Autm
Terms of Service
Effective date: 14th September 2026
These Terms of Service (“Terms”) govern access to and use of the Autm platform, website and related services provided by Autm Limited (“Autm”, “we”, “us” or “our”).
By creating an account, accessing or using Autm, or purchasing a subscription, you agree to these Terms.
If you use Autm on behalf of an organisation, you confirm that you have authority to accept these Terms on that organisation’s behalf. In that case, references to “you”, “your” or “Customer” include that organisation.
Please read these Terms together with our Privacy Policy, Data Retention Policy and, where applicable, our Data Processing Agreement (“DPA”) and any Order Form or other written agreement between Autm and the Customer.
If you do not agree to these Terms, you must not use Autm.
1. About Autm
Autm is provided by:
Autm Limited
Company number: 16543162
Registered in England and Wales
Little Wood House
Linley
Bishop’s Castle
Shropshire
SY9 5HP
United Kingdom
Email: support@autm.ai
Autm provides an operational intelligence platform designed to work across the systems, information, conversations, people and workflows used by organisations.
Depending on the Customer’s configuration, Autm may provide functionality including:
organisational memory and operational context;
AI-assisted analysis, reasoning, summarisation and generation;
natural-language workflows;
workflow and task orchestration;
AI-assisted and agent-based actions;
connections to authorised third-party systems;
meeting and document intelligence;
organisational knowledge and contextual relationships;
permissions, governance and audit capabilities; and
other operational intelligence functionality made available by Autm.
Features and functionality may evolve over time.
2. Eligibility and Authority
You must be legally capable of entering into a binding agreement to use Autm.
If you use Autm on behalf of a business, organisation or other legal entity, you represent that:
you are authorised to act on its behalf;
you have authority to accept these Terms;
you are authorised to connect any systems or information you make available to Autm; and
your organisation is responsible for the activities of users it authorises to access its workspace.
Autm is intended primarily for business and organisational use.
3. Accounts and Authentication
Autm accounts are managed using ASP.NET Core Identity.
Depending on the functionality available, users may authenticate using:
an email address and password;
Google as an external identity provider; or
Microsoft (Entra ID) as an external identity provider.
Users may also link supported external identities to an existing Autm account.
Accounts may support password authentication, external OAuth authentication, or both.
Where password authentication is used, passwords are stored and verified using one-way cryptographic hashes and are not stored in plaintext.
Where Google or Microsoft is used for authentication, Autm requests only the identity permissions required for authentication, such as openid, profile and email.
Using Google or Microsoft to sign in to Autm does not itself authorise Autm to access the user’s email, calendar, files or other business information.
Access to those services requires a separate connection and authorisation process.
Depending on account configuration and features enabled, Autm may also support security controls including two-factor authentication, authenticator applications, passkeys and recovery codes.
You are responsible for:
maintaining the security of your account;
ensuring your authentication methods remain secure;
ensuring only authorised individuals use your account;
notifying Autm promptly if you believe an account or credential has been compromised; and
keeping account information accurate and up to date.
You must not share individual user credentials in a way that circumvents applicable seat, user or permission restrictions.
4. Customer Administrators and Authorised Users
An organisation may appoint one or more administrators to manage its Autm workspace.
Depending on their permissions, administrators may be able to:
invite or remove users;
assign roles and permissions;
configure workspace functionality;
authorise or remove connections;
configure workflows and agents;
access organisational information available within the workspace;
review activity and audit information; and
manage other workspace settings.
The Customer is responsible for determining who should have access to its workspace and what permissions those users should receive.
The Customer is responsible for the acts and omissions of its authorised users when using Autm, except to the extent caused by Autm’s breach of these Terms or applicable law.
5. Subscriptions, Plans and Seats
Access to Autm may require a paid subscription.
Available plans, included seats, features, usage allowances and prices are those displayed at the time of purchase or specified in an applicable Order Form or written agreement.
Certain features, integrations, AI usage, storage, seats or services may be subject to additional charges or usage limits.
Where a subscription includes a specified number of users or seats, the Customer must not intentionally circumvent those limits.
Autm may offer trials, promotional periods, pilot arrangements or other limited access from time to time. Additional terms may apply to those arrangements.
6. Fees and Payment
Fees are payable in accordance with the selected subscription, Order Form or other applicable agreement.
Unless stated otherwise:
prices exclude VAT and other applicable taxes;
the Customer is responsible for applicable taxes;
subscription fees are payable in advance;
payment may be processed by a third-party payment provider; and
failure to pay amounts when due may result in suspension or termination of access.
Autm does not store full payment card numbers or sensitive payment credentials.
Where recurring billing is enabled, the Customer authorises Autm and its payment provider to collect applicable recurring charges until the subscription is cancelled or terminated.
Any minimum term, renewal period, notice period or individually negotiated payment arrangement specified in an Order Form or other written agreement takes precedence over the general provisions of these Terms.
7. Changes to Plans and Pricing
Autm may change its plans, features and pricing from time to time.
Changes will not normally alter fees already paid for the current prepaid subscription period unless otherwise agreed.
Where a price change affects a renewing paid subscription, Autm will provide reasonable notice before the new price takes effect.
If the Customer does not wish to accept a new renewal price, it may cancel the subscription before the relevant renewal date, subject to any agreed minimum term or contractual commitment.
8. Customer Data
“Customer Data” means information, content and data submitted to, uploaded to, connected to, generated within or otherwise made available to Autm by or on behalf of a Customer through use of the service.
Customer Data may include information obtained from authorised connected systems and information generated through the Customer’s use of Autm.
Ownership
As between Autm and the Customer, the Customer retains ownership of its Customer Data.
These Terms do not transfer ownership of Customer Data to Autm.
