Legal

AI Monks Portal — Terms of Service

Version 1.0 · Effective 1 August 2026

Version 1.0
Effective date: 1 August 2026
Contracting entity: AI Monks Group B.V., registered with the Dutch Chamber of Commerce (KVK) under number 42132024, with its registered office at [registered office address], Amsterdam, the Netherlands ("AI Monks", "we", "us").

1.1 "Agreement" means these Terms of Service together with the Order and any documents incorporated by reference, including the Data Processing Agreement.

1.2 "Customer", "you" means the legal entity or business identified at sign-up on whose behalf the Portal is used.

1.3 "Portal" means the AI Monks web application, including its dashboards, alerts, reports and exports.

1.4 "Service" means the cyber risk monitoring and reporting service provided through the Portal under the Subscription selected by the Customer.

1.5 "Subscription" means the package selected by the Customer at checkout or as subsequently changed, with the features, monitored-domain limits, team access and support commitments applicable to that package as described on the Portal's pricing page at the time of purchase or renewal.

1.6 "Monitored Target" means a domain, host or other internet-facing asset designated by the Customer for monitoring under the Service.

1.7 "Customer Data" means data submitted to the Portal by or on behalf of the Customer, including designated Monitored Targets and account information.

1.8 "Service Data" means data generated or collected by AI Monks in operating the Service, including data obtained from third-party data providers and telemetry produced by AI Monks' own monitoring infrastructure.

1.9 "Order" means the checkout confirmation, order form or other record identifying the Subscription, fees and billing term.

2.1 The Service is offered exclusively to parties acting in the course of a business or profession. AI Monks does not offer the Service to consumers.

2.2 The individual accepting this Agreement warrants that they are authorised to bind the Customer. If that individual lacks such authority, they are personally liable for the obligations under this Agreement.

2.3 The applicability of any general terms and conditions of the Customer is expressly excluded.

2.4 These Terms are provided in English. No Dutch-language version is available at this time; the English text is the sole authentic text.

3.1 The Service provides visibility of the Customer's external cyber risk posture. Depending on the Subscription, this includes: a cyber risk score, attack-surface mapping, findings with severity and recommended fixes, and continuous verification of designated Monitored Targets (uptime, certificates, DNS and mail records).

3.2 The Service is a monitoring and reporting tool. It observes and reports on the Customer's externally visible risk posture. The Service does not:

  • prevent, block or remediate cyber attacks or security incidents;
  • scan or monitor the Customer's internal networks or systems;
  • provide compliance certification of any kind, or make the Customer compliant with any law, regulation or standard;
  • constitute legal, compliance or security advice.

3.3 The Service may support the Customer's own compliance efforts by providing monitoring data and records; responsibility for compliance with any legal or regulatory framework remains at all times with the Customer.

3.4 AI Monks does not warrant that the Service will detect every vulnerability, misconfiguration, outage or risk affecting the Customer. The Service is not a substitute for the Customer's own security measures, and the Customer remains solely responsible for the security of its systems and data.

3.5 The features included in each Subscription are those described on the Portal's pricing page at the time of purchase or renewal. AI Monks may add features to the Service at any time; material reductions in the features of an active Subscription follow the change procedure in clause 16.

3.6 Certain risk data presented in the Portal is sourced from third-party data providers and reflects those providers' most recent observations, which may lag the current state of the Customer's infrastructure. Where AI Monks' own monitoring provides more recent data, the Portal indicates this. If data ingestion is interrupted, the Portal displays the date of the last successful update; AI Monks' obligation is to restore data freshness within a reasonable time.

4.1 The Customer must provide accurate and complete information at sign-up and keep it current.

4.2 The Customer is responsible for the confidentiality of its access credentials and for all activity under its account. The Customer notifies AI Monks without undue delay of any suspected unauthorised use.

4.3 Where the Subscription includes team access, the Customer ensures that all users under its account comply with this Agreement and remains responsible for their acts and omissions.

5.1 Purpose. The Customer authorises AI Monks to collect, generate and process data about the Customer's externally visible infrastructure for cybersecurity and business continuity purposes, at the following levels:

  • (a) Passive assessment. Collection and analysis of externally observable data about the Customer's infrastructure, including data obtained from third-party data providers. This involves no direct interaction with the Customer's systems and applies to every Subscription from acceptance of this Agreement.
  • (b) Active monitoring. Periodic, non-intrusive probing of Monitored Targets by AI Monks' monitoring infrastructure to verify availability, certificates, DNS, mail records and other externally exposed configuration. This is authorised by the Customer's designation of each Monitored Target under clause 5.2.
  • (c) Intrusive assessment. Vulnerability scanning, penetration-test-level analysis or other assessment that goes beyond non-intrusive checks. AI Monks may offer such services in the future. Intrusive assessment is performed only under a separate written scope authorisation (which may be given through the Portal) specifying the targets, methods, time window and points of contact, signed or confirmed by a person authorised to represent the Customer. Absent such authorisation, AI Monks performs no intrusive assessment.

