i-broS™ AI Governance and Artificial Intelligence Disclaimer

Last Updated: [01/08/2026]
Version: 1.0

​

1. Purpose and Scope

This AI Governance and Artificial Intelligence Disclaimer (“AI Disclaimer”) applies to the access to and use of the i-broS™ Enterprise AI Identity and Governance Middleware, including its related services, interfaces, integrations, software components, documentation and functionalities (collectively, the “Service”).

This AI Disclaimer supplements the applicable i-broS™ Enterprise Software License Agreement, Order Form, Marketplace transaction terms, Privacy Policy, Data Processing Addendum and Acceptable Use Policy.

In the event of a conflict, the terms of the applicable written commercial agreement or Order Form shall prevail, unless otherwise required by applicable law.

​

2. Nature of the Service

i-broS™ is an enterprise AI identity and governance middleware designed to support organizations in applying identity parameters, governance rules, operational controls, monitoring mechanisms and certification records across artificial intelligence models and autonomous agents.

The Service may include, among other components:

• Identity Kernel™;

• Syll™;

• Sentinel™;

• iD-SIG™;

• identity configuration tools;

• policy and governance controls;

• output monitoring;

• drift detection;

• audit and certification records;

• integrations with third-party AI models, agents and cloud services.

The Service is a technological governance tool. It is not an artificial intelligence regulator, certification authority, legal adviser, compliance adviser, auditor, insurer or guarantor of artificial intelligence performance.

​

3. No Guarantee of Artificial Intelligence Performance

Artificial intelligence systems are probabilistic and may produce incorrect, incomplete, misleading, inconsistent, outdated, biased, offensive, inappropriate or fabricated information.

The use of i-broS™ may improve identity consistency, policy alignment, observability and operational governance, but it cannot and does not guarantee that any AI model or autonomous agent will:

• produce accurate or complete outputs;

• operate without errors or hallucinations;

• follow every instruction in every circumstance;

• behave consistently over time;

• remain unchanged following updates by a third-party provider;

• avoid bias or discriminatory outcomes;

• be suitable for a particular purpose;

• produce legally or factually correct information;

• be secure from every threat, attack or misuse;

• comply automatically with applicable laws or regulations.

No Identity Drift score, Sentinel™ result, iD-SIG™ record, warning, approval, classification or other output generated by the Service constitutes a guarantee that an AI output is accurate, lawful, safe, compliant, complete or appropriate for use.

4. Customer Selection of AI Models and Agents

The Customer independently selects the artificial intelligence models, providers, autonomous agents, integrations, configurations and use cases connected to the Service.

i-broS™ does not make the final selection of the AI model or agent on behalf of the Customer unless expressly agreed otherwise in writing.

The Customer remains solely responsible for evaluating whether a selected AI model, agent or provider is suitable for the Customer’s intended purpose, legal obligations, risk profile, technical environment and industry.

The availability of an integration within the Service does not constitute an endorsement, warranty, recommendation or certification of the relevant third-party provider, model or agent.

5. Third-Party Artificial Intelligence Services

The Service may interoperate with third-party services, including artificial intelligence models, cloud services, APIs, software platforms and autonomous agents.

Such third-party services may be operated, modified, suspended, restricted or discontinued independently of i-broS™.

i-broS™ does not control and shall not be responsible for:

• third-party AI model architecture;

• training data;

• model weights;

• inference logic;

• model updates;

• provider safety policies;

• provider content filtering;

• uptime or service availability;

• output accuracy;

• hallucinations;

• biases;

• security incidents;

• data retention practices;

• changes in third-party terms;

• changes in model behavior;

• third-party regulatory compliance.

Customer use of third-party services may be subject to additional contractual terms, privacy policies, usage restrictions and fees imposed by the relevant provider.

6. Customer Responsibility for AI Outputs

The Customer retains full responsibility for all prompts, instructions, data, documents, configurations, workflows, actions and decisions submitted to or performed through artificial intelligence systems connected to the Service.

The Customer is solely responsible for reviewing, validating, approving and supervising AI-generated outputs before such outputs are:

• published;

• distributed;

• communicated to third parties;

• used in business processes;

• incorporated into products or services;

• used to make decisions;

• relied upon for operational, financial, legal, medical, employment, credit, insurance, safety or regulatory purposes.

The Customer shall not rely exclusively on artificial intelligence outputs where human review, professional judgment, independent verification or regulatory approval is required.

7. Autonomous Agents

Autonomous or semi-autonomous agents may execute actions, interact with external systems, retrieve or transmit information, generate content, make recommendations or initiate workflows.

The Customer remains solely responsible for:

• defining the authority granted to each agent;

• configuring permissions and access controls;

• selecting tools and integrations;

• establishing approval thresholds;

• implementing human oversight;

• monitoring agent behavior;

• reviewing consequential actions;

• preventing unauthorized or harmful activity;

• revoking access when appropriate.

i-broS™ does not assume responsibility for actions taken by Customer-configured agents, including actions triggered automatically, actions based on inaccurate information or actions performed through third-party systems.

