Terms of Service

Introduction

Qorden AI LLTD | Registered Office: Unit GA-00-SZ-L1-RT-208 Level 1, Gate Avenue South Zone Dubai International Financial Centre (DIFC) Dubai, United Arab Emirates

IMPORTANT: Please read these Terms carefully before using any Qorden AI Service. By accessing, registering, or using any Product, you agree to be legally bound by this Agreement in its entirety.

Scope of this agreement

This Master Terms & Conditions Agreement (‘Agreement’) governs access to and use of all products and services operated by Qorden AI LTD under the Qorden AI brand (‘Qorden’, ‘we’, ‘us’, or ‘our’), including but not limited to:

[Qordenate]  AI-powered multilingual live video conferencing platform (qordenate.com)

[Dubbix]  AI video dubbing, lip-sync, and localization platform (dubbix.com)

[QDub]  Real-time voice-to-voice speech translation app (mobile and web)

[QSAP]  AI speech analytics platform for contact centres (qorden.ai/qsap)

Collectively, all of the above are referred to as the ‘Products’ or ‘Services’. Where a specific Product is subject to additional or varied terms, those terms are set out in the relevant Product-Specific Terms section of this Agreement and shall apply in addition to, and in the event of conflict shall prevail over, these General Terms.

All references to ‘Platform’ in this Agreement include, as applicable, any web application, mobile application, desktop application, API, SDK, browser extension, or other interface through which any Product is accessed.

Document structure & policy hierarchy

This Agreement consists of the following documents, incorporated in the order of precedence listed below (highest to lowest):

All incorporated policies are published at https://www.qorden.ai/legal. Updates take effect thirty (30) days after publication unless a shorter period is required by law or security reasons.

Electronic acceptance & records

Your electronic acceptance of this Agreement — whether by clicking ‘I Agree’, completing online registration, accessing the Services, or executing an Order Form electronically — constitutes a legally binding signature with the same legal effect as a handwritten signature. You further agree that:

• • Electronic records of your acceptance are admissible as evidence of agreement in any legal or regulatory proceeding.

• • Qorden may rely on electronic records to establish the existence and terms of this Agreement.

• • You waive any right to require a wet-ink or physical signature for this Agreement to be enforceable.

• Electronic communications between the parties satisfy any applicable writing requirement.

This clause is intended to comply with the UAE Electronic Transactions and Trust Services Law (Federal Decree-Law No. 46 of 2021) and equivalent applicable electronic commerce laws.

Key definitions

The following terms have the meanings set out below throughout this Agreement:

1. Eligibility

1.1 Legal capacity

You must be at least eighteen (18) years old and possess the legal authority to enter into binding agreements under applicable law.

1.2 Organisational authority

If accessing any Product on behalf of an organisation, you represent and warrant that you are duly authorised to bind such organisation to this Agreement.

1.3 Jurisdictional restrictions

You may not access or use the Services if prohibited by applicable law, sanctions regulations, export controls, or governmental restrictions. Qorden reserves the right to deny or revoke access where legal, regulatory, reputational, ethical, or security concerns arise.

2. Customer warranties & representations

You represent, warrant, and undertake to Qorden, on a continuing basis throughout the term of this Agreement, that:

• • You have lawful possession of, and all necessary rights to upload, process, and transmit, all Customer Data through the Services.

• • You have obtained all legally required consents, authorisations, and permissions from all individuals whose personal data or voice is processed through the Services.

• • You are not located in, incorporated in, or acting on behalf of any person or entity in a country or region subject to applicable sanctions administered by the UAE, United States, European Union, United Nations, or other applicable authority.

• • You are not listed on any applicable sanctions list, denied party list, or export control restricted parties list.

• • Your use of the Services complies with all applicable laws, regulations, and industry standards in your jurisdiction.

• • If entering into this Agreement on behalf of an organisation, you have full legal authority to bind that organisation.

• • All information provided to Qorden in connection with your Account registration and use is accurate, complete, and current.

• • You will maintain all necessary licences, permissions, and regulatory approvals required for your use of the Services in your jurisdiction.

• You are solely responsible for determining whether your intended use of the Services requires any sector-specific, telecommunications, healthcare, financial, governmental, biometric, or other regulatory approvals, licences, notices, or compliance obligations in your jurisdiction.

These warranties are material terms of this Agreement. Any breach entitles Qorden to immediately suspend or terminate your access without liability.

3. Account registration & security

3.1 Account creation

You agree to provide accurate, complete, and current registration information and to update it promptly if it changes.

3.2 Account responsibility

You are solely responsible for all activity under your Account, whether or not authorised by you.

3.3 Credential security

You must maintain strict confidentiality of all passwords, API keys, OAuth tokens, and access credentials. You must not share credentials with unauthorised persons.

3.4 Customer security obligations

As a condition of use, you agree to:

• • Maintain appropriate endpoint security on all devices used to access the Services.

• • Ensure all authorised users comply with this Agreement and applicable security policies.

• • Configure role-based access controls (RBAC) appropriately for your organisation.

• • Prevent unauthorised credential sharing or Account access.

• • Maintain independent backups of all Customer Data material to your operations.

• Promptly revoke access for any employee or contractor who leaves your organisation or changes role.

3.5 Security measures

Qorden may require MFA, conditional access controls, device verification, enterprise SSO, password rotation, and session monitoring across any Product.

3.6 Monitoring & abuse detection

You acknowledge and consent to Qorden monitoring usage metadata, API call patterns, session activity, and access logs for detecting and preventing abuse, enforcing Fair Use Limits, investigating security incidents, ensuring platform stability, and complying with applicable legal obligations. Qorden does not monitor the content of communications for commercial purposes.

3.7 Unauthorised access

You must immediately notify security@qorden.ai of any unauthorised access, suspected compromise, credential leakage, or suspicious activity.

3.8 Identity verification limitation

Qorden does not independently verify the identity, authority, legal capacity, or authenticity of any User. Qorden shall not be liable for impersonation, misrepresentation, fraudulent use of synthetic voice technologies, unauthorised account use, or reliance placed by any User on the identity or authority of another participant.

4. Services provided

4.1 Products overview

Qorden provides the following Products, each subject to these General Terms and the relevant Product-Specific Terms in Section 25:

4.2 Deployment options

Qorden offers standard cloud, sovereign cloud, private cloud, hybrid, and on-premise deployments across Products. Specific configurations are set out in the applicable Order Form.

4.3 Beta features

Beta features are provided ‘AS IS’ without warranties of any kind. Qorden may modify or discontinue beta features at any time without notice or liability.

4.4 Open source software

The Services may incorporate open source software (OSS) components governed by their respective licences. A list of material OSS components is available at https://www.qorden.ai/legal/oss-notices or upon written request.

4.5 Compliance certifications

Qorden’s current certification status (including ISO 27001, ISO 27018, and equivalent frameworks) is published at https://www.qorden.ai/security. Qorden does not guarantee sector-specific certifications (e.g. HIPAA, FedRAMP) unless expressly agreed in writing in an Order Form.

4.6 Reservation of rights

All rights not expressly granted to you under this Agreement are reserved by Qorden. No implied licences are granted.

