Legal

Terms of service

Short terms for the CleverPrism subscription. For everything they do not cover, the NLdigital Terms 2025 apply, the standard terms of the Dutch IT sector.

Version 1.136 November 2026CleverPrism B.V. · KvK 42175200

These terms are short on purpose. They set out what is specific to the CleverPrism subscription. For everything else, the NLdigital Terms 2025 apply: the standard terms and conditions of the Dutch IT sector, also used by our sister company CleverIT.

1Who we are and which terms apply

  1. These terms of service are issued by CleverPrism B.V., trading as CleverPrism, registered with the Dutch Chamber of Commerce under number 42175200, VAT number NL870041332B01, established at Elzentlaan 27, 5611 LG Eindhoven, the Netherlands ("CleverPrism", "we", "us"). "Customer" or "you" means the business or organisation that concludes an agreement with us.
  2. The NLdigital Terms 2025 apply to all our offers and agreements. They are filed with the District Court of Midden-Nederland (Utrecht). For the CleverPrism subscription the following chapters are relevant in particular: Chapter 1 (General provisions), 2 (Compliance), 3 (Cybersecurity), 4 (Processing of personal data), 5 (Data sharing), 6 (Artificial Intelligence and Software-as-a-Service) and 13 (Hosting). You can read and save them here: NLdigital Terms 2025 (PDF). On request we will send them to you by email, free of charge.
  3. If these terms of service and the NLdigital Terms 2025 conflict, these terms of service prevail. On the processing of personal data, the data processing agreement prevails over these terms. Specific written agreements between you and us prevail over all of them.
  4. Your own purchasing or other terms and conditions do not apply.
  5. Our data processing agreement forms part of every agreement and applies to personal data we process on your behalf.
  6. Definitions. "Desk" means an isolated AI workspace within Tirmel, hosted and managed by CleverPrism for the Customer, with its own AI agent environment, storage and access rights (technically a sandbox). Tirmel (formerly Iriva) is the product name of the CleverPrism subscription.
  7. Article 38.2 of the NLdigital Terms 2025 does not prevent you from giving access to the people you authorise or from sharing results through public links. In deviation from Article 7.7 of the NLdigital Terms 2025, we only use your name or logo with your prior consent.

2Business customers only

  1. We only contract with businesses and organisations that act in the course of their profession or business. We do not sell to consumers.
  2. By ordering, you confirm that you act on behalf of a business or organisation and that you are authorised to bind it. You provide its legal name and address, and its VAT identification number if it has one. For a business or organisation established in an EU member state other than the Netherlands, a valid VAT identification number is required.
  3. If it turns out that you do not meet these conditions, or that the details you provided are incorrect, we may refuse the order or terminate the agreement with immediate effect.
  4. The agreement is concluded when you have completed the order form, accepted these terms and completed the payment. You can check and correct your details before you pay. We confirm the order by email and keep a record of it, including the version of these terms you accepted; these terms remain available on this page. The agreement is concluded in English.