The Customer shall implement appropriate technical and organizational safeguards before allowing any agent to operate autonomously in a production environment.

8. Human Oversight

i-broS™ is intended to assist and support human governance. It does not replace human judgment, supervision, accountability or decision-making.

The Customer shall ensure that suitably qualified personnel oversee the use of AI systems, particularly where the relevant use case may affect:

• individuals’ rights or freedoms;

• health or safety;

• employment;

• access to essential services;

• credit or insurance;

• legal rights;

• financial outcomes;

• regulatory obligations;

• critical infrastructure;

• vulnerable individuals;

• public communications;

• brand reputation.

Any automation, approval rule or governance configuration established by the Customer remains under the Customer’s control and responsibility.

9. No Legal or Regulatory Advice

The Service and all related documentation, scores, reports, dashboards, classifications, alerts and recommendations are provided for technological and operational purposes only.

They do not constitute:

• legal advice;

• regulatory advice;

• compliance certification;

• conformity assessment;

• professional advice;

• an audit opinion;

• a legal interpretation of the EU Artificial Intelligence Act;

• a legal interpretation of the GDPR;

• a determination of whether an AI system is prohibited, high-risk, limited-risk or otherwise regulated;

• confirmation that the Customer has satisfied any legal obligation.

The Customer must obtain independent legal, regulatory, technical and professional advice appropriate to its circumstances.

10. AI Act and Regulatory Readiness

i-broS™ may provide tools that support AI governance, identity consistency, policy implementation, traceability, monitoring, documentation and operational control.

These capabilities may assist a Customer in developing its internal regulatory-readiness framework. However, the Service does not guarantee or certify compliance with Regulation (EU) 2024/1689, commonly known as the EU Artificial Intelligence Act, or with any other national, European or international law.

The Customer remains solely responsible for:

• determining its legal role, including whether it acts as a provider, deployer, importer, distributor, product manufacturer or other regulated entity;

• classifying its AI systems and use cases;

• identifying applicable legal obligations;

• performing required risk assessments;

• maintaining required technical documentation;

• conducting conformity assessments where applicable;

• implementing human oversight;

• ensuring AI literacy;

• completing registrations or notifications;

• meeting transparency requirements;

• monitoring systems after deployment;

• reporting incidents;

• cooperating with regulatory authorities.

The operation of the Service does not transfer any regulatory obligation from the Customer to i-broS™.

11. Identity Governance Limitations

The Identity Kernel™ and related identity governance mechanisms are designed to support the consistent application of enterprise identity, communication principles, terminology, tone, values and governance parameters.

However, identity consistency cannot be guaranteed in every output or circumstance.

AI responses may be influenced by factors outside the control of i-broS™, including:

• model architecture;

• system prompts;

• user prompts;

• context-window limitations;

• third-party safety systems;

• model updates;

• language;

• temperature and inference settings;

• external data sources;

• retrieval results;

• agent tools;

• integration failures;

• conflicting instructions.

The Customer is responsible for determining whether the level of identity consistency achieved is appropriate for the intended use.

12. Sentinel™ and Identity Drift

Sentinel™ and any Identity Drift measurement, alert, classification or threshold constitute decision-support tools only.

Such results may include false positives, false negatives, incomplete assessments or context-dependent interpretations.

The absence of an alert does not mean that an output is accurate, compliant, safe or aligned with all Customer requirements.

The presence of an alert does not necessarily mean that an output is unlawful, unsafe or unusable.

The Customer remains responsible for interpreting each result and determining the appropriate response.

13. iD-SIG™ Records

An iD-SIG™ record may provide information relating to an output, including available identity, model, operator, configuration, versioning or assurance metadata.

An iD-SIG™ record is not:

• a digital certificate issued by a public authority;

• a qualified electronic signature;

• a legal attestation;

• proof of factual accuracy;

• proof of legal compliance;

• proof of authorship;

• proof that an output is free from manipulation;

• a guarantee of non-repudiation;

• a regulatory approval.

Its legal and evidentiary effect may vary depending on jurisdiction, implementation and context.

The Customer is responsible for determining whether an iD-SIG™ record is appropriate for its intended purpose.

14. Data and Knowledge Sources

The quality of AI outputs and governance results depends in part on the quality, accuracy, completeness and lawfulness of the data, prompts, knowledge bases and materials supplied by the Customer or third parties.

i-broS™ does not independently verify all Customer Data or external information.

The Customer represents and warrants that it has all necessary rights, permissions and lawful bases to provide, process and use any data submitted to the Service.

The Customer shall not submit data that is unlawful, misleading, infringing, discriminatory or otherwise prohibited under the applicable agreement or Acceptable Use Policy.

