Customer Data: the content you and your Users put into the Service or connect it to, such as questionnaires, assessments, documents, knowledge articles, answers, comments and data synced from connected sources, together with the outputs the Service produces from it.
• Output: answers, drafts, summaries and other content the Service generates for you, including with AI.
• User: a person you allow to use the Service under your organization, such as an employee or contractor.
• Plan: the subscription tier, limits and fees in your order form or, if there is none, on our Pricing page when you subscribe.
• Third-Party Service: a product not provided by us that you choose to use with the Service, such as an identity provider, Confluence, Microsoft SharePoint, Microsoft OneDrive, Google Drive™, your own AI model provider or an AI assistant connected through the Model Context Protocol (MCP).

3. The Service

3.1 Access

Subject to these Terms and payment of the fees, we grant you a non-exclusive, non-transferable right during the subscription term for your Users to access and use the Service for your internal business purposes, within the limits of your Plan.

3.2 Trials and preview features

We may offer a free trial or features marked as preview, beta or coming soon. These are provided as is, without warranty or support commitment, and may be changed or withdrawn at any time. A trial ends on the date shown at sign-up; we may make a trial organization read-only and then delete it and its Customer Data if it does not convert to a paid Plan. To confirm: (Confirm trial length and deletion timing, e.g. read-only at 30 days and deleted at 60 days, before stating them.) To the fullest extent the law allows, we have no liability arising from trials or preview features. Where the law does not allow that exclusion, our total liability for them is limited to To confirm: US$100. This does not reduce our obligations under the DPA for personal data you put into a trial, or liability that cannot be limited by law (section 15.3).

3.3 Changes to the Service

We improve Tradecraft continually and may change its features. We will not make a change during your subscription term that materially reduces the core functionality or security of the Service you paid for. Features not yet available are listed as coming soon and are not part of your subscription until we release them.

3.4 Support

We provide support by email at the address on our Support page, on business days, with the response targets of your Plan, if any.

4. Accounts and Users

• Your administrators control your organization: who joins, their roles, connected sources, single sign-on, AI settings and budgets.
• Each User needs their own account. Accounts are personal and may not be shared. Plan limits on Users count named people, not simultaneous sessions.
• Keep sign-in secure. Users must keep their passwords, authenticator devices and recovery codes confidential. Tell us at once at security@tradecrafthub.ai if you suspect unauthorized access.
• You are responsible for your Users’ compliance with these Terms and for all activity under your organization.
• Accurate information. Keep your account and billing details accurate and current.

5. Acceptable use

You will not, and will not allow anyone to:

1. use the Service in breach of law, including privacy, export control and sanctions laws, or to infringe anyone’s rights;
2. upload or process content you do not have the right to use, or special categories of personal data, health information, payment card data or government identifiers unless we have agreed in writing;
3. probe, scan or test the vulnerability of the Service, or circumvent its security, authentication, rate limits, usage limits, AI budgets or AI safety systems, except as permitted by a written agreement with us;
4. reverse engineer, decompile or copy the Service, except to the extent the law allows despite this restriction;
5. resell, sublicense, frame or provide the Service to third parties, or use it to build a competing product;
6. upload malware, or interfere with or overload the Service or other customers’ use of it;
7. use the Service or its Output to deceive, for example by misrepresenting a security control that does not exist;
8. use automated means to access the Service other than our documented interfaces, such as the API and MCP server; or
9. breach the AI acceptable use rules in section 7.3.

6. Your data

6.1 Ownership

As between you and us, you own Customer Data, including Output. We claim no ownership of it.

6.2 Our use of Customer Data

You grant us a worldwide, limited licence to host, copy, process, transmit and display Customer Data only as needed to provide, secure and support the Service, to prevent abuse, and as required by law. We process personal data in Customer Data as your processor under the DPA.

6.3 Your responsibilities

You are responsible for the accuracy, quality and lawfulness of Customer Data and for having the rights, notices and consents needed for us to process it. You decide what to connect to the Service and what to share outside it.

6.4 Third-Party Services

If you connect a Third-Party Service, you authorize us to exchange Customer Data with it as needed for the connection to work. Connected sources are read with read-only access. Your use of a Third-Party Service is governed by your agreement with its provider; we are not responsible for it. If a provider changes or withdraws its service, we may need to change or remove the connection.

