Terms of service.

Effective 23 August 2026 · version 2026-08-23

These Terms govern access to Brain of Record, a knowledge hosting and retrieval service provided by ALL SURE LTD, trading as Brain of Record ("BoR", "we", "us" or "our"). They form an agreement between us and the individual or organisation identified in an account or order as the owner of a brain (the "Customer").

A "Consumer" is an individual using the Service wholly or mainly outside their trade, business, craft or profession. A "Business Customer" is any Customer who is not a Consumer. An "Authorised User" is an individual the Customer allows to access its brain.

An invited Authorised User agrees to the rules that apply to their own use, but does not become the Customer or claim authority to bind an organisation merely by creating or using an account. If an account or order identifies an organisation as the Customer, the person placing that order or creating that brain for the organisation confirms that they are authorised to do so.

1. The Service

BoR hosts a permissioned knowledge base (a "brain") and makes it available through supported web and Model Context Protocol (MCP) interfaces. The Service includes the software, storage, access controls, document history and related support we make available under an order, pilot agreement or account.

BoR does not provide an AI model and does not give legal, medical, financial or other professional advice. A Customer chooses its own AI tools. Outputs and actions produced by those tools are governed by their providers and must be reviewed by the Customer.

2. Accounts and access

• Account holders must be at least 18 and provide accurate account information.
• The Customer must identify an administrator for its brain. An individual Customer may be their own administrator.
• The administrator controls membership, area permissions and connections. The Customer is responsible for those choices and for promptly removing access that is no longer required.
• Credentials, API keys and login links must be kept confidential and used only by the person or system for which they were issued.
• The Customer must tell us promptly at info@logsure.io if it suspects unauthorised access.

3. Customer Content

"Customer Content" means documents, files and other information submitted to the Service by or for the Customer. The Customer retains all rights it has in Customer Content. We do not acquire ownership of it.

The Customer gives us a non-exclusive licence, for the term of the Service and any agreed export period, to host, store, copy, index, version, transmit and display Customer Content only as necessary to provide, secure and support the Service. We may permit our subprocessors to do the same only for those purposes and subject to data-protection obligations.

Your data remains yours. We do not sell Customer Content, advertise against it, mine it for unrelated purposes, or use it to train AI models.

We do not receive the Customer's conversations with its chosen AI provider, model credentials or token usage. We receive the MCP requests necessary to authenticate users and retrieve or file authorised content. When the Customer directs BoR to return content to a chosen AI tool, that disclosure is made on the Customer's instruction and the tool provider's terms apply.

We may create aggregate operational statistics from Service Data such as request counts, response times, storage volumes and error categories. Service Data does not include the substance of Customer Content, document titles or paths, or facts extracted from Customer Content. We may use Service Data to operate, secure and improve BoR.

4. Customer responsibilities

The Customer is responsible for the accuracy, legality and provenance of Customer Content and must have the rights and permissions needed to submit it and allow us to process it as described in these Terms. A Business Customer must also provide any notices and establish any lawful bases required by data-protection law.

Unless we expressly agree otherwise in writing, the Customer must not use BoR as a store for passwords, private keys, full payment-card details or patient-level medical records. The Customer must not use the Service to:

• break the law, infringe another person's rights or upload malicious code;
• gain unauthorised access, evade permissions or test another customer's security;
• resell the Service or make a brain available to anyone other than its Authorised Users without our agreement; or
• place an unreasonable load on the Service or interfere with its operation.

5. Fees

Fees, usage limits, billing periods and any service commitments are those shown clearly at checkout, in the Customer's order or as otherwise agreed in writing. A price shown to a Consumer includes VAT and any other compulsory charge. A Business Customer's order may state that VAT is additional. Fees are payable in advance unless the order says otherwise.

If a paid plan renews automatically, it renews for the billing period shown at checkout or in the order. The Customer may stop the next renewal at any time through the cancellation method shown in its account or by emailing info@logsure.io. Cancellation normally takes effect at the end of the current paid period, with no further renewal charge. We will provide renewal reminders where required by law.

Any statutory cancellation right that a Consumer has when a fixed term renews is unaffected.

We will give at least 30 days' notice of a price change. A change takes effect no earlier than the Customer's next renewal after that notice period, and the Customer may cancel before it takes effect. We may suspend paid access after reasonable notice of an overdue amount.

