Terms of Service

1. Acceptance of terms

By accessing or using the Intended platform, APIs, SDKs, CLI tools, website, or documentation (collectively, the "Services"), you agree to be bound by these Terms of Service ("Terms"). If you are using the Services on behalf of an organization, you represent that you have authority to bind that organization. If you do not agree to these Terms, do not use the Services. The Services are offered for business and professional use only; you represent that you are not using them as a consumer for personal, family, or household purposes.

2. Description of services

Intended provides an AI Authority Runtime — a deterministic enforcement layer that evaluates AI agent intents against the Open Intent, issues cryptographically signed authority tokens, and maintains hash-chained audit trails and receipts. The Services include the Authority Engine API, SDKs, CLI tools, escalation workflows, audit infrastructure, and documentation. Intended decides and signs; it does not execute actions in Customer's systems or in third-party systems, and it does not collect or store Customer's credentials for third-party systems. Customer's own agents and systems perform any action, after receiving a Decision and, where issued, an authority token.

3. Accounts and API keys

• You must provide accurate information when creating an account
• The Operator Console authenticates via Auth0 (operated by Okta, Inc.) at login.intended.so using passkey-primary authentication (WebAuthn), with password/email as a fallback; programmatic API access uses API keys (intended_live_ prefixed credentials; legacy staff keys use the mrt_ prefix)
• You are responsible for maintaining the confidentiality of your API keys (intended_live_ prefixed credentials)
• You must notify Intended immediately of any unauthorized use of your account or API keys
• API keys should be stored securely and never committed to source control or shared publicly
• Intended may suspend or terminate accounts that violate these Terms or exhibit suspicious activity

4. AI agent authorization

You are solely responsible for the AI agents you connect to the Intended platform. By connecting an AI agent to the Services, you represent and warrant that:

• You have the right and authority to connect the AI agent and authorize it to submit intents to the Authority Engine
• You are responsible for all intents submitted by your connected AI agents, including the actions those intents request
• You will configure appropriate policies, risk thresholds, and escalation workflows to govern your AI agents' behavior
• You acknowledge that Intended evaluates intents according to your configured policies but does not independently verify the legitimacy or appropriateness of the underlying AI agent actions
• You will monitor your AI agents' activity and promptly address any unauthorized or anomalous behavior

4A. Assumption of risk

Customer acknowledges that autonomous AI agents and physical systems may take actions that cause financial loss, data loss, property damage, bodily injury, or other harm, and that no authorization system can detect or prevent every harmful action. The Services are one control within Customer's broader risk-management program and are not a substitute for Customer's own safeguards, human oversight, monitoring, insurance, or independent safety controls. Intended does not guarantee that any action will be evaluated, denied, escalated, or detected. Customer assumes all risk arising from actions requested by its agents or executed by its systems, including actions that receive an allow Decision, actions not submitted to the Services, and actions taken during any unavailability of the Services.

5. Acceptable use

You agree to use the Services only for lawful purposes and in accordance with these Terms. You may not:

• Use the Services to authorize actions that violate applicable laws or regulations
• Attempt to bypass, disable, or circumvent the Authority Engine's risk scoring, policy evaluation, or token verification
• Reverse engineer, decompile, or disassemble any part of the Services (except as permitted by applicable law)
• Submit intentionally malicious intents designed to exploit the risk scoring or policy engine
• Use the Services to process data that you do not have the right to process
• Interfere with or disrupt the Services or infrastructure
• Share, resell, or redistribute access to the Services without written authorization
• Attempt to access other tenants' data, keys, or authority decisions

