Skip to content

Last Updated: 1 October 2026

Product Specific Terms

Overview

These terms define permitted uses, limitations and responsibilities for Ductio’s enabled executive search and intelligence, AI analysis, customer uploads, integrations, Voice and trials. They operate with the accepted Customer Terms, usage, intelligence-licensing, acceptable-use and data-processing documents.

1 Application and enabled services

1.1 These Product Specific Terms apply to the Services enabled under an accepted Order with DUCTIO LTD, company number 17303286 ('Ductio', 'we' or 'us'), only where these terms are made available and expressly incorporated into that Order. They supplement the Customer Terms and Conditions. Capitalised terms have the meanings given in the Customer Terms. These terms do not independently grant access to a service or create a paid subscription.

1.2 Each section applies only to the service actually enabled. Descriptions of optional services do not promise availability, inclusion in a plan, a particular integration or future functionality. The Order and activation confirmation identify the purchased features, authorised territory, users, allowances and any service-specific charges.

1.3 Mandatory law and mandatory international-transfer clauses prevail for their subject matter, followed by the Data Processing Agreement (DPA) for personal-data processing and expressly agreed lawful Order variations identifying the provision varied. These Product Specific Terms govern enabled service-specific matters; the Product and Usage Schedule governs measurement and purchased entitlements; the Data and Intelligence Licence Schedule governs licensed use and distribution; and the Acceptable Use Policy (AUP) governs acceptable use and proportionate enforcement. The Customer Terms govern remaining matters, including payment, warranties, liability, indemnities, suspension, termination and disputes. Their hierarchy controls any conflicting precedence statement. This document creates no separate liability, indemnity, penalty or termination regime.

1.4 The identified versions of applicable contract documents must be supplied and expressly incorporated at acceptance. The Privacy Policy and Cookie Policy are notices, not blanket consent, processing instructions or permissions to repurpose private content. Internal AI, security and governance policies do not create additional customer warranties merely by appearing in Corporate Records. Roles follow actual processing; a Customer acting as processor must obtain its controller's authority for Ductio to act as subprocessor.

1.5 Only an authorised administrator or user acting within the Customer's delegated authority may enable an optional service, connect an account or authorise expenditure. Separately chargeable features remain off until expressly enabled with the applicable price, measurement and allowance displayed. Enabling one feature does not authorise unrelated charges or data uses.

2 Executive search and professional intelligence

2.1 Named Authorised Users may research professional experience, company context and source evidence, compare leadership backgrounds and create permitted Assignment Reports for the executive-search, assessment, succession, leadership, board, workforce, governance or investment-research purposes recorded in the Order. Only enabled modules and fields are included. A product or intelligence-engine name does not promise every source, complete coverage or future functionality. Investment research is informational and is not regulated investment advice.

2.2 Legitimate client delivery follows the accepted Data and Intelligence Licence Schedule. A search or advisory customer may securely share a proportionate Assignment Report, shortlist and permitted extracts with the identified Commissioning Client and its necessary personnel and advisers for that Assignment, including within its normal paid professional engagement. Bind voluntary recipients in writing to purpose, confidentiality, lawful retention, correction, deletion and onward-use restrictions; an engagement agreement may do this, but a footer alone is insufficient. Keep reasonable delivery records and take reasonable remedial steps on learning of misuse. A genuine longlist, white-label Report, client portal, guest or direct workspace access requires its recorded permission. Report sharing grants no shared credentials, unrelated reuse, general profile library or standalone dataset-resale right, and creates no new strict liability or indemnity.

2.3 Keep material source references, dates, confidence indicators and qualifications with shared findings. Distinguish verified facts, source allegations, customer observations and AI inferences. A company result occurring during an executive's tenure does not establish that the executive caused it. A professional association does not establish personal conduct, security clearance or endorsement.

2.4 Ductio Intelligence depends on source coverage, licensing, update frequency and identity matching. Records may be incomplete, outdated or disputed. We do not guarantee coverage of every executive, market, company or event, or immediate updates. Before consequential use, verify identity, dates, qualifications, contact information and material claims against appropriate evidence. Report suspected inaccuracies through support; do not knowingly continue to present a disputed inference as established fact.

2.5 Professional contact details do not themselves authorise marketing, recording or repeated contact. Comply with applicable UK PECR and EU or national electronic-communications rules, relevant subscriber distinctions and preference registers, sender identification, objections, opt-outs and suppression records. Lawful unsolicited business communications are not automatically prohibited. An export entitlement does not provide a general marketing permission.