3The service

  1. The CleverPrism subscription is a private AI environment on a server that is dedicated to you, with the number of desks you have chosen, a password vault, an artifact server for sharing results (also through public links), a tool gateway (the Toolkit) that checks the actions of AI agents in the systems you connect, and private access (VPN) to systems in your own network, which is included and which you use as you choose, as described on our pricing page. It is a Software-as-a-Service and hosting service in the sense of the NLdigital Terms 2025.
  2. Bring your own AI model. You connect your desks to an AI model of your choice with your own subscription or API key (for example with Anthropic or OpenAI). That agreement is between you and the AI provider: its terms, its costs and its processing of the data you send to the model are your responsibility. We are not responsible for the availability, quality or output of the AI provider's service.
  3. You decide what the AI agents in your environment do and with which data. You check their output before you rely on it or share it.
  4. You use the service in accordance with the law, the rules on acceptable use in section 3A and the rules on use in the NLdigital Terms 2025. In case of abuse we may suspend the service immediately, as described in section 3A.
  5. We may carry out maintenance and updates. We keep interruptions as short as possible and schedule planned maintenance outside office hours where we can.
  6. Beta product, no uptime guarantee. The service is a beta (early access) product in active development and is provided as it is and as available. We release new features and changes frequently and usually without prior notice. As a result your environment may be restarted, running tasks may be interrupted and the service may be temporarily unavailable. Features may change, be added or be removed, and you cannot derive any rights from the way a feature works at a given moment or from plans we have announced. We do our best to keep your environment running, but we do not guarantee any specific availability or uptime, and no service level agreement (SLA) applies unless we have agreed one with you in writing.
  7. AI models: your choice, your account. The AI models, subscriptions and API keys you connect are yours, not ours. In principle any model can be connected, as long as its provider allows this. We do not guarantee that a particular model, provider, subscription type or tool (such as Claude Code, Codex or OpenCode) can be connected or keeps working with our environment. Providers can change their terms, prices, access rules or technology at any time.
  8. Personal subscriptions and shared desks. Some providers only allow their personal or consumer subscriptions (for example Claude Pro or Max, or ChatGPT Plus or Pro) to be used by one person, or only in certain ways; the same usually applies to a per-user seat in a business plan (for example Claude Team or ChatGPT Business). Everyone who works in the same desk uses the same AI login, so such a subscription or seat may not be shared through a desk. It is your responsibility that your use complies with your provider's terms. If several people work in one desk, or if a provider does not allow, or stops allowing, its subscription to be used with our environment, you connect an API key of your organisation instead, or give each person a desk of their own. We are not liable for any consequences of a provider refusing, restricting or ending such use, and this does not entitle you to a refund or to terminate the agreement early.
  9. Licences of software and models. Your environment contains open-source software, and software and models that you install or connect yourself may come with their own licence terms (for example the licence of Claude Code or of an open-weight model). You comply with those terms for everything you install, connect or use yourself.

3AAcceptable use and abuse

  1. You may only use the service for lawful purposes. You, your users and the AI agents in your environment do not use the service to:
    • attack, scan or break into systems or networks of others, or create, test or spread malware;
    • run or take part in a botnet, operate command-and-control servers, carry out denial-of-service attacks, or send spam or phishing;
    • mine cryptocurrency;
    • create, store or share child sexual abuse material or any sexual content involving minors, or intimate images of anyone without their consent;
    • create, store or share sexually explicit material;
    • develop, make or trade weapons, explosives, or chemical, biological, radiological or nuclear agents, or instructions for them;
    • create or share terrorist content, or incite violence or hatred;
    • trade illegal goods or services, such as drugs, stolen data, login details or false documents, or commit fraud or money laundering;
    • evade sanctions, or infringe the privacy or intellectual property rights of others;
    • carry out any other activity that is illegal under Dutch or EU law or the law of the country where you or the affected persons are.
  2. Security testing is only allowed on systems you own or have written permission to test, and never in a way that affects our network or other customers. Load and denial-of-service tests require our prior written consent.
  3. How we enforce this, and your privacy. We do not read the files, prompts or conversations in your environment. To protect our network, our other customers and third parties, we may use automated measures that are based on network and usage data (such as the time, destination, port and volume of traffic, and the use of resources), not on content. Examples are blocking outgoing mail (ports 25, 465 and 587) unless agreed otherwise, blocking known malicious destinations, and limiting or blocking traffic that looks like scanning, attacks, botnet activity or mining. Images you publish through a public link may be checked automatically by comparing their digital fingerprints (hashes) with lists of known child sexual abuse material.
  4. A person reviews every case before we suspend your environment, take down content or terminate the agreement, unless immediate action is needed to stop ongoing harm; in that case a person reviews the measure without delay afterwards. We only look at content in your environment when this is necessary to handle a specific report, to comply with an order or other legal obligation, or when there is a serious and concrete indication of abuse. We keep a record of who accessed what and why.
  5. Reporting abuse. Anyone can report illegal content or abuse to abuse@cleverprism.com. Please include the exact location (for example the URL), why you believe it is illegal, your name and email address (not required for reports of child sexual abuse material), and a statement that your report is accurate and complete to the best of your knowledge. We confirm receipt, process every report carefully and objectively (Article 71.3 of the NLdigital Terms 2025 does not limit this), and inform you of our decision.
  6. Measures. Depending on how serious the situation is, we may warn you, limit or block network traffic, take down public content, suspend your environment or terminate the agreement with immediate effect. Measures taken because of abuse do not entitle you to a refund.
  7. Reasons and objection. At the latest when a measure takes effect, we tell you which measure we took, how long it lasts and where it applies, whether it followed a report or our own investigation, and why: the facts, the rule or law it is based on, and whether automated means were used. You can object by replying to that message. Someone who was not involved in the original decision reviews your objection and informs you of the outcome. You can also go to court as set out in section 11. When we decide on a report, we also inform the person who made it of our decision and of the ways to contest it.
  8. Authorities. We comply with orders from competent authorities. We remove or disable access to terrorist content within one hour of receiving a removal order under Regulation (EU) 2021/784, keep that content and related data for six months as that Regulation requires, and inform you unless the authority decides otherwise. We report child sexual abuse material, and any information that gives rise to a suspicion of a criminal offence involving a threat to someone's life or safety, to the competent authorities.
  9. You are responsible for everything that happens in your environment, including the actions of the AI agents you run there and of the people you give access. If you notice that your environment has been compromised or misused, you tell us without delay.
  10. AI Act. Tirmel and the Toolkit are not intended for use as, and may not be turned into, a high-risk AI system within the meaning of Article 6 of the EU AI Act (Regulation (EU) 2024/1689), and may not be used for practices prohibited by its Article 5. Article 37.5 of the NLdigital Terms 2025 does not limit any reporting obligation you have under the law.