6. Plans, usage, and fees

The Services are offered under the Platform plan (self-serve, usage-metered, including a one-time free allowance), the Edge plan (physical and edge systems; currently Beta), and the Enterprise and Sovereign plans (contracted under an Order Form). Plans differ in Decision allowances, retention periods, and support levels, as described at intended.so/pricing (the "Pricing Page"). Open-source components used without an account are not subject to this Section. Decisions. A "Decision" is each authority determination the Authority Engine returns for an intent submitted by or for Customer, whatever the outcome, including determinations to allow, deny, escalate, or require approval. Each intent is billed at most once. An approval granted after escalation or approval-required review, and any authority token issued as a result, is part of the original Decision and is not billed again. Risk tiers. Each Decision is priced according to the risk tier assigned to the Open Intent classification code recorded for that intent in Customer's audit record, and any action-level override, under the tier schedule on the Pricing Page. Risk tiers are a pricing classification only. They are not a safety assessment, risk rating, certification, or warranty of any kind. The classification in Customer's audit record controls for billing unless Customer disputes it under Section 6A. Exclusions. The following are not billable Decisions: (a) a determination that fails because of an error in the Services; (b) an intent the Services cannot classify, provided no authority token is issued for it; (c) a resubmission that returns the original determination under the deduplication rules on the Pricing Page, including a retry carrying the same Idempotency-Key, a retry of the same task step within the same mission, and an identical resubmission of a denied or escalated request, in each case within the window stated on the Pricing Page; and (d) a human reviewer's resolution of an escalated or approval-required Decision. A resubmission that results in a new authority token is a new Decision. Gateway observe mode. Decisions evaluated in observe or shadow mode through the enforcement gateway are not billed during the thirty (30) days following Customer's first gateway Decision, and are billed as Decisions thereafter. Physical and Edge Decisions. For the Edge plan, one Decision is one authority-token request for a single task or goal step within a mission, as submitted by Customer. Individual actuation or control commands issued within an authorized task are not separate Decisions. Intended bills no more than the per-mission maximum number of Edge Decisions stated on the Pricing Page, and bills continuous-control authorizations no more than once per task step per interval stated on the Pricing Page. A mission expires at the lifetime stated on the Pricing Page, after which requests under that mission are rejected. If Customer does not identify a mission, Intended groups Customer's Edge Decisions as described on the Pricing Page. Allowances, overages, and spend controls. The free allowance is a one-time grant that applies to Platform Decisions only and does not reset (it is not renewed each month). If Customer has not provided a valid payment method, requests above the free allowance are rejected with an explicit error until a payment method is added. They are not queued and are never allowed by default. Paid Platform and Edge usage above any allowance is charged at the tier rates on the Pricing Page. Customer may set spend alerts and an optional spend cap. When a configured cap is reached, the Services reject further requests with an explicit error and issue no authority tokens until the cap is raised or the next usage period begins, and Intended will not charge for Decisions above the cap. Rejections under this paragraph are fail-closed, intended behavior; they are not errors, downtime, or a failure to issue tokens under Sections 8 or 11. Authority tokens already issued remain valid until they expire or are revoked. Customer is responsible for configuring its agents and systems to handle such rejections safely. Changes. Intended will give at least thirty (30) days' advance notice, through the Services or by email, of any increase in fees, any reassignment of an existing classification code to a higher-priced tier, or any removal of a plan feature Customer uses. Such a change takes effect at the start of Customer's first usage period beginning after the notice period, unless Customer accepts the change earlier. Customer may terminate before the effective date without penalty. Price decreases, lower-tier reassignments, and tier assignments for newly published classification codes may take effect on publication. This paragraph applies to Preview and Beta Services notwithstanding Section 11A. Enterprise and Sovereign. Fees, allowances, and tier terms in an Order Form prevail over this Section and the Pricing Page for that Order Form's term.

6A. Fees, payment, and billing disputes

Customer authorizes Intended and its payment processor to charge the payment method on file for all fees incurred, in arrears each monthly usage period unless an Order Form states otherwise. Fees are exclusive of taxes, which Customer will pay (other than taxes on Intended's net income). Customer may dispute a charge or a tier classification in good faith by notice to legal@intended.so within sixty (60) days of the invoice date, identifying the Decisions concerned; undisputed amounts remain payable. Charges not disputed within that period are final. Intended may suspend paid usage on ten (10) days' notice for undisputed amounts more than thirty (30) days overdue. Except as required by law or stated in an Order Form, fees are non-refundable.

