IMPORTANT: BUSINESS USE ONLY

The Tarian Service is made available only for use in the course of business (including by sole traders). It is not intended for consumer use.

These Terms are a legally binding agreement between:

RAMSGen Ltd, a company incorporated in England and Wales (company number 16458298) with registered office at 4th Floor, 14 Museum Place, City Centre, Cardiff, CF10 3BH ("RAMSGen", "we", "us", "our"); and
The business customer accepting these Terms ("Customer", "you", "your").

If you accept these Terms on behalf of a company or other entity, you confirm you have authority to bind that entity.

Naming. Tarian is a product of RAMSGen Ltd. RAMSGen Ltd is the contracting party under these Terms, and "the Service" means the Tarian platform at app.tariansystems.com — whether it is referred to as Tarian, as RAMSGen, or by any other product name we use from time to time. A change to the product's name does not change who you are contracting with, or what you are licensed to use.

1. About These Terms; Contract Formation; Order of Precedence

1.1 Contract formation

A contract is formed when you (a) click "I agree" (or similar), (b) sign or accept an order form, quotation, subscription order or similar ("Order Form"), (c) create an account/workspace, or (d) otherwise access or use the Service (whichever occurs first).

1.2 Order Forms

If RAMSGen and the Customer enter into an Order Form, it forms part of the contract and sets out commercial details (such as plan, term, included allowances, Fees, and any user limits).

1.3 Order of precedence

If there is any conflict between documents, the following order of precedence applies (highest first):

the Order Form (if any);
the Data Processing Addendum incorporated under Section 15.1 ("DPA");
these Terms;
any schedules/policies referenced in these Terms;
Documentation.

1.4 Purchase orders do not apply

Any purchase order or similar document issued by the Customer is for administrative convenience only and does not form part of the contract. Any additional or different terms are rejected and will not apply.

2. Definitions

Term	Definition
Admin User	An Authorised User designated to manage the Workspace including invitations, permissions, billing, and plan settings.
Authorised Users	Individuals authorised by the Customer to access the Service under the Customer's Subscription, using unique credentials.
Business Day	Any day that is not a Saturday, Sunday, or public holiday in England and Wales.
Confidential Information	Has the meaning in Section 14.
Customer Data	All data and content submitted to the Service by or on behalf of the Customer or its Authorised Users (including project/task details, hazard/risk assessment inputs, and uploaded materials), excluding Feedback.
Data Protection Legislation	All applicable data protection and privacy laws, including (where applicable) the UK GDPR and the Data Protection Act 2018.
Documentation	User guides, help pages, and other documentation made available by RAMSGen describing the Service.
Effective Date	The date the contract is formed under Section 1.1.
Fees	All fees payable for the Subscription (including any licence/platform access component) and any other charges set out at checkout, in-app, on our pricing page, or in an Order Form.
Feedback	Any feedback, suggestions, or ideas you provide about the Service.
Generated Document / Output	Any draft or finalised RAMS, risk assessment, method statement, or other health and safety documentation generated by the Service using Customer Data.
Generation	Each time you instruct the Service to generate or re-generate Output.
Published RAMS	Output that you mark as "published", "final", "approved", or equivalent within the Service, and/or that is made available by the Service for final PDF export (as distinct from drafts).
RAMS Review	The Service feature that reviews a RAMS or similar document submitted by the Customer and produces findings for review by a competent person. Findings produced by a RAMS Review are treated as Output.
Service	Tarian, the software-as-a-service platform of RAMSGen Ltd, and related services, provided at app.tariansystems.com, together with any updates, features, and Documentation. References to app.ramsgen.com are to the legacy platform, which is being retired; where a customer is still served from it, these Terms apply to that access equally.
Subscription	The Customer's right to access and use the Service under a selected plan during a Subscription Term.
Subscription Term	The initial subscription term and any renewal term(s), as described in Sections 10.3 and 12.1 or an Order Form.
Third-Party Services	Third-party products, services, software, sites, or content that interoperate with or are linked from the Service, including third-party AI services.
Workspace	The Customer's organisation/account within the Service under which Authorised Users access the Service and Customer Data is stored.