4.7 Accessibility

Qorden endeavours to maintain its Products in accordance with applicable accessibility standards, including WCAG 2.1 Level AA where technically feasible. Public sector customers with specific accessibility compliance requirements should confirm applicable commitments in the Order Form.

4.8 Non-telecommunications service classification

Each Qorden Product is an application-layer software platform that operates exclusively over user-provided internet connectivity. Qorden does not provide public electronic communications services, PSTN connectivity, numbering resources, carrier interconnection, SIM services, or emergency calling services.

4.9 No emergency use

The Services are not designed, intended, or certified for emergency communications, public safety communications, life-support systems, or critical infrastructure operations. Users must not rely on any Product to contact emergency services. Qorden disclaims all liability arising from any use of the Services in emergency or safety-critical situations.

5. API terms

5.1 API licence

Qorden grants you a limited, non-exclusive, non-transferable licence to access and use Qorden APIs solely for your authorised internal business purposes and to develop integrations with the Products, subject to this Agreement and applicable API documentation.

5.2 API rate limits

API usage is subject to rate limits and Fair Use Limits as specified in your Subscription plan and the API documentation published at https://docs.qorden.ai. Exceeding rate limits may result in throttling, temporary suspension, or additional charges.

5.3 API deprecation policy

Qorden will provide at least ninety (90) days’ advance notice before deprecating or making breaking changes to any generally available API endpoint, except where shorter notice is required for security reasons. No backward compatibility guarantee applies to beta or preview endpoints.

5.4 API misuse

You must not use the APIs to scrape or harvest data in excess of your Subscription entitlements; circumvent rate limits or security controls; build unauthorised competing products; or access data belonging to other customers.

5.5 Mobile applications

Where Qorden makes iOS or Android applications available for any Product, your use is also subject to the applicable terms of Apple App Store or Google Play Store respectively. In the event of conflict, this Agreement prevails to the extent permitted by the relevant app store.

6. Service level agreement (SLA)

6.1 Uptime commitment

Qorden targets 99.9% monthly uptime availability for the core Platform across all Products, excluding Scheduled Maintenance and Force Majeure events.

6.2 Scheduled maintenance

Qorden will provide at least forty-eight (48) hours advance notice of scheduled maintenance via the status page at https://status.qorden.ai. Scheduled maintenance is excluded from downtime calculations.

6.3 Incident severity & response times

6.4 Service credits

Service credits are the sole and exclusive remedy for SLA failures. Credits must be claimed within thirty (30) days of the incident and cannot exceed the total monthly fee paid.

6.5 Support channels

• • Starter: Email support, business hours (09:00–18:00 GST, Monday–Friday).

• • Business: Email and chat support with extended hours.

• • Enterprise: Dedicated account manager, priority phone/video support, 24/7 P1/P2 coverage.

• Government / Sovereign: Custom SLA negotiated per Order Form.

6.6 Business continuity & disaster recovery

Qorden maintains automated backups with geographic redundancy; target RTO of four (4) hours and RPO of twenty-four (24) hours for standard cloud deployments; and annual DR testing. Enterprise RTO/RPO commitments are customised per Order Form.

7. Subscriptions, billing & payment

7.1 Subscription plans

Qorden offers Starter, Business, Enterprise, Government, and Custom plans across Products. Details are set out on qorden.ai or in the applicable Order Form.

7.2 Auto-renewal

Subscriptions automatically renew for successive equal periods at the then-current list price unless cancelled at least fifteen (15) days before renewal. Qorden will send a renewal reminder at least thirty (30) days before the renewal date. To cancel, notify support@qorden.ai in writing.

7.3 Usage limits & fair use policy

Each Subscription tier includes defined Fair Use Limits. If usage consistently exceeds these limits, Qorden may: (a) charge overage fees; (b) throttle usage; or (c) require a plan upgrade. Advance notice will be provided where reasonably practicable.

7.4 Trial & free tier terms

Where Qorden offers a free trial, sandbox, demo, or free-tier plan, such access is provided ‘AS IS’ without warranties; Qorden may delete trial data upon expiry without notice; trial environments must not be used for production workloads; and Qorden may terminate trial access at any time without liability.

7.5 Taxes

All fees exclude applicable taxes, including VAT, GST, and withholding taxes. You are responsible for all applicable taxes.

7.6 Late payments

Overdue invoices may result in suspension or termination of access. Qorden reserves the right to charge interest at the maximum rate permitted by applicable law.

7.7 Refund policy

Except where required by law or expressly agreed in writing, all fees paid are non-refundable. Cancelled subscriptions remain active until the end of the billing period.

7.8 Subscription changes

Users may upgrade their Subscription at any time. Downgrades require cancellation of the current plan and activation of the new lower-tier plan. Unused credits, quotas, or allowances from a prior plan shall not be transferred or refunded unless expressly stated by Qorden. Qorden shall not be liable for loss of access to features resulting from Subscription changes.

8. Licence, acceptable use & AI governance

8.1 Licence grant

Subject to this Agreement and payment of fees, Qorden grants you a limited, non-exclusive, non-sublicensable, revocable, non-transferable licence to access and use the Products solely for your authorised internal business purposes during the Subscription term.

8.2 Prohibited activities

You shall not, and shall not permit any third party to:

• • Reverse engineer, decompile, or attempt to derive source code from any Product.

• • Scrape or harvest data from any Product in an unauthorised manner.

• • Bypass, circumvent, or disable any security or access controls.

• • Create deceptive synthetic media or deepfakes using any Product.

• • Impersonate any individual, organisation, or entity.

• • Conduct unlawful surveillance or monitoring of any person.

• • Upload or transmit malware, viruses, or other harmful code.

• • Infringe any intellectual property rights of Qorden or any third party.

• • Use any Product in violation of any applicable law or regulation.

• • Use any Product to develop or train competing AI systems.

• • Resell, sublicence, or commercialise any Product without written authorisation.

• Publish benchmarks, competitive performance tests, latency comparisons, or AI quality assessments without Qorden’s prior written consent.

8.3 No professional advice

The Products and all AI Outputs are provided for informational purposes only. They do not constitute legal, financial, medical, compliance, regulatory, or professional advice of any kind. Translations, transcriptions, and dubbing produced by the Services are not certified and must not be relied upon without independent verification by a qualified professional. Users remain solely responsible for verifying all AI Outputs before use or publication.

8.4 Acceptable AI use & human oversight

When using AI Features across any Product, you agree to:

• • Ensure appropriate human review of all AI Outputs before reliance, particularly in regulated contexts.

• • Not use AI Outputs as the sole basis for automated decisions that produce legal effects on individuals.

• • Implement processes to detect and mitigate AI errors or biases in your downstream workflows.

• Comply with all applicable regulations governing automated decision-making, including GDPR Article 22 and equivalent laws.

8.5 AI hallucination risk

AI systems can produce outputs that are factually incorrect, misleading, or fabricated. You acknowledge that all AI Outputs — including translations, transcriptions, dubs, summaries, and generated content — must be independently validated before use in any publication, compliance filing, legal proceeding, regulated communication, or customer-facing context. Qorden shall not be liable for any loss or damage arising from your reliance on AI Outputs without appropriate validation.

