Justik Terms of Service

These Terms of Service (the "Terms") constitute a binding agreement between Justik, Inc., a corporation incorporated under the laws of the State of Delaware, United States, with its registered address at 131 Continental Drive, Suite 305, Newark, Delaware, United States, together with its affiliates ("Justik", "we", "us", "our"), and the law firm, sole practitioner or other legal-services organisation that registers for, accesses or uses the Justik platform (the "Customer", "you", "your"). The individual who accepts these Terms, whether by clicking to accept, by creating an account, or by accessing or using the Service, represents and warrants that they are authorised to bind the Customer, and accepts these Terms on the Customer's behalf and on their own behalf as an Authorised User. If you do not have that authority, or do not agree to these Terms in their entirety, you may not access or use the Service.

The Service is designed exclusively for licensed attorneys and their professional staff acting in the course of a legal practice. It is not offered to, and may not be used by, consumers, and consumer-protection rules that apply only to consumer transactions do not apply to this agreement. By accepting these Terms the Customer confirms that it is acting in a professional capacity.

1. Definitions

• "Service" means the Justik software-as-a-service platform, including its web application, APIs, assistant, AI-generated analyses, transcription, translation, search, writing and expert features, and related documentation, as updated from time to time.
• "Case" means a matter created in the Service by or for the Customer.
• "Customer Materials" means all files, documents, recordings, images, text, annotations, instructions, prompts and other content that the Customer or its Authorised Users upload to, submit to or create in the Service, including indictments, investigation files, disclosure materials and client communications.
• "Output" means the analyses, transcripts, translations, summaries, timelines, contradiction matrices, defect reviews, drafts, citations, findings, answers and any other content generated by or through the Service, whether or not based on Customer Materials.
• "Authorised User" means an individual whom the Customer permits to use the Service under its workspace: firm administrators, attorneys and staff, and outside counsel or other persons granted access to a specific Case by invitation.
• "Personal Data" means information relating to an identified or identifiable natural person, as defined in the Protection of Privacy Law, 5741-1981 (the "PPL") or other applicable data-protection law.
• "Order" means a quote or subscription accepted by the Customer in the Service, or a separate written order form or package agreement signed by both parties.
• "Fees" means the amounts payable under an Order.
• "Documentation" means the user guides and descriptions of the Service published by Justik.

2. The Service; no legal advice; no completeness

2.1 Nature of the Service. Justik ingests Customer Materials, reads and transcribes them (including optical character recognition of scanned and handwritten documents, speech-to-text and translation of recordings, and description of images and video), organises them by person, document and category, and applies large language models and other automated, probabilistic techniques to produce Output such as chronologies, contradiction matrices, procedural-defect reviews, comparative-culpability analyses, cross-examination drafts, mitigation memoranda, legal writing drafts, case-law references and grounded question-answering over the Case file.

2.2 A professional tool, not legal advice. The Service is an analytical aid for qualified legal professionals. JUSTIK IS NOT A LAW FIRM, DOES NOT PRACTISE LAW AND DOES NOT PROVIDE LEGAL ADVICE. NO OUTPUT CONSTITUTES LEGAL ADVICE, A LEGAL OPINION, AN EXPERT OPINION OR A PROFESSIONAL RECOMMENDATION, AND NO OUTPUT MAY BE RELIED UPON AS SUCH. Nothing in the Service or in any communication with Justik creates an attorney-client, fiduciary or other professional relationship between Justik and the Customer, its Authorised Users, its clients or any other person. The Customer and its attorneys retain sole and exclusive professional responsibility for the representation of their clients, for every judgement, decision, strategy, filing, submission, cross-examination and item of advice, and for compliance with the Bar Association Rules (Professional Ethics), 5746-1986 and every other professional, ethical and procedural obligation.

2.3 No warranty of completeness or accuracy. Output is produced by probabilistic software and may be incomplete, inaccurate, outdated or misleading. Without limiting Section 12, THE CUSTOMER ACKNOWLEDGES AND AGREES THAT THE SERVICE DOES NOT AND CANNOT GUARANTEE THAT IT WILL IDENTIFY, READ, TRANSCRIBE, TRANSLATE OR ANALYSE ALL OR ANY PARTICULAR CUSTOMER MATERIALS, OR THAT IT WILL DETECT ALL OR ANY CONTRADICTIONS, INCONSISTENCIES, DEFECTS, WITNESSES, EVIDENCE, EXCULPATORY MATERIAL, MISSING MATERIAL, DEADLINES, LEGAL ARGUMENTS OR OTHER MATTERS RELEVANT TO A CASE. Among other things, the Service may fail to process a file in whole or in part; may misread handwriting, poor-quality scans, redactions, tables or stamps; may mis-transcribe, mis-translate or mis-attribute speech or statements; may assign a document to the wrong person or category; may omit, merge or invent facts; may cite a source, page, time-stamp, ruling or statute that does not support the stated proposition or that has been amended, overruled or does not exist; and may present uncertain conclusions in confident language. Indicators of confidence, verification, grounding or unread material are aids to review only and do not represent that any Output is correct or complete.

2.4 Customer's duty of independent review. The Customer shall, and shall ensure that its attorneys, independently review the complete underlying Case file and verify every Output against the original source materials and against official and current sources of law before relying on it for any purpose. The Service is not a substitute for the attorney's own reading of the materials, legal research, professional judgement or supervision. The Customer shall not represent any Output to a court, tribunal, authority, client or other person as the opinion, finding or advice of Justik.