2.6 Do not scrape, harvest, systematically collect profiles, extract bulk data, reconstruct a database or offer a substitute intelligence product beyond express accepted rights. This includes bots, browser automation, manual repetition, screenshots, OCR, repeated small exports and requests accumulated across users, Projects or periods. API access is a delivery channel, not bulk or resale permission. Recurring feeds, resale, sublicensing, public profile publication, embedding in another product, shared retrieval corpora, model training or evaluation and external AI processing each require express recorded rights, approved destinations and applicable source permissions under the Licence Schedule. Ordinary authorised research, accessibility use, proportionate permitted extracts, lawful independent development, good-faith validation and mandatory legal rights remain permitted.

2.7 The Licence Schedule governs retained Reports and permitted extracts after expiry: they may be used to complete the same Assignment and for necessary audit, legal, regulatory or professional records within the surviving scope. They do not permit fresh search, enrichment or reuse for another Assignment. Remove unused raw exports and API caches outside that scope from active systems within the period in the accepted Licence Schedule, subject to lawful retention. Preserve assessment dates, restrict historical access and propagate applicable corrections, restrictions and deletion to active copies and known recipients. Hosted Customer Content return and deletion are separate DPA obligations.

2.8 The standard service is not regulated investment or legal advice, a formal background check, security clearance or a guarantee of candidate performance. It is not an approved environment for classified material, government secrets, security-cleared workloads or mobilisation and targeting operations. Lawful defence, national-security and resilience research requires expressly purchased scope; specialised deployments need separate authority, source rights, intended-use review and safeguards before activation. An uncertain association does not prove military status, beliefs, guilt or clearance. No separate agreement authorises a prohibited practice or targeting for harm, coercion or unlawful surveillance.

3 AI analysis and decision support

3.1 Enabled AI features may extract information, match identities, summarise evidence, compare experience and generate contextual scores, rankings, explanations or recommendations against project criteria. Use each feature within its documented intended purpose, supported workflow and agreed scope. AI Runs, credits, reservations, retries, partial results and restoration follow the Product and Usage Schedule; an internal model call is not an additional Run unless another measurement was expressly accepted before purchase.

3.2 Supply relevant, accurate project requirements and review inputs, criteria and assumptions. Do not use protected characteristics, sensitive traits or proxies to discriminate unlawfully or create unlawful indirect disadvantage. Examine criteria that may exclude candidates unfairly. Lawful equality monitoring, reasonable adjustments and positive action require their own valid basis, permitted scope and safeguards; they are not a general permission for adverse or preferential treatment.

3.3 AI Outputs can contain invented statements, factual errors, bias, omissions, incorrect matches or unreliable citations. Scores are contextual analytical indicators, not objective certifications of suitability, personality, honesty or future performance. Check material statements against the underlying source rather than treating an AI explanation as proof. Different inputs, model versions or executions may produce different results.

3.4 Before a final hiring, rejection, promotion, dismissal, succession or other legally or similarly significant decision takes effect, a competent person must meaningfully review identity, source evidence, criteria, bias, accuracy and limitations, with sufficient time and authority to change the outcome. Automatic exclusion before substantive review and rubber-stamping are not meaningful review. The standard Services must not be the sole automated basis for such decisions. This is a contractual product restriction, not a statement that all automated decisions are unlawful. Any separately proposed automated-decision service requires expressly agreed lawful scope and safeguards before deployment.

3.5 Each party must meet the privacy, equality, employment and AI obligations applicable to its actual activities, role and territory. The Customer must establish lawful purposes and bases, supply required direct or indirect-collection information, document any lawful transparency exception, complete required DPIAs or other impact assessments, maintain required records and train competent reviewers. Ductio remains responsible for its own provider, controller and processor duties. Public availability, licensed supply or customer consent to a contract is not the individual's consent or a lawful basis by itself.

3.6 Do not use the Services for prohibited AI practices, including prohibited social scoring, harmful manipulation, unlawful sensitive-trait biometric categorisation, prohibited workplace emotion recognition or unlawful predictive profiling. The standard Voice and interview workflows do not permit emotion recognition, biometric identification or sensitive-trait inference. Transcription does not authorise them. Do not change the intended purpose, substantially modify a system or place a repackaged service on the market without review and expressly agreed lawful scope. No licence can legalise a prohibited practice.

