Imprint
ObligationSign.com
Brussels, Belgium
CSOS Technologies
Patents pending: EP 25 000 039.5, EP25209644 · European Patent Office
Source-available license
The ObligationSign clearinghouse source code is published on GitHub under a source-available license. The following terms apply:
| Use | Permitted | Conditions |
|---|---|---|
| Personal evaluation and research | Yes | Attribution required (link to this repository) |
| Academic research and publication | Yes | Citation of EP 25 000 039.5, EP25209644 in relevant publications |
| Non-commercial open-source integrations | Yes | Must declare conformance to AGTS specification; must not assert IP claims against other AGTS implementations |
| Internal enterprise evaluation | Trial only | Use the hosted service trial; contact enterprise@obligationsign.com for extended pilots |
| Commercial deployment (self-hosted) | Commercial licence required | Contact legal@obligationsign.com |
| Competing products | Not permitted | Use of the codebase or protocol implementation to build a competing clearinghouse service is not permitted without a separate agreement |
The AGTS protocol specification documents (AGTS-TERMS.md, AGTS_CLEARINGHOUSE_SPEC.md, AGTS_CLEARINGHOUSE_PLUGIN_API.md, AGTS_CLOSED_LOOP_SPEC.md, AGTS-TCP-IP.md) are published for public review and implementor reference. Implementations conforming to these specifications for interoperability purposes are permitted under the royalty-free patent licence described at /patents.
Privacy policy
What we collect — and what we don't
| Data | Collected | Purpose | Retention |
|---|---|---|---|
| Web analytics (page views, referrers) | Yes — aggregate only | Cloudflare Web Analytics. No cookies. No fingerprinting. No personal data. Aggregate page view counts only. | 30 days aggregate |
| Email address (trial registration) | Yes | Trial tenant provisioning; magic link delivery; account recovery | Duration of account + 30 days after deletion |
| API key and tenant ID | Yes | Authentication and authorisation for API calls | Duration of account |
| Governance evidence content (prompts, documents, customer data) | No | We record hashes of governance evidence, not the evidence itself. Your data never enters our systems. | — |
| Gate evidence fields (G1–G5 gate result objects) | Yes — in proof bundles | Gate evidence is committed in the proof bundle and stored at a durable URI for replay. The evidence is the governance record. | Permanent (log is append-only) |
| IP address | Cloudflare only | Cloudflare's standard infrastructure logging. We do not log IP addresses at the application level. | Cloudflare retention (varies) |
No marketing cookies. No third-party tracking. No data brokerage. The only data we store beyond your email and API key is the governance record you submit — and that's the point.
For GDPR data access, correction, or deletion requests: privacy@obligationsign.com. We respond within 30 days.
Governing law
These terms are governed by Belgian law. Any disputes arising from or related to these terms or the use of ObligationSign services shall be subject to the exclusive jurisdiction of the courts of Brussels, Belgium, without prejudice to any applicable mandatory consumer protection rules in the user's country of residence.
For enterprise agreements and licensing, the governing law and dispute resolution mechanism may be agreed separately in writing.
Legal enquiries: legal@obligationsign.com
Privacy enquiries: privacy@obligationsign.com