2.5 Case-law and legislation. References to rulings, legislation or other sources of law are generated or retrieved automatically from third-party databases and models, may be incomplete, inaccurate or outdated, and must be verified against official sources before use.

2.6 Expert features. Features presented as expert, forensic or specialist analyses (including cross-examination, visual and audio analyses) are automated Output unless expressly stated otherwise in a signed Order. They are not the opinion of a qualified expert, are not prepared for submission as evidence, and must not be presented as expert evidence. Any engagement of a human expert is subject to separate written terms.

2.7 Processing times and availability of results. Estimated processing times, progress indicators and review periods are estimates only. Justik is not responsible for any procedural deadline, hearing or filing date, and the Customer shall not rely on the Service being available or results being delivered by any particular time.

2.8 Changes to the Service. We may modify, add or retire features, models, providers and processing methods at any time, provided that we do not materially reduce the core functionality of the Service during a paid Case without offering a re-run or refund for that Case under Section 5.6.

2.9 Beta features. Features identified as beta, preview, experimental or similar are provided for evaluation "as is", may be withdrawn at any time and are excluded from any warranty, service commitment and indemnity.

3. Accounts, workspaces and access control

3.1 Eligibility. The Customer must be a law firm, licensed attorney or organisation lawfully providing legal services. Each Authorised User must be at least 18 years old.

3.2 Workspace administration. The first user to register a Customer workspace becomes its administrator. Administrators may invite colleagues, share individual Cases by e-mail invitation, create intake links for outside counsel or clients to upload materials, connect supported third-party tools, and revoke any of these at any time. Every grant of access is the Customer's sole decision and responsibility. Justik does not verify the identity, authority or professional status of persons the Customer chooses to admit, and is not responsible for their acts or omissions.

3.3 Credentials and two-step sign-in. The Customer shall keep credentials confidential, use strong authentication, and is encouraged to enable the two-step sign-in offered in the Service. The Customer shall notify Justik promptly at info@justik.ai of any suspected unauthorised access. The Customer is responsible for all activity under its workspace and its Authorised Users' accounts until such notice is received and Justik has had a reasonable opportunity to act.

3.4 Shared access. A Case can be shared only by an invitation sent to the recipient's e-mail address, and access opens only once that address is verified. Shares may be time-limited where the Service offers it. The Customer decides who receives access and to what, and can revoke it at any time. Read-only client access issued before 29 September 2026 continues to work until the Customer revokes it.

4. Customer Materials, authority and privilege

4.1 Authority to process. The Customer represents and warrants that it lawfully holds the Customer Materials, typically as defence counsel receiving investigation materials under section 74 of the Criminal Procedure Law [Consolidated Version], 5742-1982, and that uploading and processing them through the Service for the purpose of representing its client is permitted by law and by any applicable court order, confidentiality undertaking, gag order, protected-witness arrangement, condition imposed by a prosecuting authority, and the Customer's engagement with its client. The Customer shall not upload materials that it is prohibited from disclosing to a technology service provider or from transferring outside Israel.

4.2 Privilege and confidentiality. Customer Materials and Output are treated by Justik as confidential and, where applicable, as privileged material of the Customer's client. Justik acts as a service provider to the Customer and does not assert any right to review, disclose or use Customer Materials or Output except as necessary to provide, secure and support the Service, to perform quality review of a Case before delivery, as instructed by the Customer, or as required by law (Section 8.3). Every access by Justik personnel to a Case is logged.

4.3 No model training. Justik does not use Customer Materials or Output to train or fine-tune machine-learning models, whether its own or a third party's, and contractually requires its AI providers to refrain from doing so. Corrections, instructions and conversations in the Service are used to improve Output for the Customer and, in de-identified form only, as Practice Knowledge under Section 4.7.

4.4 Ownership. As between the parties, the Customer owns all Customer Materials and, subject to Justik's rights in the Service, all Output. Justik acquires no rights in them other than the limited licence in Section 4.5.

4.5 Licence to Justik. The Customer grants Justik a non-exclusive, worldwide, royalty-free licence to host, copy, process, transmit, display and create derivative works of Customer Materials and Output solely to provide, secure and support the Service for the Customer, for the term of the Case's existence in the Service and any retention period under Section 11.

4.6 Aggregated data. Justik may derive and use statistics and metadata that do not identify any Customer, Case, client or natural person (for example, processing durations, volumes, costs and error rates) to operate, secure and improve the Service.

4.7 Practice Knowledge. The Service learns from how Authorised Users work with it, including corrections, instructions and conversations with the assistant, and distils from them generalised professional knowledge, such as methods, tactics and lines of inquiry, expressed as abstract rules ("Practice Knowledge"). Practice Knowledge is first available only within the Customer's workspace. Where the same method is arrived at independently in the workspaces of several customers, Justik may make it available to all users of the Service. Practice Knowledge never contains the name, identification number, contact details or address of any person, a case number, an exact date, the facts of a Case or the identity of the Customer, and Customer Materials themselves are never shared with any other customer. Justik applies automated checks that discard any item carrying such details before it is stored and again before it is shared, and may review or delete any item. Practice Knowledge is not used to train or fine-tune machine-learning models. The Customer instructs and authorises Justik to derive and use Practice Knowledge in this way (Schedule A, A.2) and grants Justik and other users a perpetual, irrevocable, worldwide, non-exclusive, royalty-free licence to use, adapt and make available Practice Knowledge within the Service. The same applies to knowledge the Customer contributes manually, and the contributor remains responsible for not including privileged information.