The Customer grants Autm a limited right to host, process, transmit, reproduce and otherwise use Customer Data only as reasonably necessary to:
provide the Autm service;
perform authorised workflows and actions;
provide AI-assisted functionality;
maintain organisational context and memory;
provide integrations selected by the Customer;
secure, maintain and support the service;
comply with applicable law; and
perform other processing permitted by the Customer’s agreement with Autm.
Autm does not sell Customer Data.
Autm does not permit Customer Data to be used to train public AI models unless explicitly agreed in writing with the Customer.
9. Customer Responsibilities for Data
The Customer is responsible for ensuring that:
it has the necessary rights, permissions and lawful basis to provide Customer Data to Autm;
its use of Autm complies with applicable law;
it is authorised to connect relevant third-party systems;
instructions given to Autm through users, workflows, agents or integrations are lawful and authorised;
appropriate permissions are assigned to its users;
personal data is processed fairly and lawfully; and
its use of AI-assisted functionality is appropriate for the relevant context.
Where the Customer uses Autm to process personal data relating to employees, customers, suppliers, members or other individuals, the Customer remains responsible for its obligations as Data Controller where applicable.
10. Data Protection
Autm will process personal data in accordance with applicable data protection law, including the UK GDPR and Data Protection Act 2018 where applicable.
Depending on the processing activity, Autm may act as a Data Controller or Data Processor.
Where Autm processes personal data on behalf of a Customer as Data Processor, that processing is subject to the applicable Data Processing Agreement between Autm and the Customer.
The DPA may form part of these Terms or another written agreement and will set out the applicable controller–processor obligations, including provisions relating to:
documented processing instructions;
confidentiality;
security;
sub-processors;
assistance with data subject rights;
personal data breaches;
data protection impact assessments;
international transfers;
deletion or return of personal data; and
audit and compliance information.
Further information about how Autm processes and retains personal data is provided in our Privacy Policy and Data Retention Policy.
11. Data Hosting and Residency
Autm’s primary customer data infrastructure and data residency are hosted within Microsoft Azure in the United Kingdom.
Some service providers, including AI model providers, may process limited information outside the United Kingdom or European Economic Area where necessary to provide their services.
Where personal data is subject to an international transfer, Autm will use appropriate safeguards required by applicable data protection law.
These may include applicable adequacy arrangements, Standard Contractual Clauses, the UK International Data Transfer Addendum or other approved mechanisms, together with appropriate technical safeguards.
Further information is provided in our Privacy Policy and Data Retention Policy.
12. Connections and Third-Party Services
Autm can connect to supported third-party systems and services.
Authentication to Autm and authorisation of a third-party connection are separate processes.
When a user chooses to connect a third-party service, Autm may request the OAuth permissions or other authorisations required to provide the selected integration functionality.
Autm will only access a connected service within the permissions granted, the technical capabilities of the integration and applicable Autm workspace permissions.
The Customer is responsible for ensuring that users connecting third-party systems are authorised to do so.
Third-party services are provided by their respective providers and are subject to their own terms, availability, functionality and privacy practices.
Autm is not responsible for the independent operation of a third-party service or for changes, interruptions or restrictions imposed by that provider.
Autm may modify or discontinue an integration where required because of changes made by a third-party provider, security considerations, legal requirements or technical circumstances.
13. AI-Assisted Functionality
Autm uses artificial intelligence and machine-learning technologies to provide aspects of the service.
Depending on the feature being used, AI functionality may assist with:
analysing information;
identifying context and relationships;
summarising content;
extracting actions and commitments;
generating text or recommendations;
reasoning across authorised organisational context;
supporting workflows;
determining proposed next actions; and
assisting users in carrying out operational tasks.
AI-generated content can be incomplete, inaccurate or inappropriate for a particular context.
The Customer and its users are responsible for exercising appropriate judgement when relying on AI-generated information.
Autm should not be used as a substitute for qualified professional advice where professional judgement is required, including legal, financial, medical or other regulated advice.
14. Workflows, Agents and Automated Actions
Autm may allow Customers to configure workflows, agents or other functionality capable of initiating, recommending or performing actions.
Depending on the functionality and configuration, an action may require user approval or may be authorised in advance by the Customer.
The Customer is responsible for:
configuring workflows and agents appropriately;
determining what actions users or agents are permitted to perform;
reviewing permissions granted to connected systems;
maintaining appropriate human oversight;
reviewing outputs where appropriate; and
ensuring automated activity is lawful and appropriate.
Autm may apply confirmation requirements, permission controls, safeguards, limits or other governance mechanisms to particular actions.
Autm may prevent, suspend or require additional approval for an action where reasonably necessary for security, safety, legal compliance or protection of the service or its users.
15. Organisational Memory and Operational Intelligence
Autm is designed to maintain relevant organisational context over time.
Depending on the Customer’s use and configuration, Autm may derive and maintain information including:
organisational knowledge;
entities and relationships;
operational context;
decisions;
commitments;
actions;
outcomes; and
other information required to provide persistent organisational intelligence.
The Customer retains ownership of Customer Data used to create this organisational context.
Autm may process and structure Customer Data to create derived operational context necessary to provide the service.
Retention and deletion of organisational memory are governed by the Data Retention Policy, applicable workspace controls and the Customer’s agreement with Autm.
16. Security
Autm maintains technical and organisational measures designed to protect Customer Data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.
Measures may include, where applicable:
encryption in transit;
encryption at rest;
secure cryptographic key and credential management;
role- and permission-based access controls;
authentication and multi-factor security controls;
OAuth-based authorisation;
secure token handling;
monitoring and audit logging;
data minimisation;
PII redaction, tokenisation or pseudonymisation; and
secure development and operational practices.
No internet-connected service can guarantee absolute security.
Customers must notify Autm promptly if they become aware of a suspected compromise, unauthorised access or other security issue relating to their use of Autm.