3. Eligibility; Business Use

3.1 Business use only

The Service is provided solely for business use. By accepting these Terms, you confirm you are acting in the course of business (including as a sole trader).

3.2 Authority

If you accept these Terms on behalf of an entity, you represent and warrant you have authority to bind that entity.

3.3 Age and capacity

Authorised Users must be at least 18 years old and have legal capacity (or be authorised by the Customer).

4. Workspaces; Authorised Users; Account Security

4.1 Workspace

The Subscription is granted to the Customer and used via the Customer's Workspace.

4.2 Authorised Users; no shared logins

(a) The Customer may permit Authorised Users to access the Service up to any user limits or plan restrictions.

(b) Each Authorised User must use unique credentials. Shared accounts are prohibited.

(c) The Customer is responsible for its Authorised Users' compliance with these Terms and for all activity within the Workspace.

4.3 Admin Users

The Customer must maintain at least one Admin User and is responsible for actions taken by Admin Users.

4.4 Security obligations

The Customer must keep credentials secure, notify us promptly of suspected unauthorised access, and maintain appropriate access controls for its own systems and devices.

5. Licence Grant; Permitted Use; Restrictions

5.1 Licence to use the Service

Subject to payment of Fees and compliance with these Terms, RAMSGen grants the Customer a limited, non-exclusive, non-transferable, non-sublicensable licence during the Subscription Term to access and use the Service for the Customer's internal business purposes.

5.2 Permitted use of Output (Generated Documents)

The Customer may download, store, print, modify, and share Output (including Published RAMS) with its clients, principal contractors, subcontractors, site managers, competent persons, insurers, and regulators where reasonably necessary for project delivery, tendering, and compliance.

5.3 Restrictions

Except as expressly permitted by these Terms, the Customer must not (and must not allow anyone to):

(a) sell, resell, rent, lease, sublicense, or commercialise the Service;

(b) provide the Service to third parties as a service bureau / managed service;

(c) reverse engineer, decompile, disassemble, or attempt to discover source code or underlying algorithms (except to the extent such restriction is prohibited by law);

(d) access the Service to build or support a competing product or service;

(e) circumvent allowance limits or technical restrictions;

(f) use automated means (bots, scrapers) to access the Service without our written consent;

(g) introduce malware or attempt unauthorised access; or

(h) use the Service in violation of applicable law or third-party rights.

6. Usage Allowances

6.1 Plans and allowances

Your plan determines the features enabled and your usage allowance. Each plan carries a stated allowance of Generations per seat per billing period, shown on our pricing page and in the Service. No plan is sold as unlimited. Plan details may also be stated at checkout, in-app, or in an Order Form.

6.2 What counts against the allowance

Unless stated otherwise in your plan description or Order Form:

(a) each time you generate Output, one (1) Generation is drawn from your allowance;

(b) any re-generation (e.g., "regenerate", "try again") is likewise drawn from your allowance; and

(c) on plans that include the RAMS Review feature, each RAMS Review you run also draws on your allowance. During a free trial, RAMS Reviews are instead subject to a separate trial review allowance shown in the Service (Section 6.7).

6.3 Allowance renewal

Your allowance renews at the start of each billing period. Unused allowance does not roll over and expires at the end of the billing period, unless an Order Form expressly states otherwise.

6.4 Reaching your allowance

If you approach your allowance we will tell you in the Service. Once you reach it, further Generations are declined until your allowance renews. You may upgrade to a plan with a higher allowance, or contact us at support@tariansystems.com.

6.5 Usage records; disputes

RAMSGen's usage records will be treated as accurate unless you notify us of an error within 30 days of the relevant record/charge. If we confirm an error, we will correct the records and, where appropriate, restore allowance or apply an account credit.

6.6 Abuse prevention

We may throttle or restrict Generations if we reasonably believe there is abusive, automated, fraudulent, or abnormal usage that threatens the Service, other customers, or our systems.