4.8 No storage obligation. The Service is not an archive, back-up or document-management system of record. The Customer shall retain its own complete copies of all Customer Materials and of any Output it wishes to keep, and Justik is not liable for any loss, corruption or deletion of Customer Materials or Output except as expressly provided in Section 13.3.

5. Fees, payment and taxes

5.1 Pricing. Before Customer Materials are processed, the Service displays the price of a Case, calculated from the number, type and size of the files (for example pages, minutes of audio or video, or size), or the Fees of the applicable subscription or package. The price shown is inclusive of value-added tax where applicable. A quote becomes a binding Order when the Customer approves it. If the materials that actually arrive differ from the selection, the Order is adjusted to the received volume before payment is taken or processing begins.

5.2 Payment. Fees are payable in advance. Card payments are processed by Justik's payment service provider, Stripe, Inc.; Justik does not receive or store full card numbers. With the Customer's consent, a payment token may be retained by the provider to simplify future Orders; the Customer may withdraw that consent at any time.

5.3 No processing before payment. Analysis of a Case does not begin until payment for that Case, or an applicable subscription, has been confirmed, unless Justik agrees otherwise in writing. Customer Materials uploaded before payment are held unprocessed and may be deleted by the Customer at any time.

5.4 Additional materials. Materials added to a Case after payment are quoted and invoiced separately at the then-current rates.

5.5 Subscriptions, packages and enterprise terms. Subscriptions, annual, volume or firm-wide packages, service levels, custom data-processing terms and region-specific hosting are available under the terms shown at purchase or a separately signed agreement, which prevails over these Terms to the extent of any conflict. Unused subscription allowances do not roll over unless the Order says so.

5.6 Refunds. Because processing consumes third-party computing resources immediately, Fees are non-refundable once processing of a Case has begun, except that if Justik fails to deliver the Output for a paid Case for reasons within Justik's control, Justik will, at its election, re-run the analysis at no charge or refund the Fee for that Case. This is the Customer's sole and exclusive remedy for any failure, defect, delay, inaccuracy or incompleteness of the Service or any Output.

5.7 Taxes. Fees are stated inclusive of Israeli VAT where indicated in the Service. The Customer is responsible for any other applicable taxes, duties or withholdings, excluding taxes on Justik's income. Tax invoices are issued in accordance with applicable law.

5.8 Price changes. Rate changes apply only to Orders accepted after the change and never to a paid Case.

5.9 Disputes. Fee disputes must be raised in writing within 30 days of the invoice date, failing which the invoice is deemed accepted.

6. Acceptable use

The Customer shall not, and shall not permit any Authorised User or third party to:

• use the Service in violation of any law, court order or professional rule, or to process materials the Customer is not authorised to process;
• attempt to access data of another customer, probe or test the vulnerability of the Service without written authorisation, or circumvent access controls, usage limits or authentication;
• resell, sublicense, time-share or otherwise make the Service available to any third party other than Authorised Users in connection with the Customer's own legal practice;
• copy, modify, translate, decompile, reverse-engineer or create derivative works of the Service, or extract its prompts, models, weights, workflows or evaluation data;
• use automated means to scrape, harvest or bulk-export data from the Service other than through features Justik provides for that purpose;
• upload malicious code, or use the Service to build a competing product or to benchmark it for publication without Justik's prior written consent;
• remove or obscure proprietary notices; or
• use the Service to generate content intended to deceive a court, tribunal, authority or any person.

Justik may suspend access, in whole or in part and without liability, where it reasonably believes this Section has been breached or that continued access poses a security, legal or reputational risk, and will notify the Customer and work to restore access once the cause is resolved.

7. Intellectual property

7.1 Justik IP. The Service, including its software, models, prompts, workflows, user interface, design, Documentation and all improvements and derivatives, is owned by Justik and its licensors and is protected by intellectual-property laws. Except for the limited, non-exclusive, non-transferable right to use the Service during the term in accordance with these Terms, no rights are granted, by implication or otherwise.

7.2 Feedback. Suggestions, comments and other feedback about the Service may be used by Justik without restriction, compensation or obligation, provided that Justik will not identify the Customer or disclose Customer Materials in doing so.

7.3 Third-party components. The Service incorporates third-party and open-source software and models licensed under their own terms, which do not expand Justik's obligations under these Terms.

8. Confidentiality

8.1 Definition. "Confidential Information" means non-public information disclosed by one party to the other in connection with these Terms, including Customer Materials, Output, Case metadata, the Customer's client identities, Justik's non-public technical, product and pricing information, and the terms of any package agreement.

8.2 Obligations. The receiving party shall use Confidential Information only to perform under these Terms, protect it with at least the care it uses for its own confidential information and no less than reasonable care, and disclose it only to personnel and subcontractors bound by written obligations no less protective than this Section. These obligations survive for five years after termination, and indefinitely for Customer Materials, Output and trade secrets.

8.3 Compelled disclosure. If a party is legally compelled to disclose Confidential Information, it shall, where lawful, give the other party prompt notice and reasonable assistance to contest or narrow the demand, and shall disclose only what is legally required. Justik will treat requests for Customer Materials from any authority as compelled disclosure and will not volunteer such materials.