3.7 Ductio will provide available intended-use instructions and relevant information about known limitations and oversight. Each party shall fulfil AI obligations applicable to its actual provider, deployer or other role and cooperate reasonably on compliance questions and material concerns. Human review and a decision-support label do not themselves remove an EU AI Act high-risk classification. Do not deploy for a use or territory requiring unavailable safeguards until they are implemented. No conformity assessment, certification or regulatory approval is asserted by these terms.

3.8 Customer Personal Data, including prompts, uploads, recordings, embeddings and customer-specific Outputs, is processed only within documented DPA instructions. Ductio shall not sell or license it, build a shared candidate database from it, disclose it to unrelated customers, or train or fine-tune shared or general-purpose models with it. Provider access, retention and training must be restricted consistently. Customer-specific adaptation requires explicit instructions, tenant isolation and agreed processing details. Genuinely anonymous statistics may be created only within lawful authority and applicable instructions; pseudonymised or merely aggregated identifiable information remains personal data. Telemetry or feedback permission does not extend to unrelated reuse of private project information.

3.9 Ownership and licences for Outputs remain governed by the Customer Terms. An Output may contain licensed Ductio Intelligence or third-party material, and generation does not remove restrictions on that material. AI Outputs may not be unique or eligible for intellectual-property protection. Ductio does not grant an unrestricted right to reproduce protected source articles or datasets.

4 Customer uploads and project content

4.1 You may upload supported CVs, biographies, role specifications, assessment records, project notes, documents and other material relevant to the enabled service. Storage is for that purpose and is not a general file archive or backup service. File types, size limits and storage allowances must be disclosed in the Order or applicable service specifications.

4.2 You retain your rights in Customer Content and must have the authority, licences, lawful basis and required notices to provide it to Ductio and instruct the requested processing. This includes rights in third-party CVs, interview notes, recordings, references and confidential employer material. A person's inclusion in a project does not imply consent to every subsequent use.

4.3 Ductio's licence to Customer Content is limited to providing, securing and supporting the contracted Services consistently with the Customer Terms, confidentiality duties and DPA. Matching, enrichment, scoring or inclusion in a mixed Report does not convert processor-held uploads or their derived analysis into Ductio-controlled intelligence. Ductio may separately license lawfully and independently sourced professional intelligence, with applicable source rights, notices and individual-rights safeguards; this does not permit reuse of private CVs, notes, recordings or projects. Any different use requires a separately agreed lawful arrangement and any necessary notices and safeguards, not a general product-improvement clause.

4.4 Do not upload special category or criminal-offence data, classified material, government secrets or information subject to security-clearance restrictions unless Ductio has expressly agreed the processing and safeguards in writing and you have the necessary legal authority. Minimise unnecessary personal information and remove irrelevant sensitive details before upload. Commercial confidentiality alone does not make a standard account suitable for classified workloads.

4.5 You must manage user permissions, restrict access to those who need it, maintain accurate records and implement appropriate retention periods. Do not use another person's account or assume a shared workspace is private to one user. You are responsible for keeping any independent copies needed for your business records, without reducing Ductio's own security, recovery or data-return obligations.

4.6 Do not knowingly submit malware, ransomware, malicious macros, phishing content, access secrets or instructions designed to expose another tenant's data, extract protected system information, execute unauthorised actions or defeat safeguards. Ductio may reject unsupported, corrupted or excessive uploads and proportionately quarantine suspect content under section 9. Report accidental harmful uploads promptly and cooperate in containment. Security or load testing requires prior written scope. Good-faith vulnerability reporting is permitted. Parsing, OCR and extraction may misread text or lose formatting; check extracted data before consequential use. Acceptance does not certify legality, accuracy or completeness.

4.7 Return, deletion, derived stores, residual backups and post-termination access follow the accepted Customer Terms and DPA, subject to any longer mandatory switching or retrieval period. Commercial intelligence-export quotas do not block contractual return of Customer Content or mandatory rights assistance. A safe limited return route may replace full access where necessary for security. Deletion must address relevant Outputs, indexes and embeddings as well as source files, be propagated through Ductio's processing chain, and be reapplied after restoration. Customer-held and external copies need separate lawful action; deleting the Ductio copy does not itself erase them. An offline Report licence does not extend hosted retention.

