SENTINATE AISENTINATE AIThis agreement is between the company identified in your acceptance record ("you") and Sentinate AI Services Ltd, Cyprus registration HE 499373 ("Sentinate", "we" or "us"). The person accepting confirms they are authorised to bind that company. Your acceptance record identifies the proposed agents and signatory. This form does not state a price or place an order. We will agree the price, currency, any setup charge, scope and start date with you in a separate written order before a paid service begins. That order becomes part of this agreement when both parties accept it. No agent is provisioned merely because this form was submitted.
We provide the server environment and configured agent service described in an accepted order. The order states the server resources, management scope and agent scope. The service depends on third-party models, subscriptions, APIs, networks and software, which may have their own terms, limits and availability. We do not sell, sublicense or guarantee access to Anthropic or any other provider's service. You must maintain and pay for any provider account or licence that an accepted order says you will supply.
For Claude Code work on the server environment we lease to you, you contract directly with Anthropic for your own account or plan, including Ultra if that is the plan you choose. You sign in yourself and keep your credentials under your control. We provide the server environment; we do not resell, proxy or provide access to your Claude Code subscription to other customers or end users. You must use your account only as Anthropic's current terms permit. A consumer Ultra subscription does not by itself authorise unattended or automated access by an agent, or shared or proxied access. If a proposed workflow needs an Anthropic API key, another permitted commercial entitlement or Anthropic's express permission, that route must be in place before the workflow is enabled. Neither this agreement nor your login grants an exception to Anthropic's terms. If an allowed route is unavailable, the affected workflow may remain disabled.
Each accepted service order runs month to month. Each paid month renews for one further month unless either party gives notice before the next renewal date. There is no fixed initial term and no early-termination charge. Charges already accrued remain payable. Any setup charge recorded in the order is due when invoiced and is not refundable except where law requires otherwise. Unless the order says otherwise, monthly service fees are payable in advance and provider charges you incur under your own account are separate.
We may change the price for a future monthly period on at least seven calendar days' email notice, including where a provider changes its prices, limits, terms or the cost of providing the service. The notice will state the new price and effective renewal date. A change does not apply to a period already invoiced. You may prevent renewal at the new price by ending the service before that renewal date. Continuing into that period accepts the new price. We may suspend service for an undisputed overdue invoice after notice, and may suspend immediately where continued operation creates a legal, security or provider-policy risk. Suspension does not waive accrued fees.
You and everyone you permit to use an agent must comply with applicable law and each provider's current terms and usage policy. Anthropic calls its Acceptable Use Policy the "Usage Policy"; read its current text. You must also follow the Anthropic terms that govern your chosen account or API. You must review policy changes and ensure that agent instructions, connected tools, end-user messages and resulting actions comply. This includes the policy's conditions for high-risk uses, human review and AI disclosure where applicable.
You must screen and control requests before you or your users submit them to Sentinate's API or agents, and promptly stop and report suspected misuse. You are responsible for the authority to access connected systems, for the legality of data and instructions you provide, and for actions you approve or permit. We may apply our own automated or human checks, reject a request, disable a tool, or pause an agent where we reasonably identify a legal, security or provider-policy concern. Our checks are a supplementary control, not a guarantee that every harmful request will be caught or that a provider will not restrict an account. We will not deliberately bypass a provider's safeguards or represent a consumer subscription as commercial API access.
Your provider account, its eligibility, billing, limits, warnings, appeals and any suspension or ban remain your responsibility. If your account is limited or banned because of your use, instructions, users, credentials or failure to maintain a permitted plan, the affected service may be interrupted. We may offer reasonable practical help at our discretion, but cannot reverse a provider decision or promise uninterrupted service, a replacement account or a refund of accrued Sentinate fees. This allocation does not excuse Sentinate for its own breach or liability that cannot lawfully be excluded.
AI output may be inaccurate, incomplete or unsuitable. You must review it and make your own decisions before relying on it or allowing it to affect another person or system. Where law or a provider policy requires qualified human review or disclosure of AI use, you must supply it. We do not provide regulated legal, medical, financial or other professional advice through the service.
You retain rights you have in your inputs and business data. To the extent we have rights in output made for you, you may use it for your business, subject to the provider terms and third-party rights. Sentinate retains its platform, software, methods, templates and pre-existing intellectual property. You grant us a licence to process your content only as needed to provide, secure and administer the service and meet legal duties. We do not acquire ownership of your business data or a perpetual licence to use it for unrelated product development.