8.4 Exclusions. Confidential Information does not include information that is or becomes public through no fault of the receiving party, was lawfully known to it before disclosure, is independently developed without use of the disclosing party's information, or is lawfully received from a third party without restriction.

9. Data protection

9.1 Roles. With respect to Personal Data contained in Customer Materials and Output, the Customer is the owner of the database and controller, and Justik is the holder and processor acting on the Customer's documented instructions. With respect to account, billing, security and usage data about Authorised Users, Justik is the controller. The Justik Privacy Policy and the Data Processing Terms in Schedule A form part of these Terms.

9.2 Customer obligations. The Customer is solely responsible for the lawfulness of its processing of Personal Data in Customer Materials, including any notices to or consents from data subjects or clients that may be required, and for responding to data-subject requests concerning Customer Materials, with Justik's assistance as described in Schedule A.

9.3 Sub-processors and location. Justik uses the sub-processors listed in Schedule A and hosts the Service primarily in Google Cloud's us-central1 region (United States), with certain processing in other Google Cloud regions as described in Schedule A. The Customer instructs and authorises this hosting and the resulting transfer of Personal Data outside Israel, subject to the safeguards in Schedule A.

10. Availability, support and security

10.1 Availability. Justik will use commercially reasonable efforts to make the Service available 24 hours a day, 7 days a week, excluding planned maintenance and events outside Justik's reasonable control. Service-level commitments, if any, are set out exclusively in a signed package agreement.

10.2 Review before delivery. Justik may review a Case's processing for quality before releasing results to the Customer. Such review is an operational measure only; it is not a review of the legal merits or of the completeness or accuracy of the Output, and does not shift any responsibility to Justik.

10.3 Support. Support is provided by e-mail at info@justik.ai during Israeli business hours (Sunday to Thursday, 09:00 to 18:00, excluding public holidays), or as otherwise agreed in a package.

10.4 Security. Justik maintains an information-security programme intended to meet at least the "medium" security level under the Protection of Privacy Regulations (Data Security), 5777-2017, as described in Schedule A, and will notify the Customer of any security incident affecting Customer Materials in accordance with Schedule A. No system is completely secure, and Justik does not warrant that the Service will be free from unauthorised access.

11. Term, suspension, termination and data return

11.1 Term. These Terms commence when the Customer first accepts them and continue until the Customer's workspace is closed.

11.2 Termination by Customer. The Customer may delete any Case, or close its workspace, at any time through the Service or by notice to Justik. Fees already paid are not refundable except under Section 5.6.

11.3 Termination by Justik. Justik may terminate these Terms or suspend the Service on written notice if the Customer materially breaches these Terms and fails to cure within 14 days of notice (or immediately for breaches of Sections 4.1, 6 or 8 that cannot be cured), if the Customer becomes insolvent, or if required by law. Justik may also discontinue the Service as a whole on at least 90 days' notice, in which case Fees for any paid Case not yet processed will be refunded.

11.4 Effect. On deletion of a Case, its Customer Materials, Output, text layers, transcripts and search indexes are deleted from Justik's production systems, and from backups within 30 days, together with the shares and intake links that name it; Practice Knowledge, which contains nothing of the Case (Section 4.7), is kept; its paid orders are kept as financial records showing amounts and quantities only. On closure of a workspace, Justik will make Customer Materials and Output available for export for 30 days and will then delete them in the same manner, except for records Justik is required by law to retain (such as tax records) and for logs retained under the Data Security Regulations.

11.5 Survival. Sections 2.2 to 2.7, 4.3, 4.4, 4.8, 5, 7, 8, 9, 11.4, 12, 13, 14 and 16 survive termination.

12. Warranties and disclaimers

12.1 Mutual. Each party warrants that it has full authority to enter into these Terms and that doing so does not breach any other agreement.

12.2 Justik. Justik warrants that it will provide the Service using reasonable skill and care. The Customer's exclusive remedy for breach of this warranty is the re-performance or refund described in Section 5.6.

12.3 Disclaimer. EXCEPT AS EXPRESSLY SET OUT IN SECTION 12.2, AND TO THE FULLEST EXTENT PERMITTED BY LAW, THE SERVICE AND ALL OUTPUT ARE PROVIDED "AS IS", "AS AVAILABLE" AND "WITH ALL FAULTS", AND JUSTIK, ITS AFFILIATES, LICENSORS AND SUPPLIERS DISCLAIM ALL OTHER WARRANTIES, REPRESENTATIONS AND CONDITIONS, EXPRESS, IMPLIED OR STATUTORY, INCLUDING WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, ACCURACY, COMPLETENESS, QUALITY AND NON-INFRINGEMENT, AND ANY WARRANTY ARISING FROM COURSE OF DEALING OR USAGE OF TRADE. WITHOUT LIMITATION, JUSTIK DOES NOT WARRANT THAT ANY OUTPUT WILL BE ACCURATE, COMPLETE OR CURRENT, THAT THE SERVICE WILL IDENTIFY ANY OR ALL CONTRADICTIONS, DEFECTS, EVIDENCE OR ARGUMENTS IN A CASE, THAT ANY LEGAL STRATEGY OR OUTCOME WILL BE ACHIEVED, OR THAT THE SERVICE WILL BE UNINTERRUPTED, TIMELY, SECURE OR ERROR-FREE. THE CUSTOMER ACKNOWLEDGES THAT IT IS A SOPHISTICATED PROFESSIONAL USER, THAT IT USES THE SERVICE AND ANY OUTPUT AT ITS OWN RISK AND UNDER ITS OWN PROFESSIONAL RESPONSIBILITY, AND THAT IT HAS NOT RELIED ON ANY REPRESENTATION NOT EXPRESSLY SET OUT IN THESE TERMS.

