Last Updated: September 9, 2026

  These Terms and Conditions (the “Terms”) are an agreement between you and Concorda, Inc., a Delaware corporation (“Concorda,” “we,” or “us”), covering your access to and use of our software platform and AI-assisted litigation tools (the “Service”). Attachment A, the Data Processing Addendum, is part of these Terms.

  BY CHECKING THE BOX INDICATING ACCEPTANCE, COMPLETING A PURCHASE, OR USING THE SERVICE, YOU AGREE TO THESE TERMS. IF YOU ARE ACCEPTING FOR A FIRM OR OTHER ORGANIZATION, YOU REPRESENT THAT YOU HAVE AUTHORITY TO BIND IT AND “YOU” MEANS THAT ORGANIZATION. IF YOU DO NOT AGREE, DO NOT USE THE SERVICE. SECTION 11 LIMITS OUR LIABILITY AND SECTION 14 REQUIRES DISPUTES TO BE BROUGHT IN NEW YORK.

1.  Accounts. The Service is for business use by organizations and their personnel, not consumers, and you must be at least 18. You may let your attorneys, staff, contractors, co-counsel, and experts use the Service under your account (“Authorized Users”) and are responsible for their compliance with these Terms. Accounts are for single named individuals and may not be shared, but may be reassigned when someone leaves the role.

  You are responsible for your credentials and all activity under your account, and must tell us promptly of unauthorized use.

2.  The Service. We may modify or enhance the Service at any time; routine changes that do not materially reduce functionality require no notice. We will give thirty (30) days’ notice before discontinuing the Service or materially reducing its core functionality, and if we do so during a term you have prepaid, you may cancel for a pro-rata refund of the remainder.

3.  Acceptable Use. You will not, and will not let any Authorized User: (a) violate any law or third-party right; (b) upload unlawful or harmful content, or impersonate any person; (c) probe or disrupt the Service or attempt unauthorized access to any account or system; (d) reverse engineer or attempt to derive the Service’s source code or underlying algorithms, except as law expressly permits; (e) scrape or use automated means to collect data from the Service except as we permit; (f) resell the Service or provide it as a service bureau; or (g) develop a competing product.

  You may not submit payment card data subject to PCI DSS, or other data subject to heightened security standards we have not agreed in writing to meet. This does not restrict identification numbers, health information, or other sensitive information appearing in litigation files, discovery productions, or personnel, safety, incident, or inspection records submitted in the ordinary course of use. Attachment A governs how we handle it.

4.  Fees and Billing. You will pay the fees for the plan, seat count, and term shown at checkout, and authorize us and our payment processor to charge your payment method on a recurring basis. Fees are in U.S. dollars, exclude taxes other than taxes on our net income, and are non-refundable except as these Terms or applicable law provide. Subscriptions renew automatically for successive terms of the same length unless cancelled before the end of the then-current term.

  We will email you before each renewal and give at least thirty (30) days’ notice of any fee increase, effective at your next renewal. You may cancel at any time through the Service or at founders@concordahq.com, effective at the end of the current term. Charges not disputed within sixty (60) days are deemed accepted.

5.  Your Content. “Your Content” means the documents, files, prompts, chats, instructions, matter data, metadata, templates, edits, comments, and other materials you or your Authorized Users submit through the Service, or that the Service generates at your direction. It includes attorney work product and privileged materials, and you own all right, title, and interest in it.

  You grant us a non-exclusive, royalty-free license, sublicensable only to subprocessors acting on our behalf, to host, store, reproduce, reformat, transcode, transmit, display, and process Your Content solely as necessary to provide, secure, maintain, improve, and support the Service for you and to derive Usage Data under Section 6. The license is limited by Attachment A and ends when we delete Your Content under Section 10.

  You represent that you have the rights to grant it and that Your Content violates no law and infringes no third-party right.

  We will not remove, preserve, or disclose Your Content except as necessary to comply with law or legal process, subject to Section 5 of Attachment A, or to protect the security of the Service, and will notify you in advance where permitted. We assign to you any right we hold in outputs the AI Features generate for you.

6.  Our Intellectual Property. We and our licensors own all right, title, and interest in the Service and all improvements to it. You get only a limited, non-exclusive, non-transferable, revocable right to use the Service for its intended purpose during your subscription. If you give us feedback, we may use it for any purpose without obligation to you.

  We own aggregated and de-identified data derived from operation and performance of the Service, such as telemetry, logs, and usage metrics (“Usage Data”), and may use it for any lawful purpose, provided it is never used in a way that identifies you, your clients, or the substance of Your Content.

7.  AI Features and Your Professional Responsibility. The Service includes features using artificial intelligence or machine learning (“AI Features”). Outputs may be inaccurate, incomplete, or misleading, are informational only, and are not legal or other professional advice.

