Public Documents

Forlais public documents. Approved governance, AI, research integrity, and company commitment records. Internal control documents remain under document control.

Corporate

FOR-PUB-001 Corporate Legal Notice

Who we are, where we are registered, and how to reach us

FOR-PUB-002 Website Terms of Use

The terms on which you may use our websites

FOR-PUB-003 Website Copyright Notice

Who owns what we publish, and what you may do with it

FOR-PUB-004 Trademark and Brand Usage Policy

How our names, logos and product names may be used

FOR-PUB-005 Contact and Legal Service Notice

Where to send legal, privacy, security, copyright and complaint correspondence

FOR-PUB-006 Language and Translation Notice

Which version of a policy governs when it exists in more than one language

FOR-PUB-007 Third-Party Links Notice

Our position on other people's websites, integrations and services

FOR-PUB-008 Open-Source and Third-Party Notices

Licences and acknowledgements for the software we distribute

FOR-PUB-009 Research Publication Terms

The terms on which we publish papers, reports, benchmarks, datasets and demonstrations

FOR-PUB-010 Research Citation and Reuse Policy

What you may quote, reproduce, cite and reuse commercially

Product

FOR-PUB-011 EvaEsi Terms of Service

The agreement between you and Forlais Group Ltd for using EvaEsi

FOR-PUB-012 Consumer Terms

Your rights when you buy EvaEsi as a private individual

FOR-PUB-013 Business User Terms

Terms for organisations that buy EvaEsi online

FOR-PUB-014 Enterprise Terms Summary

How the EvaEsi enterprise agreement is put together

FOR-PUB-015 API and Developer Terms

Terms for the EvaEsi developer platform and the public API

FOR-PUB-016 Desktop End-User Licence Agreement

Held. No EvaEsi desktop application exists

FOR-PUB-017 Mobile Application EULA

The licence for the EvaEsi mobile application

FOR-PUB-018 SDK and Tool Licence

Licence terms for EvaEsi client libraries, command line tools and developer utilities

FOR-PUB-019 Beta, Preview and Experimental Feature Terms

What changes when a feature is not part of the production service

FOR-PUB-020 Free-Tier Terms

The terms that apply to any EvaEsi plan offered without charge

FOR-PUB-021 Trial Terms

The terms that apply when you try a paid EvaEsi plan without paying for it yet

FOR-PUB-022 Pricing and Billing Policy

How usage is measured, how you are charged, and what to do when a bill is wrong

FOR-PUB-023 Subscription and Automatic Renewal Policy

When a subscription renews, what we tell you before it does, and how to stop it

FOR-PUB-024 Cancellation and Refund Policy

Your statutory rights, the refunds we give beyond them, and how money comes back to you

FOR-PUB-025 Promotions and Promotional Credit Terms

The rules that apply to any offer, discount code or credit we issue

FOR-PUB-026 Payment Processing Notice

Who you pay, who handles the payment, what happens to card details, and how tax and billing records are treated

FOR-PUB-027 Fair Usage Policy

The limits that apply to every account, and the use we do not allow

FOR-PUB-028 Account Suspension and Termination Policy

Why an account is restricted, what you are told, how to appeal, and what happens to your content

FOR-PUB-029 Complaints Policy

How to complain to us, what we do with it, and where to go if we get it wrong

FOR-PUB-030 Dispute Resolution Policy

How a disagreement is escalated, which courts may hear it, and the rights you cannot be asked to give up

FOR-PUB-031 Service Availability and Territory Policy

Where EvaEsi is offered, where it is not, and which parts of it are available today

FOR-PUB-032 Product Deprecation Policy

The notice you get before a model, an endpoint, a library or a feature is retired

FOR-PUB-033 API Versioning and Breaking-Change Policy

How the API is versioned, what we will not change inside a version, and how long a version is supported

FOR-PUB-034 Support Policy

How to get help, how we classify what you report, and what support does not cover

FOR-PUB-035 Public SLA Summary

How availability is measured, what is excluded, and how service credits are governed

