Terms of Service

These terms govern the use of Mandact. They are written to be understood — particularly where it gets uncomfortable: liability, availability, and the limits of what Mandact can do.

1. Provider

Innopulse Consulting GmbH, Gotthardstrasse 30, 6300 Zug, Switzerland
UID: CHE-219.727.921 — referred to below as “Mandact”.

2. What Mandact does

Mandact is infrastructure for issuing, checking, and revoking mandates for AI agents. Specifically:

• Issue: you define what an agent may do — action types, amount limits, validity period, permitted counterparties.
• Check: a relying party can use the Verify API to establish whether a specific action is covered by a valid mandate. The answer is deterministic and carries a reason code.
• Revoke: you can revoke a mandate at any time. Revocation takes effect from the next check onwards — no cache delays it.
• Evidence: every decision is recorded in a hash-chained evidence log.

What Mandact expressly does not do

Mandact does not execute transactions and is not a payment service. Mandact checks whether an action would be permitted — whether it actually happens is decided by the relying party.

Mandact does not control your agent. If your agent acts somewhere Mandact is not consulted, Mandact can neither prevent nor record it. The protection applies where the other side checks.

Mandact does not issue qualified electronic signatures under ZertES or eIDAS and is not a qualified trust service provider (QTSP). The evidence chain makes later changes detectable, but without a qualified timestamp it is not qualified evidence within the meaning of the regulation. We say so explicitly, because that is the difference between “traceable” and “legally binding”.

3. Account and access

You must be at least 18 years old and have legal capacity. If you use Mandact for an organisation, you must be authorised to sign on its behalf. You are responsible for the security of your credentials; actions taken through your account count as taken by you until you report misuse to us.

4. Your obligations

You issue only mandates you are entitled to issue, you keep the scope and limits of a mandate aligned with what you actually intend, and you revoke a mandate as soon as it no longer reflects your intent. Mandact does not check whether you are internally authorised to grant a particular authority — that remains your responsibility.

5. Key custody

Signing keys are held in a way that Mandact cannot reconstruct on your behalf. Losing access to a key means rotating it, not recovering it. The German version sets out the custody model in full.

6. Availability

Mandact aims for high availability but does not guarantee uninterrupted operation outside of an agreed service level. Maintenance windows are announced in advance where practicable. The kill switch remains reachable even during payment arrears — money never deletes mandates.

7. Prices and payment

Prices are published and charged per checked agent action rather than per seat. All prices exclude VAT. Annual payment corresponds to ten monthly instalments. Enterprise terms are agreed contractually.

8. Liability

Liability is limited in the manner set out in the German text. Note in particular the boundary that follows from section 2: Mandact answers whether an action is covered by a mandate. It does not warrant the conduct of your agent, the conduct of a relying party, or the outcome of a transaction.

9. Intellectual property

The service and its content remain with Mandact. The Open Mandate Protocol reference implementation is published under an open licence — details are in the repository.

10. Termination

You may terminate at any time to the end of the current billing period. On termination, active mandates are revoked before data is removed, so that no orphaned mandates remain. Verification receipts are retained in anonymised form, because they protect both sides of transactions that already happened.

11. Changes to these terms

Changes are announced in advance. Continued use after the announced date counts as acceptance; if you do not accept, you may terminate.

12. Governing law and jurisdiction

Swiss law applies. Place of jurisdiction is Zug, Switzerland, subject to mandatory consumer protection provisions.

13. Severability

If a provision is or becomes invalid, the remaining provisions continue to apply.

See also: Privacy notice · Imprint · Verbindliche deutsche Fassung