  You retain sole professional responsibility for your client work, must independently review and verify every output before relying on, filing, serving, or disclosing it, and remain responsible for your applicable rules of professional conduct. We do not practice law and have no attorney-client relationship with you or your clients.

  We do not use Your Content to train, retrain, fine-tune, or otherwise adjust the weights or parameters of any AI model, for you or anyone else. We may improve the Service in ways that do not involve training a model on Your Content, such as changes to software, prompts, or configuration. Attachment A governs Your Content where AI Features use third-party models.

8.  Data Protection. Attachment A (Data Processing Addendum) governs our processing of Your Content, including any personal information in it, and applies automatically without further agreement. Account, authentication, billing, and support information we collect to run the Service is used only for those purposes and to comply with law, is not sold or shared, and is protected under the security program in Section 3 of Attachment A.

9.  Confidentiality. Each of us may receive non-public information of the other that is designated confidential or reasonably should be understood to be, excluding information that is or becomes public through no fault of the recipient, was already known to it, is independently developed, or is rightfully received from a third party without restriction.

  Each will use the other’s confidential information only as necessary under these Terms, protect it with at least reasonable care, and disclose it only to people who need to know and are bound by similar obligations, or as legally required after reasonable advance notice where permitted. Your Content is your confidential information.

  These obligations last three (3) years after termination, except that trade secrets and information that is attorney-client privileged, attorney work product, or otherwise subject to a legal or professional confidentiality obligation stay protected for as long as they so qualify.

10.  Export, Suspension, and Termination. You may export Your Content in a standard, machine-readable format at any time while your account is active and for sixty (60) days after it ends. After that we will delete it on the timetable in Section 4 of Attachment A, unless a legal hold applies or we agree otherwise in writing.

  We may suspend an account or content where a violation of these Terms is material and uncured ten (10) business days after notice, or where immediate action is necessary to prevent harm or comply with law, and will limit any suspension to what is reasonably necessary.

  No suspension, for a use violation or non-payment, affects your ability to view and export Your Content, and we waive any lien or right of retention over Your Content for unpaid fees, recognizing that you have professional obligations to preserve and surrender client files.

  Either of us may terminate for material breach not cured within thirty (30) days after notice, and you may stop using the Service or cancel at any time as described in Section 4. On termination your right to access the Service ends, subject to the export period above.

  Sections 5 (ownership and your representations), 6, 7 (disclaimer of reliance and professional responsibility), 9, 11, 12, 14, this Section 10, any refund owed under Section 2, and any provision that by its nature should survive, all survive. Attachment A survives for as long as we hold any of Your Content, and its deletion, legal process, and privileged materials provisions survive indefinitely.

11.  Disclaimers and Limitation of Liability. EXCEPT AS EXPRESSLY STATED IN THESE TERMS AND ATTACHMENT A, AND TO THE MAXIMUM EXTENT PERMITTED BY LAW, THE SERVICE IS PROVIDED “AS IS” AND “AS AVAILABLE,” AND WE DISCLAIM ALL OTHER WARRANTIES, EXPRESS, IMPLIED, AND STATUTORY, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, NON-INFRINGEMENT, AND ANY WARRANTY ARISING FROM COURSE OF DEALING OR USAGE OF TRADE.

  WE DO NOT WARRANT THAT THE SERVICE WILL BE UNINTERRUPTED, SECURE, OR ERROR-FREE, OR THAT AI FEATURE OUTPUTS WILL BE ACCURATE. UPTIME STATEMENTS IN OUR MARKETING MATERIALS ARE NOT SERVICE LEVEL COMMITMENTS UNLESS SET OUT IN A SEPARATE AGREEMENT SIGNED BY BOTH PARTIES.

  NEITHER PARTY WILL BE LIABLE FOR INDIRECT, INCIDENTAL, CONSEQUENTIAL, SPECIAL, EXEMPLARY, OR PUNITIVE DAMAGES, OR FOR LOSS OF PROFITS, REVENUE, DATA, OR GOODWILL, EVEN IF ADVISED OF THE POSSIBILITY. THIS EXCLUSION DOES NOT APPLY TO YOUR OBLIGATION TO PAY FEES, TO AMOUNTS PAYABLE TO A THIRD PARTY UNDER SECTION 12, OR, FOR OUR BREACH OF SECTION 9 OR ATTACHMENT A, TO YOUR COSTS OF INVESTIGATING THE BREACH AND NOTIFYING AFFECTED CLIENTS, COURTS, AND REGULATORS.

