Comprehensive Enterprise Terms of Service

Article 1: Contracting Entity & Contractual Scope

EYC TECHNOLOGY AND ARTIFICIAL INTELLIGENCE COMPANY LIMITED ("EYC", "we", "us", or "our") is an advanced engineering enterprise duly incorporated and operating under Business Registration Certificate No. 0319723892 issued by the Department of Planning and Investment of Ho Chi Minh City, having its registered corporate headquarters at 2nd Floor, 68 Nguyen Hue, Sai Gon Ward, Ho Chi Minh City, Vietnam.

These Comprehensive Enterprise Terms of Service ("Terms") constitute a legally binding agreement between EYC and the enterprise, institution, or authorized individual ("Customer", "you") accessing, browsing, provisioning, or utilizing: (i) The corporate web portal at eyc.asia; (ii) Cloud-native Software-as-a-Service (SaaS) platforms; (iii) Application Programming Interfaces (APIs); and (iv) Autonomous multi-agent artificial intelligence systems and connected digital infrastructure engineered by EYC.

• Precedence of Separate Enterprise Agreements: In the event Customer executes an individualized Master Services Agreement (MSA), Service Level Agreement (SLA), or Data Processing Agreement (DPA) with EYC, the specific technical and commercial covenants therein shall take precedence for that transactional engagement without invalidating the foundational acceptable use and infrastructure security rules herein.
• Public Portal and Documentation Scope: Accessing and reading informational pages, architectural diagrams, whitepapers, and public engineering documentation on eyc.asia is governed by these Terms from the initial network request.

Article 2: Acceptance of Terms & Corporate Representative Authority

By accessing the platform, submitting inquiries, integrating API keys, or deploying any component of the EYC ecosystem, you explicitly acknowledge that you have read, comprehended, and agreed to be unconditionally bound by these Terms and our Data Privacy Policy.

If you are accepting these Terms on behalf of an enterprise, company, university, or governmental institution, you represent and warrant that you hold full corporate legal authority, statutory officer status, or formal power of attorney to legally bind that corporate entity to these Terms.

• Legal Capacity: Individual users must be at least 18 years of age and possess full civil capacity under applicable laws of Vietnam and the user's home jurisdiction.
• Refusal of Terms: If you do not agree with any provision of these Terms or lack requisite corporate signing authority, you must immediately terminate access and discontinue all utilization of EYC services.

Article 3: Definitions & Comprehensive Legal Interpretation

For the purposes of this Agreement, capitalized terms shall have the definitive meanings set forth below:

• Enterprise Customer: The legal corporate entity or commercial organization that procures, subscribes to, or administers EYC platforms and AI services.
• Authorized Users: Employees, technical contractors, systems integrators, and designated personnel who are authorized by Customer to access the platform via corporate enterprise credentials.
• Customer Data: All operational business documents, proprietary data, text files, database records, prompts, and contextual materials uploaded, submitted, or streamed by Customer through APIs.
• AI Generated Outputs: Synthetic textual content, analytics, code snippets, automation workflows, and responses generated by EYC's artificial intelligence models and autonomous agents based on Customer inputs.
• Model Context Protocol (MCP): The open, standardized application layer protocol governing secure agentic communication with external tools, contextual databases, and execution runtimes.
• TenantScope Architecture: EYC's multi-layered logical and cryptographic isolation framework enforcing strict data boundaries across identity, memory, vector indices, and relational database tiers.

Article 4: Account Provisioning & Multi-Factor Authentication (MFA)

Enterprise Customers are obligated to provide complete, truthful, and up-to-date corporate credentials during workspace provisioning and administrative account configuration.

To safeguard system integrity against modern credential-stuffing and phishing vectors, EYC strictly mandates the activation of Multi-Factor Authentication (MFA) across all administrative roles (Super Admin / Admin) and accounts holding API production keys or infrastructure privileges.

• Cryptographic Credential Safeguarding: Customer maintains exclusive accountability for safeguarding API private keys, secret tokens, SSH deployment keys, and OAuth authorization tokens.
• Prohibition of Shared Named Credentials: Each account seat must be provisioned to an identifiable individual personnel member. Pooling or sharing individual named credentials across multiple staff members is strictly prohibited.

Article 5: Role-Based Access Control (RBAC) & Action Attribution

The EYC platform incorporates granular Role-Based Access Control (RBAC) capabilities enabling Customer administrators to assign precise privilege scopes (Super Admin, Developer, Operator, Compliance Auditor, Read-Only).