6.5 Export and deletion

You can export completed questionnaires from the Service during your subscription. After termination we will delete Customer Data as described in the DPA. To confirm: (Confirm the post-termination export window, e.g. 30 days, and the self-service export available today.)

6.6 Usage data

We may collect data about how the Service is used, such as feature usage, AI token usage and performance, and use it to operate, secure and improve the Service. We share it outside m11 Solutions only in aggregated or de-identified form that does not identify you or any individual.

7. AI features and responsible use

7.1 How Tradecraft uses AI

Tradecraft uses large language models to draft answers to questionnaires, summarize and organize your knowledge, and answer questions from your approved content. Drafts are grounded in your own content and cite it, and nothing an AI drafts becomes an approved answer until a reviewer and an approver in your organization accept it. AI tools you connect through the Model Context Protocol (MCP) can read approved answers and propose new ones, but every proposal waits for human review.

7.2 Human oversight and your responsibility

1. Drafts, not answers. AI can be wrong, incomplete, out of date or inconsistent with your actual controls. Your Users must review Output before relying on it or sending it to anyone.
2. Your answers are yours. You are responsible for the answers you give your customers, auditors and other third parties, whether or not they started as AI drafts. Tradecraft helps you answer; it does not certify your security or compliance, and Output is not legal, audit or professional advice.
3. Transparency. Where a law that applies to you requires you to disclose that content was generated or assisted by AI, you are responsible for doing so. Do not present Output as having been reviewed or endorsed by m11 Solutions.

7.3 AI acceptable use

In addition to section 5, you will not, and will not allow anyone to, use the AI features:

1. in breach of the usage policies of the AI model provider that processes the request, which today is the Microsoft Enterprise AI Services Code of Conduct (and, for requests sent to your own AI provider account, that provider’s policies);
2. to generate or refine malware, exploit code or instructions for attacking systems you are not authorized to test, or content that is unlawful, harassing, hateful, sexually explicit, violent or self-harm related;
3. to jailbreak or circumvent content filters or other safety systems, to inject instructions into content so as to manipulate the Service, another User or another customer, or to extract system prompts, model parameters or other customers’ data;
4. to make, or as the sole basis for, decisions that have legal or similarly significant effects on individuals, such as decisions about employment, credit, insurance, housing, education, healthcare, legal status or access to essential services, or for any practice prohibited, or any use classified as high-risk, under the EU Artificial Intelligence Act or similar laws;
5. to impersonate a person or organization, or to create content that misleads people about whether a person, a control or a certification is real;
6. to develop, train or improve a foundation model or a product that competes with the Service, including by using Output as training data; or
7. to process personal data in prompts beyond what the questionnaire or task reasonably needs.

7.4 Safety systems and abuse monitoring

1. Content filtering. Our AI model providers screen prompts and Output in real time for harmful content. A filter may block or cut short a response, in which case Tradecraft shows an error and drafts nothing for that request.
2. Provider abuse monitoring. Microsoft monitors use of the models it hosts for patterns that suggest breach of its code of conduct. When content is flagged, a sample of prompts and Output may be reviewed by automated systems and, where needed, by authorized Microsoft employees, and content kept for that review is stored in the Azure geography of our AI resource. Microsoft states that it does not use prompts or Output to train models. We use Microsoft’s standard abuse monitoring: we have not been approved for its modified abuse monitoring, which turns off this storage and human review. If that changes, we will update these Terms.
3. Our monitoring. We monitor use of the Service, including the AI features, for security, abuse and compliance with these Terms. This includes rate limits, monthly AI budgets, limits on how many proposals AI tools can submit, and an audit log of AI tool calls that records who called which tool and when, without the question or answer text. We do not routinely read Customer Data. Our personnel access it only when you ask for support, to investigate a suspected security incident, suspected abuse or a notice from an AI model provider, or when the law requires it, and only to the extent needed.
4. Responding to abuse. If we or an AI model provider reasonably suspect abuse, we may block particular requests, pause AI features for the Users or organization concerned, notify your administrators and ask you to remediate. Except for severe or repeated abuse, or where a provider requires immediate action, we will give you a chance to explain and fix the problem first. We will limit any action to what is needed, and section 10 applies to any suspension. A provider’s action against our account may also limit the AI features we can offer; if that happens, we will tell you and work to restore them.
5. Reporting. Tell us at support@tradecrafthub.ai if you see harmful or clearly wrong Output, and at security@tradecrafthub.ai if you suspect someone is misusing the Service.