5.2 By designating a Monitored Target, the Customer warrants that it owns the target or is otherwise authorised to have it assessed and monitored by AI Monks at the applicable level, and that such activity does not violate the rights of any third party. The same warranty applies to every target included in a scope authorisation under clause 5.1(c).

5.3 The Customer maintains the accuracy of its list of Monitored Targets and promptly removes any target it is no longer entitled to designate (for example, following the transfer of a domain).

5.4 Under levels (a) and (b), AI Monks operates non-intrusively. Its monitoring infrastructure:

  • performs availability and configuration checks only, and does not attempt to exploit, penetrate or intrusively scan any system;
  • identifies itself honestly in its requests;
  • does not attempt to evade or circumvent the Customer's or any third party's security measures.

Intrusive techniques are used exclusively within an authorised scope under clause 5.1(c).

5.5 The Customer acknowledges that assessment and monitoring activity — in particular intrusive assessment under clause 5.1(c) — may affect the performance or availability of the assessed systems. Within an authorised scope, and provided AI Monks acts within that scope with reasonable skill and care, such effects do not constitute a breach of this Agreement.

5.6 Monitoring of a Target commences only after activation by AI Monks. AI Monks may refuse to activate, or may deactivate, any Monitored Target or scope authorisation at its sole discretion, including where it suspects the Customer is not entitled to designate the target. Deactivation under this clause does not entitle the Customer to a refund.

5.7 The Customer indemnifies AI Monks against all claims, damages, fines and costs (including reasonable legal fees) arising from the assessment or monitoring of a target that the Customer was not entitled to designate or include in a scope authorisation.

6.1 Fees are stated per organisation, exclusive of VAT, and are billed via AI Monks' payment provider.

6.2 Monthly Subscriptions run per calendar month and renew automatically each month until cancelled in accordance with clause 7.

6.3 Annual Subscriptions run for twelve months from the start date at the discounted annual rate, are billed annually in advance, and renew automatically for successive twelve-month terms unless cancelled in accordance with clause 7.

6.4 AI Monks may change its fees with at least sixty (60) days' written notice. For monthly Subscriptions, the new fees apply from the first billing cycle after the notice period. For annual Subscriptions, the new fees apply from the next renewal. If the Customer does not accept a fee increase, it may cancel effective from the date the increase would take effect.

6.5 If payment fails or is overdue, AI Monks may suspend access to the Service after notice and a reasonable cure period. Suspension does not relieve the Customer of its payment obligations.

7.1 The Agreement takes effect on acceptance and continues for the duration of the Subscription.

7.2 Monthly Subscriptions may be cancelled by the Customer at any time via the Portal, effective at the end of the current monthly billing period.

7.3 Annual Subscriptions may be cancelled effective at the end of the current annual term. Cancellation mid-term does not entitle the Customer to any refund; the Service remains available until the end of the term already paid for.

7.4 Either party may terminate the Agreement with immediate effect if the other party materially breaches the Agreement and fails to cure within fourteen (14) days of written notice, or if the other party enters bankruptcy, suspension of payments or liquidation.

7.5 AI Monks may terminate or suspend the Agreement with immediate effect if the Customer breaches clause 5 (monitoring and assessment authorisation) or clause 11 (acceptable use).

8.1 For thirty (30) days after the end of the Subscription, the Customer may access the Portal in read-only mode to export its data, including the evidence export where included in its Subscription.

8.2 After this export window, the Customer's access is revoked and the Customer's operational data is removed from the Portal's active systems within a reasonable period.

8.3 AI Monks retains raw ingested data and telemetry in its long-term archive as an audit trail and for replay and integrity purposes. Archived data is not accessible to the Customer after the export window.

8.4 Notwithstanding clause 8.3, personal data contained in archived data is deleted or irreversibly anonymised in accordance with the Data Processing Agreement, applicable data-protection law and AI Monks' retention schedule, including upon a valid erasure request.

8.5 Clauses which by their nature are intended to survive termination (including clauses 5.7, 8, 9, 12, 13, 14 and 17) survive.

9.1 The Customer retains all rights in Customer Data. The Customer grants AI Monks a licence to process Customer Data as necessary to provide, secure, maintain and improve the Service and to comply with law.

9.2 AI Monks retains all rights in Service Data, the Portal and the Service.

9.3 Aggregated data. AI Monks may create and use, for any purpose and without limitation in time, data derived from operating the Service that is aggregated across customers and does not identify the Customer, its Monitored Targets or any individual. By way of illustration: AI Monks correlates anonymised infrastructure signals — such as counts of affected networks or hosting providers — across its customer base to detect provider-level incidents earlier for all customers. Aggregated data never includes customer names, domains or any data attributable to an identifiable customer.

9.4 Use of exports. The Customer may share reports and exports generated from the Portal (including the evidence export) with its auditors, insurers, customers, advisers and regulators for its own business purposes. The Customer may not sell, sublicense or systematically redistribute data from the Portal, offer it as a service to third parties, or use it to build a competing product or dataset.