8.6 AI explainability & reproducibility limitation

Qorden does not guarantee the explainability, reproducibility, determinism, or traceability of AI Outputs. AI models may produce different outputs for identical inputs across sessions due to model updates or inference variability, and may be updated, replaced, or retrained over time. Qorden will endeavour to notify enterprise customers of material AI model changes where reasonably practicable.

8.7 AI provider availability

Where AI Features rely on third-party AI inference providers, Qorden does not guarantee continuous availability of any specific AI provider or model, or consistency of AI outputs as underlying models evolve. Qorden reserves the right to substitute equivalent AI providers or models at its discretion without constituting a breach of this Agreement, provided the overall functionality of the Services is not materially diminished.

8.8 Feedback

If you provide Feedback to Qorden, you grant Qorden a perpetual, irrevocable, worldwide, royalty-free licence to use, incorporate, and commercialise such Feedback in the Services without restriction or compensation to you.

8.9 Export controls compliance

You shall comply with all applicable export control laws and regulations. You represent that you are not in, or acting on behalf of any person in, a sanctioned country or region.

8.10 Government use restrictions

Government customers agree to comply with all applicable national security laws; not use the Services for classified information unless expressly agreed in a sovereign Order Form; notify Qorden of applicable lawful interception obligations; and comply with all data localisation and sovereignty requirements.

8.11 Benchmarking restriction

You may not publish, disclose, or distribute benchmarks, performance tests, latency measurements, AI quality comparisons, or competitive analyses of any Product without Qorden’s prior written consent. This restriction does not prevent internal benchmarking for your own procurement evaluation purposes.

8.12 Non-solicitation

During the term of this Agreement and for twelve (12) months following termination, you agree not to directly solicit for employment any Qorden employee or contractor who was materially involved in the delivery of the Services to you, without Qorden’s prior written consent.

8.13 Real-time processing limitations

Users acknowledge that AI-powered translation, transcription, speech synthesis, voice cloning, dubbing, summarisation, and other automated processing features may involve latency, buffering, inference delays, or degraded performance due to technical limitations, network conditions, or third-party AI provider availability. Qorden does not warrant uninterrupted, instantaneous, or perfectly synchronised AI outputs.

9. Security standards

Where this Agreement refers to commercially reasonable efforts, safeguards, or measures, this standard shall be assessed by reference to: (a) ISO/IEC 27001:2022 and ISO/IEC 27018 information security management principles; (b) SOC 2 Type II trust service criteria; (c) industry-standard practices for SaaS platforms of comparable size and regulatory exposure; and (d) Qorden’s current published security posture at https://www.qorden.ai/security. Qorden’s current certification status constitutes prima facie evidence of meeting this standard. Qorden shall provide its most recent security certification summary to enterprise customers upon written request.

10. Sanctions, KYC & compliance

10.1 Sanctions screening

Qorden reserves the right to conduct sanctions screening and Know Your Customer (KYC) verification on prospective and existing customers. By using the Services, you consent to Qorden screening your organisation’s name, principals, and beneficial owners against applicable sanctions lists, and immediately terminating access if screening reveals a sanctions match or regulatory prohibition.

10.2 Ongoing compliance

You must notify Qorden immediately if you become subject to any sanctions, export control restrictions, or regulatory enforcement actions that may affect your eligibility to use the Services.

10.3 Anti-bribery & anti-corruption

Both Parties shall comply with all applicable anti-bribery, anti-corruption, anti-money laundering, and related ethical business conduct laws and regulations in the United Arab Emirates, including the UAE Penal Code under Federal Decree-Law No. 31 of 2021, and any other applicable UAE laws, regulations, or regulatory authority requirements. Each Party shall not, directly or indirectly, offer, give, request, receive, or authorize any bribe, facilitation payment, kickback, improper advantage, or anything of value intended to improperly influence any business decision, public official, private party, or commercial outcome.

11. User content & data

11.1 User responsibility

You are solely responsible for all content uploaded to or processed using the Services. You represent and warrant that you have all necessary rights, licences, and permissions for such content.

11.2 Ownership of customer data

You retain full ownership of all Customer Data. This Agreement does not transfer any ownership rights to Qorden.

11.3 Limited processing licence

You grant Qorden a limited, non-exclusive licence to process Customer Data solely for: providing the Services; security and integrity; maintenance and support; and lawful operational activities.

11.4 AI training restrictions

Unless expressly authorised in writing by you, Qorden shall not use Customer Data — including recordings, prompts, transcripts, documents, translated outputs, voice samples, video content, or biometric information — for training generalised AI models. Inference-time processing does not constitute model training. Qorden may use anonymised and aggregated metadata solely for analytics, benchmarking, security monitoring, and service optimisation.

11.5 Customer backup responsibility

You are solely responsible for maintaining independent backups of all Customer Data material to your business operations. Qorden’s operational backup systems are for platform continuity only and do not constitute a data backup service.

11.6 Biometric data & voice technologies

You shall not use the Services to clone voices without consent, impersonate individuals, create deceptive deepfakes, or engage in unlawful biometric profiling. You are solely responsible for compliance with all applicable biometric privacy laws. Voice samples, voiceprints, synthesised voice outputs, and video biometric data processed through the Services may constitute biometric or sensitive personal data under applicable laws. Users are solely responsible for obtaining all legally required notices and consents prior to processing such data.

11.7 Recording & processing consent

You are solely responsible for ensuring legally sufficient notice and consent from all participants before recording, transcribing, translating, dubbing, AI-analysing, or otherwise processing any meeting, call, voice, or video communication through any Product.

11.8 IP infringement & notice procedure

To report intellectual property infringement, submit a written notice to legal@qorden.ai (Subject: ‘IP Infringement Notice’) including: identification of the copyrighted work; identification of the infringing material; your contact information; a good faith belief statement; and a statement of accuracy.

11.9 Law enforcement & legal disclosure

Qorden may disclose Customer Data to law enforcement, regulators, or governmental authorities where required by applicable law, court order, subpoena, sanctions compliance, or to protect the rights, property, or safety of Qorden or others. Where legally permitted, Qorden will attempt to notify you before disclosure.

11.10 Data export & portability

During your Subscription, you may export Customer Data via the Platform or API in standard formats including JSON, CSV, and PDF. A thirty (30) day data retrieval window is available upon written request following termination.

12. Data protection & privacy

12.1 Privacy compliance

Qorden implements commercially reasonable safeguards to support compliance with the DIFC Data Protection Law, GDPR, UK GDPR, and other applicable international privacy regulations.

12.2 Security controls

Security measures include: end-to-end encryption in transit and at rest; role-based access controls; comprehensive audit logging; pseudonymisation; vulnerability management; and 24/7 monitoring across all Products.

12.3 International data transfers

Cross-border data transfers may occur subject to legally appropriate safeguards including standard contractual clauses (SCCs), UK Addendum, Swiss Addendum, or equivalent mechanisms. Customers may request applicable SCCs by contacting legal@qorden.ai.

