General Terms and Conditions (GTC) of istari.ai GmbH

Version: May 2026

istari.ai GmbH, Julius-Hatry-Straße 1, 68163 Mannheim, Germany (hereinafter referred to as "ISTARI"), is a provider of scientifically grounded market intelligence solutions ("Trusted Market Intelligence"). ISTARI combines its proprietary webAI technology with the Global Organization Index (GOI), a self-generated database covering more than 20 million organizations across 232 countries, to deliver customized market analyses to strategic decision-makers.

These General Terms and Conditions (GTC) govern the contractual relationship between ISTARI and its customers in connection with the use of all products and services offered by ISTARI. The product portfolio comprises:

1. Insights Report (Art. No. E-1001): Scientifically grounded market or technology study.
2. Insights Hub (Art. No. E-1002): Customized, continuously updated market intelligence system.
3. Insights Feed (Art. No. E-1003 Setup, E-1004 Topic): Topic-based intelligence dashboard for enterprise customers.
4. Insights Briefing (Art. No. E-1005): Short-form market analyses on a time-and-materials basis under a framework agreement.
5. Global Organization Index (GOI) (Art. No. E-1006 to E-1009): Direct, programmatic access to ISTARI's proprietary database (Regional/Global tier, optional Analyst Upgrade).
6. Company & Lead Lists / Profile (Art. No. E-1010): Lists of relevant organizations and contacts compiled at customer request.

These GTC apply exclusively to entrepreneurs within the meaning of Section 14 of the German Civil Code (BGB), to legal entities under public law, and to special funds under public law. Conflicting or deviating terms and conditions of the customer shall not be recognized unless ISTARI has expressly agreed to their application in writing.

Customer: The company or institution entering into a contract with ISTARI.

User: The natural persons accessing the products or services of ISTARI on behalf of the Customer.

Platform: The web-based applications of ISTARI booked by the Customer (in particular the GOI web interface, the Insights Hub Dashboard, and the Insights Feed Dashboard).

Data / Information: All structured and unstructured datasets, analyses, reports, profiles, indicators, visualizations, and other findings provided by ISTARI in the course of contract performance.

webAI Technology: The proprietary, ISO 27001-accredited search, profiling, and analysis technology of ISTARI used to generate structured market intelligence from publicly available web sources (Open Source Intelligence, OSINT).

Order Confirmation: The written or electronic confirmation issued by ISTARI by which a contract is concluded with binding effect.

The subject matter of the contract is the provision by ISTARI of the products and services booked by the Customer. Type, scope, delivery period, fees, and other product-specific terms are determined by the respective product chosen as well as by the product description, the individual offer, and the order confirmation. In case of doubt, the individual contractual agreement prevails over these GTC.

4.1 Insights Report (Art. No. E-1001)

An Insights Report is a scientifically grounded market or technology study addressing a defined research question. The report typically comprises 10 to 50 pages, including an executive summary, methodology, findings, and strategic recommendations. It is produced by senior experts (PhD level) applying the full webAI methodology. Delivery is made as a PDF and/or structured HTML document, generally within one to two months of order confirmation. Insights Reports are one-time deliverables.

4.2 Insights Hub (Art. No. E-1002)

Insights Hub is a fully customized, continuously updated market intelligence system featuring a customer-specific dashboard, bespoke indicators, and configurable refresh intervals (daily to annual). The solution is set up on a project basis; scope, data sources, visualizations, hosting configuration, number of users, and export formats are defined in an individual offer. Initial setup is typically completed within one to three months. Hosting is provided on European infrastructure (GDPR and AI Act compliant).

4.3 Insights Feed (Art. No. E-1003 Setup, E-1004 Topic)

Insights Feed is a topic-based, standardized intelligence dashboard for enterprise customers. The Customer defines one or more market topics; ISTARI provides a continuously updated workspace per topic, with curated insights and an integrated chat interface for ad-hoc deep dives. Setup is typically completed within one to four weeks of order confirmation. Insights Feed consists of a one-time setup deliverable (E-1003) and an annual license per topic (E-1004).