13. Limitation of liability

13.1 Exclusion of certain damages. TO THE FULLEST EXTENT PERMITTED BY LAW, IN NO EVENT WILL JUSTIK, ITS AFFILIATES, OR ITS OR THEIR DIRECTORS, OFFICERS, EMPLOYEES, AGENTS, LICENSORS OR SUPPLIERS BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY OR PUNITIVE DAMAGES; FOR ANY LOSS OF PROFITS, REVENUE, BUSINESS, CLIENTS, GOODWILL OR REPUTATION; FOR ANY LOSS OR CORRUPTION OF DATA; FOR THE OUTCOME OF ANY LEGAL PROCEEDING, ANY CONVICTION, SENTENCE, ARRANGEMENT OR DETENTION; FOR ANY CLAIM OF PROFESSIONAL NEGLIGENCE OR MALPRACTICE AGAINST THE CUSTOMER OR ITS ATTORNEYS; OR FOR ANY DAMAGE ARISING FROM ANY OMISSION, INACCURACY OR INCOMPLETENESS OF ANY OUTPUT, INCLUDING ANY FAILURE TO IDENTIFY ANY CONTRADICTION, DEFECT, DOCUMENT, WITNESS, EVIDENCE OR ARGUMENT; IN EACH CASE HOWEVER CAUSED AND UNDER ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, TORT (INCLUDING NEGLIGENCE), BREACH OF STATUTORY DUTY OR OTHERWISE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

13.2 Cap. TO THE FULLEST EXTENT PERMITTED BY LAW, JUSTIK'S TOTAL AGGREGATE LIABILITY ARISING OUT OF OR RELATING TO THESE TERMS, THE SERVICE OR ANY OUTPUT, UNDER ANY THEORY OF LIABILITY, WILL NOT EXCEED THE FEES ACTUALLY PAID BY THE CUSTOMER TO JUSTIK FOR THE SPECIFIC CASE OR CASES GIVING RISE TO THE CLAIM DURING THE TWELVE MONTHS PRECEDING THE FIRST EVENT GIVING RISE TO LIABILITY.

13.3 Exceptions. The exclusions and limitations in this Section do not apply to liability for death or personal injury caused by negligence, for fraud or wilful misconduct, or to any liability that cannot be limited or excluded under applicable law. For Justik's breach of Section 8 in respect of Customer Materials, Justik's aggregate liability will not exceed the greater of (a) the Fees paid by the Customer in the twelve months preceding the event and (b) the amount set out in a signed package agreement.

13.4 Time limit for claims. To the fullest extent permitted by law, any claim against Justik arising out of or relating to these Terms or the Service must be brought within one year after the cause of action arises, failing which it is irrevocably waived.

13.5 Allocation of risk. The parties agree that the Fees reflect this allocation of risk, that these limitations are an essential basis of the bargain, and that Justik would not provide the Service on these economic terms without them. These limitations apply even if any limited remedy fails of its essential purpose.

14. Indemnities

14.1 By Justik. Justik will defend the Customer against any third-party claim that the Service, as provided by Justik and used in accordance with these Terms, infringes that third party's intellectual-property rights, and will pay resulting damages and costs finally awarded or agreed in settlement. Justik may, at its option, modify or replace the Service or terminate the affected Case with a refund. This Section does not apply to claims arising from Customer Materials, Output, combination with items not supplied by Justik, or use in breach of these Terms, and states Justik's entire liability for infringement.

14.2 By Customer. The Customer shall defend, indemnify and hold harmless Justik, its affiliates and their directors, officers, employees and agents from and against any third-party claim, demand, proceeding, loss, liability, damages, fine, cost and expense (including reasonable legal fees) arising out of or relating to: (a) Customer Materials, including any claim that the Customer was not authorised to upload or process them; (b) the Customer's breach of Sections 2.4, 4.1, 6 or 9.2 or of applicable law; (c) the Customer's legal services, advice or representation of any client, including any claim by a client or former client of the Customer; or (d) any use of or reliance on Output by the Customer, its Authorised Users, its clients or anyone to whom the Customer provides Output.

14.3 Procedure. The indemnified party shall give prompt notice of the claim, reasonable cooperation, and sole control of the defence and settlement to the indemnifying party, provided that no settlement imposing obligations on the indemnified party other than payment covered by the indemnity may be made without its consent.

15. Third-party services

The Service depends on third-party infrastructure and services, including cloud hosting, AI models, authentication, e-mail, payment processing and legal databases. Justik is responsible for its sub-processors as set out in Schedule A but is not responsible for the availability, accuracy or content of third-party databases or models, or for third-party services the Customer elects to connect or use independently (for example, the Customer's own AI assistant, storage or e-mail), which are governed by their own terms.

