Acceptable Use Policy

This Acceptable Use Policy sets out the rules for using the Data Tiles corporate website, the Latttice website and product, Lenz, our AI Factory, and other products and services Data Tiles Ltd may introduce in the future (together, the "Services").

This policy is designed to ensure the Services remain secure, lawful and fair for all users. It supports safe and lawful use, protection of platform security and reliability, responsible handling of data and information, and fair access for all users.

This policy applies where validly agreed or incorporated into the agreement governing the relevant Services. Its publication on a website alone does not establish customer acceptance.

Latttice and Lenz are independently purchasable products licensed under separate negotiated licence agreements. A Customer may purchase either product without purchasing the other; a licence for one does not automatically include the other. The relevant negotiated agreement identifies the licensed software and applicable conditions. Common Customer Hosted Software Licence Agreement terms may apply to either product where agreed, and the general company-wide framework may cover future products where applicable.

An "Applicable Agreement" is a separately negotiated and signed software licence, order form, partner agreement or other written agreement governing the relevant use. "Customer Data" includes data, metadata, content and information that customers or their users upload, connect or process through the Services, including data belonging to clients or other third parties that the Customer has the necessary lawful authority, permissions and contractual rights to access or process. This definition does not transfer ownership of third-party data. "Outputs" are content, insights, recommendations or other results generated through automated or AI-assisted features.

Users must comply with all applicable laws and regulations when using the Services. This includes, but is not limited to, data protection and privacy laws (including UK GDPR and EU GDPR), intellectual property laws, consumer protection laws, export control and sanctions laws, and anti-spam, anti-fraud and cybercrime regulations.

Data Tiles platforms may support federated data access, meaning data may remain in external systems rather than being stored within the platform. Certain features may allow data to be uploaded to or processed within the platform environment. Within its applicable licensed scope, a Customer may use its own authorised, customer-controlled Latttice or Lenz installation to access, connect to, process, analyse and work with client or other third-party data where it has the necessary lawful authority, permissions and contractual rights. An authorised connection to data hosted in a client’s or other third party’s environment is not installation or deployment of the software in that environment.

In all cases, the Customer remains responsible for ensuring that any data used with the Services is lawful and authorised, for complying with applicable data protection laws, and for obtaining necessary permissions or legal bases for processing personal data.

If you use the Services on behalf of an organisation, you are responsible for ensuring that your users comply with these obligations.

Latttice and Lenz are containerized applications deployed into customer-controlled environments using single-click deployment. Neither is currently offered as Data Tiles-hosted SaaS. Customers provision, operate and maintain their environments and are responsible for infrastructure security, updates, backups and operational monitoring.

To protect the integrity of the platform, users must not reverse engineer, decompile, disassemble or attempt to derive the source code of the Services except where permitted by law; attempt to discover or reproduce platform algorithms, models or architecture; use the Services to build or operate a competing product or service; or attempt to replicate the functionality of Data Tiles platforms.

Users must not use Data Tiles proprietary software, algorithms, models or other protected materials to train external artificial intelligence systems or models without explicit authorisation from Data Tiles. This restriction does not prohibit legitimate customer-authorised processing of Customer Data, or of Outputs owned by the customer, merely because artificial intelligence technology is involved.

These restrictions protect Data Tiles’ proprietary technology. They do not prohibit legitimate use of licensed functionality to create, configure or operate governed data products, AI agents, workflows or Outputs within the applicable licence scope and subject to applicable law and third-party rights. They do not expand licence rights or authorise reproduction of Data Tiles’ protected technology.

Authorised client-data connections, workflows or AI agents do not authorise installation or deployment of the software in client or other third-party environments, distribution or sublicensing, independent access by clients to operate the software itself, or separate client deployments under the Customer’s existing licence. These activities are prohibited unless expressly authorised under an appropriate separate written licensing arrangement with Data Tiles. Access by authorised partners or contractors solely on the Customer’s behalf remains subject to the Applicable Agreement and does not grant independent software-use rights.

Customer Data and customer-created content are distinct from Data Tiles technology. Customers retain their rights in data-product definitions, configurations, agent instructions, workflows and other content they create, to the extent those rights arise under applicable law or the Applicable Agreement and subject to third-party rights. Configuring or using the Software does not transfer ownership of Data Tiles software, source code, algorithms, models, interfaces, documentation or other underlying technology. Where customer-created content includes Data Tiles or third-party materials, rights in those materials remain with their respective owners and use remains subject to the applicable licence.

Outputs are distinct from the underlying Software and from customer-authored configurations. Customers retain any rights they hold in Outputs under applicable law or the Applicable Agreement, subject to third-party rights; no ownership of every AI-generated result or transfer of Data Tiles technology is presumed. Data Tiles acquires no ownership of Customer Data or customer-created content merely because it is used with the Software, and no general right to use that data, content or customer-owned Outputs for its own model training or other independent purposes is granted.

To maintain account and platform security, users must provide accurate information when registering accounts, maintain the confidentiality of login credentials and API keys, not share accounts except as permitted by the Applicable Agreement, and promptly report suspected unauthorised access or misuse.

Users are responsible for activities that occur under their account unless unauthorised access has been reported to Data Tiles without undue delay.

Customers are responsible for maintaining access controls in their environments and for responding to infrastructure incidents and suspected misuse within those environments. Reporting an issue to Data Tiles does not give Data Tiles access to the environment or transfer the Customer’s operational responsibilities.

