Cortex
Take the Audit

Terms of Service

Version 1.1 - 3 September 2026 Last updated: [PLACEHOLDER: date]

What changed since v1.0. A new section C.8a states the standard commercial terms that apply to a proposal unless the proposal says otherwise: the thirty day diagnostic credit window, the floor guarantee on the diagnostic fee, payment in two equal halves on signature and on delivery, monthly Continuity billing counted from the release date, and the Continuity initial term and notice period with their defaults by engagement size. Section C.6 confirms that a drawn signature is the standard form of acceptance for every agreement in the Portal. Every new clause is marked for counsel review like the rest of this document and no price appears in it.

These terms govern the Cortex website, the Cortex AI Audit and the report it produces, and the Cortex Portal used by clients. They set out what each of those things is, what you may do with them, what we promise, and what we do not.

Contents

  • Part A. Use of the website
  • Part B. The Cortex AI Audit and the report
  • Part C. The Cortex Portal
  • Part D. How Cortex uses artificial intelligence
  • Part E. Terms that apply to everything

Who we are

Cortex is an organisational intelligence practice operated by Cason Consulting MB, a small partnership (mažoji bendrija) registered in the Republic of Lithuania.

| | | |---|---| | Legal entity | Cason Consulting MB | | Trading name | Cortex | | Registered address | J. Savickio St. 4-7, LT-01108 Vilnius, Lithuania | | Company registration code | 307655812 | | VAT number | Not VAT registered at the date of this document | | Register | Register of Legal Entities of the Republic of Lithuania, administered by the State Enterprise Centre of Registers | | Contact email | [PLACEHOLDER: contact email] | | Website | [PLACEHOLDER: domain] |

In these terms, "Cortex", "we", "us" and "our" mean Cason Consulting MB trading as Cortex. "You" and "your" mean the person reading, using or acting under these terms, and where you act for an organisation, that organisation as well.

What these terms are, and what they are not

These terms apply to the website, the Cortex AI Audit and the Cortex Portal. They are not the contract for a paid engagement. A paid engagement is governed by a written proposal and by a Data Processing Agreement, and those documents take priority over these terms where they say something different. Part E.2 explains the order of priority in full.

By using the website, submitting the Cortex AI Audit or signing in to the Cortex Portal, you accept these terms. If you do not accept them, do not use those things.

Related documents

  • Privacy Policy, at /privacy, which explains what personal data we process and on what legal basis.
  • Cookie Policy, at /cookies, which explains the small number of cookies and storage items the site uses.
  • Data Processing Agreement, provided to clients, which governs personal data we process on a client's instructions.

Part A. Use of the website

A.1 What the website is

The website is a description of the practice, the method, the systems we build, and published work. It is published for general information. It is not an offer capable of acceptance, and nothing on it creates a contract on its own.

A.2 Who may use it

You may read the website if you are over 18 and using it in the course of business or professional activity. The website, the audit and the Portal are business to business services. They are not consumer services and they are not intended for personal or household use.

A.3 What you may do

You may read, print and share pages of the website for your own business purposes, and quote from it with attribution to Cortex. Nothing more is granted.

A.4 What you may not do

You may not:

  • copy, republish or redistribute substantial parts of the website as your own material,
  • scrape, crawl or extract content at a rate or volume that degrades the service for others, or in a way that circumvents technical controls,
  • attempt to access any part of the system you have not been given access to, including the report route, the Portal and the administrative interface,
  • probe, scan or test the security of the site other than under a written arrangement with us,
  • submit false, misleading or automated entries to the audit form or the contact form,
  • introduce malicious code, or use the site to send unsolicited commercial messages,
  • use the site or anything on it to train a machine learning model without our written permission.

We may block access, rate limit requests or refuse service where any of the above happens or where we reasonably believe it is about to.

A.5 Accuracy and change

We try to keep the website accurate and current. We do not guarantee that every page is complete, current or free of error, and we may change, move or remove pages at any time. Published figures, examples and case material describe past work and are not a promise of a comparable result.