Privacy

FOR-PUB-036 Global Privacy Notice

What personal data we hold, why we hold it, and what you can do about it

FOR-PUB-037 Notice at Collection

What we collect at this point, and why

FOR-PUB-038 UK Privacy Schedule

What applies to you if you are in the United Kingdom

FOR-PUB-039 EEA Privacy Schedule

What applies to you if you are in the European Economic Area

FOR-PUB-040 United States Privacy Schedule

What applies to you if you are in the United States

FOR-PUB-041 California Privacy Notice

The disclosures California law requires, and the rights that go with them

FOR-PUB-042 Do Not Sell or Share Notice

Our position, and how to opt out in any event

FOR-PUB-043 Global Privacy Control Notice

How we treat a browser based opt out preference signal

FOR-PUB-044 Limit Use of Sensitive Personal Information Notice

The California right to limit, and the equivalent controls in other states

FOR-PUB-045 Canada Privacy Schedule

What applies to you if you are in Canada

FOR-PUB-046 Brazil Privacy Schedule

What the Lei Geral de Prote c\ ao de Dados Pessoais adds to our Global Privacy Notice

FOR-PUB-047 Australia Privacy Schedule

What the Privacy Act 1988 and the Australian Privacy Principles add to our Global Privacy Notice

FOR-PUB-048 New Zealand Privacy Schedule

What the Privacy Act 2020 adds to our Global Privacy Notice

FOR-PUB-049 India Privacy Schedule

What the Digital Personal Data Protection Act, 2023 adds to our Global Privacy Notice

FOR-PUB-050 Singapore Privacy Schedule

What the Personal Data Protection Act 2012 adds to our Global Privacy Notice

FOR-PUB-051 Japan Privacy Schedule

What the Act on the Protection of Personal Information adds to our Global Privacy Notice

FOR-PUB-052 South Korea Privacy Schedule

What the Personal Information Protection Act adds to our Global Privacy Notice

FOR-PUB-053 Middle East Privacy Schedule

National data protection rules in the region, each treated separately

FOR-PUB-054 South Africa Privacy Schedule

What the Protection of Personal Information Act adds to our Global Privacy Notice

FOR-PUB-055 China and Hong Kong Privacy Schedule

A held document. It is not in force and confers no rights

FOR-PUB-056 Cookie and Similar Technologies Policy

What we store on your device, what we read from it, and how you control it

FOR-PUB-057 Cookie Preference Centre

How the consent control works, what it must offer you, and what we record when you use it

FOR-PUB-058 Privacy Rights Request Page

How to ask us to give you your data, change it, restrict it, move it or delete it, and what happens next

FOR-PUB-059 Data Retention and Deletion Notice

How long we keep each kind of data, what decides the period, and what deletion reaches

FOR-PUB-060 Customer Content and Training Data Policy

What we do, and do not do, with the things you type, upload and receive

FOR-PUB-061 Enterprise Data Use Policy

How data inside an organisation's account is treated, who controls it, and what a contract can change

FOR-PUB-062 Data Export and Portability Policy

How to take your data out, what an export contains, and what it cannot contain

FOR-PUB-063 International Data Transfer Notice

When your data leaves the country it was collected in, and what protects it when it does

FOR-PUB-064 Subprocessor List

The companies that process data on our behalf, what each one does, and how we tell you when the list changes

FOR-PUB-065 Data Location and Residency Page

Where each kind of data is stored, where it can be reached from, and what we will and will not commit to

FOR-PUB-066 Children and Young People Privacy Notice

What happens to the personal data of a young person who uses EvaEsi, and what a parent or guardian can do

FOR-PUB-067 Age Eligibility Policy

Who is old enough to hold an EvaEsi account, when a parent must agree, and how managed accounts work

FOR-PUB-068 Biometric and Image Data Notice

Faces, voices, identity documents and generated likenesses, and the rules that apply to them

FOR-PUB-069 Sensitive and Special-Category Data Notice

What happens when health, ethnicity, belief, sexual life, union or criminal offence information goes into EvaEsi

FOR-PUB-070 Marketing Communications Privacy Notice

What we send you, why we are allowed to send it, and how to stop it

FOR-PUB-071 Applicant Privacy Notice

What we do with your personal data when you apply to work at Forlais

FOR-PUB-072 Recruitment AI Notice

The rules that apply if an artificial intelligence system is used to help assess an application

FOR-PUB-073 Recording and Transcription Notice

When a call or meeting with Forlais may be recorded or transcribed, and what happens to the recording

FOR-PUB-074 Law-Enforcement Data Request Guidelines

How to ask Forlais Group Ltd for user data, what we require before we act, and when a user is told

FOR-PUB-075 Government Request Transparency Report

Requests from governments, law enforcement and courts for user data, and what we did about them