6.7 Free trial

We may offer a free trial of the Service. Where we do, the following applies and is also stated at the point you sign up:

The trial runs for seven (7) days from the point you provide your payment card details and start the trial.
We take your payment card details at signup and you are not charged during the trial.
At the end of the seventh day the trial converts automatically to a paid subscription at the plan and price you selected when you signed up, and your card is charged. The applicable prices are set out on our pricing page.
You may cancel at any point during the trial and you will not be charged. Cancel from Manage billing in the Service, or by emailing support@tariansystems.com. Cancelling during the trial ends your access at the end of the trial period.
The trial carries its own allowance, which is smaller than a paid plan's and is shown in the Service.
One trial per Workspace. We may decline or withdraw a trial where we reasonably believe it is being used to circumvent paid access.

Where we grant a trial without taking card details (for example, an account we set up for you following an enquiry), that trial runs from the date we set your access up, no charge arises, and no subscription begins unless and until you separately choose a plan and provide payment details.

7. Service; Changes; Beta Features

7.1 Service evolution

We may add, modify, or remove features, and suspend or discontinue parts of the Service. Where reasonably practicable, we will provide notice of material changes that significantly reduce core functionality of the plan you have purchased.

7.2 Beta features

Beta/preview features are provided "as is", may not work correctly, and may be withdrawn at any time.

7.3 System requirements

The Customer is responsible for ensuring it has suitable devices, software, and internet connectivity.

8. Acceptable Use; Customer Responsibilities

8.1 Customer responsibilities

The Customer is responsible for:

(a) the accuracy, legality, and completeness of Customer Data;

(b) ensuring Authorised Users are competent and appropriately trained; and

8.2 The Service is not intended for special category data

The Service is not designed for, and you should not input, special category personal data or criminal offence data (as defined in Data Protection Legislation). If exceptional processing is required, it must be agreed in writing in advance and may require additional safeguards and/or an updated DPA.

8.3 Prohibited content and behaviour

The Customer must not use the Service to:

(a) create documentation known to be false or misleading;

(b) infringe third-party rights;

(d) compromise security or integrity of the Service.

9. Output; Professional Responsibility; AI Features

9.1 Draft documentation only; competent review required

(a) The Service is a software tool intended to assist in producing draft documentation.

(b) Output may be inaccurate, incomplete, unsuitable, or out of date.

(c) The Customer must ensure a competent person reviews, validates, customises, and approves all Output before use or reliance.

(d) The Customer remains solely responsible for health and safety compliance and for the content and use of Generated Documents.

9.2 What the Service checks (authoring)

When authoring, the Service maintains a coverage checklist derived from a curated registry of hazards associated with the entities your document references, and shows the author what is covered, what has been ruled out, and what remains open before publication. The checklist is an aid to the author: it observes, and it does not decide, block, or approve. Section 9.1 applies to all Output.

9.3 RAMS Review

(a) A RAMS Review reports what it found. It is not an assurance that a document is adequate, complete or compliant, and an absence of findings is not a statement that there is nothing to find.

(b) A review reads the submission against the project documents the Customer supplies and against a hazard registry for the type of work. It examines whether the submission meets the requirements of the project documents, whether it addresses the hazards for its scope of work, and whether it is internally consistent between its risk assessment and method statement. Each finding states what it was measured against, and a finding that something is absent is recorded together with what was looked for.

(c) A review does not inspect the site, assess any organisation's competence, or confirm that work will be carried out as described.

(d) A submission is reviewed against the project documents the Customer provides; gaps in those documents narrow what the review can measure.

(e) Where a material part of a review does not complete, the report says so and identifies its findings as standing on a partial reading.

(f) The Customer must ensure a competent person reads the reviewed document and forms their own judgement. A RAMS Review supports that judgement; it does not replace it.

9.4 Allocation of responsibility

(a) RAMSGen is responsible for providing the Service with reasonable skill and care (Section 17.1), including for the Service performing the checks described in this Section 9 and in the Documentation.