4.4 Insights Briefing (Art. No. E-1005)

Insights Briefing is a short-form, expert-supervised market analysis addressing ad-hoc questions. The service is provided under a framework agreement with a term of one year from order confirmation. Each individual briefing typically comprises 2 to 10 pages and is accompanied by an effort estimate (generally 1 to 20 hours) before work begins. Billing is made on an hourly basis (time-and-materials). Delivery is made within one week of the respective individual briefing order. For framework agreements not combined with the purchase of other ISTARI services, an annual minimum commitment of 10 hours applies in order to reserve expert capacity.

4.5 Global Organization Index (GOI) (Art. No. E-1006 to E-1009)

The GOI provides the Customer with direct access to ISTARI's proprietary global organization database. Every subscription includes three access modes:

• Web interface for interactive exploration;
• REST API for system integration in accordance with the technical documentation (https://docs.istari.ai);
• MCP server (Model Context Protocol) for native use within LLM-based workflows.

Use of the MCP server requires the Customer to obtain a separate subscription with Anthropic or a comparable provider (e.g. Claude). ISTARI assumes no liability for the availability, functionality, or pricing of such third-party services.

The GOI is available in the following tiers:

Provisioning is generally completed within a few days of order confirmation. Access is granted via personal credentials and/or individually issued API keys. If the agreed monthly download limits are exceeded, ISTARI is entitled to temporarily throttle access or to issue additional charges in accordance with the then-current price list.

4.6 Company & Lead Lists / Profile (Art. No. E-1010)

Upon request, ISTARI provides curated lists of relevant organizations and contact persons on a project basis, calibrated to the Customer's specific question. Identification is GOI-based and may be complemented by Deep Profile enrichment. Delivery is made in the agreed format (Excel, CSV, JSON, or PDF report). Contact data is collected exclusively from publicly available sources and in compliance with GDPR requirements.

4.7 White-Label Solutions and Special Projects

White-label solutions and other individual special projects may be agreed on the basis of the products described above. Content, branding, external usage rights, and the technical and commercial terms shall be defined in an individual contract.

The contract is concluded by acceptance of a written offer issued by ISTARI on the part of the Customer, or by booking a product via the ISTARI website (https://www.istari.ai) and the subsequent order confirmation issued by ISTARI.

Use of the products may require registration in certain cases. Information provided upon registration must be complete and truthful. Material changes (e.g. company name, billing address, point of contact) shall be communicated to ISTARI without undue delay.

By registering, the User consents to being contacted by ISTARI by email, whether in the context of a regular newsletter or as part of personalized outreach providing thematically relevant information on ISTARI's products and services. Consent may be withdrawn at any time by email to support@istari.ai.

6.1 Conclusion of Contract via the ISTARI Website

Where products are purchased directly via the ISTARI website, the prices displayed at the time of booking apply. Payment is made at the time of booking by credit card or, where offered, on account. Where payment is made on account, the payment term is 30 days from the invoice date unless otherwise agreed.

6.2 Conclusion of Contract by Acceptance of a Written Offer

Where the fees are agreed individually in a written offer or contract, invoices shall be settled within 30 days of the invoice date or within the term specified in the respective offer.

6.3 Recurring Licenses and Automatic Renewal

Licenses for Insights Hub (E-1002), Insights Feed (E-1004), GOI (E-1006, E-1008), and the related Analyst Upgrades (E-1007, E-1009) generally have a minimum term of one year from order confirmation and renew automatically for additional one-year periods unless written notice of termination is sent to support@istari.ai before the end of the respective term. The prices applicable to the renewal term shall be communicated to the Customer at least 30 days prior to the renewal; deviating provisions in the individual contract remain unaffected.

Insights Briefing (E-1005) is provided under a framework agreement with a term of one year from order confirmation. The framework agreement renews automatically for additional one-year periods unless written notice of termination is sent to support@istari.ai before the end of the respective term.

6.4 Default

In the event of default in payment, the statutory provisions, in particular Section 288 of the German Civil Code (BGB), apply. In the event of default, ISTARI is entitled to suspend access to the platforms and interfaces, following prior notice and an appropriate cure period, until the outstanding amount has been settled.