  EACH PARTY’S AGGREGATE LIABILITY UNDER THESE TERMS WILL NOT EXCEED THE FEES YOU PAID US IN THE TWELVE (12) MONTHS BEFORE THE EVENT GIVING RISE TO THE LIABILITY, EXCEPT THAT FOR OUR BREACH OF SECTION 7 (NO TRAINING), SECTION 9 (CONFIDENTIALITY), OR ATTACHMENT A THAT CAP IS THREE (3) TIMES THAT AMOUNT. NEITHER CAP APPLIES TO YOUR OBLIGATION TO PAY FEES, TO INDEMNIFICATION UNDER SECTION 12, OR TO A PARTY’S GROSS NEGLIGENCE, WILLFUL MISCONDUCT, OR FRAUD. THESE LIMITS ARE A FUNDAMENTAL PART OF THE BARGAIN AND APPLY TO ALL THEORIES OF LIABILITY; WHERE A JURISDICTION DOES NOT PERMIT AN EXCLUSION, LIABILITY IS LIMITED TO THE MAXIMUM EXTENT IT PERMITS.

12.  Indemnity. You will defend us against any third-party claim that Your Content infringes that party’s intellectual property or was submitted in violation of law, arising from use of the Service in violation of Section 3, or arising from your or an Authorized User’s use of, reliance on, filing, service, disclosure of, or failure to independently review or verify an AI Feature output, and will indemnify us against damages, costs, and reasonable attorneys’ fees finally awarded or agreed in settlement.

  You have no obligation for claims to the extent arising from our breach of these Terms or Attachment A, our gross negligence or willful misconduct, or a security incident on systems under our control. We will give you prompt notice and reasonable cooperation at your expense, you control the defense, and neither of us will settle in a way that imposes liability on the other without consent.

13.  Changes to These Terms. We may update these Terms. For material changes we will give at least thirty (30) days’ notice by email to your account address, by notice in the Service, or by updating the “Last Updated” date above. Changes take effect for you at your next renewal, and continued use after that is acceptance. If you do not agree, cancel before the change takes effect and we will refund prepaid fees for any remaining term pro rata.

14.  General. These Terms and Attachment A are the entire agreement between us about the Service and supersede all prior agreements and communications on the same subject. Attachment A controls over the body of these Terms on any question of data processing, and a separate written agreement signed by both of us controls over both. No purchase order or other business form modifies these Terms.

  These Terms are governed by New York law, without regard to conflicts-of-laws principles, and the U.N. Convention on Contracts for the International Sale of Goods does not apply. Before starting a formal dispute, contact us at founders@concordahq.com describing the dispute and the relief sought, and we will try in good faith to resolve it within thirty (30) days.

  Any unresolved dispute will be brought exclusively in the state or federal courts in New York County, New York; each of us consents to jurisdiction and venue there, waives any right to a jury trial, and may seek injunctive relief there at any time.

  Notices to us go to founders@concordahq.com or Concorda, Inc., 21936 North Tall Oaks Drive, Kildeer, IL 60047; security reports to security@concordahq.com. Notices to you go to your account email and are effective absent an indication of delivery failure. Failure to enforce any provision is not a waiver; a provision held invalid will be modified to the minimum extent necessary to make it enforceable, with the rest staying in effect.

  You may not assign these Terms without our written consent; we may assign to a successor in a merger, acquisition, or sale of substantially all assets, and if you reasonably determine that successor is a competitor or an adverse party in a matter you are handling, you may cancel within thirty (30) days for a pro-rata refund. There are no third-party beneficiaries, and these Terms create no agency, partnership, joint venture, or employment relationship.

  Neither of us is liable for delay or failure to perform, other than payment obligations, caused by circumstances beyond reasonable control. You will not use or export the Service in violation of applicable export laws.

ATTACHMENT A

DATA PROCESSING ADDENDUM

  This Data Processing Addendum (the “DPA”) is part of the Terms and governs how Concorda processes Your Content, including personal information in it, on your behalf. Capitalized terms not defined here have the meanings given in the Terms. In this DPA, “Customer” means you and “Customer Data” means Your Content.

1.  Roles and Use of Customer Data Under the California Consumer Privacy Act, as amended (the “CCPA”), Customer is the business and Concorda the service provider for Customer Data; under comparable U.S. state privacy laws (with the CCPA, the “Privacy Laws”), Customer is the controller and Concorda the processor, or the equivalent. “Personal Information” means personal information or personal data in Customer Data that Concorda processes for Customer, and other CCPA terms carry their CCPA meanings.

  Customer decides the purposes and means of processing and is responsible for the accuracy and lawfulness of Customer Data, for having the rights and notices needed for Concorda to process it, and for deciding whether the Service suits its matters, clients, and professional obligations.