A.6 Links out

Where we link to another organisation's website, we do not control it and we are not responsible for it. A link is not an endorsement.

A.7 Intellectual property in the site

The website, its text, design, structure, brand names and marks, and the underlying code belong to Cortex or to our licensors. "Cortex" and the Cortex marks are ours. Reading the site grants you no rights in them beyond those set out in section A.3.

Part B. The Cortex AI Audit and the report

B.1 What the Cortex AI Audit is

The Cortex AI Audit is a free, public questionnaire of thirty one questions across six steps. It scores five components with fixed published weights, prices the drains for which you supply hours, and produces a written report of about four pages, delivered on screen and by email.

B.2 Who may use it

You may use the Cortex AI Audit only if all of the following are true.

  1. You are at least 18 years old.
  2. You are acting for an organisation, in the course of that organisation's business, and not as a consumer.
  3. You are authorised by that organisation to describe how it operates and to supply the figures the audit asks for.
  4. The email address you give is a business address you are entitled to use.

If you are not authorised to disclose your organisation's operating information, do not complete the audit. We have no way to verify authority and we rely on your statement of it.

B.3 What the report is

The report is an indicative estimate produced from your own answers and from stated assumptions. Specifically:

  • Every figure in it is calculated from the numbers you supply: your headcount, your hours, the rates you accept or substitute, and a fixed number of working weeks. Where you do not supply hours for a drain, that drain is recorded as unpriced and stays out of the total.
  • The default loaded employment rates and the leadership group sizes are assumptions, labelled as such in the report, and you can substitute your own.
  • The weights of the five components are fixed and published, so the same answers always produce the same score. The score describes your answers. It does not describe your organisation independently of them.
  • The report is built from six steps of a questionnaire. It is a starting point for a conversation, not a measured finding.

B.4 What the report is not

The report is not advice. It is not legal, financial, tax, accounting, investment, employment or professional advice of any kind, and it does not take your particular circumstances into account beyond the answers you gave.

You must not rely on it. Do not use the report as the sole or primary basis for any decision, expenditure, commitment, restructuring or communication to a third party. Take your own professional advice before acting.

The figures are illustrative until a diagnostic. Until the numbers have been tested against evidence in a paid Cortex Diagnostic, every euro figure in the report is an illustration of what your own stated hours are worth at your own stated rates. It is not a measured saving, not a forecast, and not a promise of a return.

A report that recommends nothing is a valid result. Where your answers do not carry enough hours to price a drain, the report says so and recommends nothing. That is an outcome the audit is designed to produce and it is not a defect.

We do not warrant the report. To the fullest extent the law allows, the report is provided as it is, with no warranty of accuracy, completeness, fitness for a particular purpose, or of any outcome. Section E.5 sets out the limits on our liability.

B.5 Your answers, and their accuracy

The report is only as good as the answers behind it. You are responsible for the accuracy of what you enter. We do not verify your answers, and a report built on inaccurate answers will be inaccurate in a way we cannot detect.

Do not enter into the audit form any personal data about other people, any special category data, any confidential information belonging to a third party, or anything you are not free to disclose. The audit asks about how your organisation operates, not about individuals.

B.6 How the report is produced

The report is produced in two stages.

  1. Code computes every number. The score, the component scores, the cost of each priced drain, the recoverable figures, the totals and the payback are calculated in code from your answers, before any model is called.
  2. An AI system writes the prose around those numbers. A large language model is given the computed figures and your answers and writes the explanatory text. The model is not permitted to introduce, alter or invent a figure, and an automated guard checks the output for numbers that did not come from the computation. Every draft is produced from a methodology reviewed by the practice.

Part D says more about how we use artificial intelligence and how AI generated documents are marked.

If the model call fails, the report still renders from the computed half, the missing sections are marked as being written, and the complete version follows by email. We aim to deliver the report in under two minutes and, where that fails, within one working day.

B.7 The share link

Your report is published at a private URL containing a long random token. Treat that URL as confidential.