4Prices and payment

  1. Our prices are listed on the pricing page, in euros and excluding VAT. The price that applies is the price at the time of your order, subject to section 4.5.
  2. You pay in advance for each billing period (a month or a year). Payments are processed by our payment provider Stripe. You authorise us to collect every amount due automatically, by credit card or by SEPA direct debit (with the mandate you give through iDEAL | Wero).
  3. You can change the number of desks in the customer portal. Extra desks are available immediately and are charged pro rata for the rest of the current billing period. A reduction takes effect at the end of the current billing period. Except under section 4.7, we do not refund amounts for a period that has started.
  4. Discount codes apply only under the conditions stated with them, cannot be exchanged for money and cannot be combined unless stated otherwise.
  5. We may change our prices in accordance with Article 3.5 of the NLdigital Terms 2025: in writing, at least three months in advance and not more than once a year. If you do not agree, you may terminate the agreement as described there.
  6. Introductory price. If you order through our website without a discount code, you get the introductory discount shown on the website when you order. On 6 November 2026: with monthly billing your first month for the first desk costs € 49 instead of € 150; with yearly billing you get the same € 101 off your first yearly payment (excluding VAT). Additional desks are charged at the normal price. After the first month or year the normal prices apply. The introductory discount applies once per customer and not together with a discount code.
  7. 30 days money back. If you are not satisfied, you can cancel within 30 days after your first order by email to service@cleverprism.com. We then refund the first payment of your first subscription in full and the subscription ends on the day we process your request. This applies once per customer. Your data is handled as described in section 7.

5Term, renewal and cancellation

  1. A monthly subscription runs for one month and renews automatically for one month at a time.
  2. A yearly subscription runs for one year and renews automatically for one year at a time. We send you a reminder by email at least 30 days before each renewal.
  3. You can cancel at any time in the customer portal or by email. The cancellation takes effect at the end of the current billing period. In deviation from Article 4.2 of the NLdigital Terms 2025, no three-month notice period applies. Amounts already paid for the current period are not refunded, except under section 4.7. After you cancel, we email you the date on which the subscription ends. Until that date your environment keeps working (unless it is suspended under section 6), so that is the easiest moment to export the data you still need yourself (section 7.4). After that date you can still ask us for a free export during the 60-day period of section 7.1.
  4. A switch from monthly to yearly billing takes effect immediately (pro rata). A switch from yearly to monthly billing takes effect at the end of the current year.
  5. We may terminate the agreement in writing with at least three months' notice, to the end of a billing period. The other grounds for termination in Article 14 of the NLdigital Terms 2025 remain in force.