(b) The Customer is responsible for: (i) the accuracy and completeness of Customer Data, including the project documents supplied for a RAMS Review; (ii) competent-person review and approval of all Output before use or reliance; and (iii) decisions taken, and work carried out, on the basis of any Output.

(c) Statutory health and safety duties (including the duty to make a suitable and sufficient risk assessment under the Management of Health and Safety at Work Regulations 1999, and duties of competence under the Construction (Design and Management) Regulations 2015) rest with the duty holders and cannot be transferred to RAMSGen by these Terms.

(d) Nothing in this Section 9 excludes or limits RAMSGen's liability for breach of Section 17.1, which remains subject to Section 18.

9.5 AI Features and Third-Party Services

(a) Certain features use Third-Party Services (including AI services) to generate Output ("AI Features").

(b) Where AI Features are used, Customer Data is transmitted to RAMSGen's AI model providers for the purpose of generating Output. RAMSGen calls those providers directly; there is no routing intermediary, aggregator or broker in the path. The providers are named in Annex 3 of the DPA.

(c) RAMSGen's account with OpenAI is configured for zero data retention, so prompts and Output are not retained by that provider after the request is served and are not used to train its models. Supporting document-analysis features run on Google Vertex AI inside RAMSGen's own Google Cloud project on the EU endpoint, where the data is not used to train Google's models. Third-Party Services nevertheless remain outside RAMSGen's direct control; their processing is governed by the DPA, our subprocessor arrangements, and applicable third-party terms.

9.6 No training on Customer Data

RAMSGen does not use Customer Data to train, fine-tune or otherwise improve any AI model, whether RAMSGen's own or a third party's.

10. Fees; Billing; Auto-Renewal; Taxes; Late Payment

10.1 Fees and payment

You must pay all Fees associated with your Subscription and any Top-Ups.

10.2 Payment processing

We use third-party payment processors (including Stripe). Payment processing is subject to the payment processor's terms and policies in addition to these Terms.

10.3 Auto-renewal

Unless you cancel before renewal, your Subscription will automatically renew for successive periods equal to the prior Subscription Term (or as described at checkout or in an Order Form).

10.4 Taxes and VAT

Fees are exclusive of VAT unless stated otherwise. VAT and other applicable taxes will be added where required by law.

10.5 Failed payments

If a payment fails, we may retry your payment method and/or suspend access until payment is resolved.

10.6 Late payment (invoiced customers)

If we invoice you and you pay late, we may charge statutory interest, fixed compensation, and reasonable recovery costs as permitted under the Late Payment of Commercial Debts (Interest) Act 1998.

10.7 Price changes

We may change Fees. For subscriptions, fee changes apply from the next renewal date. We will use reasonable efforts to provide at least 30 days' notice of material fee increases.

11. Suspension

11.1 Suspension events

We may suspend access (in whole or part) if:

(a) Fees are overdue (following notice and a reasonable opportunity to pay);

(b) we reasonably believe the account is compromised or poses a security risk;

(d) we are required to do so to comply with law or a regulator/court order.

11.2 Reinstatement

Where reasonably practicable, we will restore access promptly once the issue is resolved.

12. Term; Cancellation; Termination

12.1 Subscription Term

These Terms commence on the Effective Date and continue until terminated in accordance with these Terms. Subscription access continues for the Subscription Term.

12.2 Cancellation (non-renewal)

You may cancel renewal at any time from Manage billing in the Service, which opens the billing portal operated by our payment processor. Cancellation must be actioned by a Workspace administrator. You may also cancel by contacting support at support@tariansystems.com.

Cancellation takes effect at the end of the current Subscription Term: your access continues until then, and you are not charged again. If you cancel during a free trial before the trial ends, no charge is taken at all (Section 6.7).

Fees already paid are non-refundable except as required by law or expressly stated in an Order Form.

12.3 Termination for cause

Either party may terminate these Terms immediately by written notice if the other party:

(a) commits a material breach that is not capable of remedy; or

(b) commits a material breach capable of remedy and fails to remedy it within 14 days after written notice requiring remedy.

