Terms of Service

Effective date: March 14, 2026 · Last updated: March 14, 2026

1. Introduction & Acceptance

These Terms of Service ("Terms") constitute a legally binding agreement between you and Lambda Cognition Ltd ("Lambda Cognition", "we", "us", or "our") governing your access to and use of the DoraLytics platform and related services (the "Service").

By accessing or using the Service, you confirm that:

• You are at least 18 years of age;
• You have the legal authority to bind the organisation on whose behalf you are accessing the Service;
• You have read, understood, and agree to be bound by these Terms and our Privacy Policy.

If you do not agree to these Terms, you must not access or use the Service.

2. Definitions

In these Terms, the following definitions apply:

• "Service" means the DoraLytics cloud-based platform, including all features, tools, APIs, and related documentation provided by Lambda Cognition.
• "Customer" means the organisation that enters into a Subscription to use the Service.
• "User" means any individual who accesses the Service on behalf of a Customer.
• "Customer Data" means all data, files, documents, and information uploaded, submitted, or stored by the Customer or its Users within the Service.
• "Subscription" means the agreement between a Customer and Lambda Cognition for access to the Service under a specific plan and term.
• "Documentation" means the user guides, API documentation, help articles, and other instructional materials made available by Lambda Cognition in connection with the Service.

3. Service Description

DoraLytics is a cloud-based DORA (Digital Operational Resilience Act) compliance management platform designed for EU financial entities and their ICT service providers. The Service includes:

• Compliance dashboard with real-time status tracking
• ICT risk assessment and risk matrix tools
• Register of Information management
• ICT third-party service provider mapping and classification
• Incident tracking and reporting
• Digital resilience testing coordination
• Board-level governance reporting
• Document management and audit trail
• Compliance artefact generation

The Service is a compliance management tool and does not constitute legal, regulatory, or financial advice. Customers remain solely responsible for their own regulatory compliance.

4. Account Registration

To use the Service, the Customer must register an account and designate at least one administrator. When registering, you agree to:

• Provide accurate, complete, and current registration information;
• Maintain and update your information to keep it accurate;
• Keep account credentials secure and confidential;
• Accept responsibility for all activity that occurs under your account;
• Notify Lambda Cognition immediately at support@doralytics.org upon becoming aware of any unauthorised access to or use of your account.

Lambda Cognition reserves the right to suspend or terminate accounts that contain inaccurate information or that we reasonably believe have been compromised.

5. Subscription & Billing

5.1 Plans and Pricing

The Service is offered on a subscription basis with monthly or annual billing cycles. All prices are quoted in Euros (EUR) and are exclusive of applicable taxes unless stated otherwise.

5.2 Free Trial

Lambda Cognition may offer a free trial period at its discretion. At the end of the trial, the Customer must subscribe to a paid plan to continue using the Service. Any Customer Data created during the trial will be retained for 30 days after trial expiry, after which it may be deleted.

5.3 Auto-Renewal

Subscriptions automatically renew at the end of each billing cycle unless the Customer provides written notice of cancellation at least 30 days before the renewal date.

5.4 Price Changes

Lambda Cognition may adjust pricing with at least 30 days' advance written notice. Price changes take effect at the start of the next billing cycle following the notice period.

5.5 Refunds

All fees are non-refundable once paid, except where required by applicable law or at Lambda Cognition's sole discretion.

6. License Grant

Subject to these Terms and payment of applicable fees, Lambda Cognition grants the Customer a non-exclusive, non-transferable, non-sublicensable, revocable right to access and use the Service during the Subscription term, solely for the Customer's internal business purposes in connection with DORA compliance management.

This licence does not convey any ownership interest in the Service. All rights not expressly granted herein are reserved by Lambda Cognition.

7. Acceptable Use

You agree not to, and will ensure that your Users do not:

• Reverse engineer, decompile, disassemble, or otherwise attempt to derive the source code of the Service;
• Use the Service to develop or operate a product or service that competes with DoraLytics;
• Share, transfer, or disclose account credentials to unauthorised parties;
• Upload or transmit any malicious code, viruses, or harmful content;
• Use the Service in violation of any applicable law, regulation, or third-party rights;
• Exceed the usage limits associated with your Subscription plan;
• Attempt to access, probe, or test the vulnerability of other customers' accounts or data;
• Use automated means (bots, scrapers, crawlers) to access the Service except through approved APIs;
• Resell, redistribute, or provide access to the Service to third parties without prior written consent.

Lambda Cognition reserves the right to suspend access immediately if it reasonably determines that a Customer or User has violated this Section.