6. Consumer cancellation rights

This section applies only to Consumers and is in addition to the ordinary cancellation right above. A Consumer who enters a distance contract with us, including online, may cancel it without giving a reason during the 14 days after the contract is made. To cancel, the Consumer must send us a clear statement by email or post before the cancellation period ends. They may use the model form below, but do not have to.

If the Consumer cancels during that period, we will reimburse payments covered by the statutory cancellation right within 14 days after we receive the cancellation, using the original payment method unless agreed otherwise and without a refund fee. If the Consumer expressly asks us to start the Service during the cancellation period, we may deduct or charge a proportionate amount for the Service supplied before cancellation, where the law permits. Creating a brain does not otherwise waive statutory cancellation rights.

Model cancellation form

To ALL SURE LTD, 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, or info@logsure.io: I give notice that I cancel my contract for Brain of Record. Ordered on: [date]. Name: [name]. Address: [address]. Signature (only if sent on paper): [signature]. Date: [date].

7. Confidentiality and security

Each party must protect the other's non-public information, use it only for this agreement, and disclose it only to people who need it and are bound by confidentiality. This does not cover information that is public through no breach, independently developed, lawfully received from another source, or required to be disclosed by law.

We maintain appropriate technical and organisational safeguards, including encryption in transit, provider encryption at rest, hashed authentication secrets, access controls and tenant-scoped data access. No internet service is completely secure, and we do not promise that incidents or interruptions can never occur.

8. Data protection

The parties' data-protection roles depend on how the brain is used. Where a Customer determines the purposes and means of processing personal data and is subject to data-protection law, the Customer is normally the controller and ALL SURE LTD is its processor for Customer Content. An individual processing personal data only for personal or household activities may fall outside the UK GDPR's personal and household activity rules; this does not remove our own obligations. For account administration, security, billing, support and our own business records, ALL SURE LTD is a controller. Our Privacy Notice explains that processing.

Processing instructions

To the extent we act as a processor, the Customer instructs us to process personal data to provide the Service and as otherwise documented in writing. Processing lasts for the term and the export/deletion period. Its nature and purpose are hosting, organising, indexing, versioning, retrieving, permissioning, transmitting, securing, supporting, exporting and deleting Customer Content.

Data subjects may include Authorised Users, family and household members, employees, contractors, customers, suppliers and other contacts. Data may include identity and contact information, family and household information, employment and organisational information, commercial and financial information, and any other personal data the Customer lawfully chooses to include within the agreed scope.

Our processor commitments

To the extent we act as a processor, we will:

• process personal data only on documented instructions, unless UK law requires otherwise;
• ensure authorised personnel are bound by confidentiality;
• maintain security measures appropriate to the risk;
• assist the Customer, taking account of the processing and information available to us, with data-subject requests, security obligations, breach notifications, impact assessments and regulator consultations;
• notify the Customer without undue delay after becoming aware of a personal-data breach affecting its data;
• provide information reasonably necessary to demonstrate compliance and contribute to reasonable audits no more than once annually, unless an incident or regulator requires more;
• tell the Customer if, in our opinion, an instruction infringes applicable data-protection law; and
• on termination, return or delete personal data as described below unless law requires retention.

Subprocessors and transfers

To the extent we act as a processor, the Customer gives general authorisation for the subprocessors listed on our Subprocessor Register. We impose data-protection terms on our providers and remain responsible for their processing as required by law. We will give at least 30 days' notice before adding or replacing a material provider that processes Customer Content. The Customer may object on reasonable data-protection grounds within 14 days. If we cannot provide a reasonable solution, the Customer may stop using the affected Service and receive a pro-rata refund of prepaid fees for the unused period.

Where a restricted international transfer occurs, we use an applicable UK adequacy regulation, the UK International Data Transfer Agreement, or the EU Standard Contractual Clauses with the UK Addendum, together with any required transfer assessment.

9. Export, retention and deletion

The Customer may request a Markdown export of its Customer Content during the term. Following termination, we will make an export available for 30 days on request. At the end of that period we will delete Customer Content from active systems within 30 days, unless the Customer asks us to return it sooner or law requires retention.

Residual encrypted copies may remain in restricted backups until they age out through the applicable provider's backup cycle. They remain protected, are not returned to active use except for disaster recovery, and are deleted when that cycle completes. We may retain minimal account, transaction, security and legal records for as long as reasonably necessary for those purposes.

