Terms & Conditions.

These Terms & Conditions ("Terms") form a binding agreement between you ("User," "Reporter," or "Customer") and XPOSER.AI ("XPOSER.AI," "we," "us," or "our") governing your use of the XPOSER.AI website, voice and text reporting interface, compliance dashboards, and related services (collectively, the "Platform").

By creating an account, accessing the Platform, submitting an incident report, or clicking "I agree" on any onboarding flow, you confirm that you have read, understood, and accepted these Terms. If you are using the Platform on behalf of an organization, you represent that you have authority to bind that organization, and "you" refers to both you and that organization.

XPOSER.AI provides an autonomous, voice-first AI whistleblowing and compliance intake platform that allows individuals to submit reports concerning suspected misconduct, and allows enterprise customers to receive, triage, and manage those reports. The Platform includes:

• Voice and text-based incident reporting available in 100+ languages
• AI-assisted transcription, classification, and risk-scoring of submitted reports
• Policy-grounded triage against a customer's configured compliance framework
• Structured, audit-ready reports delivered to authorized compliance personnel
• Optional integrations with enterprise systems via the Model Context Protocol (MCP)

XPOSER.AI is a reporting and triage tool. We do not investigate, adjudicate, or resolve reported incidents; investigation and resolution remain the responsibility of the customer organization and its designated compliance, legal, or HR personnel.

You must be at least 18 years old, or the age of majority in your jurisdiction, to submit a report or hold an account on the Platform. Enterprise dashboard access is provisioned by the customer organization, which is responsible for managing the credentials of its authorized users.

You are responsible for maintaining the confidentiality of any login credentials issued to you and for all activity that occurs under your account. Notify us immediately at info@xposer.ai if you suspect unauthorized access.

Reports submitted through the Platform must be made in good faith and based on a reasonable belief that the information disclosed is true, even if the report later proves to be mistaken. You agree not to knowingly submit false, misleading, or malicious reports.

Where a customer organization has enabled anonymous reporting, XPOSER.AI is designed so that a reporter's identity is not captured or is separated from the report content using technical safeguards. Voice input is processed for transcription and is not matched to a reporter's identity unless the reporter chooses to identify themselves.

We take reasonable technical and organizational measures to protect the confidentiality of report content and reporter identity, consistent with applicable whistleblower protection laws (including the EU Whistleblower Directive) and the customer's own policies. However, absolute anonymity cannot be guaranteed in all circumstances, including where required by law, legal process, or a bona fide investigation.

We process personal data submitted through the Platform in accordance with our Privacy Policy and applicable data protection law, including the GDPR, CCPA, and HIPAA where relevant to a customer's industry. Depending on the engagement, XPOSER.AI may act as a data processor on behalf of the customer organization (the data controller) or, for limited platform-administration purposes, as an independent controller.

• Report content and metadata are encrypted in transit and at rest
• Access to identifiable report data is restricted to authorized personnel on a need-to-know basis
• Retention periods are configured per customer in line with applicable regulatory requirements
• Data subject requests are handled in accordance with the applicable data processing agreement

You agree not to:

• Use the Platform to submit knowingly false, defamatory, or malicious reports
• Attempt to identify, intimidate, or retaliate against a reporter or witness
• Reverse-engineer, scrape, or interfere with the Platform's underlying AI systems or infrastructure
• Use the Platform to transmit malware, unlawful content, or content that infringes third-party rights
• Circumvent access controls, rate limits, or authentication mechanisms
• Use the Platform in a manner that violates applicable law or the customer's code of conduct

The Platform, including its software, AI models, workflows, design, and branding, is owned by XPOSER.AI and its licensors and is protected by intellectual property laws. Customers receive a limited, non-exclusive, non-transferable license to use the Platform for their internal compliance purposes for the duration of their subscription.

Report content submitted by reporters remains the property of the reporter and/or the customer organization, as applicable. Customers may permit XPOSER.AI to use anonymized, aggregated data to improve the Platform's underlying models, subject to the terms of the applicable data processing agreement.

Where XPOSER.AI is deployed under a separate enterprise agreement or order form, the commercial terms, service levels, and data processing terms of that agreement take precedence over these Terms in the event of a conflict. These Terms otherwise apply to all use of the Platform, including by the customer's employees and authorized users.

Customers are responsible for configuring the Platform's compliance policies, risk thresholds, and integrations correctly, and for ensuring their own internal policies communicated to reporters are accurate and lawful.

The Platform is provided "as is" and "as available." While XPOSER.AI's AI systems are designed to assist with accurate transcription, classification, and risk-scoring, automated outputs may contain errors and are provided as a decision-support aid, not a substitute for professional legal, compliance, or investigative judgment.

We do not warrant that the Platform will be uninterrupted, error-free, or that AI-generated classifications will be complete or accurate in every case. Customers remain responsible for reviewing and acting on triaged reports.

To the maximum extent permitted by law, XPOSER.AI and its officers, employees, and licensors shall not be liable for any indirect, incidental, special, consequential, or punitive damages, or any loss of profits, revenue, data, or goodwill, arising out of or related to your use of the Platform, even if advised of the possibility of such damages.

Our aggregate liability for any claim arising under these Terms shall not exceed the fees paid by the customer to XPOSER.AI in the twelve (12) months preceding the event giving rise to the claim, except where a separate enterprise agreement specifies otherwise.

You agree to indemnify and hold XPOSER.AI harmless from any claims, damages, liabilities, and expenses (including reasonable legal fees) arising from your misuse of the Platform, violation of these Terms, or violation of applicable law, including knowingly false reporting or unlawful retaliation against a reporter.

We may suspend or terminate access to the Platform, with or without notice, if we reasonably believe these Terms have been violated, or as required by law. Customers may terminate their subscription in accordance with their enterprise agreement. Provisions relating to confidentiality, intellectual property, liability, and indemnification survive termination.

These Terms are governed by the laws of the jurisdiction specified in the applicable enterprise agreement between XPOSER.AI and the customer. Where no such agreement exists, these Terms are governed by the laws applicable at XPOSER.AI's principal place of business, without regard to conflict-of-law principles.

We may update these Terms from time to time to reflect changes to the Platform or applicable law. We will post the updated Terms with a revised "Last updated" date, and, for material changes, provide advance notice to enterprise customers as required by their agreement. Continued use of the Platform after changes take effect constitutes acceptance of the revised Terms.

If you have questions about these Terms, or need to report a security or data protection concern, reach out to our team below.