16. General

16.1 Governing law and jurisdiction. These Terms and any dispute arising out of or in connection with them are governed by the laws of the State of Israel, without regard to conflict-of-laws rules. The competent courts of Tel Aviv-Jaffa have exclusive jurisdiction, and each party irrevocably submits to that jurisdiction; nothing prevents Justik from seeking injunctive relief, or from enforcing a judgment or collecting Fees, in any competent court.

16.2 No collective proceedings. To the fullest extent permitted by law, each party may bring claims against the other only in its individual capacity, and not as a plaintiff or class member in any purported class, collective or representative proceeding.

16.3 Force majeure. Neither party is liable for failure or delay (other than payment obligations) caused by events beyond its reasonable control, including acts of God, war, hostilities, terrorism, civil unrest, government action, epidemic, labour dispute, cyber-attack, or failure of public utilities, AI-model providers, telecommunications or cloud infrastructure, provided it uses reasonable efforts to mitigate.

16.4 Assignment. The Customer may not assign or transfer these Terms without Justik's prior written consent. Justik may assign these Terms to an affiliate or to a successor in a merger, acquisition, reorganisation or sale of all or substantially all of its assets or business, on notice to the Customer.

16.5 Subcontracting. Justik may use subcontractors, including the sub-processors in Schedule A, and remains responsible for their performance as set out in these Terms.

16.6 Notices. Notices to Justik must be sent to info@justik.ai. Notices to the Customer will be sent to the administrator's registered e-mail address or displayed in the Service. Notices are deemed received one business day after sending.

16.7 Changes to these Terms. Justik may amend these Terms by posting the amended version in the Service and notifying the Customer at least 14 days before it takes effect, or immediately where required by law or for changes that do not adversely affect the Customer. Continued use of the Service after the effective date constitutes acceptance. Amendments do not alter the price or scope of a paid Case.

16.8 Entire agreement; order of precedence. These Terms, the Privacy Policy, Schedule A and any signed package agreement constitute the entire agreement between the parties concerning the Service and supersede all prior agreements, proposals and understandings. In case of conflict: (1) a signed package agreement; (2) Schedule A; (3) these Terms; (4) the Privacy Policy; (5) the Documentation. Statements made in marketing materials, demonstrations or sales communications do not form part of these Terms.

16.9 Severability; waiver. If any provision is held invalid or unenforceable, it will be enforced to the maximum extent permissible, and the remainder of these Terms will remain in full force and effect. No waiver is effective unless in writing, and no waiver of any breach waives any other or later breach.

16.10 Independent contractors; no third-party beneficiaries. The parties are independent contractors. Nothing creates a partnership, joint venture, agency, employment or fiduciary relationship. These Terms confer no rights on any third party, including the Customer's clients.

16.11 Electronic acceptance. These Terms may be accepted electronically, and electronic records of acceptance and use maintained by Justik are admissible as evidence of the agreement and its terms.

16.12 Language. These Terms are drafted in English. Any translation is for convenience only; the English version prevails.

16.13 Contact. Justik, Inc. · 131 Continental Drive, Suite 305, Newark, Delaware, United States · info@justik.ai

Schedule A — Data Processing Terms

A.1 Scope, roles and definitions. These Data Processing Terms (this "Schedule") govern Justik's processing of Personal Data contained in Customer Materials and Output ("Case Personal Data") on behalf of the Customer. "Data Protection Laws" means all laws applicable to that processing, including the PPL and the regulations made under it, Regulation (EU) 2016/679 (the "GDPR"), the GDPR as retained in the law of the United Kingdom together with the Data Protection Act 2018 (the "UK GDPR"), the Swiss Federal Act on Data Protection (the "FADP"), and the Personal Information Protection and Electronic Documents Act of Canada ("PIPEDA") and the substantially similar provincial private-sector privacy laws (together with PIPEDA, the "Canadian Privacy Laws"), in each case only to the extent it applies to the processing concerned. "Controller", "processor", "data subject", "personal data breach" and "supervisory authority" have the meanings given in the GDPR, and the corresponding terms of the PPL ("owner of a database", "holder") apply where the PPL governs. As between the parties, the Customer is the controller and the owner of the database, and Justik is the processor and the holder. Where the Customer itself acts as a processor on behalf of its client or another controller, the Customer warrants that it is authorised to engage Justik as a sub-processor on the terms of this Schedule, and Justik's obligations run to the Customer alone.

A.2 Subject matter, duration, nature and purpose. The subject matter of the processing is the provision of the Service. Its duration is the period during which the relevant Case exists in the Customer's workspace, followed by deletion under A.11. Its nature and purpose are: storage; optical character recognition; speech-to-text transcription and translation; image and video description; text extraction, indexing and embedding; automated analysis using large language models; display to Authorised Users; quality review before delivery; and related support and security operations, all to provide the Service to the Customer; and, on the Customer's instruction, the derivation of de-identified Practice Knowledge under Section 4.7 of the Terms, which is not Case Personal Data.

A.3 Categories of data and data subjects. Case Personal Data typically concerns defendants, suspects, complainants, victims, witnesses, investigators, experts, family members and other persons named in a criminal file, and may include personal data relating to criminal convictions and offences (Article 10 GDPR), special categories of personal data (Article 9 GDPR) such as data concerning health or sex life, data concerning minors, financial information, voice recordings, images, identification numbers and contact details, which may constitute sensitive information under the PPL. The Customer determines, in its sole discretion, which data it uploads, and represents and warrants that it has, and will maintain throughout the processing, a lawful basis and every authorisation required under Data Protection Laws, including under Article 10 GDPR and any applicable law of a Member State or of the United Kingdom, for the processing of such data by Justik in accordance with this Schedule.