8. Customer Data

8.1 Ownership

The Customer retains all right, title, and interest in and to its Customer Data. Nothing in these Terms transfers ownership of Customer Data to Lambda Cognition.

8.2 Licence to Process

The Customer grants Lambda Cognition a limited, non-exclusive licence to process Customer Data solely for the purposes of providing, maintaining, and improving the Service, and as otherwise instructed by the Customer.

8.3 Access Restrictions

Lambda Cognition will not access Customer Data except as necessary for: (a) service delivery and operational support; (b) responding to Customer support requests; (c) complying with applicable law or a valid legal order. We will notify the Customer before accessing their data for support purposes where practicable.

8.4 Data Processing Agreement

Where Customer Data includes personal data, the processing is governed by our Data Processing Agreement (DPA), which forms an integral part of these Terms.

8.5 Customer Responsibilities

The Customer is solely responsible for the accuracy, quality, and lawfulness of Customer Data and the means by which it is collected and uploaded to the Service.

9. Intellectual Property

9.1 Lambda Cognition IP

Lambda Cognition and its licensors own all intellectual property rights in and to the Service, including but not limited to the software, algorithms, user interface designs, documentation, branding, trademarks, and all improvements, modifications, and derivative works thereof.

9.2 Customer IP

The Customer retains all intellectual property rights in its Customer Data. Except for the limited licence granted in Section 8.2, nothing in these Terms grants Lambda Cognition any rights to Customer IP.

9.3 Feedback

If the Customer or its Users provide suggestions, ideas, or feedback regarding the Service ("Feedback"), Lambda Cognition may freely use, incorporate, and commercialise such Feedback without obligation or compensation to the Customer.

10. Service Availability

10.1 Uptime Target

Lambda Cognition targets 99.5% uptime for the Service, measured monthly, excluding scheduled maintenance windows.

10.2 Scheduled Maintenance

We will endeavour to provide at least 48 hours' notice for scheduled maintenance. Where possible, maintenance will be performed during off-peak hours (weekends or evenings CET).

10.3 Exclusions

Lambda Cognition is not liable for downtime or performance issues caused by:

• Force majeure events (see Section 20);
• Failures of third-party services, internet connectivity, or infrastructure outside our control;
• Customer equipment, networks, or software;
• Customer actions that violate these Terms or the Documentation.

11. Support

Lambda Cognition provides technical support via email during business hours (Monday to Friday, 09:00–17:00 CET, excluding public holidays in England and Finland).

Support requests should be directed to support@doralytics.org or through the in-app support feature.

12. Confidentiality

Each party ("Receiving Party") agrees to hold in confidence all non-public information disclosed by the other party ("Disclosing Party") that is designated as confidential or that a reasonable person would understand to be confidential ("Confidential Information").

Confidential Information does not include information that:

• Is or becomes publicly available through no fault of the Receiving Party;
• Was already known to the Receiving Party prior to disclosure;
• Is independently developed by the Receiving Party without reference to the Confidential Information;
• Is lawfully obtained from a third party without restriction on disclosure.

The Receiving Party may disclose Confidential Information if required by law, provided it gives the Disclosing Party reasonable prior notice where legally permitted.

13. Warranties & Disclaimers

13.1 Lambda Cognition Warranty

Lambda Cognition warrants that the Service will substantially conform to the Documentation and will be provided in a professional and workmanlike manner consistent with generally accepted industry standards.

13.2 Disclaimers

To the maximum extent permitted by applicable law:

• The Service is provided "as is" and "as available" without warranties of any kind beyond those expressly stated in Section 13.1;
• Lambda Cognition does not warrant that the Service will be error-free, uninterrupted, or free from security vulnerabilities;
• Lambda Cognition makes no warranty regarding regulatory compliance outcomes. DoraLytics is a compliance management tool - it does not guarantee that the Customer will achieve or maintain compliance with DORA or any other regulation;
• Lambda Cognition disclaims all implied warranties, including warranties of merchantability, fitness for a particular purpose, and non-infringement, to the extent permitted by law.

14. Limitation of Liability

14.1 Liability Cap

To the maximum extent permitted by applicable law, Lambda Cognition's total aggregate liability arising out of or in connection with these Terms or the Service shall not exceed the total fees paid by the Customer to Lambda Cognition during the 12-month period immediately preceding the event giving rise to the claim.

14.2 Exclusion of Damages

In no event shall Lambda Cognition be liable for any:

• Indirect, incidental, special, consequential, or punitive damages;
• Loss of profits, revenue, or business opportunities;
• Loss of data or data corruption;
• Business interruption or loss of goodwill;
• Cost of procurement of substitute services.