17. Acceptable Use
You must not use Autm:
unlawfully, fraudulently or maliciously;
to infringe another person’s intellectual property, privacy or other rights;
to access information or systems without authorisation;
to circumvent security, authentication, permissions, usage restrictions or technical safeguards;
to introduce malware, malicious code or harmful material;
to interfere with or disrupt Autm or connected systems;
to attempt to gain unauthorised access to Autm infrastructure, accounts or data;
to reverse engineer or attempt to discover source code except to the extent such restriction is prohibited by law;
to use automated methods to overload, scrape or abuse the service;
to impersonate another person or misrepresent authority;
to instruct Autm, its workflows or agents to perform unlawful or unauthorised actions; or
in any way that creates a material security, legal or operational risk to Autm, its Customers or third parties.
Autm may suspend or restrict access where we reasonably believe these Terms have been materially breached or where necessary to protect the security, integrity or lawful operation of the service.
18. Autm Intellectual Property
Autm and its licensors retain all rights, title and interest in and to the Autm platform and associated technology, including:
software;
source code and object code;
platform architecture;
interfaces;
designs;
workflows and platform functionality;
algorithms and methods;
models or model configurations owned by Autm;
documentation;
trademarks;
branding; and
other intellectual property belonging to Autm.
Except for the limited right to use the service under these Terms, no rights in Autm intellectual property are transferred to the Customer.
19. Customer Outputs
Subject to Autm’s rights in its platform and technology and any applicable third-party rights, the Customer may use outputs generated through its authorised use of Autm for its internal business purposes and any other lawful purpose permitted by its agreement.
AI-generated outputs may not be unique, and other users or systems may independently generate similar or identical material.
Autm does not guarantee that AI-generated output will be capable of intellectual property protection or will not resemble content generated for others.
The Customer is responsible for reviewing outputs before relying upon or publishing them where appropriate.
20. Feedback
If you voluntarily provide suggestions, ideas or feedback about Autm, you permit Autm to use that feedback to develop and improve the service without restriction or payment to you.
This does not give Autm ownership of your Customer Data or confidential business information.
21. Confidentiality
Each party may receive confidential information belonging to the other.
“Confidential Information” means non-public information that a reasonable person would understand to be confidential given its nature and the circumstances of disclosure.
Each party agrees to:
use the other party’s Confidential Information only for purposes connected with the relationship;
take reasonable measures to protect it;
disclose it only to personnel, professional advisers, contractors or service providers who need access and are subject to appropriate confidentiality obligations; and
not disclose it to third parties except as permitted by these Terms, another applicable agreement or law.
Confidential Information does not include information that:
is or becomes public other than through breach of an obligation;
was lawfully known without restriction before disclosure;
is independently developed without use of the other party’s Confidential Information; or
is lawfully received from another source without confidentiality restriction.
A party may disclose Confidential Information where required by law, regulation or court order, subject to any legally permitted notice to the other party.
22. Availability, Maintenance and Changes to the Service
Autm aims to provide a reliable service but does not guarantee uninterrupted or error-free availability unless a specific service level has been agreed separately in writing.
Autm may perform maintenance, updates and improvements and may modify functionality as the service evolves.
We will use reasonable efforts to avoid materially reducing the core functionality of a paid service during a committed subscription term without reasonable justification.
Features may change because of:
product development;
security requirements;
legal or regulatory requirements;
third-party API or service changes;
technological developments; or
operational requirements.
Specific service levels, support commitments or business-continuity arrangements may be set out in an Order Form or enterprise agreement.
23. Suspension
Autm may suspend access to all or part of the service where reasonably necessary because:
fees are overdue;
these Terms have been materially breached;
use presents a security risk;
use could adversely affect Autm or another customer;
use is unlawful or potentially unlawful;
a connected service or provider requires suspension; or
suspension is necessary to comply with law or regulatory requirements.
Where reasonably practicable, Autm will provide notice and an opportunity to remedy the issue before suspension unless immediate action is required.
Autm will seek to limit a suspension to the scope and duration reasonably necessary.
24. Cancellation and Termination
Customers may cancel subscriptions in accordance with the subscription terms, Order Form or other applicable agreement.
Unless a separate minimum term or notice period applies, cancellation prevents renewal at the end of the current paid subscription period.
Fees already paid are non-refundable except where required by law or expressly agreed otherwise.
Either party may terminate an agreement where the other party commits a material breach and, where the breach can be remedied, fails to remedy it within a reasonable period after receiving written notice.
Autm may terminate or suspend the service immediately where necessary because of serious unlawful activity, fraud, material security risk or another serious breach that cannot reasonably be remedied.
25. What Happens When the Service Ends
Termination or cancellation of Autm does not terminate or remove the Customer’s underlying third-party systems.
The Customer’s source information within Microsoft, Google, CRM, project-management, accounting or other connected systems remains subject to the Customer’s relationship with those providers.
Following termination:
the Customer’s right to use Autm will end at the applicable time;
authorised connections may be revoked or disconnected;
the Customer may request return or export of applicable Customer Data in accordance with its agreement and the technical capabilities of the service;
Autm-held Customer Data will be retained and deleted in accordance with the Data Retention Policy, DPA and applicable law; and
relevant workspace data scheduled for deletion following confirmed workspace closure will generally be permanently deleted within 30 days, subject to limited legal, security, backup or other legitimate retention requirements.
Where Autm acts as Data Processor, applicable personal data will be deleted or returned in accordance with the Customer’s instructions and the DPA, unless applicable law requires continued storage.
Customers should request any required export before applicable deletion processes are completed.
26. Business Continuity and Change of Control
Autm is designed to operate as an intelligence and automation layer across a Customer’s existing systems rather than as a replacement for those underlying systems.
If Autm is temporarily unavailable, connected source systems remain independently accessible subject to the availability and terms of those providers.
Autm may be involved in a merger, acquisition, investment, corporate restructuring, sale of assets or change of control.