9.5 Risk data concerning third parties (such as supplier posture information) is provided for the Customer's own risk-management purposes only. The Customer does not publish such data or use it to disparage any third party.

10.1 To the extent AI Monks processes personal data on behalf of the Customer in providing the Service, the parties' Data Processing Agreement, incorporated by reference, applies.

10.2 AI Monks processes personal data relating to the Customer's account and users as described in its Privacy Policy, available on the AI Monks website.

The Customer does not, and does not permit any third party to:

  • use the Service for any unlawful purpose, or to monitor targets it is not entitled to designate;
  • attempt to probe, scan or test the vulnerability of the Portal or AI Monks' infrastructure, or circumvent any access or usage restriction (this does not limit the Customer's right to notify AI Monks of vulnerabilities it discovers in ordinary use);
  • interfere with the integrity or performance of the Service;
  • copy, frame, scrape or resell the Service or its data except as permitted by clause 9.4;
  • reverse engineer the Portal except to the extent permitted by mandatory law;
  • share access credentials beyond the users permitted under its Subscription.

12.1 The Portal, the Service, and all associated software, models, scoring methodologies, documentation and branding are and remain the exclusive property of AI Monks or its licensors. No rights are granted to the Customer other than the limited right to use the Service in accordance with this Agreement for the duration of the Subscription.

12.2 If the Customer provides feedback or suggestions, AI Monks may use them without restriction or compensation.

13.1 AI Monks provides the Service with reasonable skill and care.

13.2 Except as expressly stated in this Agreement, the Service is provided "as is". AI Monks does not warrant that the Service will be uninterrupted or error-free, that all risks will be detected (clause 3.4), or that data sourced from third-party data providers is complete, current or accurate. AI Monks presents third-party risk data as received, subject to its own quality checks.

13.3 Scores, grades, findings and recommended fixes are informational. Decisions taken on the basis of the Service remain the Customer's own.

13.4 Support commitments, where included in a Subscription, are response commitments, not resolution guarantees.

14.1 AI Monks' total aggregate liability arising out of or in connection with this Agreement, regardless of the basis of the claim, is limited to the fees paid by the Customer for the Service in the three (3) months preceding the event giving rise to the claim.

14.2 AI Monks is not liable for indirect or consequential damage, including lost profit, lost revenue, lost savings, loss of data, business interruption, reputational damage, or damage resulting from a security incident, outage or vulnerability affecting the Customer's systems — including any such incident that the Service did not detect or report.

14.3 The limitations in this clause do not apply to the extent damage results from wilful misconduct or deliberate recklessness (opzet of bewuste roekeloosheid) of AI Monks' management, or where liability cannot be limited under mandatory Dutch law.

14.4 Any claim under this Agreement lapses twelve (12) months after the Customer became aware, or should reasonably have been aware, of the event giving rise to it.

15.1 Neither party is liable for failure to perform (other than payment obligations) caused by circumstances beyond its reasonable control, including failures of third-party data providers, hosting or network infrastructure, internet disruptions, and government measures.

15.2 If a force majeure situation continues for more than sixty (60) days, either party may terminate the Agreement without liability; fees paid in advance for the period after termination are refunded pro rata.

16.1 AI Monks may amend these Terms. Material amendments are announced at least thirty (30) days before taking effect. If the Customer does not accept a material amendment, it may cancel effective from the date the amendment takes effect. Continued use after the effective date constitutes acceptance.

16.2 AI Monks continuously develops the Service and may modify it, provided the core functionality of the Customer's Subscription is not materially reduced during a paid term.

17.1 Governing law and forum. This Agreement is governed by Dutch law. Disputes are submitted exclusively to the competent court in Amsterdam.

17.2 Assignment. The Customer may not assign this Agreement without AI Monks' consent. AI Monks may assign this Agreement to a group company or in connection with a merger, acquisition or reorganisation.

17.3 Severability. If a provision is invalid, the remainder stays in force and the invalid provision is replaced by a valid one approximating its intent.

17.4 Entire agreement. This Agreement is the entire agreement between the parties regarding the Service and supersedes prior arrangements on the subject.

17.5 Notices. Legal notices to AI Monks are sent to legal@ai-monks.io. Notices to the Customer may be given via the Portal or to the email address on the account.

Where AI Monks grants access to the Portal or any feature designated as "early access", "beta" or "preview", the following applies in addition to, and in deviation from, the Terms above:

A.1 Beta access is provided free of charge unless agreed otherwise, "as is", for evaluation purposes, and may be modified, suspended or withdrawn at any time without notice.

A.2 No availability, support or data-retention commitment applies to beta access. Data in a beta environment may be reset or deleted at any time. The Customer exports anything it wishes to keep.

A.3 Features available in beta may differ from, and do not commit AI Monks to, the features of the Service at general availability.

A.4 AI Monks' total liability in connection with beta access is limited to €500.

A.5 Either party may end beta access at any time with immediate effect.