  • The link is not guessable, is excluded from search engines by a noindex header, and is not listed in the sitemap. It is not indexed, but it is also not protected by a password.
  • Anyone who has the link can read the report. If you forward it, you are disclosing the contents. The page carries your company name, the respondent's role and your own figures. It does not carry an email address or a personal name.
  • The link does not expire by default. We may revoke it, which replaces the page with a notice and an offer to re-send.
  • We rate limit reads on each token to deter enumeration.

You are responsible for who you give the link to. We are not responsible for disclosure that follows from you sharing it.

B.8 The consultation booking

Where the report supports it, the report page offers a free consultation of thirty minutes, booked through Cal.com. Booking is optional.

  • The booking embed is loaded only after you click to show available times. Until then, nothing from Cal.com is loaded and no Cal.com cookie is set. The Cookie Policy explains this.
  • Cal.com processes your booking details under its own terms and privacy notice. We receive the booking and the details you enter.
  • The call is recorded and transcribed by Fathom, with a spoken consent line at the start of the call. If you do not consent to recording, say so and the call proceeds without it.
  • You can reschedule or cancel through the link in your booking confirmation.

B.9 No obligation and no marketing sequence

Completing the audit obliges you to nothing. Booking a call obliges you to nothing.

We make one commitment about email, and we hold ourselves to it in the platform and not only in this document:

You receive one email containing your report. There is no marketing sequence, no reminder chain and no drip campaign. We will contact you again about the audit only if you ask us to, or where you booked a call and we need to arrange or follow up on it.

If we ever introduce an optional newsletter or a nurture sequence, it will require a separate, specific opt in, and it will never be applied to entries collected under this wording.

You can have your answers, your report and your email address deleted at any time by replying to the report email with the word delete, or by writing to [PLACEHOLDER: contact email]. We do it within thirty days.

B.10 Fair use of the audit

The audit is free and unauthenticated, and each submission triggers a paid model call and an email. We may use bot checks, rate limits and abuse detection to protect it, and we may refuse or discard submissions that appear automated, abusive, or submitted at a volume that is not a genuine business enquiry.

Part C. The Cortex Portal

C.1 What the Portal is

The Cortex Portal is the client workspace at /portal. It is where a client reads published notes, findings with the arithmetic behind every figure, the roadmap, proposals, workstreams and checkpoints, what we need from them, and their own documents. It replaces the usual practice of sending attachments by email.

C.2 Accounts are by invitation

There is no public sign up. A Portal account exists only where we have created a workspace for a client and invited a named person to it. Accounts are personal to the individual invited and must not be shared.

The person who commissions the engagement is the sponsor. The sponsor may ask us to invite colleagues to the same workspace, and may ask us to remove them. Sponsor transfer is performed by us on the client's written instruction.

C.3 Signing in with a magic link

Portal sign in uses a single use link sent to your email address. There is no password.

  • The link is valid for fifteen minutes and can be used once.
  • The link is the credential. Anyone who obtains it within its validity window can sign in as you. Keep it private, do not forward it, do not paste it into a shared inbox, a chat channel or a ticket, and do not store it.
  • Sessions are time boxed. A client session lasts up to seven days with a twenty four hour inactivity timeout, after which you sign in again.
  • You can see your active sessions and revoke any of them at /portal/settings.

Tell us immediately at [PLACEHOLDER: contact email] if you believe someone else has access to your email account, your link or your session. We will revoke the sessions.

C.4 Your responsibilities

When you use the Portal you agree to:

  • keep your sign in link and your session private, and use the account only yourself,
  • keep the email address on the account current, and tell us when a colleague leaves so we can remove their access,
  • use the Portal only for the engagement it relates to,
  • treat the material in it in line with the confidentiality terms in section C.9 and any separate confidentiality agreement,
  • not attempt to reach any workspace, record or document you have not been given, and not attempt to circumvent the access controls,
  • not upload malicious code, and not upload material you are not entitled to share with us,
  • not extract content from the Portal in bulk or use it to train a machine learning model.