6.5 Price Adjustments

ISTARI is entitled to adjust the prices for recurring licenses at the beginning of each renewal term. Price adjustments shall be communicated to the Customer at least 30 days prior to the renewal. In the event of a price increase exceeding 10% over the immediately preceding term, the Customer is entitled to terminate the contract for cause with effect at the end of the then-current contract period.

Notice of termination must be given in text form no later than the start of the new renewal term.

6.6 Taxes

All prices are exclusive of statutory VAT unless otherwise stated.

7.1 Usage Rights to the Platforms (Insights Hub, Insights Feed, GOI)

For the duration of the contract, ISTARI grants the Customer a non-exclusive, non-transferable right to use the booked platform, limited geographically to the agreed area of use. Unless otherwise agreed, the usage right is granted on a per-user basis. The disclosure of personal access credentials or API keys to third parties, in particular to unauthorized users, is expressly prohibited. Each User is obliged to keep access credentials confidential and securely stored.

In the event of justified suspicion of unauthorized disclosure or misuse, ISTARI is entitled to temporarily suspend the affected accounts and to reissue credentials.

7.2 Automated Mass Querying

Automated mass querying of the platforms as well as circumvention of the agreed download limits is strictly prohibited without ISTARI's express prior written consent. ISTARI is entitled to introduce restrictions, rate limits, and technical blocks where corresponding suspicion arises. Use of the API access shall be exclusively in accordance with the technical documentation (https://docs.istari.ai) and within the rate limits individually agreed in the contract.

7.3 Usage Rights to the Data Provided by ISTARI

ISTARI grants the Customer a non-exclusive, transferable, and (unless otherwise agreed) perpetual right to use the data and analyses provided in the course of contract performance. The data may be used by the Customer for its own business purposes, including internal analyses, presentations, integration into the Customer's own systems, and the creation and dissemination of the Customer's own reports.

The disclosure of single-record or raw data (in particular machine-readable, unprocessed datasets from the GOI or the platforms, e.g. via API, CSV, JSON, Excel exports, or comparable formats) to third parties is not permitted without ISTARI's express prior consent. For the avoidance of doubt: reports, briefings, profiles, analyses, and other editorially or analytically processed deliverables supplied by ISTARI may be disclosed to third parties, subject to the conditions set out below.

Use of the data is subject to the following conditions:

1. The data may not be used in any manner that directly competes with ISTARI's products or services. In particular, the data may not be used, in whole or in part, to create competing databases, indices, or market intelligence products, nor to train machine learning models whose output competes with ISTARI products.
2. In any external or published use of the data, ISTARI shall be clearly and visibly identified as the source ("Source: ISTARI.AI"). In the case of academic use, citation shall follow the applicable scientific conventions.
3. The Customer assumes full responsibility for the use and disclosure of the data and shall indemnify ISTARI against all third-party claims arising therefrom, to the extent the infringement is attributable to the Customer.

7.4 Methodology and Proprietary Technology

The webAI methodology, the source code of the platforms, the underlying models, indicators, algorithms, and the structure of the Global Organization Index are and remain the exclusive property of ISTARI. The Customer acquires no rights therein. Reverse engineering, decompilation, and comparable measures are prohibited to the extent permitted by law.

ISTARI uses reasonable efforts to ensure a high level of availability of its platforms and interfaces. Planned maintenance windows shall, where possible, be announced at least 48 hours in advance. In the event of technical disruptions, remediation is undertaken promptly. There is no entitlement to uninterrupted availability. Specific Service Level Agreements (SLAs) apply only where they have been agreed individually in writing.

ISTARI reserves the right to further develop, adapt, and extend the platforms and their functionalities, provided that the contractually agreed core functions are not materially restricted.

9.1 Recurring Licenses

Contracts for Insights Hub, Insights Feed, and GOI subscriptions (including Analyst Upgrades) are generally concluded for a term of one year from order confirmation and renew automatically in accordance with Section 6.3 unless terminated in due time. The exact term and notice period are set out in the respective individual contract; absent a deviating arrangement, the notice period is 30 days to the end of the respective term.