FOR-PUB-148 Switzerland Privacy Schedule

What the Federal Act on Data Protection adds to our Global Privacy Notice

FOR-PUB-149 Turkey Privacy Schedule

What Law No. 6698 on the Protection of Personal Data adds to our Global Privacy Notice

FOR-PUB-150 Indonesia Privacy Schedule

What Law No. 27 of 2022 on Personal Data Protection adds to our Global Privacy Notice

FOR-PUB-151 Nigeria Privacy Schedule

What the Nigeria Data Protection Act 2023 adds to our Global Privacy Notice

FOR-PUB-152 Vietnam Privacy Schedule

What the Law on Personal Data Protection No. 91/2025/QH15 adds to our Global Privacy Notice

AI

FOR-PUB-076 Responsible AI Policy

The principles we apply when we build and operate EvaEsi, and how you can hold us to them

FOR-PUB-077 Acceptable Use Policy

What you may and may not do with EvaEsi, across the platform, the mobile application and the API

FOR-PUB-078 High-Risk Use Policy

Consequential uses of EvaEsi: what is refused, what is conditional, and what you must do

FOR-PUB-079 AI Safety Policy

Our safety objectives, how a release is gated, what we monitor, and how an incident is handled

FOR-PUB-080 AI Interaction Disclosure

How you can tell you are dealing with a machine, on every EvaEsi surface

FOR-PUB-081 Intended Use and Limitations Notice

What EvaEsi is for, what it is not for, and what it cannot do

FOR-PUB-082 Model Cards

EvaEsi Instant, EvaEsi Reasoning and Elements: purpose, access, evaluation scope, limitations and deployment conditions

FOR-PUB-083 System Cards

The EvaEsi platform, mobile application and developer platform: safeguards, deployment shape, external actions and system evaluation

FOR-PUB-084 Evaluation and Benchmark Disclosure Policy

How a performance, accuracy, cost or reliability figure gets published, and what must travel with it

FOR-PUB-085 Public Claims Evidence Standard

The standard every technical, research and commercial claim must meet before Forlais publishes it

FOR-PUB-086 Output Reliability Notice

How wrong EvaEsi can be, why you cannot tell by looking, and what you must check

FOR-PUB-087 Professional and Regulated Advice Notice

Why nothing EvaEsi produces is professional advice, and what that means for you and for professionals using it

FOR-PUB-088 Human Oversight Policy

When a person must review, what meaningful review requires, and what EvaEsi does not replace

FOR-PUB-089 AI-Generated Content Labelling Policy

How content made by our models is marked, and what you must do when you publish it

FOR-PUB-090 Content Provenance and Authenticity Policy

What provenance signals can tell you, and what no signal can tell you

FOR-PUB-091 Model Training Content Summary

The public summary of training content required by the EU Artificial Intelligence Act

FOR-PUB-092 Copyright Compliance Statement for AI Models

Our copyright policy, how a reservation of rights is honoured, and what rights holders can ask of us

FOR-PUB-093 Model Update and Change Notice Policy

How model and platform changes are decided, published and notified

FOR-PUB-094 Model Retirement Policy

Deprecation, migration, retired versions and withdrawal on safety grounds

FOR-PUB-095 AI Incident Disclosure Policy

When we tell the public that something has gone wrong, and what we say

FOR-PUB-096 Agentic Actions and Tool Use Policy

The rules that govern any capability to act outside a conversation, before any such capability exists

FOR-PUB-097 Autonomous Operation Safety Notice

Boundaries on ongoing tasks and unattended operation, before any such capability exists

FOR-PUB-098 User Feedback and Model Improvement Notice

What happens when you tell us an output was wrong

FOR-PUB-099 Abuse Monitoring Notice

What we monitor to keep the platform safe, and the limits on it

FOR-PUB-100 Restricted Model Access Policy

How the models are reached, what is not available at all, and how an exception would be decided

Security

FOR-PUB-101 Trust Centre

What we hold, who may read it, and how to ask for it

FOR-PUB-102 Security Overview

The controls we have built, and the ones we have not

FOR-PUB-103 Information Security Policy Summary

The public extract from our internal information security policy

FOR-PUB-104 Vulnerability Disclosure Policy

How to report a security weakness, and what we promise you in return

FOR-PUB-105 security.txt File

The specification for the machine readable security contact file

FOR-PUB-106 Bug Bounty Policy

Held. No bug bounty programme exists

FOR-PUB-107 Security Incident Notification Policy

What we tell you when something goes wrong, and when

FOR-PUB-108 Business Continuity Summary

What keeps running, what it depends on, and what this summary does not state

FOR-PUB-109 Disaster Recovery Summary

What we can say about recovery, and what we will not say until it has been tested