Where this occurs, these Terms and relevant Customer agreements may be assigned or transferred as part of the transaction, subject to applicable law and contractual restrictions.
Any processing of personal data associated with such a transaction will remain subject to applicable data protection obligations.
If Autm permanently ceases providing the service, Autm will use reasonable efforts, subject to the circumstances and applicable law, to provide Customers with appropriate information about service closure and applicable data access, export and deletion arrangements.
27. Warranties
Autm warrants that it will provide the service with reasonable care and skill.
Except as expressly stated in these Terms or another written agreement, and to the maximum extent permitted by law, Autm does not warrant that:
the service will be uninterrupted or error-free;
every feature will always remain available;
AI-generated information will always be accurate or complete;
the service will meet every Customer requirement;
every third-party integration will remain continuously available; or
use of the service will produce a particular commercial, operational or financial result.
Nothing in these Terms excludes rights or warranties that cannot lawfully be excluded.
28. Liability
Nothing in these Terms excludes or limits liability where it would be unlawful to do so, including liability for:
death or personal injury caused by negligence;
fraud or fraudulent misrepresentation; or
any other liability that cannot lawfully be excluded or limited.
Subject to the above, neither party will be liable to the other for indirect or consequential loss, or for loss of profit, revenue, anticipated savings, goodwill or business opportunity, except to the extent expressly agreed otherwise in writing.
Subject to liabilities that cannot lawfully be limited and any different limitation agreed in an Order Form or enterprise agreement, each party’s total aggregate liability arising out of or relating to the service and these Terms will not exceed the fees paid or payable by the Customer to Autm during the 12 months immediately preceding the event giving rise to the claim.
If the Customer has used a free service and no fees have been paid, Autm’s aggregate liability will be limited to £100, to the maximum extent permitted by law.
Nothing in this section limits the Customer’s obligation to pay fees properly due to Autm.
29. Indemnity
The Customer will be responsible for losses, liabilities, costs or claims arising from:
Customer Data that the Customer did not have the right to provide or process;
unlawful or unauthorised use of the service by the Customer;
instructions given to Autm to perform unlawful or unauthorised actions; or
a material breach by the Customer of its obligations under these Terms,
to the extent caused by the Customer’s acts or omissions.
Any contractual indemnity obligations agreed for a particular enterprise Customer may instead be set out in the applicable Order Form or enterprise agreement.
30. Force Majeure
Neither party will be liable for delay or failure to perform an obligation caused by events beyond its reasonable control, except for payment obligations already due.
Such events may include major infrastructure failures, internet or telecommunications outages, acts of government, natural disasters, war, civil disturbance, industrial disputes, widespread cyber incidents or failure of critical third-party infrastructure beyond the affected party’s reasonable control.
The affected party will use reasonable efforts to mitigate the effects of the event.
31. Notices
Autm may provide notices relating to the service by:
email to the address associated with the Customer account;
notification within the platform; or
another method agreed with the Customer.
Customers are responsible for maintaining accurate contact information.
Formal legal notices to Autm should be sent to:
Autm Limited
Little Wood House
Linley
Bishop’s Castle
Shropshire
SY9 5HP
United Kingdom
Email: support@autm.ai
32. Changes to These Terms
Autm may update these Terms from time to time to reflect changes in:
the service;
applicable law or regulation;
security requirements;
technology;
business operations; or
commercial arrangements.
The latest version will be published with an updated revision date.
Where a change materially affects an existing paid Customer’s rights or obligations, Autm will provide reasonable notice where appropriate.
Material changes will not normally apply retrospectively to a committed contractual period unless required by law, necessary for security or expressly agreed.
Continued use of Autm after updated Terms take effect constitutes acceptance of the updated Terms, subject to applicable law and any separate agreement with the Customer.
33. Order of Precedence
If there is a conflict between documents governing a Customer’s use of Autm, the following order of precedence will apply unless expressly agreed otherwise:
a signed enterprise agreement or Order Form;
the Data Processing Agreement, for matters concerning the processing of personal data;
these Terms of Service; and
policies incorporated into these Terms by reference.
For the avoidance of doubt, the Privacy Policy explains how Autm processes personal data and the Data Retention Policy explains applicable retention and deletion practices.
34. Assignment
The Customer may not assign or transfer its rights or obligations under these Terms without Autm’s prior written consent, such consent not to be unreasonably withheld.
Autm may assign these Terms in connection with a merger, acquisition, corporate restructuring, sale of substantially all relevant assets or change of control, subject to applicable law.
35. Severability
If any provision of these Terms is found to be invalid, unlawful or unenforceable, the remaining provisions will continue in effect.
The affected provision will be interpreted or modified to the minimum extent necessary to make it valid and enforceable where legally possible.
36. Waiver
A failure or delay by either party to exercise a right under these Terms does not waive that right.
A waiver is effective only where expressly given.
37. Entire Agreement
These Terms, together with any applicable Order Form, DPA and other expressly incorporated agreement, constitute the agreement between Autm and the Customer concerning use of the service and supersede prior discussions or representations relating to the same subject matter.
Nothing in this section excludes liability for fraud or fraudulent misrepresentation.
38. Third-Party Rights
Unless expressly stated otherwise, a person who is not a party to these Terms has no right to enforce them under the Contracts (Rights of Third Parties) Act 1999.
39. Governing Law and Jurisdiction
These Terms and any dispute or claim arising out of or in connection with them are governed by the laws of England and Wales.
The courts of England and Wales will have exclusive jurisdiction, except where applicable law requires otherwise.
40. Contact
If you have questions about these Terms, please contact:
Autm Limited
Little Wood House
Linley
Bishop’s Castle
Shropshire
SY9 5HP
United Kingdom
Email: support@autm.ai
Terms of Service
Last updated: 14 September 2026
Version 2.0
These Terms of Service (“Terms”) govern access to and use of the Autm platform, website and related services provided by Autm Limited (“Autm”, “we”, “us” or “our”).