We may suspend an account that is being used in any of those ways. Section C.11 covers suspension.

C.5 What is in the Portal, and what is not

In the Portal. Your company profile, published notes and updates, published findings, the roadmap as a living page, published proposals, workstreams and checkpoints with dates, the actions we need from you, your audit report as a page, and documents published to you or uploaded by you.

Not in the Portal, ever. Interview transcripts, working drafts, unpublished findings, quantification in progress, our internal synthesis and contradiction records, our pattern library, proposals before publication, and anything belonging to another client. These are not merely hidden in the interface. They are unreachable at the database level.

Publication is deliberate. Content becomes visible to you only when we publish it. Before publication it does not exist as far as your workspace is concerned. Where we correct or withdraw something after publication, we say so.

Flagging a finding. You may raise one "this is not right" flag per finding, with a free text note. It reaches us directly. There are no comment threads in the Portal.

C.6 Accepting a proposal in the Portal

A published proposal can be accepted in the Portal. Acceptance in the Portal is intended to create a binding contract between your organisation and Cortex on the terms of that proposal. Do not accept a proposal unless you are authorised to commit your organisation to it.

How acceptance works. Acceptance requires three deliberate acts on one screen:

  1. ticking a statement that names the amount, the terms and the continuity commitment in plain words,
  2. signing on the signature pad, where you can retry or erase before you confirm,
  3. typing your full name and your role beneath the signature.

What is recorded. On acceptance we record your drawn signature as an image, the typed name, the typed role, the ticked statement, the exact version of the proposal accepted as a cryptographically hashed immutable snapshot, the date and time set by our server at the moment you confirm (which neither you nor we can alter), a hash of the IP address and the browser user agent. This is an electronic signature within the meaning of Regulation (EU) 910/2014. We then generate a PDF of the exact accepted document with the acceptance block appended, store it in your workspace, publish it to you and email it to both sides.

Versions. A published proposal is immutable. If it changes, we publish a new version and mark the previous one superseded. An attempt to accept against a superseded snapshot fails and shows you what changed, so what you accepted is never ambiguous.

Authority. By accepting, you confirm that you are authorised to bind the organisation named in the proposal. We are entitled to rely on that confirmation.

Offline acceptance. A proposal can also be accepted by a countersigned PDF or by written confirmation, which we record against the same proposal so that one place always answers what was agreed and how.

One signature, every agreement. A single drawn signature on the signature pad, recorded as above, is the form of acceptance we use for every agreement made in the Portal: the proposal, the Data Processing Agreement line and the confidentiality agreement. We do not require a second signature or a separate signing service for any of them. [PLACEHOLDER: counsel to confirm this position stands for each of the three documents, or to state the contract value above which it does not.]

[PLACEHOLDER: confirm with Lithuanian counsel, and with local counsel in the client's jurisdiction where relevant, whether a simple electronic signature of this kind is sufficient for build contracts of this value, and whether an advanced or qualified electronic signature under Regulation (EU) 910/2014 should be required above a stated contract value.]

C.7 Approving the sequence is not accepting a proposal

The Portal separates two things and never lets one read as the other.

  • Approve the sequence confirms the order in which work should be done. It is an operational agreement. It commits no money.
  • Accept the proposal is the commercial act described in section C.6. It commits money.

C.8 Engagements, and which document wins

A paid engagement is governed by:

  1. the proposal you accepted, including its scope, line items, price, terms, validity and continuity line,
  2. the Data Processing Agreement between us, which governs personal data we process on your instructions,
  3. these terms, for your use of the Portal and the website.

Where the proposal and these terms conflict, the proposal wins. Where the proposal and the Data Processing Agreement conflict on a matter of personal data protection, the Data Processing Agreement wins on that matter.

C.8a Standard commercial terms of a proposal

Every proposal states its own price, scope, timeline and terms. Unless the proposal you accepted says otherwise, the following apply to it. Where a proposal states a different figure or period, the proposal wins under section C.8.

