The documents your counsel will ask for first.
Your legal and privacy people are usually the last to be given anything and the first to be blamed. Each document is listed below with its current status and is available on request — one email, one reply, no drip-feed.
The documents.
| Document | What it covers | Status |
|---|---|---|
| Terms of Service | The agreement itself: licence scope, term, fees, liability, warranties, termination and export on exit. One set of terms for every customer, accepted at order. | DRAFT — ON REQUEST |
| Data Processing AgreementGDPR Article 28 | Moustr as processor, you as controller. Purpose, categories, security measures, sub-processing, international transfers, assistance and deletion. | DRAFT — ON REQUEST |
| Privacy policyVersioned | How we handle data about you as a visitor, a prospect and a user. Every consent records which version was in force at the time. | DRAFT — ON REQUEST |
| Cookie and consent notice | What is set, why, and how to change it. Until you agree, measurement stays anonymous: no cookies, nothing stored on your device, and IP addresses shortened before storage. Cookies are only set after you agree to measurement. | DRAFT — ON REQUEST |
Commercial terms, in brief.
The mechanics behind a quotation. Moved here from the pricing page, because this is the detail counsel and procurement look for rather than the thing a first-time reader needs.
| Currency | Euros. All prices exclude VAT. |
| Payment | Annually in advance, thirty days net. |
| Term | One, two or three years. Multi-year fixes the price for the whole term. |
| Renewal | One-year agreements are repriced at renewal to the then-current list, capped at CPI plus 3% — except founding-customer terms, which hold the starting price for as long as the customer stays. |
| Quotation validity | Thirty days from issue. |
| Headcount | Self-certified by the customer at contract. We do not audit it. The band is fixed for the term, so growth does not trigger a mid-term increase. |
| Never metered | The AI we discover, and the number of people who use it. Neither affects the price, at any scale. |
| Contracting | A quotation is an offer, not a contract. Any agreement is governed by the signed agreement. |
Prices are a current working proposal and subject to confirmation. How pricing works.
The boundary of what Moustr does.
What the product provides
Discovery, reconciliation, ownership workflow, classification, and evidence to support AI governance and assurance. Screening against EU AI Act obligations that shows its reasoning.
What it does not
Moustr does not certify compliance, does not issue an attestation of conformity, and does not provide legal advice. Regulatory, risk and certification decisions remain yours and your advisers'.
This boundary is written into the agreement rather than buried in a disclaimer, because a vendor that blurs it is asking you to carry a risk it has quietly declined.
Consent. Service consent and marketing consent are held as two separate records and are never bundled — everything here works with zero marketing consent. Each record stores the exact text shown, the privacy policy version in force, the timestamp and the source, and erasure cascades across contact, reports and marketing state.
Three sensible next steps.
Review the architecture
What connects to what, what is read, what is stored and where. The technical answer your security team will ask for before anything else.
Security and architectureConsider a trial
Thirty days, one named, owned, evidenced register, free and with no obligation to continue. The fastest way to replace an argument with your own estate.
The 30-day trialTake a call and see it running
Ten minutes with a founder and a live walkthrough of the register itself. No deck, and every document above sent in one email if you want them.
Request free trialLegal page v1.2. Each document carries its own version and date.