Terms of Service

These terms govern the relationship between you (“Customer”) and Quirky Swirl B.V. (trading as Metric Provenance), registered in The Hague, Netherlands (KVK: 94504474) (“Provider”, “we”, “us”).

The Metric Provenance platform provides regulatory intelligence as a service, including:

• Access to curated sovereign definition databases (“Validation Packs”) containing machine-readable regulation text, governance metrics, enforcement rules, and data quality dimensions
• The Interceptor API for real-time compliance checking
• Interactive governance graph visualization
• AI-powered Exposure Analyzer and Governance Advisor
• Downloadable Validation Pack bundles for local integration

The service provides cryptographic indemnification of execution, not legal advice. Always consult qualified legal counsel for compliance decisions.

• Validation Pack License: €4,900 flat fee per year, billed annually per Validation Pack. Full Interceptor API access, Enforcement Bridges, and Cryptographic S-Cert Registry access.

All plans include full access. There are no artificial API call limits, report caps, or usage restrictions. All prices are exclusive of VAT. EU businesses with a valid VAT number may apply reverse charge.

• Payments are processed by Stripe. By subscribing, you agree to Stripe's Terms of Service.
• Subscriptions are billed monthly or annually (as selected at checkout).
• Digital Goods Waiver: By purchasing and immediately downloading a Validation Pack bundle (digital content), you give explicit prior consent to begin the performance of the contract before the withdrawal period expires. You explicitly acknowledge that you thereby lose your 14-day right of withdrawal under EU Consumer Rights Directive (2011/83/EU). All sales are final and non-refundable.
• Monthly subscriptions for ongoing API access can be cancelled at any time; access continues until the end of the billing period.

• Upon successful payment, you receive an API key for programmatic access and a downloadable Validation Pack bundle.
• Your API key is confidential. Do not share it publicly or embed it in client-side code.
• We reserve the right to rate-limit or suspend keys that show abusive patterns (e.g. automated scraping, redistribution).

• The Open Data Governance Standard (ODGS) protocol specification is available under Apache 2.0 (open source).
• Validation Pack content (sovereign definitions, curated cross-references, semantic bindings, enforcement rules) is proprietary and licensed, not sold.
• Traceability: Each downloaded Validation Pack contains cryptographic watermarks tying it to your account to prevent unauthorized redistribution.
• You may use Validation Pack data for internal compliance purposes within your organisation. Redistribution, resale, or sub-licensing of Validation Pack content will result in immediate termination and a €10,000 liquidated damages claim per incident.
• Database Rights: While EU regulation text itself is public domain (Article 1 of Directive 2019/1024), we assert EU Database Directive (96/9/EC) Sui Generis protection over our structured mapping, cross-referencing, semantic binding, and machine-readable enforcement rules as a curated database.

See our Privacy Policy for details on how we process your data. We act as processor for Interceptor API request data and controller for account/billing data.

• Single Pack: Best-effort availability, email support (48h response).
• All Packs: 99.5% uptime target, priority support (24h response).
• Strategic: Custom SLA as agreed in writing.

To the maximum extent permitted by Dutch law (Book 6, Article 74-109 BW):

• Our total liability is limited to the fees paid in the 12 months preceding the claim.
• We are not liable for indirect, consequential, or punitive damages.
• The service provides compliance intelligence, not legal advice. We are not liable for regulatory penalties incurred by the Customer.

• Either party may terminate with 30 days written notice.
• We may terminate immediately for: non-payment, violation of these terms, or abusive usage.
• Upon termination, API access is revoked. You may export your data within 30 days.
• There are no exit fees or lock-in penalties.

These terms are governed by Dutch law. Any disputes shall be resolved by the competent court in The Hague, Netherlands.

We may update these terms with 30 days notice via email. Continued use after the notice period constitutes acceptance. Material changes (pricing, scope reductions) require explicit acknowledgement.

We believe compliance infrastructure should be transparent and fair:

• No artificial usage limits — every licence includes full access.
• No lock-in — cancel anytime, export your data.
• No hidden fees — what you see on our pricing page is what you pay.
• The underlying protocol is open source (Apache 2.0) — you are never dependent on us alone.