7. API rate limiting

Intended enforces API rate limits to protect the integrity, availability, and performance of the Services for all customers. Rate limits vary by plan tier and are documented in the API reference. Automated abuse, excessive requests, or patterns consistent with denial-of-service activity may result in temporary or permanent throttling, suspension, or termination of API access. Intended will make commercially reasonable efforts to notify you before imposing permanent restrictions, except where immediate action is necessary to protect the platform.

8. Authority tokens

Authority tokens issued by the Intended Authority Engine are cryptographically signed credentials that represent a scoped authorization decision. You acknowledge and agree that:

• Authority tokens are cryptographically signed (Ed25519 by default; RSA-4096 / ES256 selectable) and contain scoped claims, expiry timestamps, and single-use nonces
• You are responsible for verifying authority tokens at the point of execution using the @intended-inc/sdk SDK (its verifyAuthorityToken helper) or equivalent verification logic
• Intended does not guarantee specific decision outcomes. Decisions are determined by your configured policies, risk thresholds, and the intent parameters submitted
• Tokens expire according to their embedded expiry claim and cannot be renewed or extended after issuance
• You must not attempt to forge, modify, replay, or otherwise tamper with authority tokens
• Failure to verify tokens at execution time is solely your responsibility and Intended shall have no liability for unauthorized actions resulting from unverified tokens
• Nothing in Section 14 limits Intended's liability to the extent such liability cannot be limited under applicable law, including for Intended's fraud or willful misconduct in issuing authority tokens. Rejections under Section 6 (free allowance, spend cap, or mission expiry), Section 7 (rate limits), or a suspension under these Terms are not a failure to issue tokens.

9. Third-party systems and runtimes

Intended does not execute actions in, connect to, or hold credentials for the third-party systems your agents act on (for example GitHub, Jira, or ServiceNow). Intended returns a Decision and, where issued, a signed authority token; your agents and systems perform any action. You are responsible for:

• Holding, securing, and managing the credentials your agents and systems use to access third-party systems; you must not submit those credentials to the Services
• Ensuring that actions your agents take in third-party systems, including in reliance on a Decision or authority token, comply with the terms of service of those third-party systems
• Understanding that an authority token is evidence of an authorization Decision only; any action occurs in the target system under your own credentials and control
• Reviewing and deploying any policy artifacts, configuration bundles, or runtime-specific outputs that Intended generates for customer-operated third-party runtimes
• Accepting that third-party runtimes or integration targets identified as alpha, preview, or reference surfaces remain subject to the upstream provider's terms, limitations, and security posture
• For NVIDIA OpenShell and NVIDIA NemoClaw integration paths, acknowledging that Intended supplies policy compilation and governance boundaries but does not operate, secure, or warrant the upstream runtime software

9A. Physical, edge, and safety-critical systems

The Services are an authorization and governance layer. They are not a safety system, safety-rated control, emergency-stop, or collision-avoidance function, and are not designed, tested, or certified to any functional-safety standard (including ISO 10218, ISO 13849, IEC 61508, or ISO 3691-4). Where Customer uses the Services with robots, vehicles, drones, industrial equipment, or any system capable of causing physical harm, Customer is solely responsible for: (a) independent, appropriately rated safety controls, emergency stops, and safe-state behavior that operate regardless of the Services' availability, latency, or decisions; (b) safe handling of denials, errors, rejections, token expiry, and loss of connectivity; (c) risk assessments, certifications, and compliance with laws and standards applicable to its systems; and (d) all actuation and control commands issued within an authorized task. No Decision, risk tier, authority token, or price constitutes a representation that an action is safe.

10. Audit trails and data

• Authority decisions and audit records are stored in a hash-chained ledger for the retention period specified by your plan
• Audit records are hash-chained and tamper-evident once written to the chain. Payload content is never altered in normal operation; hash pointers may be re-linked only by an authorized, logged remediation, and database-level append-only is enforced (UPDATE/DELETE revoked from the serving role)
• You may export audit data and evidence bundles through the API for the duration of your retention period
• After the retention period, audit data is archived according to your plan configuration
• Enterprise customers with extended retention have data stored on encrypted, versioned storage with deletion protection; immutable WORM storage (S3 Object Lock, Compliance mode) is on the enterprise roadmap and available for dedicated deployments

11. Service levels

Platform and Edge plans (including usage within any free allowance) are provided on a commercially reasonable effort basis with no specific uptime guarantee. Enterprise plans include a Service Level Agreement (SLA) with specific uptime commitments, support response times, and remedies. Under the Intended SLA, Intended commits to 99.5% uptime for the Authority Engine API for Enterprise plans; the SLA is authoritative on uptime and service credits. SLA terms are documented in your enterprise agreement and the Intended SLA policy at /legal/sla.