12.4 Termination for non-payment

We may terminate if Fees are overdue and remain unpaid 14 days after notice.

12.5 Effect of termination

On termination/expiry:

(a) the Customer's right to access and use the Service ends (subject to any export window in Section 13); and

(b) all outstanding Fees become immediately due.

13. Data Export; Retention; Deletion

13.1 Export during the Subscription Term

During the Subscription Term, you may export Published RAMS as PDFs via the Service (as available). The Service does not guarantee export of underlying draft data, prompt history, or non-published drafts.

13.2 Post-termination export window

Following termination/expiry, we will make Published RAMS PDF exports available for download for 30 days, unless:

(a) we are legally prohibited from doing so; or

(b) access was terminated due to unlawful use, security abuse, or fraud where continued access would pose material risk.

13.3 Deletion of personal data (30 days)

Subject to Section 13.4 and the DPA, we will delete (or anonymise) personal data within Customer Data within 30 days after termination/expiry, except to the extent:

(a) retention is required by law; or

(b) personal data is contained within Published RAMS retained under Section 13.4; or

13.3A Backups

Customer Data may be retained in backups and deleted in accordance with our backup cycles, typically within 90 days.

13.4 Retention of Published RAMS (5 years)

We may retain Published RAMS (and associated metadata) for 5 years after termination/expiry for legitimate business purposes such as compliance, audit trails, record-keeping, and establishing, exercising, or defending legal claims. Published RAMS may contain personal data; where they do, that personal data will be retained for the same period.

13.5 No obligation after the export window

RAMSGen has no obligation to retain, provide, or make available any Customer Data, Published RAMS, or other exports after the 30-day export window has expired. The Customer acknowledges that it is solely responsible for downloading and retaining copies of its data during the export window. We may, at our sole discretion, provide copies upon written request (subject to identity/authority checks and a reasonable administration fee), but we are under no obligation to do so.

14. Confidentiality

14.1 Confidential Information

"Confidential Information" means any non-public information disclosed by or on behalf of a party that is identified as confidential or ought reasonably to be understood as confidential, including the Service's non-public features, pricing (including discounts), security measures, and Customer Data.

14.2 Obligations

The receiving party must keep Confidential Information confidential, use it only to perform obligations/exercise rights under the contract, and restrict access to those who need to know and are bound by confidentiality obligations.

14.3 Compelled disclosure

The receiving party may disclose Confidential Information to the extent required by law or competent authority, provided it gives prior notice where lawful and cooperates to limit scope.

14.4 Duration

Confidentiality obligations apply during the Subscription Term and for 3 years after termination, except trade secrets which remain protected while they remain trade secrets.

15. Data Protection

15.1 DPA incorporated

The RAMSGen Data Processing Addendum published at tariansystems.com/dpa is incorporated into and forms part of these Terms. Changes to the DPA are governed by Section 21 and, for subprocessor changes, by the DPA itself.

15.2 Privacy policy/notice

RAMSGen's privacy policy/notice (as published on our website) describes how we handle personal data where RAMSGen acts as a controller (for example, account administration and marketing). Where RAMSGen processes personal data on behalf of the Customer, the DPA applies.

16. Intellectual Property; Customer Data; Output Rights

16.1 RAMSGen IP

RAMSGen (and its licensors) own all Intellectual Property Rights in the Service, Documentation, templates, software, and all improvements and derivatives. No rights are granted except as expressly stated.

16.2 Customer Data

The Customer owns (or controls) all rights in Customer Data. The Customer grants RAMSGen a limited licence to process Customer Data solely to provide, maintain, support, and secure the Service and comply with legal obligations (and as otherwise set out in the DPA).

16.3 Output

As between the parties, the Customer owns the Output it generates, subject to RAMSGen's underlying rights in the Service and templates. To the extent RAMSGen template elements are embedded in Output, RAMSGen grants the Customer a perpetual, worldwide, royalty-free licence to use, reproduce, modify, and share that Output in accordance with Section 5.2.