By creating an account, accessing or using Autm, or purchasing a subscription, you agree to these Terms.
If you use Autm on behalf of an organisation, you confirm that you have authority to accept these Terms on that organisation’s behalf. In that case, references to “you”, “your” or “Customer” include that organisation.
Please read these Terms together with our Privacy Policy, Data Retention Policy and, where applicable, our Data Processing Agreement (“DPA”) and any Order Form or other written agreement between Autm and the Customer.
If you do not agree to these Terms, you must not use Autm.
1. About Autm
Autm is provided by:
Autm Limited
Company number: 16543162
Registered in England and Wales
Little Wood House
Linley
Bishop’s Castle
Shropshire
SY9 5HP
United Kingdom
Email: support@autm.ai
Autm provides an operational intelligence platform designed to work across the systems, information, conversations, people and workflows used by organisations.
Depending on the Customer’s configuration, Autm may provide functionality including:
organisational memory and operational context;
AI-assisted analysis, reasoning, summarisation and generation;
natural-language workflows;
workflow and task orchestration;
AI-assisted and agent-based actions;
connections to authorised third-party systems;
meeting and document intelligence;
organisational knowledge and contextual relationships;
permissions, governance and audit capabilities; and
other operational intelligence functionality made available by Autm.
Features and functionality may evolve over time.
2. Eligibility and Authority
You must be legally capable of entering into a binding agreement to use Autm.
If you use Autm on behalf of a business, organisation or other legal entity, you represent that:
you are authorised to act on its behalf;
you have authority to accept these Terms;
you are authorised to connect any systems or information you make available to Autm; and
your organisation is responsible for the activities of users it authorises to access its workspace.
Autm is intended primarily for business and organisational use.
3. Accounts and Authentication
Autm accounts are managed using ASP.NET Core Identity.
Depending on the functionality available, users may authenticate using:
an email address and password;
Google as an external identity provider; or
Microsoft (Entra ID) as an external identity provider.
Users may also link supported external identities to an existing Autm account.
Accounts may support password authentication, external OAuth authentication, or both.
Where password authentication is used, passwords are stored and verified using one-way cryptographic hashes and are not stored in plaintext.
Where Google or Microsoft is used for authentication, Autm requests only the identity permissions required for authentication, such as openid, profile and email.
Using Google or Microsoft to sign in to Autm does not itself authorise Autm to access the user’s email, calendar, files or other business information.
Access to those services requires a separate connection and authorisation process.
Depending on account configuration and features enabled, Autm may also support security controls including two-factor authentication, authenticator applications, passkeys and recovery codes.
You are responsible for:
maintaining the security of your account;
ensuring your authentication methods remain secure;
ensuring only authorised individuals use your account;
notifying Autm promptly if you believe an account or credential has been compromised; and
keeping account information accurate and up to date.
You must not share individual user credentials in a way that circumvents applicable seat, user or permission restrictions.
4. Customer Administrators and Authorised Users
An organisation may appoint one or more administrators to manage its Autm workspace.
Depending on their permissions, administrators may be able to:
invite or remove users;
assign roles and permissions;
configure workspace functionality;
authorise or remove connections;
configure workflows and agents;
access organisational information available within the workspace;
review activity and audit information; and
manage other workspace settings.
The Customer is responsible for determining who should have access to its workspace and what permissions those users should receive.
The Customer is responsible for the acts and omissions of its authorised users when using Autm, except to the extent caused by Autm’s breach of these Terms or applicable law.
5. Subscriptions, Plans and Seats
Access to Autm may require a paid subscription.
Available plans, included seats, features, usage allowances and prices are those displayed at the time of purchase or specified in an applicable Order Form or written agreement.
Certain features, integrations, AI usage, storage, seats or services may be subject to additional charges or usage limits.
Where a subscription includes a specified number of users or seats, the Customer must not intentionally circumvent those limits.
Autm may offer trials, promotional periods, pilot arrangements or other limited access from time to time. Additional terms may apply to those arrangements.
6. Fees and Payment
Fees are payable in accordance with the selected subscription, Order Form or other applicable agreement.
Unless stated otherwise:
prices exclude VAT and other applicable taxes;
the Customer is responsible for applicable taxes;
subscription fees are payable in advance;
payment may be processed by a third-party payment provider; and
failure to pay amounts when due may result in suspension or termination of access.
Autm does not store full payment card numbers or sensitive payment credentials.
Where recurring billing is enabled, the Customer authorises Autm and its payment provider to collect applicable recurring charges until the subscription is cancelled or terminated.
Any minimum term, renewal period, notice period or individually negotiated payment arrangement specified in an Order Form or other written agreement takes precedence over the general provisions of these Terms.
7. Changes to Plans and Pricing
Autm may change its plans, features and pricing from time to time.
Changes will not normally alter fees already paid for the current prepaid subscription period unless otherwise agreed.
Where a price change affects a renewing paid subscription, Autm will provide reasonable notice before the new price takes effect.
If the Customer does not wish to accept a new renewal price, it may cancel the subscription before the relevant renewal date, subject to any agreed minimum term or contractual commitment.
8. Customer Data
“Customer Data” means information, content and data submitted to, uploaded to, connected to, generated within or otherwise made available to Autm by or on behalf of a Customer through use of the service.
Customer Data may include information obtained from authorised connected systems and information generated through the Customer’s use of Autm.
Ownership
As between Autm and the Customer, the Customer retains ownership of its Customer Data.
These Terms do not transfer ownership of Customer Data to Autm.
The Customer grants Autm a limited right to host, process, transmit, reproduce and otherwise use Customer Data only as reasonably necessary to:
provide the Autm service;
perform authorised workflows and actions;
provide AI-assisted functionality;
maintain organisational context and memory;
provide integrations selected by the Customer;
secure, maintain and support the service;
comply with applicable law; and
perform other processing permitted by the Customer’s agreement with Autm.