Diagnostic credit. The fee for a Cortex Diagnostic is credited in full against a build engagement accepted within thirty days of the date the fee was paid. After that date the credit lapses. [PLACEHOLDER: counsel to confirm the credit mechanism and whether it should be expressed as a discount on the build invoice or as a set off.]

Floor guarantee on the Diagnostic. If the Cortex Diagnostic, as delivered in its roadmap, identifies less recoverable annual value than the fee paid for it, we refund that fee in full within thirty days of the roadmap being published. Recoverable annual value means the total of the priced findings in the roadmap, computed on the stated assumptions. This guarantee applies to the Diagnostic fee only; section E.3 continues to apply to every other figure. [PLACEHOLDER: counsel to review the definition of recoverable annual value, the refund period, and the interaction with section E.3 and with consumer law where a client is not a business.]

Payment for a build. Every build engagement, whatever its size, is invoiced in two equal parts: fifty percent on acceptance of the proposal and fifty percent on delivery as defined in the proposal. A build delivered in phases with staged sign-off is still invoiced in these two parts. [PLACEHOLDER: counsel to confirm the definition of delivery and the treatment of a phased build that is stopped between phases.]

Cortex Continuity. Continuity begins on the release date stated in the proposal and is invoiced monthly in advance, on the same calendar date each month counted from the release date. Where a month has no such date, the last day of that month applies. The initial term and the notice period are stated on the proposal. Our defaults, which the proposal may vary, are an initial term of twelve months with ninety days' written notice, and for a single system engagement an initial term of six months with thirty days' written notice. After the initial term Continuity continues month to month on the same notice. [PLACEHOLDER: counsel to confirm the notice mechanics, the treatment of early termination inside the initial term, and whether the defaults should appear here or only in the proposal.]

The roadmap is yours. The roadmap delivered by a Cortex Diagnostic may be used with any builder, and nothing in these terms or in the proposal requires you to engage Cortex for the work it describes. Section C.9 governs intellectual property in the roadmap.

C.9 Intellectual property

What you own. On final payment of all sums due under the engagement, you own the systems, the code, the configuration and the deliverables we build specifically for you, together with your own data and the content you supply. Ownership transfers on final payment and not before. Until then you have a licence to use the work in progress for the purposes of the engagement.

What we retain. We retain, and always have retained, ownership of:

  • the Cortex method, including the four phases, the scoring model, the weights and the economics model,
  • our templates, component patterns, reference implementations and boilerplate,
  • our prompts, prompt architecture, engine design and evaluation material,
  • the anonymised patterns we add to our internal library at the close of an engagement,
  • anything we owned or developed before the engagement, and anything we develop independently of it,
  • the Cortex Platform itself, including the Portal and the administrative system.

Where a deliverable we hand to you contains any of that retained material, you receive a perpetual, non exclusive, worldwide, royalty free licence to use, modify and maintain it as part of that deliverable, for your own business purposes. That licence does not let you extract the retained material and sell, license or distribute it on its own.

Anonymised patterns. At the close of an engagement we run a deterministic redaction pass over known company names, people's names and tool names, and then record the reusable pattern in our internal library. Anonymised patterns contain no information that identifies you, your people or your customers. They record shape and method: the class of problem, the structure of the system that addressed it, and what made it work. Nothing that identifies you leaves your workspace this way, and the library is never visible to any client.

Your name as a reference. We do not publish your name, your logo or a description of your engagement without your written permission for that specific use.

C.10 Confidentiality

Each of us will keep the other's confidential information confidential, use it only for the engagement, disclose it only to people who need it and who are under equivalent obligations, and protect it with at least reasonable care.

Confidential information includes everything said in an interview as well as everything written down. It does not include information that is or becomes public without a breach, that the receiving party already held without an obligation of confidence, or that is independently developed. Where disclosure is required by law or by a court or regulator, the disclosing party will, where it is lawful to do so, tell the other first.