5 Integrations and connected services

5.1 An integration, API or agent workflow is included only where recorded in the accepted entitlement and licence records. Before activation identify the connector, account, actual provider role, data categories and direction, endpoints or actions, recipients, permission scopes, destinations, locations, measurement and charges. Trials exclude integrations unless expressly varied. Technical availability or possession of a key does not grant a licence or activation authority.

5.2 You must be authorised to connect the relevant account and share its data. Grant only necessary permissions, use supported authentication methods and maintain your own required third-party subscriptions. Do not share another person's credentials, bypass provider access restrictions or use an integration to obtain data you are not entitled to access.

5.3 Configure read, import, export, synchronisation and external actions separately. Permission to read does not authorise writing, deletion, calls or messages. An agent may act only within approved recipient, action, project and spending scope; proposed actions outside it require further authorisation. The Customer is responsible for lawful instructions and approved recipients, while Ductio remains responsible for implementing agreed permissions and safeguards. Treat documents and retrieved prompts as untrusted content, not independent authority to expand access or invoke tools.

5.4 Names alone are not a reliable basis for merging people or attaching transcripts. Check relevant email addresses, telephone numbers, account identifiers and project context before confirming a match. Even a matching identifier can be shared, reassigned or incorrect. Review uncertain matches and resolve duplicate or conflicting records before consequential use.

5.5 Customer-selected independent services have their own applicable terms and privacy practices. You must establish lawful disclosure, appropriate confidentiality, retention, provider training restrictions and restricted-transfer safeguards before connecting them. Ductio's contracted subprocessors remain subject to the DPA's authorisation, notice and objection process and Ductio's own responsibility; labelling them integrations does not remove those obligations. An independent-controller intelligence source must not receive private customer content without established authority, actual role and safeguards. Connecting a service is not permission for unrelated onward disclosure, retention or model training.

5.6 Third-party limits, outages or changed permissions may interrupt a connector. Ductio will use reasonable skill and care in its own contracted integration and delivery chain, communicate material known changes and investigate qualifying failures under the Usage Schedule. No uninterrupted external-provider operation is guaranteed. Material reductions of purchased functionality or rights remain subject to the Customer Terms and Licence Schedule, including applicable replacement and affected-service exit or refund rights. A provider change does not silently vary DPA permissions or accepted entitlements.

5.7 Disable the connection and revoke external credentials when access is no longer required. Disconnection stops future access within the connector's operation; it does not automatically erase imported content, external copies or queued actions already authorised. Review queued actions where supported and request deletion under the applicable contract and provider procedures. Report suspected token compromise promptly.

6 Voice telephony recording and transcription

6.1 Voice services apply only where available in the agreed territory and separately enabled. They may include a telephone number, inbound or outbound calls, forwarding, recording, transcription, summaries and supported transcript imports. Each function must be enabled within the purchased scope; turning on calling alone does not authorise recording or unrelated analysis.

6.2 Voice remains off until an authorised user expressly enables each agreed function and accepts its activation record. It must identify number rental, territories and destinations, calling and connection charges, counting and rounding, forwarding legs, transcription, summaries, storage, retention, concurrency, spending caps, in-progress limit treatment, recurring cancellation and number-release or portability conditions. Unapproved premium or chargeable destinations must remain blocked. Ductio shall display usage and relevant retention/privacy information; silence, a stored payment method or a warning alone does not authorise spending.

6.3 Calling, forwarding, transcription, summaries and storage follow their separate accepted measurements in the Product and Usage Schedule. Two connected call legs count separately only where that method was disclosed and accepted. A transcription failure does not undo validly consumed calling minutes; qualifying failed transcription and internal retries follow the Schedule's restoration rules. Extra usage requires an approved purchase or previously enabled capped top-up. Enforce the accepted allowance and spending cap together, including the recorded in-progress-call treatment. Disabling a function does not necessarily cancel recurring number rental; the accepted cancellation route and effective date control.

6.4 Before recording, transcribing or importing a recording, you must establish the applicable lawful basis and required permissions, provide clear notice to participants and obtain consent where law requires it. This applies to all relevant jurisdictions, including participant locations. Configure available announcements and recording controls appropriately. Ductio must provide the agreed controls and process recordings in accordance with its own duties and the Data Processing Agreement.