6Non-payment and suspension

  1. If a payment fails, is not made on time or is reversed (for example a direct debit reversal or a chargeback), we may suspend the service immediately and without prior notice. Your desks are then stopped and your environment is not accessible. Your data is kept.
  2. We send you an email with a link to pay the outstanding invoice. As soon as it has been paid in full, we restart your environment automatically.
  3. If the outstanding amount has not been paid 60 days after the suspension, the agreement ends. Your environment has then already been unavailable for 60 days; this counts as the period of section 7, so we then delete your data as described in section 7.3, but not before we have sent you a final warning by email at least 7 days in advance. During the suspension you can ask us for an export of your data. The amounts due remain payable, plus statutory commercial interest and collection costs as set out in Article 3.7 of the NLdigital Terms 2025.
  4. A suspension does not affect your obligation to pay for the period concerned.

7Your data when the service ends

  1. When the agreement ends, for whatever reason, and when a desk is removed, we keep the data concerned for 60 days. During this period the environment or desk is no longer accessible, but you can ask us for an export of your data, free of charge. You can use it to switch to another provider or to your own infrastructure, as provided in Chapter 5 of the NLdigital Terms 2025 and the EU Data Act (Regulation (EU) 2023/2854).
  2. The export contains the data you and your users put into your environment and the results the AI agents produced there: the files and projects in your desks, including their conversation history, and your artifacts, as well as the list of your users and their roles and your Toolkit rules and log, in common formats. You export the contents of the password vault yourself with its export function. Our own software, the configuration of the platform and its internal technical data (such as monitoring data) are not part of the export.
  3. After these 60 days we permanently delete the data from your environment, unless the law requires us to keep it. Copies in our backups are encrypted before they leave our servers, are used only to restore data after an incident, and are deleted automatically as the backup cycle rotates, at the latest 12 months later. The period of 60 days is the reasonable period of Article 30.1 and the retrieval period of Article 36.2 of the NLdigital Terms 2025; the backup period is the agreed period for erasure of backup copies.
  4. We recommend that you export the data you still need yourself before the agreement ends, while your environment is still accessible; export the contents of the password vault with its export function (section 7.2). This does not limit your right to ask us for a free export during the 60-day period of section 7.1, whether or not you exported yourself. It is your responsibility to secure the data you still need before it is deleted (section 7.3).
  5. Switching under the EU Data Act. You may at any time ask us by email to switch to another provider or to your own infrastructure, or to erase your data. The notice period for such a request is at most two months. After it, a transitional period of at most 30 days follows, during which the agreement and the service continue unchanged, we give you and the third parties you authorise reasonable assistance, tell you about known risks to continuity and maintain a high level of security. If 30 days is technically not feasible, we tell you so within 14 working days, with reasons, and propose an alternative period of at most seven months. You may extend the transitional period once. The agreement ends, and we confirm this to you, when the switch has been completed or, if you do not wish to switch, at the end of the notice period. The 60-day period of section 7.1 starts after the transitional period. Switching is free of charge; fees already paid are not refunded (section 5.3). Chapter 5 of the NLdigital Terms 2025 applies where this section does not provide otherwise.

8Personal data and confidentiality

  1. For personal data in your environment, you are the controller and we are the processor. Our data processing agreement applies.
  2. We do not use the content of your environment for any purpose other than providing the service to you. We do not use it to train AI models. We only access content in the cases described in section 3A, with your permission (for example when you ask us for support), or when the law requires us to. A support session is limited to one hour, is shown in your environment while it lasts and is recorded in your environment’s log, and you receive an email about it.
  3. To keep our network and services secure and to prevent abuse, we process network and usage data as described in section 3A. More about this in our privacy statement.
  4. How we handle personal data as a controller (for example your contact and billing details) is described in our privacy statement.