For onboarding and billing contact data that we collect in our own right, Sentinate is the controller; our onboarding privacy notice is available before you submit the form. For personal data you place in the agent service, you are the controller and Sentinate is the processor to the extent the GDPR applies. This section is the Article 28 processing agreement. The processing lasts for the service term and a reasonable return/deletion period. Its subject is operation of your agents; its nature is receipt, storage, retrieval, generation and transmission of data on your instructions; its purpose is to perform the service. Data subjects may include your staff, clients, suppliers and other people whose data you provide; data types may include identity, contact, communications, documents and workflow records. You determine what data and purposes you authorise.
We will process that data only on your documented instructions, including instructions about transfers, unless EU or Member State law requires otherwise; we will tell you of such a requirement beforehand unless law prohibits notice. We will tell you if we believe an instruction infringes applicable data-protection law. We will ensure authorised personnel are bound to confidentiality, implement appropriate Article 32 security measures, and notify you without undue delay after becoming aware of a personal-data breach affecting your data. We will provide information reasonably needed for your regulatory and data-subject duties under Articles 32 to 36 and, where possible, assist with requests to exercise data-subject rights.
You give general authorisation for the sub-processors identified in a written list we provide before your agent service starts. We will give advance notice of intended additions or replacements and an opportunity to object; we will impose equivalent data-protection obligations on them and remain responsible for their performance under Article 28. For transfers outside the EEA we will use an applicable adequacy decision or a valid Chapter V safeguard, such as standard contractual clauses with supplementary measures where required. We will make information needed to demonstrate Article 28 compliance available and permit and contribute to audits as the GDPR requires, subject to reasonable confidentiality and security arrangements. At your choice at the end of the service we will return or delete your personal data and copies, unless law requires storage. Nothing in this agreement reduces mandatory GDPR rights or duties.
To the fullest extent permitted by applicable law, the service, third-party access and AI output are provided without a promise of continuous availability, error-free operation, fitness for a particular purpose, a particular result, or freedom from provider limits or enforcement. Any obligation to use reasonable care that applicable law imposes remains. We do not assume responsibility for third-party service decisions, your account status, your instructions, or decisions you make from agent output, except to the extent our own breach or misconduct legally makes us responsible.
To the fullest extent permitted by law, neither party is liable to the other for indirect or consequential loss, lost profits, lost opportunity or reputational loss. Sentinate's aggregate liability arising from this agreement is limited to the Sentinate service fees paid or payable for the three months immediately before the event giving rise to the claim. This cap applies across contract, tort and other claims to the extent law permits. It does not limit liability that cannot lawfully be limited, including liability for fraud or deliberate misconduct. Nothing here restricts a person's statutory data-protection rights or a regulator's powers.
You will indemnify us against third-party claims and reasonable resulting costs to the extent caused by your unlawful data or instructions, unauthorised access, breach of the acceptable-use obligations, or misuse of a provider account, except to the extent caused by our own breach or misconduct. We do not give a separate intellectual-property, provider-continuity or account-restoration indemnity.
Either party may end the service for the next monthly renewal by email notice. Either may end it sooner for the other's material breach if that breach is not remedied within a reasonable period stated in a written notice, or immediately where continued service would be unlawful or prohibited by a provider. Accrued fees and duties that by nature survive termination remain. We will handle personal data at termination under section 5 and applicable law; any other export work is subject to the service scope and applicable fees.
We may change technical components and providers, provided we continue to meet applicable law and the data-processing duties above. We may update these terms on notice for a future monthly period; you may end the service before the update takes effect. No change applies retrospectively. A court's finding that one term is invalid does not invalidate the rest. Neither party is responsible for delay caused by events outside its reasonable control, to the extent the law permits.
Notices to Sentinate go to admin@polymorphic.group, its designated operations mailbox for this service, and notices to you go to the email in your acceptance record until updated. Cyprus law governs this commercial agreement, subject to mandatory law, and the courts of Cyprus have jurisdiction. The GDPR applies where its scope is met regardless of the commercial choice of law. Nothing in these terms creates an agency or partnership between you and Sentinate or changes your direct contract with a model provider.