12. Intellectual property

Intended retains all rights, title, and interest in the proprietary Services, including the hosted Authority Engine, control-plane workflows, approvals, analytics, and associated documentation, except where a component is expressly released under an open-source license. You retain all rights to your data, policies, configurations, and authority decision history. The following intellectual property rules apply:

• Open-source Intended components, including the Open Intent and designated SDKs, adapters, and CLI packages, are licensed under their published repository licenses, including Apache 2.0 where stated
• These Terms do not restrict rights expressly granted under an applicable open-source license for an Intended package or artifact
• Custom policies, risk thresholds, escalation workflows, and decision configurations created by you remain your intellectual property
• Authority decision records and audit trails generated from your usage belong to you and are exportable
• Classification results produced for your requests, including by optional AI features, form part of your authority decision records
• Policy rules drafted with the optional AI drafting assistant become your custom policies, with the same ownership as other policies you create, once you save them. AI-drafted suggestions are provided as-is for your review; you are responsible for reviewing them before saving
• Intended owns its classifier, rule sets and models, including models, rules and product intelligence produced through the product-improvement process described in Privacy Policy Section 4B, and the de-identified aggregate data used to make them. Intended does not use that data to identify you. You own your authority decision history
• These Terms do not grant you any rights to Intended's trademarks, brand assets, or proprietary methodologies
• Feedback, suggestions, or enhancement requests you provide may be used by Intended without obligation to you. Feedback does not include your data, authority decision records or classification results, which are governed by the Privacy Policy and the Data Processing Addendum

13. Data portability

You own your data. Upon termination of your account or at any time during the term of your subscription, you may export your data — including authority decision history, audit trails, policies, and configurations — through the API or export tools provided by the Services. Following termination, Intended will maintain your data in an exportable state for thirty (30) days, after which it will be deleted in accordance with our data retention policies, except where retention is required by applicable law. For details on data processing locations, sub-processors, and international data transfer mechanisms, see our Data Processing Addendum at /legal/dpa.

14. Limitation of liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, Intended SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES ARISING FROM YOUR USE OF THE SERVICES, INCLUDING BUT NOT LIMITED TO LOSS OF PROFITS, REVENUE, DATA, GOODWILL, OR BUSINESS INTERRUPTION, REGARDLESS OF WHETHER Intended HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. Intended'S TOTAL AGGREGATE LIABILITY ARISING OUT OF OR RELATING TO THESE TERMS OR THE SERVICES SHALL NOT EXCEED THE GREATER OF (A) THE AMOUNTS PAID BY YOU TO Intended IN THE TWELVE (12) MONTHS PRECEDING THE EVENT GIVING RISE TO THE CLAIM OR (B) ONE HUNDRED U.S. DOLLARS (US$100). THIS LIMITATION APPLIES REGARDLESS OF THE THEORY OF LIABILITY, WHETHER BASED IN CONTRACT, TORT, NEGLIGENCE, STRICT LIABILITY, OR OTHERWISE, AND EVEN IF A LIMITED REMEDY SET FORTH HEREIN IS FOUND TO HAVE FAILED OF ITS ESSENTIAL PURPOSE. NOTHING IN THESE TERMS LIMITS OR EXCLUDES LIABILITY THAT CANNOT BE LIMITED OR EXCLUDED UNDER APPLICABLE LAW, INCLUDING, WHERE SO REQUIRED, LIABILITY FOR DEATH OR PERSONAL INJURY CAUSED BY NEGLIGENCE, OR FOR FRAUD.