12.4 AI inference data processing

Where Customer Data is processed by third-party AI inference providers, such providers act as sub-processors under Qorden’s data processing agreements. The applicable data processing role for each inference provider is specified in the subprocessor register at https://www.qorden.ai/legal/subprocessors.

12.5 Data residency

Subject to technical availability and Order Form terms, Qorden may provide UAE-hosted, EU-hosted, sovereign cloud, private cloud, or on-premise deployments.

12.6 Subprocessors

Qorden maintains a list of subprocessors used in delivering the Services. Qorden will notify customers of the current subprocessor list upon onboarding and will provide thirty (30) days’ notice of any material subprocessor changes.

12.7 Audit rights & security documentation

Upon written request, Qorden will make available: summaries of security certifications; responses to security questionnaires; and penetration test executive summaries. All security documentation is Confidential Information.

12.8 Security incidents & breach notification

Qorden will notify customers of confirmed material personal data breaches within seventy-two (72) hours where reasonably practicable, providing sufficient information to enable regulatory notification.

12.9 Data retention & deletion

13. Confidentiality

Each party agrees to hold the other’s Confidential Information in strict confidence using at least the same degree of care as it applies to its own confidential information, but no less than reasonable care. Confidential Information includes: technical information, source code, business plans, pricing, customer data, security architecture, and trade secrets. Confidentiality obligations survive termination for five (5) years, or indefinitely for trade secrets.

14. Intellectual property

Qorden retains all rights, title, and interest in the Services and each Product, including all software, APIs, AI systems, voice technologies, trademarks, documentation, infrastructure, and proprietary algorithms. No ownership rights are transferred to you. All rights not expressly granted are reserved by Qorden.

Certain intellectual property, core AI systems, models, and proprietary technologies used in the Services may be owned by Qorden AI Ltd. (Dubai) or its affiliates and licensed to Qorden AI LTD for commercial use. Nothing in this Agreement grants you any rights in such underlying intellectual property beyond the limited licence expressly granted in Section 8.1.

14.1 Publicity & logo usage

Neither party may use the other’s name, logo, or trademarks in any public announcement, marketing material, or press release without prior written consent. Qorden may list your organisation’s name as a customer unless you provide written objection to marcom@qorden.ai.

14.2 Equitable relief for IP & security violations

You acknowledge that any breach of your confidentiality or intellectual property obligations may cause irreparable harm for which monetary damages would be inadequate. Qorden shall be entitled to seek immediate injunctive relief from any court of competent jurisdiction without the requirement of posting bond or proving actual damages.

15. Suspension rights

Qorden may immediately suspend access, without prior notice, where reasonably necessary to protect the platform, other customers, or comply with applicable law. Suspension does not affect your obligation to pay outstanding fees. Qorden shall not be liable for losses arising from a good-faith suspension.

16. Third-party services & integrations

The Services may integrate with third-party platforms, including cloud providers (AWS), AI inference providers (including NVIDIA infrastructure), translation engines, communication tools, and analytics systems. Qorden is not responsible for third-party outages, security failures, API failures, or external policies. Use of third-party integrations is subject to applicable third-party terms.

17. Service modifications

Qorden may modify, enhance, update, suspend, or discontinue any part of any Product. Where reasonably practicable, Qorden will provide at least thirty (30) days’ advance notice of material changes. Continued use after modification constitutes acceptance.

18. Termination

18.1 Termination by user

You may terminate your Subscription by providing written notice in accordance with your plan’s cancellation terms. Unless otherwise agreed, termination takes effect at the end of the then-current billing period.

18.2 Termination by Qorden

Qorden may suspend or terminate access immediately for material violation of this Agreement, security risks, fraud, unlawful conduct, non-payment, sanctions exposure, or regulatory requirements.

18.3 Effects of termination & survival

Upon termination, your access rights immediately cease and all licences terminate. Outstanding fees remain payable. Sections 2, 10, 11.5, 12.9, 13, 14, 19, 20, 21, 4.8, 4.9, and 8.13 survive termination.

19. Disclaimers & limitation of liability

19.1 Disclaimer of warranties

THE SERVICES ARE PROVIDED ‘AS IS’ AND ‘AS AVAILABLE’ WITHOUT WARRANTIES OF ANY KIND. QORDEN DISCLAIMS ALL WARRANTIES INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, ACCURACY, AND AVAILABILITY.

19.2 AI output disclaimer

QORDEN SHALL NOT BE LIABLE FOR MISTRANSLATIONS, TRANSCRIPTION INACCURACIES, DUBBING ERRORS, AI HALLUCINATIONS, OR AUTOMATED OUTPUTS. AI OUTPUTS DO NOT CONSTITUTE LEGAL, FINANCIAL, MEDICAL, COMPLIANCE, OR PROFESSIONAL ADVICE. HUMAN REVIEW IS STRONGLY RECOMMENDED FOR ALL REGULATED COMMUNICATIONS.

19.2A Platform as conduit

Qorden operates as an assistive communication technology platform and functions as a conduit for the transmission and AI-assisted processing of user-generated content. Qorden does not author, publish, originate, or editorially control the content of communications, translations, transcriptions, dubs, or summaries processed through the Services. All AI Outputs are generated in direct response to user-provided inputs and are processed at the direction of the user.

19.3 Limitation of liability

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, QORDEN SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES. QORDEN’S TOTAL AGGREGATE LIABILITY FOR ALL CLAIMS UNDER THIS AGREEMENT SHALL NOT EXCEED THE TOTAL FEES PAID DURING THE TWELVE (12) MONTHS PRECEDING THE CLAIM.

19.4 Exceptions to liability cap

The limitation in Section 19.3 shall not apply to losses arising from: Qorden’s gross negligence or wilful misconduct; fraud or fraudulent misrepresentation; material breach of confidentiality obligations; material breach of data protection obligations resulting in a confirmed personal data breach; infringement of your intellectual property rights; death or personal injury caused by Qorden’s negligence; or any liability that cannot be excluded or limited by applicable law.

19.5 Limitation period

No claim arising out of or relating to this Agreement may be brought more than one (1) year after the date on which the claiming party knew, or reasonably should have known, of the facts giving rise to the claim.

20. Indemnification

You agree to indemnify and hold harmless Qorden, its officers, directors, employees, agents, affiliates, and licensors from claims, liabilities, damages, and expenses (including reasonable legal fees) arising from: your unlawful use of any Product; your Customer Data; privacy violations; biometric misuse; failure to obtain consent; intellectual property infringement; breach of your warranties in Section 2; unauthorised recordings; regulatory violations; and sanctions breaches.

20.1 Biometric & recording indemnity

You specifically indemnify Qorden from all claims arising from unlawful recording, failure to obtain consent, biometric privacy violations, unauthorised voice cloning, and unlawful surveillance across all Products.

20.2 AI output & translation indemnity

You agree to indemnify, defend, and hold harmless Qorden from any claims, losses, liabilities, damages, costs, or expenses arising from: your misuse or unverified reliance on AI-generated translations, transcriptions, dubs, summaries, or other AI Outputs; any third-party claim of defamation, misrepresentation, or reputational harm arising from AI Output you transmitted without independent verification; any claim arising from AI-translated or dubbed communications used in legal, medical, financial, or consent-related contexts; impersonation or fraud enabled through misuse of AI voice synthesis, voice cloning, or real-time voice translation features; and any unlawful, harmful, or illegal content you introduced into the Services.

