Terms of Service

The agreement

These Terms of Service are an agreement between Attache Holdings LLC, a limited liability company at 7 Portwalk Place, Portsmouth, New Hampshire 03801, United States (“Attaché”, “we”, “us”), and the business that signs up for the Attaché platform (“you”, “your”, “Customer”).

By creating an account, accepting these terms, or using the service, you agree to them. If you are agreeing on behalf of a company, you are confirming that you have the authority to bind it, and “you” means that company.

Which product these terms cover. Attache Holdings LLC operates more than one product, and this domain is the company’s, not one product’s. These terms govern Attaché — the self-serve platform you sign up for online and pay for by the seat. They do not govern Sentinel, our contracted life-sciences build, which is sold to each customer under a negotiated Master Subscription Agreement and priced under that agreement. If you are a Sentinel customer, that agreement and its exhibits are your terms; nothing on this page adds to them, limits them, or replaces them.

Our Privacy Statement forms part of this agreement and describes how we handle information. If you have signed a separate written agreement with us, that agreement governs where the two conflict.

Who may use Attaché

Attaché is a business product for business use. To use it you must be at least 18 years old, able to form a binding contract, and not barred from receiving US-origin services under applicable sanctions or export laws.

Attaché is not designed for, and must not be used to process, data that carries heightened regulatory duties we have not agreed to in writing — including protected health information under HIPAA, cardholder data under PCI DSS, and information subject to a data-residency requirement that the United States does not satisfy. If you put such data into Attaché anyway, you do so on your own responsibility and you are not entitled to expect controls we have not undertaken to provide.

Accounts, seats and administrators

You subscribe to a number of seats. A seat is a named person, not a concurrent login — two people must not share one set of credentials. You are responsible for everything that happens under your account, including what the people you invite do with it.

Keep credentials confidential and tell us promptly at support@attache.group if you believe an account has been compromised. Multi-factor authentication is available to every user and we recommend you turn it on.

Administrators on your account can see, change, export and delete workspace data, manage permissions, add and remove users, and close the account. Choose them accordingly. When a user is removed, the records that user created stay in your workspace — they belong to you, not to them.

Subscription, billing and renewal

Price. Attaché self-serve is $49 per seat, per month, billed in advance. The price that applies to you is the one shown to you at signup or in your current order; where that differs from the figure here, the one you were shown governs.

AI usage. Work done by the AI agents is metered in Attaché Tokens, shown on your usage dashboard as you spend them. Your plan includes an allowance each period. Usage beyond the allowance is billed in arrears at the token rate published for your plan, and unused allowance does not carry over. You can see what you have used before you are billed for it — the dashboard is the same figure we invoice from.

Billing. Fees are charged in advance for each billing period and are payable in US dollars. You authorize us to charge your payment method on each renewal until you cancel. You are responsible for keeping payment details current, and for any sales, use, VAT or similar taxes, excluding taxes on our income.

Renewal and cancellation. Your subscription renews automatically at the end of each period. You can cancel at any time, from the application or by writing to us; cancellation takes effect at the end of the period you have already paid for, and you keep access until then. Fees already paid are not refunded for a partial period, except where the law requires a refund or where we have failed to provide the service and have not fixed it.

Adding seats mid-period is charged pro rata. Removing seats takes effect at the next renewal.

Price changes. We may change our prices. We will tell account administrators by email at least 30 days before a change affects you, and it will not take effect before your next renewal. Continuing past that renewal is acceptance; cancelling before it is your alternative.

Non-payment. If a charge fails we will tell you and try again. If an account remains unpaid for 30 days we may suspend it, and section 13 covers what happens to the data.

Your data and who owns it

Everything you put into Attaché remains yours. We claim no ownership of it. You grant us only the limited licence we need to host, process, transmit, back up and display it in order to run the service for you, and to do the things described in the Privacy Statement. That licence ends when the data is deleted.

We do not sell your data and we do not use your workspace content to train AI models.

You are responsible for the data you put in: that you have the right to hold it, that collecting and using it through Attaché is lawful where you operate, and — where the people in your records have rights over their data — that you handle those rights as the controller of it. Where privacy law makes us your processor, we act on your instructions, and we will sign a data processing agreement with you on request.

Export and deletion. You can export your data while your subscription is active. Deleting a record removes it. Closing your account removes the workspace, as described in the Privacy Statement.

Backups are not a substitute for your own records. We take backups to recover the platform, not to restore one customer's mistaken deletion, and we do not promise to be able to bring back something you deleted on purpose.

Connected mailboxes and accounts

Connecting a mailbox or another third-party account is optional. When a user connects one, they confirm they are entitled to grant that access — that it is their mailbox, or one their employer has authorized them to connect.

