1. Acceptance of these terms
These terms of use (the ‘Terms’) govern access to and use of the website qodiqa.com (the ‘Website’), operated by QODIQA RESEARCH AND DEVELOPMENT S.R.L., Bucharest, Romania (the ‘Company’, ‘we’, ‘us’ or ‘our’). By accessing or using the Website, the user (the ‘User’) accepts these Terms. A User who does not accept them should not use the Website. If a User accepts these Terms on behalf of an organisation, the User confirms that he or she is authorised to bind that organisation.
2. Definitions
In these Terms: ‘Content’ means the text, diagrams, graphics, data, documents and other material published on the Website; ‘Software’ means the qodiqa software published in the Company’s public repositories; ‘Specification’ means the qodiqa specification corpus published by the Company; ‘Simulation’ means the interactive demonstration available on the Website under the name ‘Run a simulation’; and ‘Public Repositories’ means the repositories published by the Company on GitHub under the qodiqa organisation.
3. Access to and use of the Website
The Company grants the User a limited, non-exclusive, non-transferable and revocable right to access the Website and to view, print and share the Content for the User’s own lawful purposes, in accordance with these Terms and subject to section 5 and section 6. The Website is provided for information and demonstration purposes. Access is not guaranteed to be uninterrupted or error-free.
4. Acceptable use
The User shall use the Website lawfully and in good faith. In particular, the User shall not: (a) attempt to gain unauthorised access to the Website, its hosting infrastructure or any related system; (b) interfere with or disrupt the Website, including by introducing malware, by automated requests that impose an unreasonable load, or by circumventing technical protections; (c) use the Website to infringe the rights of third parties or to violate applicable law; (d) misrepresent his or her identity or affiliation, or suggest that the Company endorses, sponsors or is affiliated with the User or any product, service, claim or certification of the User without the Company’s written agreement; or (e) use the Content in a manner that implies that the Company certifies, audits or approves any system, organisation or person. The User is responsible for any loss that the User causes to the Company or to third parties through a breach of this section, to the extent provided by law.
5. Open-source software and specification
The Software in the Public Repositories is published under the open-source licence stated in each repository (the Apache License, Version 2.0, for qodiqa-gateway, qodiqa-verify and qodiqa-anchors, unless a repository states otherwise), and the Specification is published under the Creative Commons Attribution 4.0 International licence (CC BY 4.0), as stated in the repository and on the License page and the Licences page. The licence stated in each repository governs the use, copying, modification and distribution of that material and prevails over these Terms in case of conflict. Nothing in these Terms limits the rights that those licences grant. Contributions to the Public Repositories are governed by the licence and contribution guidelines of the relevant repository.
6. Intellectual property and marks
Except for material published under an open-source or Creative Commons licence, the Content, the design of the Website, and the names, logos and other distinctive signs of the Company, including ‘qodiqa’ and the qodiqa logo, belong to the Company or its licensors, and all rights are reserved. These Terms grant no right to use the Company’s names, logos or marks other than as permitted on the License page, including for descriptive and factual references to the Software and the Specification. Third-party names, logos and marks that appear on the Website, including the names of AI providers, standards bodies and regulatory frameworks, belong to their respective owners, are used for identification only, and do not indicate affiliation with or endorsement by them.
7. The Simulation
The Simulation runs in the User’s browser, uses test keys and illustrative data, and is intended to demonstrate how the qodiqa enforcement flow behaves. It is not a production system, does not connect to a gateway or to an AI provider, and its timings, results, receipts and files are illustrative. Output generated by the Simulation must not be relied upon as evidence of compliance, as a security assessment or as a representation of the performance of any deployment.
8. Conformance checklist and framework mappings
The conformance checklist and related tools published on the Website support self-assessment only. No certification body for the Specification currently exists, and neither the Company nor the Website issues certificates, attestations or approvals of conformance. References to laws, regulations, standards and frameworks, including the EU AI Act, the GDPR, DORA, NIS2, the EU Cyber Resilience Act, the Council of Europe Framework Convention on Artificial Intelligence, the NIST AI Risk Management Framework, the OECD AI Principles, SOC 2, ISO/IEC 42001 and ISO/IEC 27001, identify the controls and topics to which qodiqa evidence may relate. They do not represent that the use of qodiqa makes a system compliant with, certified under or approved by any of them. Responsibility for compliance rests with the organisation concerned.
9. No professional advice
The Content is provided for general information. It does not constitute legal, regulatory, financial, tax, accounting, security or investment advice, and the User should obtain advice from qualified professionals for the User’s own circumstances.