20.3 Qorden reciprocal indemnity

Qorden agrees to indemnify and hold harmless you, your officers, directors, and employees from direct third-party claims arising from: Qorden’s material breach of its confidentiality obligations under Section 13; a confirmed personal data breach caused by Qorden’s failure to maintain committed security measures; or Qorden’s infringement of a third party’s intellectual property rights through the core Services as delivered. This reciprocal indemnity is subject to the liability cap in Section 19.3 and the exceptions in Section 19.4.

21. Governing law & dispute resolution

21.1 Governing law

This Agreement shall be governed as follows:

(a) For Customers contracting with Qorden AI Ltd., incorporated in the Dubai International Financial Centre (DIFC), United Arab Emirates, including customers outside the European Union (EU), European Economic Area (EEA), and the United Kingdom, this Agreement shall be governed by the laws of the Dubai International Financial Centre (DIFC), United Arab Emirates.

21.2 Good-faith resolution

Before initiating formal proceedings, both parties agree to attempt good-faith resolution discussions for at least thirty (30) days from written notice of the dispute.

21.3 Arbitration

This Agreement shall be governed as follows:

(a) For Customers contracting with Qorden AI Ltd., incorporated in the Dubai International Financial Centre (DIFC), United Arab Emirates, including customers outside the European Union (EU), European Economic Area (EEA), and the United Kingdom, this Agreement shall be governed by the laws of the Dubai International Financial Centre (DIFC), United Arab Emirates.

21.4 Interim relief

Either Party may seek urgent interim, injunctive, or conservatory relief from the competent courts of the United Arab Emirates where such relief is necessary to protect its rights, confidential information, intellectual property, or other legitimate interests. Seeking such relief shall not constitute a waiver of any agreement to arbitrate or any other agreed dispute resolution mechanism between the Parties.

21.5 Class action waiver

To the fullest extent permitted by applicable law, you waive any right to bring or participate in any class action, collective action, or representative proceeding against Qorden. All claims must be brought on an individual basis.

22. Force majeure

Neither party shall be liable for delays or failures caused by events beyond reasonable control, including cyberattacks, telecommunications failures, internet outages, natural disasters, pandemics, labour disputes, war, terrorism, or governmental actions. The affected party must promptly notify the other and take all reasonable steps to mitigate the impact.

Carve-out: Force majeure does not apply to, and Qorden remains fully liable for, any security incident caused or contributed to by Qorden’s own negligence, failure to apply security patches, or failure to maintain industry-standard security controls.

23. General provisions

23.1 Entire agreement

This Agreement, together with all applicable policies and any Order Form, constitutes the entire agreement between the parties and supersedes all prior agreements, negotiations, representations, warranties, and understandings, whether oral or written.

23.2 Severability

If any provision is found unenforceable, it shall be modified to the minimum extent necessary. All remaining provisions continue in full force.

23.3 Waiver

No failure or delay in exercising any right constitutes a waiver. Any waiver must be in writing and signed by an authorised representative.

23.4 Assignment

You may not assign this Agreement without Qorden’s prior written consent. Qorden may assign this Agreement in connection with a merger, acquisition, or sale of substantially all assets.

23.5 Changes to terms

Qorden may modify these Terms from time to time. Material changes will be notified at least thirty (30) days in advance by email or Platform notice. Continued use after the effective date constitutes acceptance.

23.6 Notices

All legal notices shall be in writing to legal@qorden.ai (for Qorden) or the email address associated with your Account (for you).

23.7 Language

This Agreement is made in the English language. In the event of any translation, the English version shall prevail.

23.8 Group structure & affiliate performance

Qorden AI LTD is part of the Qorden group of companies and may perform its obligations under this Agreement directly or through its parent company, affiliates, subsidiaries, subcontractors, infrastructure partners, or service providers. Where Services are performed by Qorden AI Ltd. (Dubai) or any affiliate, such performance shall be deemed performance by Qorden AI LTD for the purposes of this Agreement. The contracting party and primary legal counterparty shall remain Qorden AI LTD unless expressly stated otherwise in an applicable Order Form.

24. Contact information

25. Product-specific terms

The following Product-Specific Terms supplement the General Terms above and apply to each respective Product. In the event of conflict, these Product-Specific Terms shall prevail with respect to the relevant Product.

25.1 Qordenate — Multilingual live video conferencing

Scope

Qordenate is Qorden’s AI-powered live video conferencing platform with real-time multilingual translation, transcription, AI summarisation, sentiment analysis, keyword detection, meeting intelligence, webinar hosting, and compliance monitoring capabilities, supporting 33+ languages.

Key obligations

• • Meeting organisers are responsible for informing all participants of AI translation, transcription, recording, and analysis features prior to the session.

• • Consent must be obtained from all participants before recording, transcription, or AI analysis is activated. Organisers bear sole responsibility for consent collection and any applicable regulatory obligations.

• • Qordenate is not a certified telecommunications service. It must not be used as a substitute for regulated communication services or for emergency communications.

• • Webinar and large-event sessions are subject to the participant and duration limits specified in the applicable Subscription plan or Order Form.

• • AI-generated meeting summaries, action items, and sentiment scores are indicative only and must be independently reviewed before reliance in any business, legal, or compliance context.

• Enterprise, government, and regulated-industry customers should confirm data residency, sovereignty, and deployment requirements in the applicable Order Form before processing sensitive information.

AI translation disclaimer

Real-time AI translations on Qordenate are assistive outputs designed to facilitate communication. They may contain errors, omissions, or inaccuracies. They are not certified translations and must not be relied upon as such in any legal, medical, financial, regulatory, or safety-critical context. Users transmit AI-translated communications at their own risk.

Recording consent

Qordenate provides recording functionality. All session recordings are the responsibility of the meeting host. Qorden provides recording and storage infrastructure only. Users are solely responsible for compliance with all applicable recording consent, wiretapping, data protection, and communications surveillance laws in all jurisdictions where session participants are located.

Competitor restrictions

You may not use Qordenate to benchmark, compare, or evaluate its AI translation or conferencing capabilities against competing products or services, or publish any such comparison, without Qorden’s prior written consent.

25.2 Dubbix — AI creative platform (video dubbing, voice cloning, video generation & more)

25.2.1 Scope & product suite

Dubbix is Qorden AI’s AI-powered creative platform, operated by Qorden AI Ltd., and accessible at dubbix.com. Dubbix is integrated within the broader Qorden AI ecosystem and provides a comprehensive suite of AI-powered audio-visual production tools including:

• • Video Dubbing — AI dubbing with precise lip-sync and cloned voices across 33+ languages.

• • Text-to-Speech — Natural, human-like speech synthesis with multiple voice, tone, accent, and gender options.

• • Speech Cloning — Precision replication of any voice while maintaining the speaker’s unique intonations and nuances.

• • Speech-to-Speech — Instant voice-to-voice translation and transformation with accent, pitch, and emotion control.