6.5 Do not make unlawful recordings or interceptions, spoof identities, harass participants, conduct unlawful marketing or generate prohibited premium-rate or traffic-pumping activity. Apply applicable PECR and EU or national calling rules and preference registers. Import only recordings and transcripts you are authorised to supply. Transcription does not legalise an unlawfully obtained recording. Where required notices, consent or safeguards cannot be provided, disable the affected recording or transcription and use a lawful alternative.

6.6 Transcripts, speaker labels, summaries and action points may be inaccurate, omit material context or attribute statements to the wrong person. Verify important content against the original where available and lawfully retained. A transcript is not a certified verbatim record. Check identity and source before attaching it to a candidate or project, and correct known attribution errors.

6.7 Apply proportionate permissions and the lawful retention period in the accepted DPA and Customer instructions. Storage capacity, unused minutes or renewal do not extend retention. Recording and transcription do not permit inference of protected characteristics, emotional state, honesty, psychological fitness or sensitive beliefs from unsupported communications or biometric signals. Recordings, transcripts and related derived content remain subject to processor restrictions, correction and deletion; summaries are not exempt merely because they are shorter than the recording.

6.8 The standard Voice service is not intended for emergency calls and must not be relied on for access to emergency services. Maintain another suitable means of making emergency calls. Any statutory telecommunications duties applying to Ductio or its provider remain unaffected.

6.9 Number availability, allocation, geographic eligibility and portability depend on provider and local regulatory requirements. Supply accurate verification information where required. Do not assume a number is owned permanently or transferable without restriction. Ductio will disclose known allocation and portability conditions before provisioning and provide reasonable agreed assistance; transfer completion is subject to provider acceptance and applicable law.

6.10 Arrange cancellation, disconnection, export and any number-porting request before expiry. A number may be released and later reassigned after the service ends, subject to provider rules and applicable law. Remove it from published materials and connected accounts where appropriate. Do not rely on a released number for account recovery or identity verification.

7 Trials evaluation and preview features

7.1 Unless expressly varied in the accepted trial Order, a trial runs for seven consecutive days from activation, permits one executive-search Project and one AI Run, with a second only on Ductio's express approval; integrations and Voice are excluded. Record start, expiry, storage, exports and any paid-client delivery permissions at registration. A trial alone does not permit commercial client delivery. Joining a waitlist does not activate a trial. There is no monthly trial reset; counting and qualifying failure restoration follow the Usage Schedule.

7.2 Use the trial for genuine evaluation by the registering business. The service-use, confidentiality, upload, data-protection, AI-review and sharing rules continue to apply. Do not create duplicate registrations, fictitious projects or multiple accounts to obtain repeated free access, extra processing or bulk data. A trial is not a data-harvesting licence.

7.3 The trial ends automatically without charge and does not convert to a paid subscription. A paid subscription requires a separately accepted paid Order and payment authorisation. Trial expiry does not authorise payment, chargeable add-ons or automatic top-ups. Ductio may contact the business about its evaluation subject to applicable communications rules.

7.4 Trials have the same applicable data-protection safeguards as paid Services. Limited functionality or support must be disclosed at registration. Trial Projects and saved Outputs transfer to paid service only where confirmed, without counting the same existing Project again solely because of conversion; the paid Order records start and opening balances. Qualifying failure restoration or any replacement-use period must be expressly confirmed and creates no paid subscription. Export or request return before expiry where practicable; the Customer Terms, DPA and mandatory return/deletion rights remain available after access ends. Mandatory duties and non-excludable liability are unaffected.

7.5 Preview or beta features are included only where expressly offered and accepted with their scope and known limitations disclosed. Do not use a preview feature for consequential employment or other significant decisions unless expressly authorised for that purpose with the necessary safeguards. Separate preview terms apply only when expressly incorporated and cannot silently replace the existing Agreement.

8 Allowances service controls and changes

8.1 The accepted Order and Product and Usage Schedule must identify users, new and concurrent Projects, AI Runs or credits, storage, data access, report and record exports, APIs, integrations and Voice, including pooling, reset and rate rules. A blank is neither unlimited access nor charge approval. These terms set no universal paid-plan quantity. Storage is capacity, not a replenishing monthly allocation; an unlimited category does not remove separately disclosed constraints.

8.2 The Usage Schedule governs Project activation and reopening, workflow units, internal retries, reservations, partial results, failure restoration, exports, deduplication, reset anchors, storage and upgrades. Browsing saved results, editing notes and routine amendments within the same Assignment do not themselves create a new Run or Project. Any materially different assignment or chargeable operation must be disclosed before confirmation; these terms do not retrospectively reclassify it.