These limitations apply regardless of the legal theory (contract, tort, strict liability, or otherwise), even if Lambda Cognition has been advised of the possibility of such damages.

14.3 Applicable Law

Nothing in these Terms excludes or limits liability for: (a) death or personal injury caused by negligence; (b) fraud or fraudulent misrepresentation; or (c) any other liability that cannot be excluded or limited under applicable law.

15. Indemnification

The Customer agrees to indemnify, defend, and hold harmless Lambda Cognition, its officers, directors, employees, and agents from and against any claims, damages, losses, liabilities, costs, and expenses (including reasonable legal fees) arising out of or related to:

• The Customer's or its Users' use of the Service in violation of these Terms;
• Customer Data, including any claim that Customer Data infringes or violates the rights of a third party;
• The Customer's violation of any applicable law or regulation.

16. Term & Termination

16.1 Term

These Terms are effective from the date the Customer first accesses the Service and remain in effect until the Subscription is terminated in accordance with this Section.

16.2 Termination for Breach

Either party may terminate the Subscription by providing 30 days' written notice if the other party commits a material breach of these Terms and fails to cure such breach within the notice period.

16.3 Termination for Non-Payment

Lambda Cognition may terminate the Subscription immediately if the Customer fails to pay any outstanding fees within 15 days of the due date, provided Lambda Cognition has given written notice of the overdue payment.

16.4 Effect of Termination

Upon termination:

• All access to the Service is revoked;
• Customer Data remains available for export for 30 days following termination (see Section 17);
• After the 30-day export window, Lambda Cognition will delete all Customer Data from its systems, including backups, within a further 30 days;
• Sections 8 (Customer Data ownership), 9 (IP), 12 (Confidentiality), 13 (Disclaimers), 14 (Limitation of Liability), 15 (Indemnification), 18 (Governing Law), and 20 (General Provisions) survive termination.

17. Data Export

The Customer may export its Customer Data at any time during the Subscription term via the Service's built-in export functionality. Exported data is provided in standard, machine-readable formats (CSV, JSON, or PDF as applicable).

Following termination of the Subscription, the Customer has a 30-day window to retrieve its Customer Data. During this period, the Customer may request a data export by contacting support@doralytics.org. After the 30-day window, Lambda Cognition has no obligation to retain Customer Data.

18. Governing Law & Disputes

18.1 Governing Law

These Terms and any disputes arising out of or in connection with them shall be governed by and construed in accordance with the laws of England and Wales, without regard to conflict of law principles.

18.2 Jurisdiction

The courts of London, England shall have exclusive jurisdiction over any dispute arising out of or relating to these Terms.

18.3 Dispute Resolution

Before commencing any legal proceedings, the parties agree to attempt to resolve disputes through good-faith negotiation for a period of 30 days from the date one party notifies the other in writing of the dispute.

19. Changes to Terms

Lambda Cognition may modify these Terms at any time. We will provide at least 30 days' notice of material changes by email to the Customer's registered email address and by posting the updated Terms on our website.

Continued use of the Service after the effective date of the revised Terms constitutes acceptance of the changes. If the Customer does not agree to the revised Terms, it must discontinue use and terminate its Subscription before the changes take effect.

20. General Provisions

20.1 Entire Agreement

These Terms, together with the Privacy Policy and DPA, constitute the entire agreement between the parties with respect to the Service and supersede all prior or contemporaneous agreements, proposals, or representations, whether written or oral.

20.2 Severability

If any provision of these Terms is found to be invalid or unenforceable, that provision will be modified to the minimum extent necessary to make it enforceable, and the remaining provisions will continue in full force and effect.

20.3 Waiver

No failure or delay by either party in exercising any right under these Terms shall constitute a waiver of that right. A waiver of any right is only effective if it is in writing and signed by the waiving party.

20.4 Assignment

The Customer may not assign or transfer these Terms or any rights hereunder without the prior written consent of Lambda Cognition. Lambda Cognition may assign these Terms in connection with a merger, acquisition, or sale of all or substantially all of its assets.

20.5 Force Majeure

Neither party shall be liable for any failure or delay in performance caused by events beyond its reasonable control, including but not limited to natural disasters, acts of war or terrorism, pandemics, labour disputes, government actions, power failures, or internet outages.

20.6 Notices

All notices under these Terms must be in writing and sent to the addresses provided during registration (for the Customer) or to the address in Section 21 (for Lambda Cognition). Email is an acceptable form of written notice.

21. Contact

For questions about these Terms, please contact us:

Lambda Cognition Ltd
71-75 Shelton Street, Covent Garden
London WC2H 9JQ, United Kingdom
Email: support@doralytics.org