Legal & Policies
How we govern access to human-curated knowledge domains on the secured shared service.
Explico® Development builds security-first enterprise software around deterministic knowledge domains curated and gated by Subject Matter Experts (SMEs), with signed releases and traceable provenance. United States legal research is our first shipping domain; additional domains follow the same discipline. We do not train shared domains on customer prompts, uploads, or work product. We offer production access on a secured multi-tenant shared service for individuals, teams, and enterprise; data boundaries are described in your entitlements and agreement. On-premises hardware is not sold today—the Laboratory discusses research-only directions.
Explico® does not offer anonymous production research on the public internet. A signed-in evaluation using a public-domain 1911 Encyclopædia Britannica corpus may be available for verified accounts under separate notices; it is not legal, medical, financial, or safety-critical guidance. Production domains—including United States legal research—require account creation, email verification, acceptance of the Terms of Service and Acceptable Use Policy, and valid entitlements. Open Legal & Policies in the header for each document. Placeholders such as entity name, effective dates, and governing law remain until counsel finalizes each instrument.
Marketing demo vs. product access
The public website may show an animated demonstration of how Explico® works. That demonstration is illustrative only and does not provide interactive research access. Research features require a verified account and applicable domain entitlements.
Policy coverage roadmap
Compared with common AI provider policy sets, Explico® publishes Terms, Acceptable Use, Privacy, content requests, and vulnerability disclosure aligned with verify-every-request architecture, no training on customer content, SME-governed signed packs, and tier-gated generative features. The following additional documents are recommended before broad enterprise sales:
- Usage Policy (product-specific) — deterministic vs. generative boundaries, tier entitlements, prohibited automation/scraping, research-not-advice, industry exclusions on shared SaaS.
- Commercial Terms / Order Form exhibits — B2B subscription, seats, support tiers, SLA placeholders (evidence-based only when signed).
- Data Processing Agreement (DPA) — portal identity, billing, subprocessors; PHI and regulated data classes remain prohibited on shared SaaS unless counsel approves a future offering.
- Responsible AI / Trust statement — human curation, SME gates, hard-stop, no training on customer queries; maps to ISO 42001 posture without unverified certification claims.
- Privacy choices / cookie notice — marketing site, Turnstile, analytics opt-out if used; no sale of personal data.
- Subprocessor list — Stripe, Cloudflare, generative providers (when enabled), email; updated with DPAs.
- Consumer vs. commercial split — if a self-serve Individual tier ships: short Consumer ToS; teams remain on Commercial Terms + DPA.
- K-12 / education addendum — only if you sell to US schools; otherwise explicit exclusion in AUP (not in v1 scope unless counsel approves).
Customer-facing claims follow our discipline: declining beats guessing, provable provenance, data sovereignty inside your chosen deployment envelope, and support for critical thinking—not replacement of professional judgment.