Terms of Use

1. Scope and Target Group

These Terms of Use apply to the use of the Klaus AI Workspace, operated by Klaus AI GmbH, Heinersdorferstr 50, 13086 Berlin, registered in the Commercial Register of the Amtsgericht Berlin-Charlottenburg (hereinafter "Provider").

The platform is intended exclusively for businesses within the meaning of § 14 BGB — in particular law firms, legal departments, and individual lawyers exercising their professional activity. A business is a natural or legal person or a partnership with legal capacity that, when concluding a legal transaction, acts in the exercise of its commercial or independent professional activity. Use by consumers within the meaning of § 13 BGB is not intended and not permitted.

By registering and using the platform, the user accepts these Terms of Use. If the user does not accept these terms, they may not use the platform.

2. Service Description

The Klaus AI Workspace provides a sovereign, BRAO-compliant AI assistant service for law firms and legal departments. The platform enables:

• • Interaction with multiple AI models for legal research, contract analysis, and document drafting
• • Creation and management of firm-specific knowledge bases and documents
• • Integration of firm data, workflows, and legal software (beA, DMS, case management systems)
• • Word-native AI output aligned with firm templates and formatting standards
• • AI certification and training via Klaus Academy

The exact scope of services is governed by the individual service agreement concluded between the Provider and the user. The platform uses AI models from subprocessors listed in the Subprocessor Schedule (Annex 1). The availability of these models is outside the Provider's direct control.

3. Professional Secrecy and BRAO Compliance

The Provider is aware that users are subject to professional secrecy obligations under § 43a BRAO and § 2 BORA. The platform is designed and operated to support compliance with these obligations:

• • All data is processed and stored exclusively in EU data centres.
• • The Provider and its subprocessors process user data solely for the purpose of providing the contracted service and do not use it for model training or any other secondary purpose without explicit consent.
• • The Provider concludes a Data Processing Agreement (DPA) pursuant to Art. 28 GDPR with each user before or at the time of platform activation. The DPA governs the specific obligations of the Provider as data processor.
• • Users remain solely responsible for assessing whether use of AI-assisted tools is compatible with their individual professional obligations and the instructions of their clients.

4. Rights of Use and Obligations

The user receives a non-exclusive, non-transferable right to use the platform within the scope agreed in the service agreement.

The user undertakes to:

• • Use the platform for lawful purposes only
• • Not upload harmful, unlawful, or defamatory content
• • Keep access credentials confidential and not share them with unauthorised persons
• • Not misuse or technically overload the platform
• • Not deploy automated systems for mass data retrieval

The user is prohibited from:

• • Using the platform for any illegal purpose
• • Creating disinformation or deliberately false content
• • Creating deepfakes or manipulated media content
• • Creating content that infringes third-party rights, including copyright, personality rights, and trademarks
• • Using the platform to circumvent security measures or harm third parties
• • Generating discriminatory, racist, or otherwise dehumanising content

5. Intellectual Property and Output Rights

All rights in the platform, including software, design, and trademarks, belong to the Provider or its licensors.

Content entered by the user remains the property of the user. The user grants the Provider the usage rights necessary to provide the contracted service. The Provider does not use user input for AI model training.

Regarding AI-generated outputs: the Provider transfers to the user, to the extent legally possible under applicable law, all exploitable rights to AI-generated content. The Provider makes no guarantee as to the protectability or registrability of generated content under intellectual property law.

6. Liability and Disclaimer for AI Content

The Provider is liable without limitation for intent and gross negligence, and for damages arising from injury to life, body, or health.

In cases of slight negligence, the Provider is liable only for breach of material contractual obligations (Kardinalpflichten). In such cases, liability is limited to the typical, foreseeable damage at the time of contract conclusion.

Liability for indirect damages and loss of profit is excluded to the extent permitted by mandatory law.

Important notice regarding AI-generated content:
The Provider does not warrant the accuracy, completeness, currency, or suitability of AI-generated results for any specific legal purpose. AI models may produce erroneous, incomplete, or outdated information. The user is solely responsible for independently verifying all AI-generated results for plausibility, accuracy, and fitness for purpose before any further use, in particular before reliance in legal proceedings, advice to clients, or submission to courts or authorities. Use of AI outputs is at the user's own professional risk.

7. Availability and Support

The Provider strives for high platform availability but does not guarantee uninterrupted availability. Planned maintenance will be communicated in advance where operationally possible.

Service delivery depends in part on the availability of third-party interfaces (APIs), in particular subprocessors listed in Annex 1. Disruptions or outages attributable to these third-party services are outside the Provider's control and do not give rise to claims against the Provider, provided the Provider has taken reasonable steps to mitigate the impact.

Support is provided in accordance with the agreed service agreement.

8. Data Protection and Data Processing

Personal data is processed in accordance with the Provider's Privacy Policy and in compliance with the GDPR and applicable German data protection law.

All data is processed and stored exclusively in EU data centres. The Provider does not transfer personal data to third countries.

Where the user processes personal data on behalf of others in the course of using the platform, a separate Data Processing Agreement (DPA) pursuant to Art. 28 GDPR is concluded between the Provider and the user. The DPA governs the specific obligations and rights of both parties in the context of data processing.

Upon termination of the contract, or upon request by the user, the Provider will delete or return all personal data processed on behalf of the user within 30 days, in accordance with the terms of the DPA.

The Provider maintains a record of processing activities pursuant to Art. 30 GDPR and makes it available to supervisory authorities upon request.

9. Subprocessors

The Provider uses the following subprocessors for the provision of AI model inference services. All subprocessors are contractually bound to GDPR-compliant data processing and to processing data exclusively within the EU or in countries with an adequate level of data protection as determined by the European Commission.

Annex 1 — Subprocessor Schedule

The Provider will inform users of any intended changes to this subprocessor list — additions or replacements — with reasonable advance notice (at least 14 days) by email or in-platform notification. Users who object to a new subprocessor on data protection grounds may terminate the contract with immediate effect within 14 days of notification.

10. Term and Termination

The contract term is governed by the individual service agreement.

Either party may terminate the contract for good cause with immediate effect. Good cause includes in particular:

• • Material breach of these Terms of Use or the service agreement, not remedied within 14 days of written notice
• • Payment default of more than 30 days
• • Filing for insolvency or commencement of insolvency proceedings against a party's assets
• • Persistent or repeated violation of professional secrecy or data protection obligations

Upon termination, the user's access to the platform will be deactivated. User data will be handled in accordance with the DPA and the data deletion obligations in §8.

11. Amendments to Terms of Use

The Provider reserves the right to amend these Terms of Use. Amendments will be communicated to the user by email and displayed upon next login, with a minimum notice period of 30 days before the amended terms take effect.

In the case of material amendments, the user has a special right of termination, exercisable within 14 days of notification. Continued use of the platform after expiry of the notice period constitutes acceptance of the amended terms.

12. Final Provisions

The law of the Federal Republic of Germany applies exclusively, to the exclusion of the UN Convention on Contracts for the International Sale of Goods (CISG).

The exclusive place of jurisdiction for all disputes arising from or in connection with these Terms of Use is, to the extent permitted by law, the registered office of the Provider (Berlin).

Should individual provisions of these Terms of Use be or become wholly or partially ineffective, the validity of the remaining provisions shall not be affected. The ineffective provision shall be replaced by a legally permissible provision that comes closest to the economic purpose of the ineffective provision.