16.4 Anonymised and aggregated analytics

We may use anonymised and aggregated data derived from use of the Service for product improvement, analytics, and business operations, provided it does not identify the Customer or any individual.

16.5 Feedback

The Customer grants RAMSGen a perpetual, irrevocable, worldwide, royalty-free licence to use and incorporate Feedback without restriction or compensation.

17. Warranties; Disclaimers

17.1 Limited service warranty

We will provide the Service with reasonable skill and care.

17.2 Disclaimers (B2B)

Except as expressly stated and to the maximum extent permitted by law:

(a) the Service is provided on an "as available" basis;

(b) we do not warrant uninterrupted or error-free operation;

(d) we do not provide professional health and safety advice.

17.3 Third-Party Services

Third-Party Services are subject to their own terms. We are not responsible for Third-Party Services and do not warrant their availability, performance, or content.

18. Limitation of Liability

18.1 Non-excludable liabilities

Nothing in these Terms limits or excludes liability for:

(a) death or personal injury caused by negligence;

(b) fraud or fraudulent misrepresentation; or

18.2 Excluded losses

Subject to Section 18.1, RAMSGen will not be liable for indirect or consequential loss, or for loss of profit, revenue, business opportunity, anticipated savings, goodwill, or reputation.

18.3 Liability cap

Subject to Section 18.1, RAMSGen's total aggregate liability arising out of or in connection with the Service and these Terms (whether in contract, tort (including negligence) or otherwise) will not exceed the total Fees paid or payable by the Customer in the 12 months preceding the event giving rise to the claim.

18.4 Allocation of risk

The Customer acknowledges that the Service generates draft documentation and the Customer remains responsible for competent review and compliance, and that Fees reflect the allocation of risk in these Terms.

19. Indemnities

19.1 Customer indemnity

The Customer will indemnify RAMSGen against losses, damages, liabilities, costs, and expenses (including reasonable legal fees) arising from third-party claims relating to:

(a) Customer Data (including that it infringes third-party rights or is unlawful);

(b) the Customer's or Authorised Users' misuse of the Service or breach of these Terms; or

19.2 RAMSGen IP infringement indemnity (UK only)

RAMSGen will indemnify the Customer against losses finally awarded by a court (or agreed in a settlement approved by RAMSGen) arising from a third-party claim that the Customer's use of the Service in accordance with these Terms infringes that third party's UK Intellectual Property Rights.

19.3 Exclusions

RAMSGen has no liability under Section 19.2 to the extent a claim arises from:

(a) Customer Data or third-party content;

(b) use of the Service other than in accordance with these Terms;

(d) combination with items not provided by RAMSGen.

19.4 Process

The indemnified party must promptly notify the indemnifying party, allow control of defence/settlement, and provide reasonable cooperation. The indemnifying party may not settle in a way that admits liability on behalf of the indemnified party without consent (not to be unreasonably withheld).

20. Third-Party Services

20.1 Integrations

The Service may integrate with or rely on Third-Party Services. Your use of Third-Party Services is subject to their terms.

20.2 No endorsement

We do not endorse and are not responsible for Third-Party Services.

21. Changes to These Terms

21.1 Updates

We may update these Terms from time to time.

21.2 When changes take effect

(a) Changes will normally take effect on renewal of the Subscription.

(b) If we must change these Terms mid-term for legal, security, or operational reasons, we will provide notice and changes will take effect on the date stated in the notice.

(c) If a change is materially adverse to the Customer and is made mid-term (and not required by law), the Customer may terminate the affected Subscription by written notice within 30 days of notice of the change, and we will refund any prepaid Fees for the unused portion of the then-current Subscription Term (if applicable).

22. Notices

22.1 Notices to RAMSGen

Notices must be sent to: support@tariansystems.com (or such other address we notify).

22.2 Notices to Customer

We may send notices by email to the account email address, via in-app notice, or by posting notice on the Service.