9Liability

  1. Our liability is limited as set out in Article 15 of the NLdigital Terms 2025.
  2. We are not liable for the availability, performance, output, prices or terms of AI models, providers and other third-party services that you connect, nor for damage caused by the unavailability of the service during the beta (early-access) phase, except in case of intent or deliberate recklessness on our part.

10Changes to these terms

  1. We may change these terms of service. We inform you by email of every significant change. If a change is to your disadvantage, we inform you at least 30 days before it takes effect; if you do not agree with it, you may cancel your subscription with effect from the date on which the change takes effect. Other changes, such as clarifications, new product names or new features, may take effect immediately.

Version 1.13 (6 November 2026): new section 4.6 (introductory discount on the first month or year of a subscription ordered through our website) and 4.7 (30 days money back on your first subscription); sections 4.3 and 5.3 refer to 4.7. Both changes are in your favour and apply immediately. Nothing else changed.

Version 1.12 (1 November 2026): section 5.3 says that we email you the end date when you cancel; section 7.4 recommends that you export your data yourself before the end and confirms that you can still ask us for a free export during the 60-day period. Nothing else changed.

Version 1.11 (30 October 2026): the tool gateway is now called by its product name, the Toolkit, instead of Toolgate (sections 3.1, 3A.10 and 7.2); section 3.1 says that private access to your own network (VPN) is included and that you use it as you choose. Nothing else changed.

Version 1.10 (26 October 2026): section 1.3 says that the data processing agreement prevails on personal data; 1.7 deviates from Articles 38.2 and 7.7 of the NLdigital Terms 2025; 2.4 explains how the agreement is concluded; 3A adds what we tell you about measures and reporters, our handling of terrorist content and the AI Act; 6.3 adds a final warning before deletion; 7.2 and 7.5 describe the export and switching under the EU Data Act.

Version 1.9 (26 October 2026): section 3.1 describes the service more completely; 3A mentions all blocked mail ports; 6.3 and 7 say how the 60-day period works after a suspension, that the export is free of charge, what it contains, and how long encrypted backup copies are kept; 8.2 covers support access with your permission; 10 says which changes we announce 30 days in advance; 11 replaces arbitration by the competent court; 12 adds our point of contact for removal orders on terrorist content.

Version 1.8 (16 October 2026): section 3.8 now also says that a per-user seat in a business plan is usually for one person, that everyone in a desk uses the same AI login, and that several people in one desk use an API key of their organisation or a desk each. Nothing else changed.

Version 1.7 (13 October 2026): the product name Iriva was changed to Tirmel, and the web addresses were changed to the Tirmel domain names (such as tirmel.com and tirmel.app). Nothing else changed.

11Applicable law and disputes

  1. Dutch law applies; the United Nations Convention on Contracts for the International Sale of Goods (CISG) does not apply.
  2. In deviation from Article 18.2 of the NLdigital Terms 2025, disputes are not resolved by arbitration but by the competent court in the Netherlands. Where the parties may choose the court, this is the District Court of Oost-Brabant (Rechtbank Oost-Brabant). Either party may propose ICT mediation under Article 18.4 of the NLdigital Terms 2025.

12Contact

CleverPrism B.V., Elzentlaan 27, 5611 LG Eindhoven, the Netherlands · Chamber of Commerce (KvK) 42175200 · VAT NL870041332B01 · service@cleverprism.com

Reports of illegal content or abuse: abuse@cleverprism.com. This is also our point of contact for authorities and for users of our service under the EU Digital Services Act (Regulation (EU) 2022/2065), and our point of contact for removal orders under Regulation (EU) 2021/784 on terrorist content online. You can write to us in English or Dutch.