Autm does not sell Customer Data.
Autm does not permit Customer Data to be used to train public AI models unless explicitly agreed in writing with the Customer.
9. Customer Responsibilities for Data
The Customer is responsible for ensuring that:
it has the necessary rights, permissions and lawful basis to provide Customer Data to Autm;
its use of Autm complies with applicable law;
it is authorised to connect relevant third-party systems;
instructions given to Autm through users, workflows, agents or integrations are lawful and authorised;
appropriate permissions are assigned to its users;
personal data is processed fairly and lawfully; and
its use of AI-assisted functionality is appropriate for the relevant context.
Where the Customer uses Autm to process personal data relating to employees, customers, suppliers, members or other individuals, the Customer remains responsible for its obligations as Data Controller where applicable.
10. Data Protection
Autm will process Personal Data in accordance with applicable data protection law, including the UK GDPR and Data Protection Act 2018 where applicable.
Depending on the processing activity, Autm may act as a Data Controller or Data Processor.
Where Autm processes Personal Data on behalf of a Customer as Data Processor, the Autm Data Processing Agreement (“DPA”) forms part of the Agreement and is incorporated into these Terms by reference, unless Autm and the Customer have entered into a separate written data processing agreement that applies to that processing.
The current version of the Autm DPA is available on our website.
The DPA sets out the applicable Controller–Processor obligations, including provisions relating to:
the subject matter, nature, purpose and duration of processing;
the types of Personal Data processed and categories of Data Subjects;
documented processing instructions;
confidentiality;
technical and organisational security measures;
Sub-processors;
international transfers;
assistance with Data Subject rights;
Personal Data Breaches;
Data Protection Impact Assessments and regulatory assistance;
return and deletion of Personal Data at the end of the processing;
audit and compliance information; and
the respective rights and responsibilities of Autm and the Customer.
Further information about how Autm processes and retains Personal Data is provided in our Privacy Policy and Data Retention Policy.
11. Data Hosting and Residency
Autm’s primary customer data infrastructure and data residency are hosted within Microsoft Azure in the United Kingdom.
Some service providers, including AI model providers, may process limited information outside the United Kingdom or European Economic Area where necessary to provide their services.
Where personal data is subject to an international transfer, Autm will use appropriate safeguards required by applicable data protection law.
These may include applicable adequacy arrangements, Standard Contractual Clauses, the UK International Data Transfer Addendum or other approved mechanisms, together with appropriate technical safeguards.
Further information is provided in our Privacy Policy and Data Retention Policy.
12. Connections and Third-Party Services
Autm can connect to supported third-party systems and services.
Authentication to Autm and authorisation of a third-party connection are separate processes.
When a user chooses to connect a third-party service, Autm may request the OAuth permissions or other authorisations required to provide the selected integration functionality.
Autm will only access a connected service within the permissions granted, the technical capabilities of the integration and applicable Autm workspace permissions.
The Customer is responsible for ensuring that users connecting third-party systems are authorised to do so.
Third-party services are provided by their respective providers and are subject to their own terms, availability, functionality and privacy practices.
Autm is not responsible for the independent operation of a third-party service or for changes, interruptions or restrictions imposed by that provider.
Autm may modify or discontinue an integration where required because of changes made by a third-party provider, security considerations, legal requirements or technical circumstances.
13. AI-Assisted Functionality
Autm uses artificial intelligence and machine-learning technologies to provide aspects of the service.
Depending on the feature being used, AI functionality may assist with:
analysing information;
identifying context and relationships;
summarising content;
extracting actions and commitments;
generating text or recommendations;
reasoning across authorised organisational context;
supporting workflows;
determining proposed next actions; and
assisting users in carrying out operational tasks.
AI-generated content can be incomplete, inaccurate or inappropriate for a particular context.
The Customer and its users are responsible for exercising appropriate judgement when relying on AI-generated information.
Autm should not be used as a substitute for qualified professional advice where professional judgement is required, including legal, financial, medical or other regulated advice.
14. Workflows, Agents and Automated Actions
Autm may allow Customers to configure workflows, agents or other functionality capable of initiating, recommending or performing actions.
Depending on the functionality and configuration, an action may require user approval or may be authorised in advance by the Customer.
The Customer is responsible for:
configuring workflows and agents appropriately;
determining what actions users or agents are permitted to perform;
reviewing permissions granted to connected systems;
maintaining appropriate human oversight;
reviewing outputs where appropriate; and
ensuring automated activity is lawful and appropriate.
Autm may apply confirmation requirements, permission controls, safeguards, limits or other governance mechanisms to particular actions.
Autm may prevent, suspend or require additional approval for an action where reasonably necessary for security, safety, legal compliance or protection of the service or its users.
15. Organisational Memory and Operational Intelligence
Autm is designed to maintain relevant organisational context over time.
Depending on the Customer’s use and configuration, Autm may derive and maintain information including:
organisational knowledge;
entities and relationships;
operational context;
decisions;
commitments;
actions;
outcomes; and
other information required to provide persistent organisational intelligence.
The Customer retains ownership of Customer Data used to create this organisational context.
Autm may process and structure Customer Data to create derived operational context necessary to provide the service.
Retention and deletion of organisational memory are governed by the Data Retention Policy, applicable workspace controls and the Customer’s agreement with Autm.
16. Security
Autm maintains technical and organisational measures designed to protect Customer Data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.
Measures may include, where applicable:
encryption in transit;
encryption at rest;
secure cryptographic key and credential management;
role- and permission-based access controls;
authentication and multi-factor security controls;
OAuth-based authorisation;
secure token handling;
monitoring and audit logging;
data minimisation;
PII redaction, tokenisation or pseudonymisation; and
secure development and operational practices.
No internet-connected service can guarantee absolute security.