15. High-Risk and Regulated Uses

Unless expressly authorized in writing, the Service must not be used as the sole basis for decisions involving:

• medical diagnosis or treatment;

• emergency response;

• life-support systems;

• criminal justice;

• biometric identification;

• critical infrastructure control;

• employment selection or termination;

• creditworthiness;

• insurance eligibility or pricing;

• access to education;

• access to essential public or private services;

• migration, asylum or border control;

• legal determinations;

• decisions producing similarly significant effects on individuals.

Where the Service is used in connection with a regulated or high-risk activity, the Customer is solely responsible for confirming that such use is lawful and for implementing all necessary controls, assessments, approvals and safeguards.

16. Security and Misuse

No software or AI governance system can eliminate all cybersecurity, misuse, prompt-injection, data-exfiltration, adversarial-input, model-manipulation or unauthorized-access risks.

The Customer remains responsible for:

• identity and access management;

• credential security;

• endpoint security;

• network security;

• user permissions;

• integration permissions;

• data classification;

• backup and recovery;

• incident response;

• monitoring;

• staff training;

• secure configuration.

i-broS™ shall not be responsible for incidents caused by Customer credentials, Customer configurations, Customer systems, third-party systems or unauthorized Customer users.

17. No Guarantee of Business Outcomes

i-broS™ does not guarantee any particular commercial, financial, operational, reputational, compliance or efficiency outcome.

Any statement regarding potential improvements, risk reduction, consistency, token savings, efficiency, governance quality or business value is illustrative and may depend on Customer implementation, use case, data quality, selected models, operational processes and other factors.

The Customer is responsible for conducting its own evaluation before relying on the Service.

18. Assumption of Risk

The Customer acknowledges that the adoption and use of artificial intelligence involves inherent and evolving risks.

To the maximum extent permitted by applicable law, the Customer assumes all risks arising from:

• its selection of AI models and agents;

• its AI use cases;

• its configurations;

• its data;

• its prompts;

• its reliance on outputs;

• its automated workflows;

• actions taken by autonomous agents;

• its failure to implement appropriate human oversight;

• its failure to comply with applicable laws.

19. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, I-BROS™ SHALL NOT BE LIABLE FOR ANY CLAIM, LOSS, DAMAGE, PENALTY, FINE, LIABILITY OR EXPENSE ARISING FROM OR RELATING TO:

• AI-GENERATED OUTPUTS;

• HALLUCINATIONS;

• INACCURATE OR MISLEADING INFORMATION;

• BIASED OR DISCRIMINATORY OUTPUTS;

• CUSTOMER DECISIONS;

• AUTONOMOUS AGENT ACTIONS;

• THIRD-PARTY AI MODELS;

• THIRD-PARTY PROVIDER CHANGES;

• FAILURE TO ACHIEVE REGULATORY COMPLIANCE;

• FAILURE TO DETECT AN IDENTITY DRIFT;

• RELIANCE ON AN ID-SIG™ RECORD;

• FAILURE TO IMPLEMENT HUMAN OVERSIGHT;

• CUSTOMER CONFIGURATIONS;

• CUSTOMER DATA;

• CUSTOMER MISUSE;

• REGULATORY INVESTIGATIONS OR SANCTIONS RESULTING FROM CUSTOMER ACTIVITIES.

Any liability of i-broS™ shall remain subject to the exclusions and aggregate liability cap established in the applicable Enterprise Software License Agreement, Order Form or other written agreement.

Nothing in this AI Disclaimer excludes or limits liability that cannot lawfully be excluded or limited.

20. Indemnification

To the maximum extent permitted by applicable law, the Customer shall defend, indemnify and hold harmless i-broS™, its affiliates, licensors, officers, directors, personnel and contractors against claims, proceedings, damages, regulatory actions, penalties, losses, costs and expenses arising from or relating to:

• Customer’s AI use cases;

• Customer’s prompts or data;

• Customer-configured agents;

• Customer reliance on AI outputs;

• Customer violation of applicable law;

• Customer violation of third-party rights;

• Customer failure to provide required notices or obtain required consents;

• Customer failure to implement appropriate human oversight;

• use of the Service in a prohibited, unlawful or high-risk manner.

21. Updates to Artificial Intelligence Systems
 

Artificial intelligence technology, regulatory requirements and third-party services may change rapidly.

i-broS™ may update the Service, its controls, documentation, supported integrations, thresholds, classifications and governance mechanisms.

The Customer is responsible for reviewing material updates and determining whether its configuration and use remain appropriate.

Continued use of the Service following an update constitutes acceptance of the updated version of this AI Disclaimer, subject to applicable law and contractual requirements.
 

22. Severability

If any provision of this AI Disclaimer is found invalid, unlawful or unenforceable, the remaining provisions shall remain in full force and effect.

Any invalid provision shall be interpreted or modified to the minimum extent necessary to make it enforceable while preserving its intended protective purpose.
 

23. Acceptance

By accessing or using the Service, the Customer acknowledges that it has read, understood and accepted this AI Disclaimer.

The individual accepting this AI Disclaimer represents that they have the authority to bind the relevant organization.

If the Customer does not accept this AI Disclaimer, the Customer must not access or use the Service.