Confidentiality terms are signed before kickoff and survive the end of the engagement. Where a separate confidentiality agreement exists between us, that agreement governs and this section supplements it.

C.11 Availability, maintenance and export

No uptime guarantee in version 1. The Portal is provided on a reasonable efforts basis. We do not offer a service level agreement, an uptime percentage or a credit regime in this version, and we do not promise that the Portal will be available, uninterrupted or error free. Where a proposal states a service commitment, that commitment applies.

Maintenance. We may take the Portal down for maintenance, deployment or security work. Where we can plan it, we do it outside normal working hours and tell you in advance where the interruption is likely to be noticeable. Emergency security work happens without notice.

Your material. The Portal is a way of reading and working with your material. It is not your system of record and it is not a backup service. Keep your own copies of anything you depend on.

Export at the end. At the end of an engagement you receive an export of your workspace. On request, we delete everything within thirty days, transcripts included, subject to the backup note in the Privacy Policy and to anything we are required to keep by law.

C.12 Suspension and termination

We may suspend your access, immediately and without notice, where we reasonably believe there is a security risk, a breach of section C.4, unlawful use, or a risk to another client's material. We will tell you why as soon as it is safe and lawful to do so, and we will restore access once the cause is resolved.

We may terminate your Portal access where the engagement has ended, where an invoice remains unpaid after written notice and a reasonable period to cure, or where a material breach of these terms is not remedied within thirty days of written notice.

You may stop using the Portal at any time and ask us to close your account. Closing a Portal account does not end an engagement, which ends under the proposal.

On termination we provide the export described in section C.11 and then apply the retention and deletion terms in the Privacy Policy and the Data Processing Agreement. Sections C.9, C.10, E.5 and E.7 survive.

Part D. How Cortex uses artificial intelligence

This part states in legal terms what the About page states in plain ones. It applies to the audit report, to Portal content and to the engagement deliverables.

D.1 What the AI system does

We use large language models to draft documents. Specifically, the engine:

  • writes the prose of the Cortex AI Audit report around figures computed in code,
  • drafts the question script for the first conversation,
  • extracts findings and supporting quotations from interview transcripts,
  • drafts the roadmap, proposals and client updates.

D.2 Numbers are computed, not generated

Every figure is calculated in code before a model is called. The model receives the computed figures and is not permitted to introduce, alter or recalculate one. An automated guard rejects output containing figures that did not come from the computation. Where the guard trips, the draft is regenerated or the section is withheld and completed by us.

D.3 A person reviews before a client sees it

No AI generated draft reaches a client without review by the practice. Every finding, roadmap, proposal, note and deliverable is reviewed and, where necessary, edited by us before it is published. Where we edit an AI produced draft, a later engine run does not silently overwrite the edit: it proposes a new version and shows the difference.

The audit report is the one document delivered without a person reading that individual copy before it is sent, because it is produced on demand from computed figures under a reviewed and version controlled methodology. Part B.3 and B.4 say what it is and what weight to give it.

D.4 No training on client data

Client material is never used to train a model. Text sent for model inference is processed under the model provider's commercial terms, which exclude use of the material for training. We do not license, sell or otherwise supply client material to any party for model training, and we do not train models of our own on it.

D.5 Marking of AI generated content, and Article 50 of the AI Act

Regulation (EU) 2024/1689 (the AI Act), as amended by Regulation (EU) 2026/1744, requires at Article 50 that output generated by an AI system be marked in a machine readable format as artificially generated, and that people be told when they are interacting with an AI system unless it is obvious.

We apply that as follows.

  • Machine readable marking. Documents we generate with an AI system carry machine readable metadata identifying them as AI generated, together with the engine version used to produce them. [PLACEHOLDER: state the marking implementation actually shipped, for example the metadata fields written into generated PDFs and HTML, and confirm alignment with the Code of Practice on transparency of AI generated content.]
  • Visible marking. The audit report states on its face that it was produced by a language model from computed figures.
  • Interaction. Where you interact with an AI system rather than a person, we say so. The Cortex AI Audit is a questionnaire and not a conversation with a model, and the report it produces is a document rather than a dialogue.
  • Reproducibility. The prompt set is hashed into an engine version stored with each generated document, so any document can be traced to the exact methodology that produced it.