Customers must notify Autm promptly if they become aware of a suspected compromise, unauthorised access or other security issue relating to their use of Autm.
17. Acceptable Use
You must not use Autm:
unlawfully, fraudulently or maliciously;
to infringe another person’s intellectual property, privacy or other rights;
to access information or systems without authorisation;
to circumvent security, authentication, permissions, usage restrictions or technical safeguards;
to introduce malware, malicious code or harmful material;
to interfere with or disrupt Autm or connected systems;
to attempt to gain unauthorised access to Autm infrastructure, accounts or data;
to reverse engineer or attempt to discover source code except to the extent such restriction is prohibited by law;
to use automated methods to overload, scrape or abuse the service;
to impersonate another person or misrepresent authority;
to instruct Autm, its workflows or agents to perform unlawful or unauthorised actions; or
in any way that creates a material security, legal or operational risk to Autm, its Customers or third parties.
Autm may suspend or restrict access where we reasonably believe these Terms have been materially breached or where necessary to protect the security, integrity or lawful operation of the service.
18. Autm Intellectual Property
Autm and its licensors retain all rights, title and interest in and to the Autm platform and associated technology, including:
software;
source code and object code;
platform architecture;
interfaces;
designs;
workflows and platform functionality;
algorithms and methods;
models or model configurations owned by Autm;
documentation;
trademarks;
branding; and
other intellectual property belonging to Autm.
Except for the limited right to use the service under these Terms, no rights in Autm intellectual property are transferred to the Customer.
19. Customer Outputs
Subject to Autm’s rights in its platform and technology and any applicable third-party rights, the Customer may use outputs generated through its authorised use of Autm for its internal business purposes and any other lawful purpose permitted by its agreement.
AI-generated outputs may not be unique, and other users or systems may independently generate similar or identical material.
Autm does not guarantee that AI-generated output will be capable of intellectual property protection or will not resemble content generated for others.
The Customer is responsible for reviewing outputs before relying upon or publishing them where appropriate.
20. Feedback
If you voluntarily provide suggestions, ideas or feedback about Autm, you permit Autm to use that feedback to develop and improve the service without restriction or payment to you.
This does not give Autm ownership of your Customer Data or confidential business information.
21. Confidentiality
Each party may receive confidential information belonging to the other.
“Confidential Information” means non-public information that a reasonable person would understand to be confidential given its nature and the circumstances of disclosure.
Each party agrees to:
use the other party’s Confidential Information only for purposes connected with the relationship;
take reasonable measures to protect it;
disclose it only to personnel, professional advisers, contractors or service providers who need access and are subject to appropriate confidentiality obligations; and
not disclose it to third parties except as permitted by these Terms, another applicable agreement or law.
Confidential Information does not include information that:
is or becomes public other than through breach of an obligation;
was lawfully known without restriction before disclosure;
is independently developed without use of the other party’s Confidential Information; or
is lawfully received from another source without confidentiality restriction.
A party may disclose Confidential Information where required by law, regulation or court order, subject to any legally permitted notice to the other party.
22. Availability, Maintenance and Changes to the Service
Autm aims to provide a reliable service but does not guarantee uninterrupted or error-free availability unless a specific service level has been agreed separately in writing.
Autm may perform maintenance, updates and improvements and may modify functionality as the service evolves.
We will use reasonable efforts to avoid materially reducing the core functionality of a paid service during a committed subscription term without reasonable justification.
Features may change because of:
product development;
security requirements;
legal or regulatory requirements;
third-party API or service changes;
technological developments; or
operational requirements.
Specific service levels, support commitments or business-continuity arrangements may be set out in an Order Form or enterprise agreement.
23. Suspension
Autm may suspend access to all or part of the service where reasonably necessary because:
fees are overdue;
these Terms have been materially breached;
use presents a security risk;
use could adversely affect Autm or another customer;
use is unlawful or potentially unlawful;
a connected service or provider requires suspension; or
suspension is necessary to comply with law or regulatory requirements.
Where reasonably practicable, Autm will provide notice and an opportunity to remedy the issue before suspension unless immediate action is required.
Autm will seek to limit a suspension to the scope and duration reasonably necessary.
24. Cancellation and Termination
Customers may cancel subscriptions in accordance with the subscription terms, Order Form or other applicable agreement.
Unless a separate minimum term or notice period applies, cancellation prevents renewal at the end of the current paid subscription period.
Fees already paid are non-refundable except where required by law or expressly agreed otherwise.
Either party may terminate an agreement where the other party commits a material breach and, where the breach can be remedied, fails to remedy it within a reasonable period after receiving written notice.
Autm may terminate or suspend the service immediately where necessary because of serious unlawful activity, fraud, material security risk or another serious breach that cannot reasonably be remedied.
25. What Happens When the Service Ends
Termination or cancellation of Autm does not terminate or remove the Customer’s underlying third-party systems.
The Customer’s source information within Microsoft, Google, CRM, project-management, accounting or other connected systems remains subject to the Customer’s relationship with those providers.
Following termination:
the Customer’s right to use Autm will end at the applicable time;
authorised connections may be revoked or disconnected;
the Customer may request return or export of applicable Customer Data in accordance with its agreement and the technical capabilities of the service;
Autm-held Customer Data will be retained and deleted in accordance with the Data Retention Policy, DPA and applicable law; and
relevant workspace data scheduled for deletion following confirmed workspace closure will generally be permanently deleted within 30 days, subject to limited legal, security, backup or other legitimate retention requirements.
Where Autm acts as Data Processor, applicable personal data will be deleted or returned in accordance with the Customer’s instructions and the DPA, unless applicable law requires continued storage.
Customers should request any required export before applicable deletion processes are completed.
26. Business Continuity and Change of Control
Autm is designed to operate as an intelligence and automation layer across a Customer’s existing systems rather than as a replacement for those underlying systems.
If Autm is temporarily unavailable, connected source systems remain independently accessible subject to the availability and terms of those providers.