A.4 Instructions. Justik processes Case Personal Data only on the Customer's documented instructions, including with regard to transfers to a third country, unless required to do otherwise by law to which Justik is subject, in which case Justik will inform the Customer of that legal requirement before processing unless that law prohibits such information on important grounds of public interest. The Terms, this Schedule and the Customer's use and configuration of the Service constitute the Customer's complete and final instructions. Any additional or different instruction requires Justik's prior written agreement and may be subject to additional fees. Justik will inform the Customer if, in its opinion, an instruction infringes Data Protection Laws, and may suspend the affected processing until the instruction is confirmed or modified; Justik is not otherwise obliged to examine the lawfulness of the Customer's instructions.

A.5 Confidentiality of personnel. Justik ensures that persons authorised to process Case Personal Data have committed themselves to confidentiality or are under an appropriate statutory obligation of confidentiality, and that they access Case Personal Data only on a need-to-know basis and only as necessary to provide, secure and support the Service, with every access logged.

A.6 Security measures. Justik implements and maintains appropriate technical and organisational measures pursuant to Article 32 GDPR and the Data Security Regulations, including: encryption in transit (TLS 1.2 or higher) and at rest; logical tenant isolation enforced at the database layer (row-level security keyed to the Customer's organisation); role-based access control and least privilege for systems and service accounts; two-step sign-in available to every user; short-lived, signed upload and download URLs; logging of access to Cases in accordance with Regulation 10 of the Data Security Regulations, retained for 24 months; point-in-time recovery and encrypted backups of the production database; segregated production and development environments with no Case Personal Data in development; automatic deletion of temporary processing copies; deployment of changes only through reviewed and tested releases; and a documented incident-response procedure. The Customer acknowledges that, having regard to the state of the art, the costs of implementation and the nature, scope, context and purposes of the processing, these measures provide a level of security appropriate to the risk. Justik may update the measures from time to time, provided that the overall level of protection is not materially decreased. Justik's security documentation is available to the Customer on request under confidentiality.

A.7 Sub-processors. The Customer grants Justik a general written authorisation to engage sub-processors. The sub-processors currently engaged are:

The current list is published at justik.ai/subprocessors. Justik will give the Customer at least 14 days' notice of any intended addition or replacement of a sub-processor that processes Case Personal Data, by updating that page and notifying the Customer's administrator by e-mail. The Customer may object in writing within that period on reasonable grounds relating to the protection of Case Personal Data, stating those grounds. The parties will then discuss the objection in good faith; if Justik, in its discretion, does not offer an alternative, the Customer's sole and exclusive remedy is to delete the affected Cases before the change takes effect, with a refund of Fees prepaid for processing not yet performed. Justik imposes on each sub-processor, by written contract, data-protection obligations providing at least the level of protection required by this Schedule, and remains liable to the Customer for the performance of each sub-processor's obligations as required by Article 28(4) GDPR. Justik's AI providers are bound by enterprise terms under which Customer content is not used to train their models.

A.8 International transfers. (a) *Israel.* The Customer acknowledges that Case Personal Data is hosted and processed outside Israel as described in A.7 and instructs Justik to do so. Justik ensures that each sub-processor is bound by written terms providing protection no less than that required by the Protection of Privacy Regulations (Transfer of Data Abroad), 5761-2001. (b) *European Economic Area.* To the extent the Customer's transfer of Case Personal Data to Justik is a transfer of personal data subject to the GDPR to a country not recognised by the European Commission as providing an adequate level of protection, the standard contractual clauses annexed to Commission Implementing Decision (EU) 2021/914 (the "SCCs") are incorporated into this Schedule by reference and apply as follows: Module Two (controller to processor) applies where the Customer is a controller, and Module Three (processor to processor) where the Customer is a processor; the Customer is the data exporter and Justik the data importer; Clause 7 (docking clause) does not apply; under Clause 9, Option 2 (general written authorisation) applies with the notice period set out in A.7; the optional wording in Clause 11 does not apply; under Clause 13, the competent supervisory authority is that of the Member State in which the Customer is established or, if the Customer is not established in a Member State, the Data Protection Commission of Ireland; under Clause 17, Option 1 applies and the SCCs are governed by the law of Ireland; and under Clause 18, disputes are resolved by the courts of Ireland. Annex I.A is completed with the parties' details in these Terms and the Customer's account; Annex I.B by A.2 and A.3, the transfer being continuous and the retention period that set out in A.11; Annex I.C by Clause 13 as completed above; Annex II by A.6; and Annex III by A.7. (c) *United Kingdom.* To the extent the UK GDPR applies to the transfer, the International Data Transfer Addendum to the EU Commission Standard Contractual Clauses issued by the UK Information Commissioner (version B1.0, in force 21 March 2022) is incorporated by reference: Table 1 is completed with the parties' details, Table 2 by reference to the SCCs as completed in A.8(b), Table 3 by reference to A.2, A.3, A.6 and A.7, and in Table 4 neither party may end the Addendum under its Section 19. (d) *Switzerland.* To the extent the FADP applies to the transfer, the SCCs apply as completed in A.8(b), with the Swiss Federal Data Protection and Information Commissioner as the competent supervisory authority, references to the GDPR read as references to the FADP, and the term "Member State" not interpreted so as to exclude data subjects in Switzerland from bringing claims in their place of habitual residence. (e) *Onward transfers.* Justik transfers Case Personal Data to sub-processors outside the EEA, the United Kingdom or Switzerland only under a transfer mechanism recognised by the applicable Data Protection Laws. (f) *Precedence.* In the event of conflict between the SCCs or the UK Addendum and any other provision of these Terms, the SCCs or the UK Addendum prevail to the extent of the conflict. Nothing in these Terms is intended to modify or contradict the SCCs or to prejudice the fundamental rights or freedoms of data subjects.