9.2 One-Off and Project Deliverables

Contracts for Insights Reports, Company & Lead Lists, and other project-based services end upon full performance of the service.

9.3 Framework Agreements (Insights Briefing)

Framework agreements for Insights Briefing have a term of one year from order confirmation. Individual briefings that have already been commissioned and are in progress shall be paid for irrespective of any termination until completion.

9.4 Form and Notice Address

Termination must be made in text form (letter or email with appropriate identification) and must be sent to support@istari.ai. The right of either party to terminate the contract for good cause remains unaffected. Good cause exists in particular in the event of a material breach of contract by the other party that is not remedied within a reasonable cure period despite warning.

The delivery deadlines stated in the offer or individual contract are non-binding unless expressly designated as binding.

The Customer is obliged to provide ISTARI with all information, access, and materials required for performance of the service in due time, and to provide feedback on interim results within a reasonable period. Delays arising from a breach of these cooperation obligations extend the delivery deadline accordingly.

For Insights Reports and Insights Hub projects, up to two correction rounds are generally included. Further changes, in particular those that extend the originally agreed scope of services (change requests), may be charged separately. Material changes shall be documented by a written contract amendment.

11.1 General Limitation of Liability

ISTARI's liability is limited to intent and gross negligence. For ordinary negligence, ISTARI is liable only in the event of a breach of material contractual obligations (cardinal obligations); in such cases, liability is limited in amount to the foreseeable damage typical of the contract. The foregoing limitations do not apply in the event of injury to life, body, or health, in the event of an assumed guarantee, in the event of fraudulent concealment of a defect, or for claims under the German Product Liability Act (Produkthaftungsgesetz).

11.2 No Investment Advice, No Duty of Care

The Customer represents and warrants, on its own behalf and on behalf of all authorized Users of the information, that:

1. The assessments, estimates, forecasts, and other opinions contained in the information are expressions of opinion only and may not be construed as statements of fact, investment advice, or recommendations to buy, hold, or sell securities or other financial instruments.
2. Any assessment, estimate, forecast, or other opinion is only one factor in any investment or business decision.
3. The Customer will conduct its own due diligence in respect of any investment decision.

The Customer further acknowledges that none of the information provided establishes a duty of care on the part of ISTARI, that ISTARI does not act as the Customer's financial advisor, and that none of the information provided by ISTARI constitutes a guarantee, warranty, or investment advice. The Customer will not use the name or products of ISTARI to imply endorsement or recommendation in respect of investments or financial instruments.

ISTARI's products are intended for professional users with subject-matter expertise (in particular institutional investors, analysts, public-sector contracting authorities, and enterprises with their own analytical capabilities). In case of doubt, the Customer should seek additional professional advice.

11.3 Warranty Regarding the Information Provided

Unless expressly agreed otherwise, the information provided is made available "as is". ISTARI uses reasonable efforts to research and prepare the information in accordance with its scientifically validated methodology. To the extent permitted by law, ISTARI gives no warranty as to the accuracy, timeliness, or completeness of the information, or as to the results obtained from its use. In particular, no warranty is given as to merchantability or fitness for a particular purpose.

ISTARI's sole obligation is to provide the Customer, where possible, with corrected information in the event of demonstrable errors in the information.

11.4 Force Majeure

ISTARI is not liable for delays or failures caused by force majeure, in particular failures of cloud service providers (e.g. AWS, Google Cloud, Microsoft Azure), language model providers, or other third-party causes outside ISTARI's control.

12.1 Data Protection

The processing of personal data is carried out in accordance with applicable data protection laws, in particular the GDPR, and ISTARI's privacy policy (available at https://istari.ai/en/imprint#privacy). Where ISTARI processes personal data on behalf of the Customer, a separate Data Processing Agreement (DPA) pursuant to Article 28 GDPR shall be concluded.

12.2 OSINT Data Basis

All data collection by ISTARI is carried out exclusively from publicly available sources (Open Source Intelligence, OSINT). ISTARI does not draw on grey markets, purchased personal data, or opaque sources.