10. Roadmap, forward-looking statements and no offer
Content that describes the Company’s direction, including the Roadmap, planned work, objectives and expectations, is forward-looking. It describes intent and not delivery dates, commitments, guarantees or representations, and it may change at any time. What exists today is documented on the pages for the gateway, the verifier and the Public Repositories. Information on the Website concerning investors, funding, partnerships or pilots is provided for information only. It does not constitute an offer, an invitation or a solicitation to buy, sell or subscribe for any security or financial instrument, nor a promise to enter into any agreement. Any investment, partnership or pilot is subject to separate written agreements.
11. Communications and submissions
Information submitted through forms or by email must be accurate and lawful. The Company may use it to respond, as described in the Privacy notice. Users should not submit confidential, secret or sensitive information through the Website unless the Company has agreed to receive it under a separate confidentiality arrangement. Feedback, ideas and suggestions that a User sends to the Company may be used by the Company without restriction and without compensation, without prejudice to any rights in material that the User has published under an open-source licence.
12. Materials provided on request
Materials that the Company provides on request, including investor and partner materials, may contain non-public information and are provided for the recipient’s evaluation only. Where such materials are marked confidential or are subject to a separate agreement, the recipient shall comply with that marking or agreement and shall not disclose, copy or use the materials for any other purpose.
13. Third-party websites and services
The Website links to third-party websites and services, including GitHub, LinkedIn, X, Medium and YouTube. The Company does not control them, is not responsible for their content, availability or practices, and does not endorse them. Their use is governed by their own terms and notices.
14. Security and responsible disclosure
Vulnerabilities in the Software or in the Company’s systems should be reported privately, through GitHub private reporting or by email, in accordance with the process described on the Security page (Report a vulnerability). The response and disclosure periods stated there are targets and not guarantees. These Terms do not authorise any testing of systems belonging to the Company or to third parties and do not grant any exemption or safe harbour; any such testing remains subject to the process described on the Security page and to applicable law.
15. Availability and changes to the Website
The Company may modify, suspend or discontinue the Website or any part of it, and may change the Content, at any time and without notice, to the extent permitted by law. The Company is not liable to the User for any such change.
16. Disclaimer of warranties
To the maximum extent permitted by applicable law, the Website and the Content are provided ‘as is’ and ‘as available’. The Company makes no warranty, express or implied, as to the accuracy, completeness, currency, fitness for a particular purpose, merchantability, non-infringement or uninterrupted availability of the Website or the Content. The Software and the Specification are provided under the warranty terms of their respective licences.
17. Limitation of liability
To the extent permitted by applicable law, the Company is liable only for direct material damage proven to result from its own intent or gross negligence. The Company is not liable for indirect or consequential loss, loss of profit, loss of data or business interruption arising out of or in connection with the use of, or inability to use, the Website or the Content. The Website, the Content, the specification and the software are provided as is and free of charge. Nothing in these Terms limits liability that cannot be limited under applicable law, including liability for intent or gross negligence, for death or personal injury, and consumer rights where they apply. This section does not affect the liability terms of the licences referred to in section 5.
18. Consumers
If the User is a consumer, these Terms do not affect the User’s statutory rights under mandatory consumer protection law, and any provision of these Terms that is not permitted under that law does not apply to the User.
19. Privacy
The Company processes personal data in accordance with its Privacy notice, which forms part of these Terms by reference.
20. Suspension of access
The Company may restrict or block access to the Website, or to parts of it, for any User who breaches these Terms or who uses the Website in a manner that is unlawful or that risks the security or integrity of the Website, without prejudice to any other right or remedy of the Company.
21. Changes to these Terms
The Company may update these Terms from time to time. The version and effective date shown at the top identify the current version. Material changes are announced on this page. Continued use of the Website after the effective date of an update constitutes acceptance of the updated Terms.
22. Governing law and jurisdiction
These Terms and any dispute arising out of or in connection with them or with the use of the Website are governed by Romanian law. The Company and the User shall first attempt to resolve any dispute amicably. Failing this, the competent courts of Bucharest, Romania, have jurisdiction, without prejudice to any mandatory right of a consumer to bring proceedings before the courts of the consumer’s place of residence.
23. General provisions
These Terms, together with the Privacy notice and the licences referred to in section 5, constitute the entire agreement between the Company and the User concerning the Website. If any provision of these Terms is held to be invalid or unenforceable, the remaining provisions continue in effect. A failure to enforce a provision is not a waiver of it. The User may not assign these Terms without the Company’s written consent; the Company may assign them in connection with a reorganisation or a transfer of its business. The English version of these Terms prevails over any translation.
24. Electronic communications
The User consents to receive communications from the Company in electronic form, including by email and by notices on the Website, and agrees that such communications satisfy any legal requirement that they be in writing.
25. Contact
Version 1.0, effective 5 November 2026.