10. Our intellectual property

We and our licensors own the Service, software, documentation, design and trademarks. We give the Customer a limited, non-exclusive, non-transferable right to use the Service during the term. Feedback may be used without restriction or payment, but does not give us rights in Customer Content.

11. Service standards and changes

We will provide the Service with reasonable skill and care. Unless an order states a service level, continuous or error-free availability is not promised. We may maintain and improve the Service and may change it for a stated legal, security, technical or operational reason. We will not materially reduce paid core functionality during a current billing period without reasonable notice.

A Consumer has statutory rights where services are not provided with reasonable care and skill or do not match information on which the Consumer relied. Depending on the circumstances, remedies may include repeat performance or a price reduction, and rights relating to digital content may also apply. Nothing in these Terms restricts those rights.

We are not responsible for Customer Content accuracy, a Customer's permission choices, third-party AI output or actions, or failures of internet and third-party services outside our reasonable control, except where we have failed to use the care required by these Terms or law.

12. Suspension and termination

The Customer may stop using the Service or cancel as described in section 5, its order and, for Consumers, section 6. We may suspend access only where reasonably necessary to address a material security risk, unlawful use, material breach or overdue payment. We will give notice and a reasonable opportunity to remedy the issue where the circumstances allow.

Either party may terminate for a material breach that is not remedied within 14 days after written notice, or immediately for an irremediable breach. We or a Business Customer may also terminate if the other enters insolvency. If we terminate a paid Service for a reason that is not the Customer's fault, we will refund fees paid in advance for the unused period.

Clauses intended by their nature to survive—including confidentiality, accrued payment, data protection, intellectual property and liability—continue after termination.

13. Liability

Nothing in these Terms limits liability for death or personal injury caused by negligence, fraud or fraudulent misrepresentation, deliberate wrongdoing, or anything else that cannot lawfully be limited.

Consumers

We are responsible for losses a Consumer suffers that are a foreseeable result of our breach of these Terms or our failure to use reasonable care and skill. We are not responsible for a loss that could not reasonably have been foreseen when the contract was made. Because a Consumer uses the Service wholly or mainly outside a trade or business, we are not responsible to a Consumer for business losses. Nothing in this section affects a Consumer's statutory rights or remedies.

Business Customers

Subject to the first paragraph of this section, neither party is liable to the other for indirect or consequential loss, or for loss of profit, revenue, anticipated savings, business opportunity or goodwill. Our total aggregate liability arising from the Service in any 12-month period will not exceed the greater of £1,000 and the fees paid or payable for the Service in that period.

A Business Customer will indemnify us against a third-party claim that Customer Content, or the Business Customer's unlawful use of the Service, infringes that third party's rights, except to the extent the claim results from our breach of these Terms.

14. General

Neither party is liable for delay caused by events beyond its reasonable control, but this does not remove a Consumer's statutory rights and we will refund prepaid fees if we end the affected Service without supplying it. The Customer may not assign this agreement without our consent. We may assign it as part of a reorganisation, financing or sale of the business only if the assignee remains bound by these obligations and the transfer does not reduce a Consumer's rights.

We may change these Terms for a legal, regulatory, security or technical reason, or to reflect a change to the Service. We will give at least 30 days' notice of a material change, explain the change and when it takes effect, and will not retrospectively reduce rights already accrued. If the Customer objects to a material change, it may terminate before the effective date and receive a pro-rata refund of unused prepaid fees.

For a Business Customer, these Terms, the applicable order and documents incorporated by reference are the entire agreement. For a Consumer, nothing in these Terms excludes statements about us or the Service that applicable law treats as binding. If a provision is unenforceable, the remainder continues. A delay in enforcing a right is not a waiver. No person other than the parties has a right to enforce these Terms.

English law governs this agreement. A Business Customer agrees that the courts of England and Wales have exclusive jurisdiction. A Consumer retains the protection of any mandatory law that applies where they live and may bring proceedings in the courts available to them under applicable law. Before starting proceedings, each party will try in good faith to resolve the dispute through written notice.

15. Contact and complaints

Notices, cancellation requests, complaints and questions may be sent to info@logsure.io. We will try to resolve complaints directly and without undue delay. ALL SURE LTD is registered in England and Wales under company number 16710999. Registered office: 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ. ICO registration: C1904601.