8.3 Do not evade allowances or source rights by pooling credentials, duplicate trials, disguised identities, rotating seats, recycling unrelated assignments, splitting requests, manipulating tokens or metering, or accumulating exports across accounts and periods. Report a discovered defect rather than exploit it. Exhausting an allowance, legitimately refining a Project, seeking failure restoration or disputing usage in good faith is not itself misconduct. Measurement records are open to reasonable challenge and are not conclusive evidence in a dispute.

8.4 At an accepted limit Ductio may stop new affected processing, uploads, exports or invitations while preserving access to saved results and existing content within enabled Services and required return rights, subject to necessary security restrictions and expiry. Further purchases or capped top-ups require express authority under the Usage Schedule. Reasonable technical limits must not create undisclosed paid quotas or materially reduce purchased entitlement. No unused allowance is forfeited as punishment.

8.5 Report material errors, suspected unlawful processing, security incidents or misuse promptly through the contractual support route. Incident notification, rights assistance and other DPA duties continue independently of a usage or enforcement review. Ductio's investigation and service restrictions must follow section 9, the AUP and Customer Terms; this document does not enlarge content access, audit or termination rights.

8.6 The accepted version governs the committed term. Changes, renewal notice, mandatory-law adjustments, replacement and remedies follow the Customer Terms. A model update, integration release or website edit does not authorise retrospective charges, unrelated reuse of Customer Content or a material reduction of accepted rights. Where mandatory EU Data Act switching rules apply, they prevail over conflicting notice, commitment, retrieval, export-quota, fee or deletion provisions. The applicable switching record must address scope, formats, interfaces, deadlines, continuity, charges and protected-material exclusions without defeating mandatory rights.

8.7 For service, usage or contractual questions, use the support route at https://www.ductio.co.uk, the contractual contact in the Order, or write to Legal, DUCTIO LTD, at its registered office. Individual privacy requests follow the Privacy Policy. Keep the accepted Order, activation confirmations and applicable terms version.

9 Proportionate enforcement and review

9.1 Ductio may investigate credible indications of misuse using proportionate necessary security and usage information and only lawful, necessary content access within confidentiality duties and DPA instructions. Restrict and protect investigation records and retain them only for a justified period. They must not be repurposed for marketing or shared-model training. Consider legitimate explanations, approved bulk rights, client delivery and disputed metering; an unusual pattern or allegation alone is not proof.

9.2 Action must reflect evidence, seriousness, intent, recurrence, harm and risk. Where practicable, explain the concern, request clarification, warn and allow a reasonable opportunity to correct it. Consider revoking compromised credentials, blocking a harmful request, quarantining a suspect upload or restricting affected users, exports or integrations before broader suspension. Immediate containment may be necessary for a credible security threat, serious harm, unlawful activity or binding law; confine it to affected access where practicable and give reasons and next steps promptly where lawful.

9.3 The Customer may challenge a restriction and submit relevant evidence through the Order contact or website support route. Use a reviewer separate from the initial decision where practicable. Ductio will normally acknowledge within five UK business days and give an outcome or reasoned progress update within ten UK business days after receiving necessary information. Explain any extension and next update date; consider urgent disruption promptly. Review continuing restrictions and restore mistaken or resolved access promptly, correcting usage and allowances where appropriate. This review does not delay statutory rights, DPA incident notices, mandatory assistance or urgent court relief.

9.4 Termination, fee suspension and remedies follow the Customer Terms and accepted AUP. These terms create no additional immediate termination ground, automatic fine, retrospective licence charge, forfeiture or indemnity. Remediable material breaches follow the accepted notice and cure process; minor or inadvertent misuse does not automatically terminate the whole subscription or every surviving Report licence. Requests for evidence must be relevant and proportionate and do not permit unrestricted access to confidential client files or customer systems.

9.5 Restrictions must not defeat lawful rights assistance, mandatory switching or contractual Customer Content return. Provide a safe limited route where full access presents justified risk; an exhausted commercial intelligence-export allowance does not bar it. Lawfully delivered Reports retain their surviving licence unless ended for affected material on a valid contractual ground. Required corrections, restrictions and deletion remain applicable. Any lawful disclosure to authorities or affected providers must be necessary, proportionate and confidential, with notice where lawful and practicable. Refunds, fees and liability remain governed by the Agreement and law.