15. Warranty disclaimer

THE SERVICES ARE PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT. Intended DOES NOT WARRANT THAT THE SERVICES WILL BE UNINTERRUPTED, ERROR-FREE, OR THAT AUTHORITY DECISIONS WILL PREVENT ALL UNAUTHORIZED ACTIONS. YOU ARE RESPONSIBLE FOR CONFIGURING POLICIES AND RISK THRESHOLDS APPROPRIATE FOR YOUR RISK TOLERANCE. RISK TIERS, CLASSIFICATIONS, AND PRICING ARE COMMERCIAL TERMS ONLY AND DO NOT CONSTITUTE A SAFETY ASSESSMENT OR WARRANTY. THE SERVICES ARE NOT A SAFETY SYSTEM AND MUST NOT BE RELIED ON AS THE SOLE MEANS OF PREVENTING PHYSICAL HARM (SEE SECTION 9A).

16. Indemnification

You agree to indemnify, defend, and hold harmless Intended, its officers, directors, employees, and agents from and against all claims, liabilities, damages, losses, and expenses (including reasonable attorneys' fees) arising from: (a) your use of the Services, (b) your violation of these Terms, (c) actions taken by your agents or systems, including actions taken in reliance on a Decision or authority token, (d) your content or data processed through the Services, (e) the behavior of AI agents you connect to the platform, or (f) your failure to verify authority tokens at the point of execution, or (g) the operation of any physical, robotic, or edge system in connection with the Services, including bodily injury or property damage, except to the extent caused by Intended's gross negligence or willful misconduct.

16A. Intended IP indemnification

Intended will defend, indemnify, and hold harmless Customer from and against any third-party claim alleging that Customer's authorized use of the Services in accordance with these Terms infringes any third-party intellectual property rights ("IP Claim"). Intended's obligations under this section do not apply to any IP Claim arising from: (a) Customer's modification of the Services, (b) combination of the Services with products, services, or technologies not provided by Intended, (c) Customer's continued use of the Services after receiving notice of an alleged infringement, or (d) use of the Services not in accordance with these Terms. Upon becoming aware of an IP Claim, Intended shall (a) assume sole control of the defense and settlement of the claim, and (b) at Intended's sole option, (i) modify the Services so they become non-infringing, (ii) procure a license for Customer's continued use of the affected Services, or (iii) terminate the affected portion of the Services and provide a pro-rata refund of prepaid fees for the terminated portion. This Section 16A states Customer's sole and exclusive remedy, and Intended's entire liability, with respect to any IP Claim.

17. Dispute resolution and arbitration

PLEASE READ THIS SECTION CAREFULLY — IT AFFECTS YOUR LEGAL RIGHTS.

• Any dispute, controversy, or claim arising out of or relating to these Terms or the Services shall be resolved by binding arbitration administered by the American Arbitration Association (AAA) under its Commercial Arbitration Rules, in Wilmington, Delaware
• The arbitrator's decision shall be final and binding, and judgment on the award may be entered in any court having jurisdiction
• Intended shall bear all arbitration filing fees and arbitrator fees where the Customer is an individual or a company with fewer than fifty (50) employees. In all other cases, the parties shall share equally the fees of the arbitrator and AAA
• Notwithstanding the foregoing, either party may seek injunctive or other equitable relief in any court of competent jurisdiction to prevent the actual or threatened infringement of intellectual property rights
• SMALL CLAIMS EXCEPTION: Either party may bring an individual action in small claims court in Delaware if the claim qualifies for small claims court jurisdiction
• The arbitration provisions of this Section do not apply where prohibited by applicable law, including where the Customer is a consumer as defined under Directive 2011/83/EU or is located in a jurisdiction where mandatory arbitration clauses are unenforceable. In such cases, disputes shall be resolved by the courts of the Customer's jurisdiction

18. Class action waiver

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, YOU AND Intended EACH AGREE THAT ANY DISPUTE RESOLUTION PROCEEDINGS WILL BE CONDUCTED ONLY ON AN INDIVIDUAL BASIS AND NOT IN A CLASS, CONSOLIDATED, OR REPRESENTATIVE ACTION. YOU AND Intended EACH WAIVE THE RIGHT TO A TRIAL BY JURY AND THE RIGHT TO PARTICIPATE IN A CLASS ACTION, COLLECTIVE ACTION, PRIVATE ATTORNEY GENERAL ACTION, OR OTHER REPRESENTATIVE PROCEEDING OF ANY KIND. If any court or arbitrator determines that this class action waiver is void or unenforceable for any reason, or that arbitration can proceed on a class basis, then the arbitration provisions in Section 17 shall be deemed null and void in their entirety, and the parties shall be deemed to have not agreed to arbitrate disputes.