The permissions we request are listed in the Privacy Statement, and the consent screen you see is your provider's, not ours. Any user can revoke our access at any time, from Attaché or directly from their Microsoft or Google account.

Third-party services are run by those third parties under their own terms. We are not responsible for their availability, their changes, or a decision by your provider to withdraw access — if that happens, the affected feature stops working and the rest of Attaché carries on.

AI features, and what they are not

Attaché uses AI to summarize, extract, draft and suggest. These features are useful and they are also fallible.

AI output is a draft for a person to check. It can be incomplete, out of date, or confidently wrong. Anything a model reads out of an external document is confirmed by a human before it is written into your records, and you should apply the same standard to everything else it produces.

It is not professional advice. Nothing Attaché generates is legal, tax, financial, medical or employment advice, and it must not be used as the sole basis for a decision with legal or financial consequences for you or anyone else.

You are responsible for what you send. Do not feed the AI features content you are not entitled to process. AI actions are metered, and the metering is visible to you.

Where the same prompt could produce similar output for another customer, we make no claim of exclusivity over generated text. As between you and us, output generated from your data in your workspace is yours to use.

Acceptable use

Do not use Attaché to:

• break the law, infringe someone's rights, or help someone else do either;
• send spam or unsolicited bulk mail, or anything that violates anti-spam law such as CAN-SPAM or GDPR marketing rules;
• store or transmit malware, or attempt to gain access to another customer's data, our systems, or any account that is not yours;
• probe, scan or load-test the platform without our written permission;
• reverse engineer, decompile, or copy the service, or resell or sublicense access to it;
• use automated means to scrape the service or exceed a plan's limits by technical circumvention;
• harass, threaten or defame anyone, or process data about people in ways they would find unlawful.

If you see a violation, tell us at support@attache.group.

Availability and support

We work to keep Attaché available and quick, and we will give reasonable notice of planned maintenance where we can. We do not offer a contractual uptime commitment or service credits on the self-serve plans. We would rather say that than publish a number we have not committed to; an availability commitment is something a contracted deployment buys.

Support is by email at support@attache.group, during US business hours, and a person answers.

Changes to the service, and to these terms

The product will change — we add features, improve them, and occasionally remove one that is not working. If we remove or materially reduce a feature you rely on, we will give account administrators at least 30 days' notice by email.

We may update these terms. The date at the top always reflects the current version. For a material change we will notify administrators by email at least 30 days before it takes effect. Continuing to use Attaché after that is acceptance; if you do not accept, cancel before the change takes effect and we will refund any prepaid fees for the period after cancellation.

Confidentiality

Each of us may learn things about the other that are not public. Both of us agree to use the other's confidential information only to perform this agreement, to protect it with at least the care we use for our own, and not to disclose it except to people who need it and are bound to keep it confidential. This does not cover information that is public through no fault of the recipient, was already known, is independently developed, or must be disclosed by law — and where the law compels disclosure, the compelled party will give notice if it is allowed to.

Your workspace data is your confidential information, and the obligations above apply to us in respect of it.

Our intellectual property

Attaché — the software, the interface, the documentation, the name and the marks — belongs to us and our licensors. These terms grant you a limited, non-exclusive, non-transferable right to use the service during your subscription, and nothing more. You may not use our name or marks without our written permission.

Feedback. If you send us an idea for improving the product, we may use it without obligation or payment. That covers feedback only; it gives us no rights over your data.

Suspension and termination

You may cancel at any time, as described in section 4.

We may suspend or terminate an account if fees go unpaid after notice, if the account is used in breach of section 8, or if use of it threatens the security or integrity of the platform or another customer. Where circumstances allow, we will warn you first and give you a chance to fix the problem. Where they do not — an active security threat, for instance — we may act immediately and will tell you promptly afterward.

After termination, your right to use the service ends. We will keep your data available for export for 30 days, unless we are legally prohibited or the termination was for serious abuse of the platform. After that window we delete the workspace as described in the Privacy Statement. Ask us during the window and we will help you get your data out.

Sections on your data and its ownership, confidentiality, intellectual property, disclaimers, limitation of liability, indemnification, and governing law survive termination.

Disclaimers

We provide Attaché with reasonable skill and care. Beyond that, and to the fullest extent the law allows, the service is provided “as is” and “as available”, without warranties of any kind, express or implied, including implied warranties of merchantability, fitness for a particular purpose, title and non-infringement.

We do not warrant that the service will be uninterrupted or error-free, that defects will be corrected, or that AI-generated output will be accurate or complete.

Some jurisdictions do not allow the exclusion of certain warranties. Where that is so, the exclusions above apply only as far as that law permits, and nothing in these terms limits liability that cannot lawfully be limited — including liability for death or personal injury caused by negligence, or for fraud.