Customer bears full and unreserved responsibility for all configurations, administrative executions, API calls, and agent invocations originating from authenticated credentials or valid API tokens assigned to Customer.

• Deprovisioning Duty: Customer must promptly revoke credentials and invalidate access tokens whenever an Authorized User terminates employment, changes operational roles, or vacates authorized responsibilities.
• Immutable Audit Logging: All authentication events, privileged configurations, and programmatic transactions are recorded in cryptographically protected audit logs for regulatory compliance and forensic auditing.

Article 6: Credential Security & Emergency Compromise Protocol

In the event Customer detects, suspects, or reasonably should suspect any unauthorized disclosure, compromise, or anomalous utilization of credentials or API keys, Customer must execute immediate key rotation and notify EYC in writing within 24 hours.

EYC reserves the definitive right to unilaterally suspend active sessions, revoke compromised API tokens, or temporarily quarantine workspaces without advance notice whenever anomalous threat signatures endanger multi-tenant infrastructure stability.

• Emergency Escalation Channel: Immediate incident reports must be transmitted to info@eyc.asia with the subject line [EMERGENCY-ACCOUNT-COMPROMISE] accompanied by enterprise tenant identifiers.
• Reactivation Verification: Account restoration requires successful completion of identity verification procedures and verified remediation of the host environment.

Article 7: Acceptable Use Policy & Platform Operational Integrity

This Acceptable Use Policy (AUP) establishes mandatory baseline operating rules across all platform interactions, designed to safeguard shared computing resources, stability, and corporate reputation.

Customer shall utilize EYC platforms, APIs, and AI Agent frameworks exclusively for legitimate scientific research, commercial development, workflow automation, and enterprise operations in full accordance with applicable international and domestic laws.

• Adherence to Technical Quotas: Customer must rigorously adhere to agreed service parameters, including programmatic rate limits (Requests Per Minute - RPM / Tokens Per Minute - TPM), concurrent agent runtime bounds, and provisioned storage thresholds.
• Telemetry Tampering Prohibition: Any attempt to tamper with, forge, or deceive operational metering instrumentation, billing telemetries, or consumption accounting engines is strictly prohibited.

Article 8: Prohibition of Model Attacks, Jailbreaking & Reverse Engineering

To safeguard model safety guardrails and proprietary neural architectures, EYC enforces stringent prohibitions against adversarial artificial intelligence exploits:

• Prohibition of Prompt Injections & Jailbreaking: Customer shall not craft, execute, or automate prompt injections, indirect prompt injections, or jailbreaking vectors engineered to circumvent safety filters, force jailbroken behavioral modes, or trigger extraction of system prompts and internal agent configurations.
• Prohibition of Reverse Engineering: Customer shall not reverse engineer, decompile, disassemble, or extract weights, biases, neural parameters, vector embeddings pipelines, or proprietary source code embodying EYC's systems.
• Prohibition of Competitive Model Distillation: Customer shall not utilize EYC's outputs, synthetic datasets, or API responses to train, tune, validate, or distill competitive commercial foundation models or agentic orchestration platforms without express written authorization.

Article 9: Unlawful, Unethical & Abusive Conduct

Customer covenants that it will not utilize EYC computing infrastructure, APIs, or autonomous agents to facilitate, execute, or disseminate any of the following prohibited activities:

• Cyberattacks & Malware Dissemination: Exploiting vulnerabilities, distributing worms, ransomware, or trojans; conducting unauthorized port scanning; launching Denial-of-Service (DoS/DDoS) attacks; or impairing cloud infrastructure.
• Phishing & Brand Impersonation: Executing automated deceptive schemes, credential harvesting campaigns, or impersonating public institutions, financial banking authorities, or proprietary corporate brands.
• Illicit & Harmful Content: Generating, storing, or transmitting violent material, hate speech, national security sabotage, child exploitation material, or content infringing Vietnamese public morality and criminal statutes.
• Unauthorized Automated Scraping: Deploying botnets, web crawlers, or scraping routines against EYC's web portal and public endpoints without express prior written consent.