23. Assignment; Subcontracting

23.1 Customer assignment

The Customer may not assign or transfer these Terms without RAMSGen's prior written consent.

23.2 RAMSGen assignment

RAMSGen may assign these Terms (including to an affiliate or in connection with a merger, acquisition, or sale of assets).

23.3 Subcontracting

RAMSGen may subcontract performance, including to subprocessors, provided RAMSGen remains responsible for its obligations subject to these Terms and the DPA.

24. Compliance; Anti-Bribery; Sanctions

24.1 Compliance

Each party will comply with applicable laws in connection with these Terms.

24.2 Anti-bribery

The Customer must not engage in any activity that would put RAMSGen in breach of the Bribery Act 2010.

24.3 Sanctions and export controls

The Customer must not use the Service in violation of applicable sanctions or export control laws.

25. Force Majeure

Neither party will be liable for failure or delay caused by events beyond its reasonable control. If such an event continues for more than 30 days, either party may terminate on written notice.

26. General

26.1 Entire agreement

These Terms (including any Order Form and the DPA) constitute the entire agreement and supersede prior discussions and representations relating to the Service.

26.2 Severability

If any provision is held invalid or unenforceable, it will be modified to the minimum extent necessary to make it enforceable and the remainder will continue in effect.

26.3 Waiver

A waiver is effective only if in writing.

26.4 Relationship

Nothing in these Terms creates a partnership, joint venture, or agency relationship.

26.5 English language

These Terms are written in English. Any translation is for convenience only.

27. Governing Law and Jurisdiction

These Terms and any dispute or claim arising out of or in connection with them are governed by the laws of England and Wales. The courts of England and Wales have exclusive jurisdiction.

Schedules

Schedule 1: Support (Targets Only)

1. Support channels

Support is provided via email and/or in-app support (if available): support@tariansystems.com.

2. Support standard

We aim to respond to support enquiries within 2 Business Days. This is a target, not a guarantee.

3. Exclusions

Support does not include professional health & safety consultancy or approval of Generated Documents.

Schedule 2: Security Measures (Baseline)

RAMSGen will implement appropriate technical and organisational measures designed to protect Customer Data, which may include:

Access controls (least privilege; MFA for administrative access where available);
Encryption in transit (TLS) and encryption at rest for core storage where supported;
Secure development and change control practices;
Logging and monitoring for anomalous activity;
Backups and resilience (subject to technical feasibility);
Incident response processes; and
Contractual security requirements for subprocessors.

Schedule 3: Subprocessors

RAMSGen may use subprocessors to provide the Service. The authoritative list of key subprocessors is maintained in Annex 3 of the Data Processing Addendum (DPA).

The DPA sets out the notice and objection mechanism for subprocessor changes in accordance with Article 28 UK GDPR.

Schedule 4: AI Feature Terms (Additional)

1. AI Outputs are probabilistic

AI-generated Output may include errors or omissions.

2. Zero retention configuration

RAMSGen calls its AI model providers directly; there is no routing intermediary in the path. RAMSGen's account with OpenAI is configured for zero data retention, so prompts and outputs are not stored by that provider beyond what is necessary to serve the response, and are not used to train its models. Supporting document-analysis features run on Google Vertex AI inside RAMSGen's own Google Cloud project on the EU endpoint, where the data is not used to train Google's models. Third-Party Services nevertheless remain outside RAMSGen's direct control. The providers are named in Annex 3 of the DPA.

3. No training on Customer Data

RAMSGen does not use Customer Data to train, fine-tune or otherwise improve any AI model, whether RAMSGen's own or a third party's.

4. Customer responsibilities

The Customer must ensure a competent person reviews Output before any operational use, sharing, or reliance.

5. Restricted inputs

The Customer should not include special category data, criminal offence data, or confidential third-party information the Customer is not authorised to share.

6. RAMS Review

A RAMS Review is subject to Section 9.3 of the Terms: it reports what it found, an absence of findings is not a statement that there is nothing to find, and a competent person must form their own judgement on the reviewed document.

END OF TERMS