• • Video Generation — AI video creation from text, images, or scripts, including text-to-image, image-to-image, image-to-video, and text-to-video outputs.

• • AI Avatars — Talking digital avatars for education, marketing, and content creation, which may be animated, lip-synced, or voice-driven.

• • Accent Shift — Real-time or post-production accent modification.

• AV Summarizer — Automated transcription, translation, topic extraction, key moment detection, and short-form summary generation from audio and video files.

These Product-Specific Terms for Dubbix supplement the General Terms of this Agreement. In the event of conflict, these Product-Specific Terms shall prevail with respect to Dubbix.

25.2.2 Eligibility

To use Dubbix, you must be at least 18 years old and possess the legal capacity to enter into a binding agreement under applicable law. Users under 18 may only use Dubbix under the supervision of a parent or legal guardian who agrees to be bound by these Terms on their behalf. You are responsible for ensuring that your use of Dubbix complies with the legal age requirements in your jurisdiction.

25.2.3 Voice cloning & speech cloning — mandatory consent requirement

Voice cloning and speech cloning using Dubbix are strictly prohibited without the prior express informed consent of the individual whose voice is being cloned, replicated, or synthesised. This prohibition applies regardless of whether the voice subject is a public or private individual, and regardless of whether the cloned voice is used in the cloner’s own content or in content relating to others. Failure to obtain lawful consent constitutes a material breach of this Agreement and may expose you to criminal and civil liability under applicable biometric privacy, voice fraud, synthetic media, and identity impersonation laws. You must obtain and retain records of all required consents prior to initiating any voice cloning or speech cloning session.

25.2.4 Video generation — specific obligations

Where you use Dubbix’s video generation features (including text-to-image, image-to-image, image-to-video, and text-to-video), the following additional obligations apply:

• • You represent and warrant that you have all necessary rights, permissions, and consents for any input you provide, including rights of publicity and privacy for any identifiable person and rights to any copyrighted or trademarked material.

• • You must not generate content that depicts or reasonably appears to depict a real, identifiable person without that person’s prior informed consent.

• • You must not generate content that is intended or likely to deceive, defraud, mislead, or impersonate, including political misinformation or manipulated media presented as authentic.

• • Synthetic likeness of private individuals who are not public figures is prohibited without their express prior consent.

• • You may not request or create outputs that reproduce or are substantially similar to copyrighted works, branded characters, protected logos, or other proprietary material without authorisation.

• • You are solely responsible for clearing any third-party rights that may be required for your intended use of generated outputs, including music, fonts, and brand elements.

• Dubbix may apply provenance signals, watermarks, or content authenticity metadata to generated content. You agree not to remove, alter, or obscure any such markers where applied. Dubbix is a partner of the Content Authenticity Initiative (CAI) and follows its guidelines to ensure transparency in digital content.

Creating videos longer than 30 minutes using Dubbix Studio is an advanced feature intended for professional AI creators with full training on Dubbix’s proprietary scripting and editing tools. New users should begin with short-form content. Outputs generated without sufficient technical knowledge of Dubbix Studio tools may not meet quality standards and are generated at the User’s sole risk.

25.2.5 AI avatars — likeness & consent

Where you use Dubbix’s AI Avatar features:

• • If an avatar is modelled on a real person, you must have that person’s prior informed consent for capture, training, and all intended uses, including commercial uses where applicable.

• • You must not create or deploy avatars that impersonate private individuals, or that are used to deceive or mislead audiences about the identity or nature of the content creator.

• You are responsible for all outputs generated with avatars you create or control, including compliance with advertising, consumer protection, and disclosure rules where an avatar is presented as a human spokesperson.

25.2.6 AV summarizer — accuracy & lawful sources

AI-generated summaries, transcriptions, and translations produced by the AV Summarizer are machine-generated and may be incomplete, imprecise, or out of context. They are provided for convenience only and are not a substitute for the underlying content, professional advice, or human review. You are responsible for validating any summary before relying on it for legal, medical, financial, safety, or other high-stakes purposes.

You must have the right to upload and process any media submitted for summarisation, including consent from participants where required and compliance with applicable recording, wiretapping, and privacy laws in all jurisdictions where participants are located.

25.2.7 Prohibited content

The following categories of content are prohibited across all Dubbix features:

• • Copyright-infringing content — material that infringes on any third-party copyright, trademark, patent, or other intellectual property rights, without a lawful licence or authorisation.

• • Illegal or harmful content — content that is unlawful, abusive, defamatory, fraudulent, harassing, obscene, or otherwise in violation of local, national, or international laws.

• • Hate speech or violence — content that promotes hate speech, violence, discrimination, or harm against individuals or groups based on protected characteristics.

• • Sexual or exploitative content — sexually explicit material, and any content that sexually exploits or endangers minors.

• • Deepfakes and deceptive media — content designed to deceive audiences about its AI-generated nature, or to impersonate, defraud, or misrepresent any individual or organisation.

• • Political manipulation — content intended for political manipulation, disinformation campaigns, or propaganda.

• • Malicious content — content containing viruses, malware, or other harmful software.

• • Privacy-invasive content — content that invades privacy, exposes personal data without consent, or facilitates unlawful surveillance.

• VPN and location manipulation — you agree not to use a VPN, proxy, or any other tool that changes, hides, or manipulates your actual geographic location to access or use Dubbix’s services. Dubbix reserves the right to restrict or terminate access if such activity is detected.

25.2.8 Content review, rejection & moderation

Dubbix uses automated and manual review systems to ensure user-uploaded content complies with these Terms and its Content Moderation Policy (published at dubbix.com/content-moderation). Dubbix may block, blur, watermark, refuse to generate, remove, or disable access to content that violates these Terms or poses legal, safety, or reputational risk. Where content is rejected, users will be notified via email or within the platform. Users may appeal rejections by contacting Dubbix’s support team. Decisions on appeals are final. Repeated policy violations may result in account suspension or permanent termination without refund.

25.2.9 Inputs, outputs & licence

You retain ownership of all content you upload to Dubbix (‘inputs’). By uploading inputs, you grant Qorden a limited, non-exclusive, royalty-free licence to use, host, store, process, and transmit your inputs solely to provide and maintain the Services and to comply with law. Subject to these Terms, to any third-party rights in your inputs or references, and to your applicable Subscription plan, Qorden grants you a licence to use outputs generated by Dubbix for your permitted purposes. You are responsible for securing any third-party permissions required for your intended use of outputs. Qorden does not guarantee that outputs will be unique or that the same or similar outputs will not be generated for other users.

Qorden does not use your inputs or outputs to train AI models unless you have provided explicit, revocable opt-in consent as described in the Privacy Policy. Qorden may use aggregated, de-identified telemetry to operate and improve the Services.

25.2.10 Content ownership & third-party rights

You represent and warrant that you own all necessary intellectual property rights, licences, clearances, and permissions in and to all audio, video, text, image, and other materials submitted to Dubbix for processing. You are solely responsible for ensuring compliance with all applicable intellectual property, personality rights, privacy rights, and performance rights obligations. Qorden shall not be liable for any intellectual property infringement, personality rights violations, defamation claims, or related claims arising from content you submit to or generate with Dubbix.

