• Entity: These terms govern the use of the NisAI platform, provided by Digital Immersion LDA, located in Lisbon, Portugal.

• Product Description: NisAI is an AI-powered cybersecurity compliance copilot providing regulatory gap analysis, risk classification, and remediation recommendations for frameworks such as NIS-2, CRA, DORA, the EU AI Act, and GDPR.

• Public Check Tool: A free or introductory gap determination product available at https://check.nis-ai.com/.

• Standard SaaS (SMEs and Corporate): A subscription-based dynamic compliance dashboard providing automated assessments, live recommendations, and continuous monitoring.

• Enterprise Standalone License: A customized enterprise solution that includes integration into the client's own infrastructure with isolated data transfer.

• Standard Services (Check Tool & Standard SaaS): To provide gap determination and dashboard functionalities, NisAI utilizes existing, third-party Large Language Models (LLMs) accessed via API. By using these tiers, you acknowledge that assessment data is transmitted to these third-party APIs for processing.

• Enterprise Standalone License: For clients on the custom enterprise tier, NisAI deploys proprietary, custom-trained AI models hosted directly on the customer’s servers. In this isolated environment, no telemetry, security logs, or compliance data is transferred outside the customer's infrastructure, ensuring absolute data residency and sovereignty.

• Accurate Data Input: The user is responsible for the accuracy of the organizational telemetry, security logs, and access states fed into the NisAI platform for compliance validation.

• Appropriate Use: Users must use the platform solely for internal governance, risk, and compliance (GRC) management.

• Guidance vs. Legal Liability: NisAI provides AI-driven analysis and automated recommendations to reinforce and assist internal compliance teams. However, Digital Immersion LDA is not a law firm. The ultimate responsibility for achieving regulatory compliance and avoiding fines remains strictly with the user's organization.