Terms

These terms apply to services from GN, CVR 38823574, trading as Northgrove (“we”), to business customers (“you”). Each engagement is described in a written proposal or statement of work (the “SOW”). If the SOW and these terms conflict, the SOW wins.

1. Scope and price

We deliver the scope described in the SOW for the fixed price stated there. Prices are in EUR or DKK and exclude VAT. Work outside the agreed scope requires a written change, priced in advance.

2. Payment

Unless the SOW says otherwise, 50% is invoiced at the start and 50% on delivery. Payment terms are 14 days net. Late payment accrues interest under the Danish Interest Act (renteloven).

3. Your responsibilities

You provide timely access to the systems, data and people needed. For security reviews, you confirm in writing that you own or are authorised to test the systems in scope. We test only what is agreed in writing.

4. Ownership

On full payment, you own the deliverables made for you: workflows, prompts, configuration, documentation and reports. We keep ownership of our pre-existing tools, methods and know-how, and grant you a perpetual, non-exclusive licence to use any of them that are part of the deliverables. We will not name you as a customer without your written permission.

5. Confidentiality

Both parties keep the other's confidential information confidential, during the engagement and for three years after. Security findings are confidential to you. We delete or return your data at the end of the engagement, unless the law requires us to keep it.

6. Data protection

Where we process personal data on your behalf, we sign a data processing agreement before work starts.

7. Warranty and limitation of liability

We deliver with professional care. A security review tests for known classes of attack within an agreed scope and time; it cannot prove a system is free of vulnerabilities. AI systems can behave unpredictably, and you remain responsible for how you operate them. Our total liability per engagement is limited to the fees paid for that engagement. Neither party is liable for indirect loss, including lost profit or lost data, except in cases of gross negligence or wilful misconduct.

8. Law and venue

Danish law applies. Disputes go to the Copenhagen City Court (Københavns Byret).