Article 10: EYC Intellectual Property & Proprietary Platform Rights

All worldwide intellectual property rights, copyrights, trademarks, patents, trade secrets, software codebases, AI agent frameworks, mathematical algorithms, visual interfaces, and engineering specifications powering eyc.asia belong exclusively to EYC TECHNOLOGY AND ARTIFICIAL INTELLIGENCE COMPANY LIMITED.

Subject to compliance with these Terms and timely fee payment, Customer is granted a limited, revocable, non-exclusive, non-transferable, and non-sublicensable license to access and utilize the subscribed services during the active contractual term.

• Trademark Protection: The commercial trademarks "EYC", "Everything You Connect", associated insignias, and brand assets are protected under intellectual property treaties. Customer shall not display EYC branding without prior written approval.
• Reservation of Rights: All rights not expressly granted to Customer in this Agreement are strictly and fully reserved by EYC.

Article 11: Exclusive Ownership of Enterprise Customer Data

Customer retains complete, unencumbered intellectual property ownership, legal title, and exclusive property rights over all Customer Data submitted, uploaded, or transmitted through EYC services.

EYC acquires zero ownership interest in Customer Data. EYC is granted only the narrow, limited license strictly necessary to store, index, vector-embed, and process Customer Data solely for fulfilling service commitments pursuant to Customer's explicit operational instructions.

• Commitment on Zero Public Model Training: As stated in our Data Privacy Policy, EYC does not use Customer Data to train, retrain, or improve generalized public foundation models.
• Customer Warranty on Data Lawfulness: Customer warrants that it holds all necessary titles, licenses, and statutory data subject consents required to upload Customer Data without infringing third-party rights or data privacy statutes.

Article 12: Ownership of AI Generated Outputs & Human Oversight

To the maximum extent permitted by applicable governing law, EYC assigns to Customer all right, title, and interest in and to AI Generated Outputs produced directly by the platform from Customer's lawful inputs.

Due to the probabilistic characteristics inherent in generative artificial intelligence and neural language processing, Generated Outputs may occasionally reflect factual anomalies or hallucinations. Customer acknowledges and embraces the Human-in-the-Loop oversight principle.

• Mandatory Professional Review: Customer maintains an affirmative obligation to independently verify, audit, and exercise professional human discretion over legal agreements, medical analyses, financial calculations, structural engineering parameters, or critical personnel decisions suggested by AI Agents before production deployment.
• Output Similarity Across Users: Because generative models operate across mathematical probability spaces, similar queries submitted by unrelated users may yield comparable outputs; such coincidental similarity does not constitute an infringement of copyright.

Article 13: Customer Feedback & Product Improvement License

In the course of collaboration, Customer may voluntarily transmit recommendations, technical critiques, issue diagnostics, or architectural feature suggestions ("Feedback") to EYC.

By providing Feedback, Customer grants EYC an irrevocable, perpetual, worldwide, royalty-free, transferable license to utilize, commercialize, implement, and incorporate such Feedback into EYC platforms without any obligation of compensation or accounting to Customer.

• Non-Confidential Nature: Unless governed by a dedicated R&D nondisclosure agreement, generic feature feedback is treated as non-confidential.
• Segregation from Customer Data: This improvement license applies strictly to generalized architectural suggestions and expressly excludes Customer's proprietary business records.

Article 14: Model Context Protocol (MCP) Server Integration & Boundaries

EYC platforms natively support the Model Context Protocol (MCP) standard, enabling autonomous agents to establish programmatic bridges to customer-hosted or third-party MCP servers exposing Tools and contextual Resources.

Customer assumes sole and independent responsibility for authenticating, defining authorization scopes, auditing source code security, and monitoring all MCP servers connected to Customer's runtime environment.

• Agent Action Attribution: Any operational execution executed by an AI Agent via Customer's provisioned MCP server (such as database writes, external webhook dispatches, or email delivery) is legally attributed to Customer's direct authorization.
• Disclaimer of External MCP Vulnerabilities: EYC disclaims all liability for data leakages, system corruption, or outages originating within Customer's self-hosted MCP endpoints or third-party servers.

Article 15: Third-Party Integrations, APIs & External Platforms

The platform may facilitate integrations, network endpoints, or API calls to external cloud providers (including Cloudflare, AWS, Google Cloud, identity providers, and financial payment gateways).

Such third-party services operate under the independent terms and privacy declarations established by their respective vendors. Customer is responsible for reviewing and adhering to external vendor covenants.