19. Force majeure

Neither party shall be liable for any failure or delay in performing its obligations under these Terms to the extent that such failure or delay results from circumstances beyond the party's reasonable control, including but not limited to: acts of God, natural disasters, epidemics or pandemics, war, terrorism, riots, government actions or orders, labor disputes, power failures, internet or telecommunications failures, cyberattacks (including distributed denial-of-service attacks), or failures of third-party hosting providers. The affected party shall provide prompt notice and use commercially reasonable efforts to mitigate the impact and resume performance.

20. Export compliance

The Services may be subject to United States export control and sanctions laws, including the Export Administration Regulations (EAR) and programs administered by the Office of Foreign Assets Control (OFAC). You represent and warrant that:

• You are not located in, or a national or resident of, any country subject to comprehensive U.S. sanctions (currently Cuba, Iran, North Korea, Syria, and the Crimea, Donetsk, and Luhansk regions)
• You are not listed on any U.S. government restricted party list, including the Specially Designated Nationals (SDN) List, the Entity List, or the Denied Persons List
• You will not use, export, re-export, or transfer the Services in violation of any applicable export control or sanctions laws
• You will not use the Services to process, store, or transmit data in connection with activities prohibited by applicable export controls or sanctions

21. Anti-corruption

Each party represents and warrants that it has not and will not, in connection with the transactions contemplated by these Terms, directly or indirectly offer, pay, promise, or authorize the payment of any money or anything of value to any government official, political party, or candidate for political office for the purpose of influencing any official act or decision, or securing any improper advantage. Each party shall comply with all applicable anti-corruption and anti-bribery laws, including the U.S. Foreign Corrupt Practices Act (FCPA) and the UK Bribery Act 2010 (to the extent applicable).

22. Regulatory compliance

Intended is designed to support customers' compliance obligations across multiple regulatory frameworks. The following compliance provisions apply:

• GDPR: Where Intended processes personal data of EU/EEA data subjects, it does so in accordance with the General Data Protection Regulation (EU 2016/679). Intended's Data Processing Addendum governs such processing
• CCPA/CPRA: For California residents, Intended complies with the California Consumer Privacy Act as amended by the California Privacy Rights Act. Intended does not sell personal information. Details are in our Privacy Policy
• SOX: Enterprise customers using Intended for audit trail generation in financial systems should review the hash-chained, tamper-evident ledger and evidence bundle capabilities, which are designed to support Sarbanes-Oxley Section 404 internal control documentation
• Additional frameworks: Intended's architecture supports compliance with HIPAA (with BAA), PCI DSS, and sector-specific regulations through configurable policies and retention controls

23. Termination

Either party may terminate the agreement at any time with thirty (30) days written notice. Intended may terminate or suspend your access immediately upon material breach of these Terms. Upon termination, your access to the Services will cease. You may export your data for thirty (30) days following termination in accordance with Section 13 (Data Portability). Audit records subject to regulatory retention requirements will be maintained for the applicable retention period. Sections on intellectual property, limitation of liability, warranty disclaimer, indemnification, arbitration, class action waiver, and export compliance survive termination, as do payment obligations accrued before termination, Section 4A (Assumption of risk), Section 9A (Physical, edge, and safety-critical systems), and Section 26A (Time limit on claims; no third-party beneficiaries).

24. Changes to terms

We may modify these Terms with 30 days advance notice for material changes. Notice will be provided through the Services or by email. Continued use after the effective date constitutes acceptance. If you do not agree with the modified Terms, you must stop using the Services before the effective date.