7.5 Content from your sources and AI tools

Documents, connected sources and AI tools can carry text that tries to instruct an AI (prompt injection). Tradecraft treats such content as data, not instructions, cites the content each draft relies on, and keeps every AI-tool change as a proposal for human review. No defence is perfect, so review Output from untrusted content with particular care, and connect only the sources and AI tools you trust. AI tools you connect are Third-Party Services, and what they do with the answers they read is governed by your agreement with their provider.

7.6 Your data and model training

To confirm: We do not use Customer Data to train AI models, and we do not allow our AI model providers to do so. Prompts and Output are processed only to provide the Service to you, under the DPA.

7.7 AI providers and models

By default we run models through our own Microsoft Azure AI Foundry account, listed as a sub-processor in the DPA; we use no other AI model provider. We may change the models we use to keep the Service effective and safe, and we will add new AI sub-processors only as the DPA allows. Output can vary between models and over time. If you connect your own AI provider account, it is a Third-Party Service: its terms, content filtering and abuse monitoring apply to those requests, and you are responsible for your agreement with it.

7.8 AI budgets

AI usage counts against your organization’s monthly AI budget. When the budget is used up, AI features pause until the next month or until the budget is raised, as explained in the documentation.

7.9 Similar Output and AI regulation

AI can produce similar Output for different customers. Your ownership of Output does not extend to similar content generated independently for others. Each party will comply with the laws on artificial intelligence that apply to its role, and on request we will give you the information about how Tradecraft uses AI that you reasonably need to meet your own obligations.

8. Fees and payment

1. Fees. You will pay the fees for your Plan. Unless your order form says otherwise, subscriptions are billed annually in advance, in US dollars, and fees are non-cancellable and non-refundable except as these Terms provide.
2. Invoices. Invoices are due within 30 days. You may dispute an invoice in good faith within that period; we will work with you to resolve it.
3. Late payment. If an undisputed amount is more than 15 days overdue after we notify you, we may suspend the Service until it is paid. To confirm: (Confirm whether late interest applies.)
4. Taxes. Fees exclude taxes. You are responsible for sales, use, value-added, goods and services and similar taxes, other than taxes on our income.
5. Changes. We may change our prices for your next renewal term by telling you at least 60 days before it starts.
6. Plan limits. If you exceed your Plan’s limits, we may ask you to move to a Plan that fits, or limit use until the next period.

9. Term and termination

1. Term. Your subscription starts when you subscribe and runs for the term in your order form or Plan. It renews automatically for successive periods of the same length unless either party gives notice of non-renewal at least 30 days before the end of the current term.
2. Termination for breach. Either party may terminate if the other materially breaches these Terms and does not cure the breach within 30 days of written notice.
3. Effect. On termination, your right to use the Service ends and you will pay any fees due. If you terminate for our uncured breach, we will refund prepaid fees for the remainder of the term. Sections that by their nature should survive, including 6.1, 7.2, 7.6, 10 to 14 and 16, survive termination.

10. Suspension

We may suspend access, in whole or for particular Users, if we reasonably believe it is necessary to prevent harm to the Service, other customers or third parties, to respond to a security incident or to abuse under section 7.4, to comply with law or an AI model provider’s requirement, or because of non-payment under section 8.3. We will limit the suspension to what is necessary, tell you in advance where practical, and restore access once the reason is resolved.

11. Confidentiality

Each party will protect the other’s non-public information that is marked confidential or should reasonably be understood to be confidential, including Customer Data, using at least reasonable care. It will use that information only to perform under these Terms and disclose it only to employees, contractors and advisers who need to know it and are bound by similar obligations. This does not apply to information that is or becomes public through no fault of the recipient, was already known to it, is independently developed, or is lawfully received from a third party. If the law compels disclosure, the recipient will give prior notice where lawful and cooperate with efforts to limit it.