25.2.11 AI disclosure obligations

Where AI-generated or AI-modified content produced using Dubbix is published, distributed, or shared with audiences in jurisdictions that require disclosure of AI-generated or AI-modified media (including disclosures required under applicable consumer protection, election integrity, or AI transparency laws), you are solely responsible for ensuring that all required disclosures, labels, or notices are applied to such content prior to publication. Qorden does not apply AI disclosure labels automatically.

25.2.12 Quality & processing limitations

Dubbix uses AI to produce lip-sync accuracy, voice matching, video generation, and other outputs. Results may vary depending on the source material quality, file format, language complexity, speaker characteristics, video length, and system load. Supported file formats include MP3, WAV, AAC, and MP4, among others. Processing times may vary depending on content length and complexity. Dubbix does not guarantee perfect accuracy, tonal fidelity, or linguistic precision in any output. All Dubbix outputs — including dubs, voice clones, generated videos, avatar animations, and summaries — must be reviewed before publication in any commercial, regulated, or legally significant context.

25.2.13 Affiliate programme

Dubbix operates an Affiliate Programme that allows individuals and businesses to earn commissions by referring customers to Dubbix. Participation in the Affiliate Programme is subject to the following conditions:

• • Affiliates must be at least 18 years old, possess legal capacity to enter into binding agreements, and comply with all applicable laws including advertising, marketing, and privacy regulations.

• • Affiliates must promote Dubbix truthfully and accurately and must clearly disclose their affiliate relationship in any promotions in compliance with applicable advertising standards (including FTC guidelines where applicable).

• • Affiliates must not use spam, bots, fake accounts, fraudulent click generation, or unauthorised incentives to generate referrals. Prohibited promotional practices may result in removal from the programme and forfeiture of commissions.

• • Commissions are earned on qualifying transactions — defined as purchases or subscriptions completed by referred users within the specified attribution window. Refunded, cancelled, or fraudulent transactions are excluded.

• • Commissions are paid monthly upon reaching the minimum payout threshold specified in the Affiliate Programme documentation.

• • Affiliates are granted a limited, non-exclusive, revocable licence to use Dubbix trademarks and marketing materials solely for promotion under the Affiliate Programme. This licence terminates immediately upon exit from the Programme.

• • Affiliates are solely responsible for reporting and paying all applicable taxes on commissions received. Qorden does not withhold taxes unless required to do so by law.

• Qorden reserves the right to modify or terminate the Affiliate Programme at any time. Outstanding commissions will be paid subject to minimum payout thresholds. Affiliates who breach these Terms may forfeit all unpaid commissions.

25.2.14 Pricing, payment & refunds

Dubbix offers subscription plans, pay-per-use pricing, and Dubbix Studio plans. Pricing details are published at dubbix.com/pricing and dubbix.com/dubbix-studio-pricing and may be updated from time to time. Subscription fees are billed at the start of each billing cycle on a recurring basis. Pay-per-use services are billed immediately upon purchase. All fees exclude applicable taxes including VAT and GST, which will be added at checkout where applicable.

Refunds for Dubbix services are subject to the following: completed voice transformations, processed files, or rendered outputs may be non-refundable once generated; subscription cancellations take effect at the end of the current billing cycle with no prorated refund unless otherwise specified; and refund eligibility for technical issues or content rejections will be assessed at Dubbix’s reasonable discretion. Disputes regarding charges must be raised with Dubbix support within thirty (30) days. Filing a chargeback without first contacting Dubbix may result in account suspension.

25.2.15 Mobile application terms

Dubbix mobile applications are available on iOS (Apple App Store), Android (Google Play Store), and Huawei (AppGallery). Use of such applications is subject to the applicable terms of the relevant app store. In the event of conflict between those terms and this Agreement, this Agreement prevails to the extent permitted by the relevant app store.

25.2.16 Dispute resolution — Dubbix

In the event of any dispute relating specifically to Dubbix services, the parties agree to first attempt informal resolution by contacting Dubbix support at legal@qorden.ai, providing a detailed description of the dispute. Both parties agree to engage in good faith negotiations for at least thirty (30) days before initiating formal proceedings. Formal disputes shall then be resolved in accordance with Section 21 of this Agreement (Governing Law & Dispute Resolution). Claims arising out of Dubbix services must be filed within six (6) months after the relevant claim or cause of action arose; claims filed after this period are permanently waived to the extent permitted by applicable law.

25.3 QDub — Real-time voice-to-voice speech translation

Scope

QDub is Qorden’s real-time voice-to-voice speech translation application, available on mobile (iOS, Android) and web. QDub translates spoken language live as conversations happen, supporting 33+ languages.

Permitted use

• • Personal and professional real-time multilingual communication.

• • Business conversations, negotiations, customer interactions, and informal communications where both parties are aware of AI translation being in use.

• Healthcare, legal, and other sensitive communications where AI-assisted communication is disclosed to all parties.

Key obligations

• • You must inform all parties to a conversation that QDub’s AI translation is being used to assist communication.

• • QDub is not a certified interpreter service. Real-time translations may contain errors, particularly for technical, legal, medical, or culturally nuanced content.

• • You must not rely solely on QDub translations for legally binding communications, contracts, medical instructions, consent processes, or any context where the precise meaning of language is critical to outcomes.

• You are responsible for ensuring that the use of QDub in any sector-specific context (healthcare, legal, financial, governmental) complies with all applicable laws and professional standards in your jurisdiction.

Real-time processing acknowledgment

QDub’s AI translation is processed in real time and is subject to latency, connectivity dependencies, accuracy limitations, and inference variability. QDub does not guarantee uninterrupted, error-free, or instantaneous translation under all conditions. Qorden shall not be liable for losses arising from translation delays, errors, omissions, or failures in time-sensitive communication contexts.

Mobile application terms

QDub mobile applications are subject to the applicable terms of Apple App Store (iOS) and Google Play Store (Android). In the event of conflict between those terms and this Agreement, this Agreement prevails to the extent permitted by the relevant app store. System requirements, device compatibility, and supported OS versions are published at https://www.qorden.ai/qdub/requirements.

Offline & low-connectivity limitations

Certain QDub features may require an active internet connection. Qorden does not guarantee QDub functionality in offline, low-bandwidth, or restricted-network environments. Users operating QDub in such environments do so at their own risk.

25.4 QSAP — AI speech analytics for contact centres

Scope

QSAP is Qorden’s AI-powered speech analytics platform designed for contact centre environments. QSAP monitors 100% of calls automatically, providing real-time and post-call compliance flagging, agent coaching triggers, sentiment analysis, keyword detection, multilingual analytics, and reporting across all languages agents work in.

Mandatory legal compliance — call recording & monitoring

The use of QSAP to record, monitor, transcribe, translate, or AI-analyse calls is subject to extensive telecommunications, data protection, and employment laws that vary significantly by jurisdiction. You are solely responsible for ensuring that your use of QSAP complies with all applicable call recording consent requirements, wiretapping laws, employment monitoring regulations, data protection laws (including GDPR, DIFC Data Protection Law, and applicable national laws), financial services regulations, and any sector-specific monitoring obligations in every jurisdiction where QSAP is deployed or where call participants are located.