• Third-Party Availability Disclaimer: EYC provides no representations regarding the uninterrupted availability, uptime SLA, or policy stability of autonomous third-party service providers.
• Disconnection Rights: Customer maintains the perpetual ability to disable, revoke, or reconfigure third-party connectors at any time via platform administrative consoles.

Article 16: Mutual Confidentiality & Non-Disclosure Obligations

In connection with these Terms, either party ("Disclosing Party") may disclose to the other ("Receiving Party") technical, operational, financial, architectural, source code, or proprietary business information designated as confidential or reasonably understood to be confidential by nature ("Confidential Information").

The Receiving Party covenants to protect the Disclosing Party's Confidential Information with the same degree of care it exercises for its own confidential assets, but in no event less than a reasonable commercial standard of care.

• Permitted Use & Disclosure: Receiving Party shall use Confidential Information solely to perform obligations or exercise rights under these Terms, disclosing it only to personnel, contractors, and legal advisors who have a need-to-know and are bound by confidentiality covenants at least as restrictive as those herein.
• Extended Duration: Confidentiality covenants endure throughout the service relationship and for five (5) years post-termination, provided that trade secrets and proprietary source code shall remain confidential in perpetuity.
• Exclusions: Confidential Information excludes data that is publicly known without breach, already possessed by Receiving Party without restriction, independently developed, or required to be disclosed pursuant to lawful judicial or governmental orders.

Article 17: Service Availability, SLA Commitments & Maintenance

EYC endeavors to maintain resilient, high-availability computing platforms. For enterprise agreements incorporating an explicit written Service Level Agreement (SLA), EYC targets a monthly system availability uptime of 99.9% (excluding scheduled maintenance).

To preserve optimal throughput and promptly patch emergent security threats, EYC conducts routine scheduled maintenance and infrastructure updates pursuant to standard release engineering protocols.

• Scheduled Maintenance: Scheduled during low-traffic windows with at least forty-eight (48) hours advance notification posted via the customer console or email.
• Emergency Maintenance: In instances of critical zero-day vulnerabilities, distributed cyberattacks, or data center hardware failures, EYC reserves the right to execute immediate emergency interventions with post-incident summaries.
• SLA Exclusions: Downtime resulting from international subsea cable disruptions, acts of God, war, national telecommunications grid failures, or Customer's AUP violations is excluded from SLA calculations.

Article 18: Limited Warranties & "As-Is" Statutory Disclaimers

EYC warrants that it will deliver subscribed services in a professional manner conforming to recognized software engineering standards and express contractual descriptions.

Except as expressly provided in this Agreement or a formal commercial contract, all software platforms, APIs, documentation, and web assets are provided on an "As-Is" and "As-Available" basis.

• Statutory Disclaimers: To the maximum extent permitted by applicable law, EYC disclaims all implied warranties of merchantability, fitness for a particular purpose, non-infringement, and uninterrupted error-free operation.
• Probabilistic Technology Acknowledgment: Customer acknowledges that machine learning systems cannot guarantee complete accuracy across unstructured data and retains final authority over the real-world use of outputs.

Article 19: Enterprise Intellectual Property Indemnification

EYC shall defend, indemnify, and hold harmless Customer against any third-party legal claims, demands, or awards alleging that EYC's proprietary core platform software infringes any valid copyright or patent registered in Vietnam.

Customer shall defend, indemnify, and hold harmless EYC, its directors, and officers against any third-party claims arising out of: (i) Customer Data infringing third-party intellectual property or privacy rights; or (ii) Customer's violation of the Acceptable Use Policy.

• Indemnification Prerequisites: The indemnified party must: (a) Provide prompt written notice of the claim; (b) Grant sole control of defense and settlement negotiations; and (c) Provide reasonable cooperation at indemnifying party's expense.
• Mitigation Remedies: If platform technology becomes subject to an infringement claim, EYC may: (i) Procure the right for Customer to continue utilization; (ii) Replace with substantially equivalent non-infringing technology; or (iii) Refund unused prepaid fees and terminate the subscription.

Article 20: Aggregate Limitation of Liability & Consequential Damages Waiver

To the maximum extent permissible under applicable governing law, neither party shall be liable to the other for any indirect, incidental, consequential, special, punitive, or reliance damages, including lost profits, revenue loss, business interruption, or reputational harm.