12.3 Subcontractors

ISTARI is entitled to engage subcontractors in the performance of the services, in particular cloud service providers (e.g. AWS, Google Cloud, Microsoft Azure) and providers of language models, provided that such subcontractors are engaged in accordance with applicable data protection requirements, including the GDPR and the EU AI Act. The disclosure of personal data to third parties takes place exclusively within the scope of statutory obligations, for the performance of contractual purposes, or with the express consent of the Customer.

12.4 Confidentiality

Both parties undertake to treat as confidential all confidential information received from the other party in the course of the contractual relationship and to use such information only for the purposes of the contract. This obligation shall survive the termination of the contract for a period of five years.

12.5 Information Security and Compliance

ISTARI operates an Information Security Management System (ISMS). The webAI technology is ISO 27001-accredited. All data processing takes place on European infrastructure. ISTARI is GDPR and AI Act compliant. The ISMS policies may be requested at https://app.kertos.io/trust-center/istari.aigmbh.

ISTARI is entitled to name the Customer as a reference customer and to use the Customer's company name and logo, in anonymized or non-anonymized form, in electronic and written communications (in particular on the website, in presentations, offer documents, and marketing materials).

Such use is made exclusively for reference and marketing purposes on the basis of ISTARI's legitimate interest in presenting its business activities (Section 6(1)(f) GDPR, where applicable). Any use beyond this, in particular publication of confidential contract content, project-specific results, or sensitive information, requires the Customer's prior consent.

The Customer may object to the use of its company data for reference purposes at any time with future effect by email to support@istari.ai. In the event of an objection, ISTARI shall remove the affected representations within a reasonable period. Materials created or published before the objection that are outside ISTARI's direct sphere of control (e.g. printed materials held by third parties) remain unaffected.

ISTARI reserves the right to amend these GTC to the extent required by changes in the legal framework, the introduction of new products, technical developments, or changes in market conditions. Amendments shall be communicated to the Customer in text form at least 30 days before they take effect. If the Customer does not object in writing within this period, the amendments shall be deemed accepted. In the event of an objection, ISTARI is entitled to terminate the contract with effect from the date the amendments would have taken effect. The Customer shall be expressly notified in the amendment notice of the significance of remaining silent and of the right to object.

15.1 On-Site Work

Where ISTARI performs services at the Customer's premises, the right to issue instructions to ISTARI employees rests exclusively with ISTARI. Excepted are instructions of the Customer that are necessary for operational safety and compliance with on-site safety regulations. ISTARI employees are not integrated into the Customer's operations.

15.2 Subcontractors

ISTARI is entitled, at its discretion, to engage subcontractors for the provision of the services. Responsibility for proper performance of the services towards the Customer remains with ISTARI.

15.3 Severability

Should any provision of this contract be or become invalid in whole or in part, the validity of the remaining provisions shall remain unaffected. The parties undertake to replace the invalid provision with a legally valid provision that comes as close as possible to the economic purpose of the invalid provision.

15.4 No Release of Source Code

Unless expressly agreed otherwise, the Customer has no claim to the surrender or release of the programs, source code, models, or underlying training data used or generated by ISTARI.

15.5 Assignment and Set-Off

The Customer is not entitled to assign claims against ISTARI to third parties without ISTARI's prior written consent. Set-off against claims of ISTARI is permitted only with claims that have been finally adjudicated or recognized by ISTARI.

15.6 Governing Law and Jurisdiction

This contract and its performance are governed by the laws of the Federal Republic of Germany, excluding the United Nations Convention on Contracts for the International Sale of Goods (CISG). The exclusive place of jurisdiction for all claims arising from this contract is, insofar as the Customer is a merchant, a legal entity under public law, or a special fund under public law, the registered office of ISTARI in Mannheim. ISTARI shall additionally be entitled to bring action against the Customer at the Customer's general place of jurisdiction.

istari.ai GmbH
Julius-Hatry-Straße 1
68163 Mannheim
Germany

Email: info@istari.ai
Support: support@istari.ai
Web: https://www.istari.ai

This English version is provided for convenience. In the event of any discrepancy or dispute concerning the interpretation of these GTC, the German version shall prevail.