Terms of Engagement

"We", "us" and "AirGap Keeper" mean the UK offline AI processing bureau supplying the services. "You" or "Customer" means the organisation engaging us. "Client Data" means documents, media and files you supply. "Deliverables" means the outputs we return. "SOW" means an agreed statement of work or order form. "Zero-Retention Guarantee" has the meaning in clause 8.

We provide offline extraction, structuring, indexing, chronology building, summarisation and analysis of documents using locally hosted AI models within an air-gapped UK environment. A contract is formed when you accept a written quotation or SOW, or when we begin work at your written request. Each SOW sets out the scope, media, timescales, acceptance criteria and fees. Website content is for information only and is not an offer.

You are responsible for delivering media by the agreed secure method and for labelling it accurately against the matter reference. Media is logged on receipt and mounted read-only during intake so that original files, timestamps and metadata are preserved. Do not send passwords, passphrases or decryption keys through our web forms; key exchange is arranged separately by an agreed out-of-band method. We may refuse or pause work where media is damaged, unreadable, out of scope, or where lawful authority to process is unclear.

• Ensure you have the legal right and a lawful basis to supply Client Data to us for the instructed purpose, and that any required notices or conditions are in place.
• Limit the data supplied to what is necessary for the agreed purpose.
• Provide accurate instructions, reference material and points of contact.
• Review Deliverables and apply professional judgement before relying on, disclosing or filing them.
• Keep your own copies of source material; we do not act as your archive.

You may not instruct processing that is unlawful, that infringes third-party rights, that is intended to identify individuals for unlawful purposes, or that would place us in breach of Data Protection Legislation or a court order. You may not attempt to probe, scan or interfere with this website or our systems, or submit malicious code.

Deliverables are produced with AI assistance and human quality assurance. AI systems can misread, omit or mis-summarise information. Deliverables are a work product to support your professional review; they are not legal, medical, financial or other professional advice, and they do not replace your own verification against source documents.

Each party keeps the other's confidential information confidential and uses it only for the purposes of the engagement. We implement the technical and organisational measures set out in Annex 2 of the Data Processing Agreement, including physical air-gapping, write-blocked intake, malware neutralisation, encryption, role-based access, vetted personnel and logged erasure. Further detail is in our Security Assurance and Architecture Summary. Confidentiality obligations survive termination for six years, and indefinitely for information subject to legal professional privilege.

We are processors, not data hoarders. Within 72 hours of acceptance of the Deliverables, or sooner on your written instruction, we securely erase all Client Data, derived working files, indexes and temporary artefacts from our processing environment. Customer-supplied media is returned or, on your written instruction, destroyed. A certificate of erasure is issued on request. We never use Client Data to train, fine-tune or evaluate AI models, and we retain no copies for our own purposes. The only exception is where UK law requires retention of a specific record, in which case we will tell you what is retained, why, and for how long, and it stays protected under these terms until erased.

You are the controller and we are the processor for personal data within Client Data. The Data Processing Agreement applies to that processing and is incorporated into these terms by reference. Each party will comply with the UK GDPR and the Data Protection Act 2018 in performing this contract.

Fees are as stated in the SOW and are exclusive of VAT. Unless otherwise agreed, invoices are payable within 30 days of the invoice date. Late payment may attract interest and reasonable recovery costs under the Late Payment of Commercial Debts (Interest) Act 1998. Additional volumes, re-runs caused by revised instructions, or out-of-scope work are chargeable at the rates in the SOW after written agreement. Secure courier and media costs are recharged at cost where stated.

You retain all rights in Client Data and, on payment in full, own the Deliverables. We retain all rights in our methodologies, prompts, configurations, tooling and know-how, including generalised learning that does not incorporate or identify Client Data. We grant you a non-exclusive licence to use any of our background materials embedded in the Deliverables for your internal business purposes.

We warrant that we will perform the services with reasonable care and skill, in accordance with the SOW, and in compliance with applicable law. We do not warrant that Deliverables will be free of error or omission, nor that they will meet any outcome not specified in the SOW. All other terms implied by statute or common law are excluded to the fullest extent permitted.

Neither party excludes liability for death or personal injury caused by negligence, fraud or fraudulent misrepresentation, or anything else that cannot lawfully be excluded, including liability to data subjects under Article 82 of the UK GDPR. Subject to that, neither party is liable for indirect or consequential loss, loss of profit, revenue, goodwill, or loss arising from decisions taken in reliance on Deliverables without independent verification. Our total aggregate liability arising out of or in connection with a SOW is limited to the fees paid and payable under that SOW in the 12 months preceding the claim.

You indemnify us against claims arising from your lack of lawful basis or authority to supply Client Data, or from your use of Deliverables in breach of these terms or applicable law.

These terms apply from the start of the first SOW until all SOWs have ended. Either party may terminate a SOW on 30 days' written notice, or immediately on the other's material breach that is not remedied within 14 days, or on insolvency. We may suspend work where an invoice is materially overdue or where continuing would breach law. On termination you pay for work performed to that date, we return or deliver completed work in progress where practicable, and clause 8 erasure applies.

Neither party is liable for delay caused by events beyond its reasonable control, provided it notifies the other and mitigates the impact. We do not subcontract the processing of Client Data; any change to that position requires your prior written consent under the Data Processing Agreement.

This website is provided "as is" for information. Site content, branding and downloadable materials remain our property and may not be reproduced commercially without permission. Submitting a form does not create a contract or a professional relationship, and you should not send case data, personal data about third parties, or credentials through it.

Notices must be in writing and sent to the addresses in the SOW or to compliance@airgapkeeper.com. No third party may enforce these terms under the Contracts (Rights of Third Parties) Act 1999. If a provision is held unenforceable, the remainder continues in force. These terms and any dispute arising from them are governed by the laws of England and Wales, and the courts of England and Wales have exclusive jurisdiction. The parties will first attempt to resolve disputes in good faith between senior representatives.