  Concorda will use Customer Data only to provide, secure, maintain, improve, and support the Service for Customer, and as the Privacy Laws permit or require. Concorda will not use it for any other purpose, will not sell or share it, will not retain, use, or disclose it for any purpose other than providing the Service or outside its direct business relationship with Customer, and will not combine Personal Information with other sources except as the CCPA allows.

  Concorda may derive aggregated and de-identified Usage Data as described in the Terms, provided it cannot identify Customer, its clients, or the substance of Customer Data. Concorda will provide the level of privacy protection the Privacy Laws require and will notify Customer if it can no longer meet its obligations.

2.  AI Model Providers Concorda may send limited portions of Customer Data to third-party AI model providers only as needed for features Customer requests or enables. Concorda does not use Customer Data to train, retrain, or fine-tune any AI model.

  Concorda uses enterprise or API configurations and contractual commitments designed to prevent model providers from training on Customer Data and, except as disclosed and enabled under the following sentence, enables zero- or no-retention processing with every provider that receives Customer Data. Concorda will not enable a provider or feature that cannot meet these conditions unless it first discloses the limitation and Customer expressly enables that feature.

3.  Security and Subprocessors Concorda maintains a written information security program appropriate to the sensitivity of the data and to Concorda’s size and stage, including role-based access controls, multi-factor authentication, encryption in transit and at rest, personnel confidentiality obligations and training, vulnerability and patch management, logging and monitoring, incident response, and business continuity.

  Only personnel who need Customer Data to provide, secure, or support the Service may access it, access is removed when no longer needed, and Concorda will not materially degrade this program while it holds Customer Data. On written request, once a year, Concorda will share its then-current security documentation and any certifications or audit reports it holds.

  Customer authorizes Concorda to use subprocessors, including the AI model providers in Section 2. Concorda maintains a current list of subprocessors, including all AI model providers and the countries in which Customer Data is processed, and makes it available on request.

  Concorda will give thirty (30) days’ notice before adding or replacing a subprocessor that will process Customer Data; if Customer reasonably objects on data protection or professional responsibility grounds, Customer may cancel for a pro-rata refund. Concorda requires each subprocessor to protect Customer Data to substantially this DPA’s standard and remains responsible for their performance.

4.  Retention, Deletion, and Assistance If Customer deletes Customer Data, asks Concorda in writing to delete it, or the export period in the Terms ends, Concorda will delete it from active production systems within thirty (30) days and from backups in the ordinary course of backup rotation and in any event within ninety (90) days, and will direct its subprocessors to do the same, unless retention is required by law, legal process, a litigation hold, or the Terms.

  Concorda will certify deletion in writing on request, and may keep audit, billing, and security records as reasonably necessary without using them to reconstruct deleted Customer Data. Concorda will reasonably assist Customer with verifiable consumer requests Customer cannot handle through the Service and with Customer’s security, breach-notification, and assessment duties under the Privacy Laws, and will forward any such request it receives about Customer Data.

5.  Security Incidents and Legal Process A “security incident” means confirmed unauthorized access to, acquisition of, loss of, or disclosure of Customer Data on systems under Concorda’s or a subprocessor’s control; unsuccessful intrusion attempts and scanning are not security incidents.

  Concorda will notify Customer without undue delay and in any event within seventy-two (72) hours after confirming a security incident, describing what is known, the Customer Data involved, and the steps it is taking, and will investigate, contain, remediate, keep Customer reasonably informed, and reasonably assist Customer in meeting its own notification obligations to clients, courts, and regulators. Notice is not an admission of fault.

  If Concorda receives a subpoena, court order, or other legal process seeking Customer Data, it will, where legally permitted, promptly notify Customer, give a reasonable opportunity to object or seek protection, and disclose only what is legally required, and will reasonably cooperate at Customer’s expense in efforts to quash or narrow the demand. Concorda will not otherwise voluntarily disclose Customer Data except as the Terms, this DPA, Customer’s instructions, or law permit.

6.  Privileged Materials and Conflicts Customer Data includes attorney-client privileged materials, attorney work product, and other protected materials. Concorda processes them solely as Customer’s confidential service provider, at Customer’s direction, to provide the Service. The parties intend that this will not waive or impair any privilege or protection, and Concorda will not take any position inconsistent with that intent.

  Concorda will treat the existence and content of Customer Data as confidential, will not access it except as necessary to provide, secure, or support the Service, and maintains access controls preventing any customer from reaching another’s data. Concorda will not knowingly permit personnel who accessed Customer Data for a matter to support an adverse party in that matter. Customer is responsible for reviewing and approving all outputs before use, filing, service, or disclosure.

7.  Precedence This DPA is part of the Terms and controls over the body of the Terms on any question regarding the processing of Customer Data or Personal Information. It is governed by New York law, and Concorda’s liability under it is subject to the limitations of liability in the Terms.