Agent monitoring obligations

• • You must provide all agents and employees whose calls are monitored with clear, legally sufficient notice of call recording and AI analysis prior to deployment of QSAP.

• • Where applicable law requires employee consent for monitoring, you must obtain and maintain records of such consent.

• • Agent performance data, coaching triggers, sentiment scores, and compliance flags generated by QSAP must be used in a manner compliant with applicable employment law, labour rights regulations, and data protection obligations, including GDPR restrictions on automated decision-making in employment contexts.

• You must implement human review processes before taking any employment action, performance assessment, or disciplinary decision based on QSAP outputs. QSAP outputs must not be used as the sole automated basis for employment decisions.

Customer call recording — third-party consent

• • You are solely responsible for ensuring that all external customers, clients, and third parties whose calls are processed by QSAP are provided with lawfully sufficient notice and consent disclosures prior to call commencement.

• Consent records must be maintained by you for the duration required by applicable law and made available to Qorden upon request where required for audit or regulatory compliance purposes.

Accuracy limitation

QSAP’s AI transcription, translation, sentiment analysis, compliance flagging, and keyword detection capabilities are automated tools designed to assist contact centre management. They may not achieve 100% accuracy in all languages, accents, acoustic environments, or call conditions. QSAP outputs must be reviewed by qualified supervisors before being relied upon for compliance reporting, regulatory submissions, legal proceedings, or employment decisions.

Regulatory & sector-specific compliance

Customers using QSAP in regulated sectors — including financial services, healthcare, insurance, telecommunications, and government — are solely responsible for ensuring that QSAP is deployed in a manner consistent with all applicable sector-specific regulations, including but not limited to MiFID II, FCA conduct rules, HIPAA, PCI-DSS, and equivalent frameworks. Qorden does not warrant that QSAP is pre-certified or pre-approved for use in any regulated sector and recommends independent legal and compliance assessment prior to deployment in regulated environments.

Data retention for call recordings

Call recordings and analytical outputs processed through QSAP are subject to the data retention schedules in Section 12.9. Enterprise customers with sector-specific retention requirements (e.g. financial services record-keeping obligations) should configure custom retention settings in the Order Form and ensure such settings comply with applicable regulatory obligations. Qorden is not responsible for regulatory non-compliance arising from customer-configured retention settings.

Appendix A: Acceptable use policy

This Acceptable Use Policy is incorporated into and forms part of the Qorden AI Master Terms & Conditions. By using any Product, you agree to comply with this Policy at all times.

You shall not use any Product to:

• • Impersonate any individual, organisation, or government entity.

• • Create or disseminate deceptive synthetic media, including AI-generated deepfakes or unauthorised voice clones.

• • Conduct phishing, fraud, social engineering, or identity theft.

• • Upload, distribute, or execute malware, spyware, ransomware, or other harmful software.

• • Conduct unlawful surveillance, interception, or monitoring of communications.

• • Violate any applicable sanctions laws or export control regulations.

• • Infringe or misappropriate any intellectual property rights.

• • Bypass, circumvent, or disable security controls or authentication measures.

• • Intentionally overload, flood, or degrade platform infrastructure.

• • Use the Services for fully automated legal, medical, or financial decisions without human oversight.

• • Engage in any discriminatory, harassing, or abusive conduct.

• • Publish benchmarks or competitive analyses of any Product without written consent.

• Violate any applicable law or regulation.

Violations may result in immediate suspension or permanent termination without refund and may be reported to relevant authorities.

Appendix B: Data processing addendum (DPA)

B.1 Roles of the parties

The Customer acts as Data Controller. Qorden acts as Data Processor. Qorden processes Customer Data only on documented instructions from the Customer, unless required otherwise by applicable law.

B.2 Scope of processing

Processing occurs solely for: delivering the Products; technical support and maintenance; platform security; and other lawful operational activities described in this Agreement. Processing activities include, as applicable, audio-visual data processing (Qordenate, Dubbix, QSAP), voice translation (QDub), AI inference, and analytics.

B.3 Security measures

Qorden implements: encryption in transit and at rest; role-based access controls; activity logging and audit trails; regular vulnerability assessments; and ongoing security monitoring across all Products.

B.4 Subprocessors

The current subprocessor list, including the data processing role of each AI inference provider, is published at https://www.qorden.ai/legal/subprocessors. Qorden will provide thirty (30) days’ notice of material subprocessor changes.

B.5 Standard contractual clauses & transfer mechanisms

Where Personal Data is transferred outside the United Arab Emirates, the Parties shall ensure that such transfers are carried out in accordance with the applicable laws and regulations of the United Arab Emirates, including the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021), as amended, and any applicable implementing regulations. The Parties shall implement appropriate contractual, technical, and organizational safeguards to ensure that Personal Data remains subject to an adequate level of protection consistent with applicable UAE data protection requirements.

B.6 Data subject rights

Qorden will reasonably assist the Customer to respond to data subject requests including access, rectification, erasure, restriction, portability, and objection within thirty (30) days of receipt.

B.7 Retention schedules

As set out in Section 12.9 of the main Terms. Upon termination, Qorden will provide written deletion confirmation within ninety (90) days upon request.

B.8 Breach notification

Qorden will notify the Customer of a confirmed personal data breach within seventy-two (72) hours where reasonably practicable, providing details to enable regulatory notification.

Appendix C: AI & biometric usage policy

C.1 AI transparency & human oversight

Qorden’s Products incorporate AI and machine learning technologies across translation, transcription, dubbing, voice cloning, speech analytics, sentiment analysis, and meeting intelligence. Users must:

• • Ensure appropriate human review of all AI Outputs before reliance.

• • Not use AI Outputs as the sole basis for legally consequential or regulated decisions.

• • Independently verify translations, transcriptions, and dubs in regulated contexts.

• Implement processes to detect and mitigate AI errors or biases in downstream workflows.

C.2 AI governance commitments

Qorden commits to:

• • Not using Customer Data to train generalised AI models without written consent.

• • Listing AI inference providers in the subprocessor register with applicable data processing roles.

• • Not storing AI model outputs beyond the inference session unless enabled by Customer configuration.

• • Publishing model documentation or AI system summaries upon request for enterprise customers.

• Maintaining an AI model inventory available to enterprise customers under NDA upon request.

C.3 Voice & biometric restrictions

Users are prohibited from using Qorden’s voice and biometric technologies across all Products to:

• • Clone, replicate, or synthesise any individual’s voice without their express written consent.

• • Impersonate any individual using AI-generated or synthetic voice technologies.

• • Create or distribute deceptive synthetic media or deepfake content.

• Engage in identity fraud or unauthorised biometric profiling.

C.4 Ethical AI usage

The Products must not be used for: unlawful surveillance or monitoring; discriminatory profiling based on protected characteristics; political manipulation, disinformation, or propaganda; harassment, intimidation, or targeted abuse; or any form of deceptive or manipulative synthetic media creation.

Qorden reserves the right to immediately suspend access to any User found to be in violation of this Policy.