12. Intellectual property and feedback

We own the Service, its software, documentation and our trademarks, and all rights not expressly granted in these Terms are reserved. If you give us feedback or suggestions, we may use them without restriction or payment; feedback does not include Customer Data.

13. Warranties and disclaimers

1. Mutual. Each party warrants that it has the authority to enter into these Terms.
2. Our warranty. During a paid subscription, the Service will perform materially as described in its documentation, and we will not materially reduce its security. If it does not, tell us; we will try to fix it, and if we cannot within 30 days, you may terminate the affected subscription and receive a refund of prepaid fees for the remaining term. This is your exclusive remedy for breach of this warranty.
3. Disclaimer. Except as expressly stated in these Terms, the Service and Output are provided “as is” and “as available”. To the fullest extent the law allows, we disclaim all other warranties, express or implied, including merchantability, fitness for a particular purpose, title, non-infringement, and that the Service or Output will be accurate, complete, uninterrupted or error-free. Completing questionnaires with the Service does not make your organization secure or compliant with any standard.

14. Indemnification

1. By us. We will defend you against any third-party claim alleging that the Service, as we provide it, infringes that party’s intellectual property rights, and pay any resulting damages awarded or settlement we agree. This does not apply to claims arising from Customer Data, Third-Party Services, Output, or use of the Service in combination with anything we did not provide or in breach of these Terms. If the Service is or may be found infringing, we may modify it, obtain the right for you to keep using it, or terminate the affected subscription and refund prepaid fees for the remaining term.
2. By you. You will defend us against any third-party claim arising from Customer Data or your use of the Service in breach of section 5, and pay any resulting damages awarded or settlement you agree.
3. Process. The party seeking defence will promptly notify the other, give it sole control of the defence and settlement (no settlement may impose liability on the indemnified party without its consent), and provide reasonable help at the other party’s cost.

15. Limitation of liability

1. Excluded damages. Neither party is liable for any indirect, incidental, special, consequential or punitive damages, or for lost profits, revenue, goodwill or data, even if advised of their possibility.
2. Cap. Each party’s total liability arising out of or relating to these Terms is limited to the fees paid and payable by you for the Service in the To confirm: 12 months before the event giving rise to the claim.
3. Exceptions. These limits do not apply to your payment obligations, a party’s indemnification obligations, your breach of section 5, or liability that cannot be limited by law, such as for fraud or gross negligence. To confirm: (Confirm with counsel whether to add a higher cap for breaches of confidentiality, security or the DPA.)

16. General

1. Governing law. These Terms are governed by the laws of To confirm: (jurisdiction, e.g. the Province of Ontario and the federal laws of Canada applicable there), without regard to conflict-of-law rules, and the courts of To confirm: (venue) have exclusive jurisdiction. The UN Convention on Contracts for the International Sale of Goods does not apply.
2. Changes to these Terms. We may update these Terms. We will post the new version here and, for a material change, notify your administrators at least 30 days in advance. A change applies from your next renewal unless you agree earlier or it is required by law. If you object to a material change, you may terminate before it applies and receive a refund of prepaid fees for the remaining term.
3. Notices. We will send notices to your administrators’ email addresses. You may send notices to legal@tradecrafthub.ai.
4. Assignment. Neither party may assign these Terms without the other’s consent, except to a successor in a merger, acquisition or sale of substantially all of its relevant assets, on notice.
5. Force majeure. Neither party is liable for delay or failure caused by events beyond its reasonable control, such as natural disasters, war, labour action, utility or internet failures, or failures of cloud providers, other than payment obligations.
6. Publicity. We will not use your name or logo to promote Tradecraft without your written permission.
7. Export and sanctions. Each party will comply with export control and sanctions laws. You will not use the Service in, or give access to anyone located in, an embargoed country or on a restricted-party list.
8. Independent parties. The parties are independent contractors. There are no third-party beneficiaries.
9. Entire agreement. These Terms, the DPA and your order forms are the entire agreement on their subject and supersede earlier agreements on it. If a provision is unenforceable, it will be limited to the minimum extent necessary and the rest remains in effect. A failure to enforce a provision is not a waiver.
10. Language. The parties have required that these Terms and related documents be drawn up in English. Les parties ont exigé que la présente convention et les documents connexes soient rédigés en anglais.

Contact

Questions about these Terms: legal@tradecrafthub.ai