25. Governing law

These Terms are governed by the laws of the State of Delaware, without regard to conflict of law principles. Subject to the arbitration provisions in Section 17, any disputes not subject to arbitration shall be resolved in the state or federal courts located in the State of Delaware. You agree to personal jurisdiction in those courts.

26. Severability

If any provision of these Terms is found to be unenforceable or invalid by a court of competent jurisdiction, that provision shall be enforced to the maximum extent permissible, and the remaining provisions shall remain in full force and effect.

26A. Time limit on claims; no third-party beneficiaries

To the extent permitted by applicable law, any claim arising out of or relating to these Terms or the Services must be brought within one (1) year after the claim arose, or it is permanently barred. These Terms are for the sole benefit of the parties and their permitted successors and assigns and create no rights in any third party.

27. Entire agreement

These Terms, together with the Privacy Policy, Data Processing Addendum, Acceptable Use Policy, and any applicable enterprise agreement or order form, constitute the entire agreement between you and Intended with respect to the Services and supersede all prior or contemporaneous communications, proposals, and agreements, whether oral or written.

11A. Preview and Beta services

The following Services are offered in Preview, Beta, or experimental status and are provided AS IS, AS AVAILABLE, without service level commitments or support guarantees, and subject to Sections 14 and 15. Except as provided in Section 6 (Changes), these Services may be modified, suspended, or discontinued without notice:

• Python SDK (intended package on PyPI)
• Go SDK (intended-go module)
• Terraform Provider (intended-terraform)
• Kubernetes Admission Controller (@intended/k8s-admission, marked Preview in configuration)
• MCP Gateway (@intended-inc/mcp-gateway)
• Edge plan and physical-AI authority-token services
• Any other service explicitly marked 'Preview,' 'Beta,' 'Alpha,' or 'Roadmap' in the Services documentation or console UI
• Customers using Preview Services acknowledge no SLA applies, support is community-best-effort, and, to the extent permitted by law, Intended is not liable for loss of data or service interruption related to Preview Services.

28A. Assignment and subprocessor changes

(a) Intended may assign these Terms to any affiliate, successor, or acquirer without customer consent. (b) Intended may engage sub-processors to perform hosting, payment processing, and support functions. Sub-processors are listed at intended.so/legal/subprocessors and updated quarterly. (c) For Enterprise customers (annual commitment >$50K), Intended will provide 60 days' advance written notice of any new sub-processor or material change to existing sub-processor. Enterprise customers may terminate affected Services without penalty if the change materially increases security or compliance risk, provided notice is given within 14 days of notification. (d) Sub-processor list includes current status (active, deprecated, planned) and is auditable by request.

28B. Publicity and use of customer name

Intended may identify Customer by name as a user of the Services in marketing materials, press releases, case studies, and public-facing lists of customers, except where Customer has opted out. Customer may opt out of publicity use by sending written notice to legal@intended.so. Intended will not publish Customer logos, testimonials, detailed performance metrics, or case studies without prior written approval from Customer.

28C. Restrictions on competitive use

Customer shall not use the Services, or data derived from the Services, to develop, train, or contribute to a product that functionally replicates Intended's intent-verification, authority-token issuance, or deterministic policy-enforcement capabilities. This restriction does not apply to: (a) general software-engineering knowledge acquired through use of the Services; (b) open-source components licensed under their respective open-source licenses; or (c) Customers or users whose applicable law prohibits this restriction, including California Business and Professions Code §16600 and comparable provisions in other jurisdictions. This Section survives termination for two (2) years.

29. Regulatory compliance disclaimer

The Services are designed to support Customer's compliance efforts but do not constitute legal, regulatory, or compliance advice. Intended's audit trails and evidence bundles support but do not replace Customer's own internal control frameworks, including those required under the Sarbanes-Oxley Act (SOX), HIPAA, GDPR, or other regulatory frameworks. Customer remains solely responsible for its own compliance obligations.

30. Contact

For questions about these Terms, contact legal@intended.so or write to Intended, Inc., 2261 Market Street, San Francisco, CA 94114, USA.