D.6 No automated decision with legal effect

Nothing in the Cortex AI Audit or the Portal makes a decision about you that produces a legal effect or a similarly significant effect. The audit tier, which is computed from your answers, only changes the shape of the report you receive. The Privacy Policy explains how to contest a result.

D.7 Systems we build for clients

Where we build a system for a client, the client is the deployer of that system and we assess, with the client, whether it falls within a high risk category under the AI Act and what obligations attach and from when. Those obligations, and any national labour law information and consultation duties, are addressed in the proposal and in the engagement documentation for that build rather than in these terms.

D.8 AI literacy

We take measures to support AI literacy among the people who operate AI systems on our behalf, as Article 4 of the AI Act requires.

Part E. Terms that apply to everything

E.1 Changes to these terms

We may change these terms. Where a change is material, we will:

  • give at least thirty days' notice before it takes effect,
  • send that notice by email to Portal users and to the contact we hold for a live engagement, and
  • post it in the Portal, and publish the updated document at /terms with a new version number and date.

Changes take effect at the end of the notice period. If you do not accept a material change, tell us before it takes effect and you may end your Portal access under section C.12. A change to these terms does not change the commercial terms of a proposal you have already accepted.

Non material changes, such as correcting a typographical error or clarifying wording without changing its meaning, take effect on publication.

E.2 Order of priority

Where documents conflict, the following order applies, highest first:

  1. the Data Processing Agreement, on matters of personal data protection,
  2. the accepted proposal, including any statement of work or schedule it incorporates,
  3. any separate confidentiality agreement, on matters of confidentiality,
  4. these Terms of Service,
  5. the Privacy Policy and the Cookie Policy, which describe our practice and do not create commercial obligations.

E.3 Nothing here is a promise of a result

We describe what we do and how we do it. We do not guarantee a saving, a return, a payback period, a revenue outcome or any other business result, whether stated in a report, a roadmap, a proposal or anywhere else, unless a proposal expressly and in terms guarantees it. Figures describe what we expect on stated assumptions.

E.4 Third party services

The website, the audit and the Portal depend on third party services, including hosting, database, email, scheduling, bot protection and model inference providers. Those services are named in the Privacy Policy. We choose them with care and contract with each of them, and we remain responsible to you for our own performance, but we do not control them and we are not liable for a failure that is caused entirely by one of them and that we could not reasonably have prevented or mitigated.

E.5 Liability

Nothing in this section excludes or limits liability that cannot lawfully be excluded or limited. That includes liability for death or personal injury caused by negligence, for fraud or fraudulent misrepresentation, and any other liability that the law of the governing jurisdiction does not permit to be excluded.

Subject to that:

We exclude indirect loss. We are not liable for indirect or consequential loss, or for loss of profit, revenue, anticipated saving, business, opportunity, goodwill or reputation, or for loss or corruption of data, in each case however arising, whether or not that loss was foreseeable and whether the claim is in contract, tort, breach of statutory duty or otherwise.

We exclude reliance on the audit report. We are not liable for any loss arising from reliance on the Cortex AI Audit, the report, the score or any figure in them. The report is provided free, as an indicative estimate, on the express basis stated in Part B, that it is not advice and is not to be relied on.

Cap for Portal and website use. Our total liability arising out of or in connection with your use of the Portal and the website, taken together in any twelve month period, is limited to the total fees you paid us in the twelve months immediately before the event giving rise to the claim. Where you have paid us nothing, our total liability for that use is limited to one hundred euro (EUR 100).

Engagements. Liability for a paid engagement is governed by the liability provisions of the accepted proposal. Where the proposal is silent, this section applies.

