API terms of use

“API” means the FIN-TECHAI application programming interfaces, including the sandbox, together with SDKs and documentation we publish. “Output” means the responses the API returns to you, including scores, reason codes, evidence references, route quotes and reconciliation results. “Your Data” means the identifiers, ledger records and configuration you submit. “Order Form” means the executed commercial document referencing these terms.

We grant you a non-exclusive, non-transferable, revocable licence for the term of your subscription to call the API and to use, store and reproduce the Output internally, including in your own compliance records, customer communications and regulatory filings.

This licence extends to your affiliates named on the Order Form and to service providers acting on your behalf, provided they are bound by confidentiality terms no less protective than these.

You may not: resell, sublicense or redistribute the Output as a standalone risk, scoring or intelligence product; use the Output to train a competing model or to reconstruct our reference data, clusters or weightings; use the API to build a service whose primary function is substantially the same as a FIN-TECHAI module; or remove, obscure or misattribute the provenance of a score you present to a third party.

You may not circumvent rate limits, including by distributing traffic across multiple keys or accounts to exceed the sustained limit of your plan.

You may not use the API to screen for the purpose of evading sanctions, concealing the source of funds, or identifying which of your counterparties are under investigation.

The Output is decision support. It is not legal, regulatory or investment advice, not a compliance determination, and not a guarantee that any counterparty, transaction or route is lawful or safe.

You are responsible for your own regulatory obligations, for the thresholds and policies you configure, and for any decision to onboard, decline, freeze, report or transact. Where you rely on the Output in a regulatory filing, you are responsible for satisfying yourself that it is adequate for that purpose.

You must have a lawful basis for submitting Your Data to us and, where applicable, must have given the notices and obtained the permissions your own privacy law requires.

Sustained and burst limits are set by your plan and returned on every response in the X-FTAI-RateLimit-* headers. Exceeding a limit returns HTTP 429 with a Retry-After header; it does not entitle us to bill you for the rejected calls, and we do not bill for them.

We may apply temporary protective limits during an incident or where a traffic pattern threatens platform stability. Where we do, we will tell you, and Enterprise availability commitments continue to apply.

Fees, allowances and overage rates are set out in the Order Form. Metering is by billable call as defined there; sandbox calls, calls returning 5xx, and repeat screens of the same identifier inside the caching window are not billable.

You may dispute a metered figure within 60 days of the invoice. We will provide the underlying call records for the disputed period. Undisputed amounts remain payable.

You retain all right, title and interest in Your Data. You grant us only the licence necessary to operate the API, produce the Output, maintain the evidence trail, and secure and improve the service. We do not sell Your Data and do not use the identifiers you submit to market to your counterparties.

We retain all right, title and interest in the API, our models, reference data, cluster labels, weightings and documentation. Nothing in these terms transfers any of it to you.

Aggregate, de-identified statistics that cannot reasonably be linked to you or to any identifier you submitted may be used to improve the service. Your identity and your query set are never disclosed.

Handling, retention, subprocessors and deletion are governed by our privacy policy, the security page and, where executed, the data processing agreement.

Availability commitments, if any, are stated in the Order Form. Where a commitment applies, service credits are the sole remedy for failing to meet it, and are claimed within 30 days of the affected period.

The sandbox is provided without any availability commitment. Planned maintenance is announced at least 72 hours ahead except where a security fix requires otherwise.

We may add endpoints, fields and reason codes at any time; additive changes are not breaking and existing integrations continue to function.

Removing an endpoint or field, or changing the meaning of one, requires at least 90 days' notice. A change to scoring methodology that materially shifts Output at unchanged configuration is treated as breaking: it is versioned, announced at least 30 days ahead, and you may pin the prior version for the period stated in the announcement.

Each party warrants that it has the authority to enter into these terms. We warrant that we will provide the API with reasonable skill and care and in accordance with the documentation.

Beyond that, and to the maximum extent permitted by law, the API and the Output are provided without warranty of any kind, express or implied, including any warranty of merchantability, fitness for a particular purpose, accuracy, completeness or non-infringement. We do not warrant that the Output is free of error, that coverage is complete, or that any counterparty is or is not lawful.

Neither party is liable for indirect, incidental, special, consequential or punitive damages, or for lost profits, revenue, goodwill or anticipated savings, however caused.

Each party's total aggregate liability arising out of or in connection with these terms is limited to the fees paid or payable by you in the 12 months preceding the event giving rise to the claim.

Nothing in this clause limits liability for death or personal injury caused by negligence, for fraud or fraudulent misrepresentation, or for any liability that cannot lawfully be limited.

Either party may terminate for convenience on 30 days' written notice, or immediately for the other's material breach that remains uncured 15 days after notice.

We may suspend access immediately, with notice as soon as practicable, where use is unlawful, where it threatens platform security or stability, or where an account is materially overdue.

On termination your licence ends and your keys are revoked. Output already stored in your own systems may be retained for as long as your record-keeping obligations require. We delete Your Data in accordance with the retention schedule.

These terms, the Order Form and the documents referenced in them are the entire agreement between the parties on this subject. Neither party relies on any statement not set out in them.

Assignment requires the other party's consent, except to an affiliate or in connection with a merger or sale of substantially all assets.

These terms are governed by the laws stated in the Order Form; absent that, by the same law and forum as our general terms of service.

If any provision is held unenforceable, it is modified to the minimum extent necessary and the remainder continues in force.