FOR-PUB-110 Backup and Deletion Summary

How backups and deletion fit together, and the periods we keep to

FOR-PUB-111 Compliance and Certification Page

Exactly what we hold, exactly what we do not, and what neither of those tells you

FOR-PUB-112 Penetration Testing Statement

No independent test has been performed, and what will be true of the first one

FOR-PUB-113 Service Status Page

What the status page reports, how it is written, and how long entries stay

FOR-PUB-114 Incident History Page

The permanent record, what belongs in it, and one finding that does not

FOR-PUB-115 Responsible Disclosure Acknowledgements

Recognition for people who reported a security issue and asked to be named

Content

FOR-PUB-116 User Content Policy

Who owns what you put in, and what permission we take

FOR-PUB-117 Output Rights Policy

What rights you get in what the models produce

FOR-PUB-118 Copyright Policy

How to report infringement, and what we do about it

FOR-PUB-119 DMCA Notice and Takedown Policy

Notice and takedown under 17 U.S.C. 512

FOR-PUB-120 Repeat Infringer Policy

What happens to an account that infringes copyright repeatedly

FOR-PUB-121 Counter-Notice Policy

How to ask for content to be restored, and what happens next

FOR-PUB-122 Content Moderation Policy

The rules we apply, and how decisions are made and recorded

FOR-PUB-123 Community Guidelines

How to behave in shared Interests groups and Studio team workspaces

FOR-PUB-124 Illegal Content Reporting Process

How to tell us about unlawful content, and what we do with your report

FOR-PUB-125 Moderation Appeals Policy

How to challenge a decision about your content or your account

FOR-PUB-126 Enforcement Guidelines

What happens when a rule is broken, and how we decide

FOR-PUB-127 Public Sharing Policy

What happens when content leaves your account, and how to take it back

FOR-PUB-128 Image, Voice and Likeness Policy

Using material that shows or sounds like a real person

FOR-PUB-129 Non-Consensual Intimate Content Policy

Intimate material shared, created or threatened without consent

FOR-PUB-130 Child Sexual Abuse Material Policy

Prohibition, reporting obligations, access restriction and preservation

FOR-PUB-131 Terrorism and Violent Extremism Policy

Prohibited content and conduct, removal orders and cooperation

FOR-PUB-132 Fraud and Impersonation Policy

Deception, scams, phishing and identity misuse

FOR-PUB-133 Election and Political Use Policy

Political persuasion, synthetic media and election periods

FOR-PUB-134 Advertising and Sponsorship Policy

Our position on advertising, and the rules for advertising made with EvaEsi

Accessibility

FOR-PUB-135 Accessibility Statement

The standard we work to, what has been assessed against it, and what has not

FOR-PUB-136 Accessibility Conformance Report

The procurement mapping for the Web Content Accessibility Guidelines, EN 301 549 and the Revised Section 508 Standards

FOR-PUB-137 Accessible Support Policy

How to reach us if a surface does not work for you, and how we handle a request for an adjustment

FOR-PUB-138 Code of Business Conduct

The standards that bind our directors, our people and the organisations that work with us

FOR-PUB-139 Anti-Bribery and Corruption Statement

Our position, our rules and how they are applied, written against the Bribery Act 2010

FOR-PUB-140 Supplier Code of Conduct

What we require of every organisation that supplies goods or services to Forlais

FOR-PUB-141 Modern Slavery Statement

A voluntary statement, published below the statutory threshold, and what it will contain when the threshold is reached

FOR-PUB-142 Environmental and Sustainability Statement

What we measure, what we do not, and what we will not claim

FOR-PUB-143 Tax Strategy

A voluntary statement of our approach, published below the statutory threshold

FOR-PUB-144 Gender Pay Gap Report

A held document, stating the threshold at which reporting becomes a legal duty and what will be published then

FOR-PUB-145 Equality and Inclusion Statement

What we commit to as an employer and as a service provider, and how to ask for an adjustment

FOR-PUB-146 Whistleblowing and Ethics Reporting Page

How to report a concern, what happens next, and the protection you have

FOR-PUB-147 Public Procurement Commitments

Evidence available for tenders today and the commitments governing every submission