Your responsibility. You are responsible for the decisions you take and for the accuracy of the information you give us. We are not liable for a result that follows from information you supplied that was inaccurate, incomplete or out of date.

Time limit. Any claim must be brought within twelve months of the date you first became aware, or ought reasonably to have become aware, of the circumstances giving rise to it.

E.6 Force majeure

Neither of us is liable for a failure or delay caused by something outside our reasonable control, including power or network failure, the failure of a third party service, industrial action, epidemic, war, act of terrorism, act of a public authority, or a natural event. The affected party will tell the other and will work to resume performance.

E.7 Governing law and jurisdiction

These terms, and any dispute or claim arising out of or in connection with them or their subject matter, including a non contractual dispute or claim, are governed by the law of the Republic of Lithuania.

The courts of Vilnius, Republic of Lithuania have exclusive jurisdiction, and this is our default position.

A proposal may state otherwise. Where an accepted proposal names a different governing law, a different jurisdiction or an arbitration procedure, that provision applies to that engagement instead of this section.

[PLACEHOLDER: confirm the choice of forum, and whether the courts of Vilnius is the correct designation for the seat under the Lithuanian rules of jurisdiction, before publication. Confirm also the effect of mandatory local rules where a client is established in another Member State.]

E.8 Assignment

You may not assign or transfer your rights under these terms without our written consent. We may assign or transfer ours to a successor to our business, on notice to you, provided the successor takes on our obligations.

E.9 No partnership

Nothing in these terms creates a partnership, a joint venture, an agency or an employment relationship between us. Neither of us may bind the other.

E.10 Third party rights

No person other than you and us has any right to enforce these terms.

E.11 If part of this is unenforceable

If any provision is held to be invalid or unenforceable, it is modified to the minimum extent necessary to make it enforceable, or if that is not possible, severed. The rest continues in force.

E.12 Whole agreement

These terms, together with the Privacy Policy, the Cookie Policy and, for an engagement, the accepted proposal and the Data Processing Agreement, are the whole agreement between us on their subject matter and replace anything said or written before. This does not limit liability for fraud or fraudulent misrepresentation.

E.13 Notices

Notices to us go to [PLACEHOLDER: contact email] and, where a formal notice is required, in writing to J. Savickio St. 4-7, LT-01108 Vilnius, Lithuania. Notices to you go to the email address on your account or the address given in the proposal. Email notices are treated as received on the next working day after sending.

E.14 Language

These terms are written in English and English is the governing language. Any translation is provided for convenience and, where it conflicts with the English version, the English version prevails.

E.15 Complaints and contact

We reply to every message and there is no support queue. Write to us at:

Cortex
Cason Consulting MB
J. Savickio St. 4-7, LT-01108 Vilnius, Lithuania
[PLACEHOLDER: contact email]

We reply within two working days. For anything about personal data, including the exercise of your rights, see the Privacy Policy or write to the same address.

Counsel review

These documents were drafted as working versions on 3 September 2026. They reflect the architecture, the data model and the commercial model of the practice as designed on that date, and the regulatory position verified on that date.

They must be reviewed by Lithuanian counsel before publication, together with the Privacy Policy, the Cookie Policy and the Data Processing Agreement. Specific matters flagged for counsel in this document: the evidential sufficiency of a drawn signature with typed name acceptance for build contracts and for each of the three Portal agreements (section C.6), the standard commercial terms and in particular the floor guarantee, the credit mechanism, the definition of delivery and the Continuity notice mechanics (section C.8a), the choice of forum and the effect of mandatory local rules for clients established in other Member States (section E.7), the liability cap and its enforceability against business clients under Lithuanian law, and the marking implementation required by Article 50 of the AI Act (section D.5).

Every [PLACEHOLDER: ...] must be resolved before publication.

Cortex is a trading name of Cason Consulting MB.

Company code 307655812. Register of Legal Entities of the Republic of Lithuania.

J. Savickio St. 4-7, LT-01108 Vilnius, Lithuania. Not VAT registered.

hello@[domain]