Autm may be involved in a merger, acquisition, investment, corporate restructuring, sale of assets or change of control.
Where this occurs, these Terms and relevant Customer agreements may be assigned or transferred as part of the transaction, subject to applicable law and contractual restrictions.
Any processing of personal data associated with such a transaction will remain subject to applicable data protection obligations.
If Autm permanently ceases providing the service, Autm will use reasonable efforts, subject to the circumstances and applicable law, to provide Customers with appropriate information about service closure and applicable data access, export and deletion arrangements.
27. Warranties
Autm warrants that it will provide the service with reasonable care and skill.
Except as expressly stated in these Terms or another written agreement, and to the maximum extent permitted by law, Autm does not warrant that:
the service will be uninterrupted or error-free;
every feature will always remain available;
AI-generated information will always be accurate or complete;
the service will meet every Customer requirement;
every third-party integration will remain continuously available; or
use of the service will produce a particular commercial, operational or financial result.
Nothing in these Terms excludes rights or warranties that cannot lawfully be excluded.
28. Liability
Nothing in these Terms excludes or limits liability where it would be unlawful to do so, including liability for:
death or personal injury caused by negligence;
fraud or fraudulent misrepresentation; or
any other liability that cannot lawfully be excluded or limited.
Subject to the above, neither party will be liable to the other for indirect or consequential loss, or for loss of profit, revenue, anticipated savings, goodwill or business opportunity, except to the extent expressly agreed otherwise in writing.
Subject to liabilities that cannot lawfully be limited and any different limitation agreed in an Order Form or enterprise agreement, each party’s total aggregate liability arising out of or relating to the service and these Terms will not exceed the fees paid or payable by the Customer to Autm during the 12 months immediately preceding the event giving rise to the claim.
If the Customer has used a free service and no fees have been paid, Autm’s aggregate liability will be limited to £100, to the maximum extent permitted by law.
Nothing in this section limits the Customer’s obligation to pay fees properly due to Autm.
29. Indemnity
The Customer will be responsible for losses, liabilities, costs or claims arising from:
Customer Data that the Customer did not have the right to provide or process;
unlawful or unauthorised use of the service by the Customer;
instructions given to Autm to perform unlawful or unauthorised actions; or
a material breach by the Customer of its obligations under these Terms,
to the extent caused by the Customer’s acts or omissions.
Any contractual indemnity obligations agreed for a particular enterprise Customer may instead be set out in the applicable Order Form or enterprise agreement.
30. Force Majeure
Neither party will be liable for delay or failure to perform an obligation caused by events beyond its reasonable control, except for payment obligations already due.
Such events may include major infrastructure failures, internet or telecommunications outages, acts of government, natural disasters, war, civil disturbance, industrial disputes, widespread cyber incidents or failure of critical third-party infrastructure beyond the affected party’s reasonable control.
The affected party will use reasonable efforts to mitigate the effects of the event.
31. Notices
Autm may provide notices relating to the service by:
email to the address associated with the Customer account;
notification within the platform; or
another method agreed with the Customer.
Customers are responsible for maintaining accurate contact information.
Formal legal notices to Autm should be sent to:
Autm Limited
Little Wood House
Linley
Bishop’s Castle
Shropshire
SY9 5HP
United Kingdom
Email: support@autm.ai
32. Changes to These Terms
Autm may update these Terms from time to time to reflect changes in:
the service;
applicable law or regulation;
security requirements;
technology;
business operations; or
commercial arrangements.
The latest version will be published with an updated revision date.
Where a change materially affects an existing paid Customer’s rights or obligations, Autm will provide reasonable notice where appropriate.
Material changes will not normally apply retrospectively to a committed contractual period unless required by law, necessary for security or expressly agreed.
Continued use of Autm after updated Terms take effect constitutes acceptance of the updated Terms, subject to applicable law and any separate agreement with the Customer.
33. Order of Precedence
If there is a conflict between documents governing a Customer’s use of Autm, the following order of precedence will apply unless expressly agreed otherwise:
a signed enterprise agreement or Order Form;
the Data Processing Agreement, for matters concerning the processing of personal data;
these Terms of Service; and
policies incorporated into these Terms by reference.
For the avoidance of doubt, the Privacy Policy explains how Autm processes personal data and the Data Retention Policy explains applicable retention and deletion practices.
34. Assignment
The Customer may not assign or transfer its rights or obligations under these Terms without Autm’s prior written consent, such consent not to be unreasonably withheld.
Autm may assign these Terms in connection with a merger, acquisition, corporate restructuring, sale of substantially all relevant assets or change of control, subject to applicable law.
35. Severability
If any provision of these Terms is found to be invalid, unlawful or unenforceable, the remaining provisions will continue in effect.
The affected provision will be interpreted or modified to the minimum extent necessary to make it valid and enforceable where legally possible.
36. Waiver
A failure or delay by either party to exercise a right under these Terms does not waive that right.
A waiver is effective only where expressly given.
37. Entire Agreement
These Terms, together with any applicable Order Form, DPA and other expressly incorporated agreement, constitute the agreement between Autm and the Customer concerning use of the service and supersede prior discussions or representations relating to the same subject matter.
Nothing in this section excludes liability for fraud or fraudulent misrepresentation.
38. Third-Party Rights
Unless expressly stated otherwise, a person who is not a party to these Terms has no right to enforce them under the Contracts (Rights of Third Parties) Act 1999.
39. Governing Law and Jurisdiction
These Terms and any dispute or claim arising out of or in connection with them are governed by the laws of England and Wales.
The courts of England and Wales will have exclusive jurisdiction, except where applicable law requires otherwise.
40. Contact
If you have questions about these Terms, please contact:
Autm Limited
Little Wood House
Linley
Bishop’s Castle
Shropshire
SY9 5HP
United Kingdom
Email: support@autm.ai