The cumulative aggregate financial liability of EYC arising out of or related to these Terms and all subscribed services shall in no event exceed the total fees actually paid by Customer to EYC in the twelve (12) months preceding the first event giving rise to liability.

• Liability Exclusions: The limitations in this Article do not apply to: (a) Breaches of mutual confidentiality covenants under Article 16; (b) Intellectual property indemnification obligations under Article 19; or (c) Damages resulting from intentional misconduct or gross negligence under statutory law.
• Risk Allocation Basis: The parties agree that these limitations represent a negotiated, reasonable allocation of commercial risk reflecting the pricing structure of the platform.

Article 21: Emergency Suspension Rights & Termination for Cause

EYC reserves the definitive right to immediately suspend workspace access, API keys, or platform privileges without liability if: (i) Customer commits a material breach of the Acceptable Use Policy; (ii) Required by binding judicial order or regulatory directive; or (iii) Customer's account exceeds thirty (30) days past due on undisputed fees.

Either party may terminate this Agreement immediately upon written notice if the other party commits a material breach and fails to cure such breach within thirty (30) days of receiving written notice specifying the breach.

• Insolvency Termination: This Agreement terminates automatically if either party becomes insolvent, enters receivership, files for bankruptcy, or ceases ordinary commercial operations.
• Effects of Termination: Upon termination, all licenses revoke, API access terminates immediately, and outstanding payment obligations become immediately due within fifteen (15) calendar days.

Article 22: Post-Termination Transition & Data Extraction Window

Upon termination of services for any reason (excluding judicial asset freezing or severe security violations), EYC provides a transitional thirty (30) day grace window ("Data Extraction Window") during which Customer may retrieve and download all Customer Data.

Data extraction is supported via administrative export tools or standard programmatic API calls in widely supported structured formats (JSON, CSV, Parquet, or encrypted standard archives).

• Cryptographic Data Purging: Following the expiration of the 30-day window, EYC initiates permanent cryptographic erasure across all live instances and rotating backup media pursuant to NIST SP 800-88 sanitization standards.
• Certificate of Destruction: For enterprise compliance audits, EYC will issue an electronic certificate confirming permanent data erasure upon verified completion.

Article 23: Governing Law, Jurisdiction & Arbitration at VIAC

These Terms and all disputes, claims, or controversies arising out of or relating to the service relationship shall be governed by, construed, and enforced in accordance with the laws of the Socialist Republic of Vietnam.

The parties commit to resolving any dispute or claim amicably through formal executive negotiation within thirty (30) days from the date of written notice of dispute.

• International Arbitration at VIAC: Any dispute not resolved through negotiation within 30 days shall be submitted to and finally resolved by arbitration administered by the Vietnam International Arbitration Centre (VIAC) in accordance with its Arbitration Rules.
• Seat & Tribunal: The legal seat of arbitration shall be Ho Chi Minh City, Vietnam. The tribunal shall consist of one (1) or three (03) arbitrators appointed in accordance with VIAC Rules.
• Arbitration Language & Procedure: For all international users, non-domestic entities, and foreign-invested enterprises, the language of the arbitration shall be English. The proceedings shall be conducted with full confidentiality and international commercial expediency.
• Final & Binding Effect: The arbitral award shall be final, conclusive, and binding upon both parties, enforceable in any court of competent jurisdiction.

Article 24: Severability, Policy Amendments & Institutional Legal Notices

If any provision of these Terms is determined by an arbitral tribunal or competent court to be invalid, unlawful, or unenforceable, such invalidity shall not affect the enforceability of the remaining provisions.

EYC reserves the right to amend these Terms to reflect architectural evolutions, security updates, or statutory developments. The current version will always be published on eyc.asia with its stated effective date.

• Material Notice Period: In the event of material revisions impacting commercial rights, EYC will provide at least fifteen (15) days advance notice via email or platform announcements. Continued utilization following the effective date signifies full acceptance.
• Force Majeure: Neither party shall be liable for failure to perform due to events beyond reasonable commercial control, including acts of God, war, armed conflict, epidemics, international fiber optic cuts, or statutory emergencies.
• Institutional Legal Contacts: Formal legal communications shall be directed to: EYC TECHNOLOGY AND ARTIFICIAL INTELLIGENCE COMPANY LIMITED, 2nd Floor, 68 Nguyen Hue, Sai Gon Ward, Ho Chi Minh City, Vietnam; or via official electronic legal transmission: info@eyc.asia.