A.9 Assistance. Taking into account the nature of the processing and the information available to Justik, Justik will assist the Customer by appropriate technical and organisational measures, insofar as possible, in fulfilling the Customer's obligation to respond to requests to exercise data subjects' rights, and in ensuring compliance with the Customer's obligations under Articles 32 to 36 GDPR and the corresponding provisions of the PPL, including data-protection impact assessments and prior consultation with a supervisory authority or the Privacy Protection Authority. Assistance is provided primarily through the Service's features; assistance beyond them may be charged at Justik's then-current rates. Justik will not respond directly to a data subject regarding Case Personal Data except on the Customer's instruction or where required by law, and will forward to the Customer without undue delay any request it receives.

A.10 Personal data breaches. Justik will notify the Customer without undue delay, and where feasible within 72 hours, after becoming aware of a personal data breach affecting Case Personal Data, describing, to the extent then known, the nature of the breach, the categories and approximate number of data subjects and records concerned, the likely consequences, the measures taken or proposed and a contact point, and will supplement the notice as further information becomes available. The Customer is solely responsible for any notification to supervisory authorities, the Privacy Protection Authority, data subjects or clients that Data Protection Laws or professional rules require of it as controller, and Justik will cooperate with the Customer in that respect. Justik's notification of or response to a breach is not an acknowledgement of fault or liability.

A.11 Return and deletion. Throughout the term the Customer may download its Customer Materials and Output through the Service, which constitutes the return of Case Personal Data. On deletion of a Case, or on closure of the workspace at the Customer's request, Justik deletes the Case Personal Data concerned as described in Section 11.4 of the Terms, unless retention is required by law to which Justik is subject, and on request confirms deletion in writing. Deletion from backups occurs on their scheduled expiry, within 30 days.

A.12 Audits. Justik will make available to the Customer, on written request and no more than once in any twelve-month period (or following a personal data breach affecting the Customer, or where a supervisory authority so requires), the information necessary to demonstrate compliance with Article 28 GDPR, in the form of written responses, Justik's security documentation and available third-party attestations of its sub-processors. Where the Customer reasonably demonstrates that such information is insufficient, Justik will allow for and contribute to an audit, including an inspection, conducted by the Customer or by an independent auditor mandated by it who is not a competitor of Justik and who is bound by confidentiality, on at least 30 days' written notice, during business hours, without access to other customers' data or to systems whose disclosure would compromise security, and at the Customer's sole expense, including Justik's reasonable costs. Audits of sub-processors are satisfied by their published attestations.

A.13 Government access. If Justik receives a legally binding request from a public authority for access to Case Personal Data, Justik will, unless legally prohibited, promptly notify the Customer and refer the authority to the Customer; will review the legality of the request and challenge it where, after careful assessment, it concludes that there are reasonable grounds to consider it unlawful; and will disclose only the minimum data required by a reasonable interpretation of the request.

A.14 Records. Justik maintains records of all categories of processing activities carried out on behalf of the Customer as required by Article 30(2) GDPR, and of access to Case Personal Data as required by the Data Security Regulations, and makes them available to a competent supervisory authority or the Privacy Protection Authority on lawful request.

A.15 Liability and precedence. Each party's liability arising out of or relating to this Schedule, whether in contract, tort or under any other theory, is subject to the exclusions and limitations of liability in Section 13 of the Terms, to the maximum extent permitted by Data Protection Laws and without limiting either party's liability to data subjects under the SCCs. Subject to A.8(f), this Schedule prevails over the remainder of the Terms in respect of the processing of Case Personal Data.

A.16 Canada. To the extent the Canadian Privacy Laws apply to the processing: (a) Justik processes Case Personal Data as the Customer's service provider, solely for the purposes of providing the Service to the Customer, and the Customer remains accountable for it; (b) Justik protects Case Personal Data by security safeguards appropriate to its sensitivity, as set out in A.6, providing a level of protection comparable to that required of the Customer under the Canadian Privacy Laws; (c) the Customer acknowledges that Case Personal Data is stored and processed outside Canada as described in A.7 and A.8, where it is subject to the laws of those jurisdictions and may be accessible to their courts and authorities under those laws, and is responsible for any notice to individuals about such processing that the Canadian Privacy Laws require of it; (d) a "breach of security safeguards" is a personal data breach for the purposes of A.10, and Justik's notice under A.10 is given so as to enable the Customer to determine whether the breach creates a real risk of significant harm and to make any report, notification and record the Canadian Privacy Laws require of it; Justik keeps its own record of every such breach for at least 24 months; (e) Justik will assist the Customer, in accordance with A.9, to respond within the time limits of the Canadian Privacy Laws to requests for access to or correction of Case Personal Data; and (f) on termination, A.11 applies.