Limitation of liability

Indirect damages. To the fullest extent the law allows, neither party is liable to the other for indirect, incidental, special, consequential or exemplary damages, or for lost profits, lost revenue, lost business opportunity or the cost of substitute services — however caused, on any theory of liability, and whether or not the party was warned those damages were possible.

One deliberate exception to that. Where a claim arises from a breach of confidentiality, or from a failure of the security and data-protection commitments described in our Privacy Statement, the following count as direct damages and are recoverable up to the limits below: the cost of forensic investigation and incident response; the cost of notifying affected individuals and regulators; the cost of credit monitoring or identity protection reasonably provided to affected individuals; the cost of restoring, reconstructing or re-creating lost or corrupted data; fines and penalties imposed by a regulator, so far as they are insurable and recoverable under applicable law; and amounts paid to settle a third-party claim. Excluding these as “indirect” would leave the rest of this agreement worth very little in the one situation where it matters most.

The general cap. Except as stated below, each party’s aggregate liability arising out of or relating to this agreement is limited to the greater of (a) the total fees you paid or owe for the 12 months immediately before the event giving rise to the claim, and (b) 12 months of fees at your recurring rate on the date of that event. This limit applies to both parties, and it includes everything payable under section 16, including the cost of defending a claim.

A higher limit where the stakes are higher. For a breach of confidentiality (section 11), a failure of the security and data-protection commitments in our Privacy Statement, or a breach of our undertaking not to train AI models on your workspace content (section 5), the cap is three times the amount calculated above.

We set a higher limit for those rather than no limit at all, and the reason is worth stating plainly: Attaché is a small company, and an unlimited liability is not an exposure we could actually meet. A cap a vendor cannot satisfy is not protection — it only resembles protection, and you would discover the difference at the worst possible moment.

What no cap applies to. Neither limit applies to fraud or fraudulent misrepresentation; to gross negligence or willful misconduct; to your obligation to pay fees you have accrued; or to any liability that cannot lawfully be limited. A claim is not removed from these limits by the way it is pleaded, and the fraud and gross-negligence exclusions apply only where the conduct is established by a final, non-appealable judgment or admitted in writing by the party it is alleged against.

Data you were asked not to put in. If you submit data of a kind section 2 excludes — protected health information, cardholder data, or data under a residency obligation the United States does not satisfy — our liability relating to it is subject to the general cap only, and the higher limit does not apply to it. We did not agree to receive that data, the service is not built for it, and there is no separate agreement in place against which our handling of it could be measured. The exclusions in the paragraph above still stand.

This allocation of risk reflects what you pay for a self-serve product, and it is a basis of the bargain between us. It applies even if a remedy stated in these terms fails of its essential purpose. A different allocation is available under a negotiated agreement — see section 1.

Indemnification

You will defend and indemnify us against third-party claims arising from your data, your use of the service in breach of these terms or the law, or your infringement of someone's rights.

We will defend and indemnify you against third-party claims that the Attaché software itself, used as we intended, infringes a US patent, copyright or trademark — provided you tell us promptly, let us control the defense, and cooperate. If such a claim arises we may modify the service, obtain a licence, or terminate the affected subscription and refund prepaid fees for the unused period.

Governing law and disputes

These terms are governed by the laws of the State of New Hampshire, United States, without regard to its conflict-of-laws rules. The UN Convention on Contracts for the International Sale of Goods does not apply.

The state and federal courts located in New Hampshire have exclusive jurisdiction over any dispute arising out of these terms, and both parties consent to that jurisdiction. If you are a consumer in a jurisdiction that gives you the right to bring proceedings locally, this does not take that right away.

Talk to us first. Before filing anything, write to support@attache.group describing the problem. Most disputes are a misunderstanding, and we would rather fix it than litigate it.

General

• Entire agreement. These terms and the Privacy Statement are the whole agreement between us about the service, and replace anything said before.
• Severability. If a provision is unenforceable, the rest stays in force and that provision is read as narrowly as needed to make it enforceable.
• No waiver. Not enforcing something once does not waive it.
• Assignment. Neither party may assign this agreement without the other's consent, except that either may assign it in a merger, acquisition or sale of substantially all assets, on notice.
• Force majeure. Neither party is liable for a delay or failure caused by something genuinely outside its reasonable control.
• Notices. We will send notices to the email addresses of your account administrators; you send them to support@attache.group, or by post to the address below.
• No third-party beneficiaries. This agreement is between you and us.
• Independent contractors. Nothing here creates a partnership, joint venture, agency or employment relationship.

Contact us

Email: support@attache.group
Post: Attache Holdings LLC, 7 Portwalk Place, Portsmouth, NH 03801, United States

See also our Privacy Statement.