Customers are responsible for the Customer Data they upload, connect or process through the Services. Customers must ensure that such data complies with applicable laws and regulations, does not infringe the rights of third parties, and is processed with appropriate permissions or legal basis.

Customers retain ownership and control of Customer Data and metadata subject to applicable third-party rights. Data Tiles does not access customer environments or private Customer Data during normal operations or standard support. Any processing, logging or governance enforcement performed by customer-controlled software is distinct from processing or monitoring undertaken by Data Tiles.

Customers are responsible for determining whether the Services are appropriate for processing sensitive, regulated or restricted data.

Latttice provides role-based access control (RBAC), attribute-based access control (ABAC), fine-grained access controls, data sensitivity controls and audit logging. Its governance capabilities operate at build time and runtime, but the Customer is responsible for configuring and applying its policies. These controls are not automatically configured for every Customer and do not replace the Customer’s infrastructure security responsibilities.

Users must not use the Services to violate any applicable law or regulation; engage in fraudulent or deceptive activities; infringe intellectual property rights; distribute malware, viruses or harmful code; gain unauthorised access to systems or data; disrupt or interfere with the operation of the Services; collect or process personal data without lawful authority; upload unlawful, abusive or discriminatory content; or scrape, extract or harvest data from the Services without permission.

Users must not attempt to disrupt or abuse the platform infrastructure. This includes attempting to overload or flood the Services, probe or exploit system vulnerabilities, bypass platform security or governance controls, or access systems or data without authorisation.

Automated access is permitted only through authorised APIs or integrations provided or approved by Data Tiles and must comply with the applicable technical limits set out in the Applicable Agreement or product documentation.

The Services may include AI-assisted or agent-based functionality that can support analysis, generate Outputs or carry out defined tasks on behalf of authorised users.

Users must not use such functionality to attempt to bypass governance, permission or access controls; to access information they are not authorised to access; to misrepresent automated actions or Outputs as human decisions; or to carry out activities that would otherwise violate this policy.

AI models used by Latttice and Lenz are hosted within the Customer’s environment. Neither product sends information to external AI model providers as part of the current architecture, and neither product uses Customer Data to train AI models.

Lenz customers determine the actions their agents may perform and configure the relevant permissions and governance arrangements. Customers remain responsible for the agent actions they authorise, appropriate supervision and review, lawful data permissions and decisions taken with automated support. Organisational accountability does not require human approval of every individual automated action under this policy, and no inherent technical action restriction or mandatory approval safeguard is asserted.

The Services may allow integration with third-party systems, applications or data sources. Where such integrations are used, customers remain responsible for their use of those services, must ensure third-party services comply with applicable laws, and should review the privacy and security policies of those services.

Data Tiles is not responsible for the operation or data practices of third-party services connected to the platform.

Nothing in this section restricts the legitimate use of customer-authorised integrations, data processing or automation that the Services are designed to support.

Subject to the warranties, service commitments and remedies contained in any Applicable Agreement and to applicable law, the Services are provided on an "as is" and "as available" basis. To the maximum extent permitted by applicable law, Data Tiles makes no warranties regarding uninterrupted availability, error-free operation, performance or reliability.

Users acknowledge that the Services may evolve over time and that features, functionality or availability may change.

Data Tiles reserves the right to investigate potential violations of this Acceptable Use Policy using information lawfully available to it, without implying access to customer environments or private Customer Data.

If a violation occurs, or if use of the Services presents a legal, operational or security risk, Data Tiles may exercise contractual rights and take measures within its control, subject to and in accordance with the Applicable Agreement. This does not assert remote access, removal of customer-hosted content or automatic enforcement within customer-controlled deployments.

Serious or repeated violations may result in suspension or termination where the Applicable Agreement permits, subject to its applicable notice and cure provisions. Customers are responsible for configuring and applying product controls and taking operational action in their environments.

Suspension or restriction does not itself terminate a customer-hosted licence or bypass applicable notice and cure requirements. Where the Customer Hosted Software Licence Agreement applies, its thirty (30) day written-notice remedy period for material breach remains applicable to termination, unless the signed Applicable Agreement expressly provides otherwise. Enforcement under this policy does not transfer ownership or custody of Customer Data to Data Tiles or create additional post-termination software-use rights.

If you become aware of any activity that may violate this Acceptable Use Policy or compromise the security of the Services, please notify Data Tiles promptly. Reports may be submitted to: letstalkdata@data-tiles.io.

Data Tiles may update this Acceptable Use Policy from time to time to reflect changes in the Services, legal requirements or operational practices.

Where material changes occur, notice will be provided in accordance with the Applicable Agreement or by other appropriate means.

Publication of an update or notice of a change does not by itself establish acceptance or amend a signed Applicable Agreement.

This Acceptable Use Policy forms part of the Applicable Agreement between the Customer and Data Tiles or an authorised Data Tiles partner, as applicable, only where validly agreed or incorporated.

If a separately negotiated and signed agreement governing the relevant Services (an "Applicable Agreement") conflicts with these standard terms, the Applicable Agreement governs to the extent of the conflict, subject only to exceptions expressly agreed in that signed agreement. These standard terms apply only where validly agreed or incorporated; publication on a website alone does not establish customer acceptance.

This Acceptable Use Policy is governed by and construed in accordance with the laws of England and Wales. Any disputes arising out of or in connection with this policy are subject to the jurisdiction provisions set out in the Applicable Agreement.

If you have questions about this Acceptable Use Policy or wish to report a violation, please contact:

Data Tiles Ltd — Email: letstalkdata@data-tiles.io — Website: https://www.data-tiles.com