End User Agreement

Last updated: 18 November 2025. Organisation number: 936 578 195. Contact: contact@opisense.com.

These terms ("the Agreement") govern the rights and obligations for services provided by Opisense AS ("Opisense") to you as Customer and User of the System.

The Agreement comprises:

User agreement – governs the contractual relationship between Opisense and you as Customer.
Data Processing Agreement (appendix) – governs Opisense's processing and management of personal data on your behalf as Customer.

Summary

The main elements of the Agreement:

The parties have a mutual duty of confidentiality, as set out in the confidentiality clause at the end of the Agreement.
Opisense sells a Subscription that gives the Customer a limited, non-transferable right to use the System. Opisense shall deliver the System to the Customer as a service provided via the internet (Software as a Service/SaaS).
The price of the Subscription follows Opisense's price list available in the System and applies per undertaking. The Subscription has a running subscription period that is invoiced in advance. The price and duration of the subscription period are chosen in the System or agreed separately.
Opisense may from time to time carry out routine maintenance that will result in downtime for the System. To the extent practically possible, Opisense will provide information about unavailability in advance.
Opisense is not responsible for the accuracy and correctness of content generated by the System. AI-generated content may be inaccurate and misleading and should always be quality assured by a human at the Customer.
The Customer is responsible for the content and correctness of information entered in the System, as well as for complying with applicable legislation when using the System.
The Customer is responsible for ensuring that login information for the Customer's Users and access to the System are not shared with unauthorised persons.
The Customer is responsible for ensuring that the Customer's Users provide correct information in the System and that the System is not misused.

Definitions

"Subscription": The Customer's web-based subscription to the System.
"User": The person(s) authorised to access and use the System on behalf of the Customer.
"Customer": The legal entity that is to use the System and is registered as a Customer when the Subscription is created.
"System": Software provided by Opisense that makes it easier for businesses to streamline and automate business processes through AI-driven solutions, available at https://opisense.com and https://app.opisense.com.
"Customer data": Data that the Customer uploads or registers in the System.

User agreement

The user agreement (including appendix) is entered into between:

Opisense AS ("Opisense"), organisation number 936 578 195, and the Customer.

The Customer is responsible for any User that the Customer has authorised to use the System.

The Agreement is approved electronically by the Customer when they register in the System, or upon entering into a separate licence agreement with Opisense. Any updates to the Agreement will be communicated to the Customer. The latest version will also always be available at opisense.com/sluttbrukeravtale.

Opisense's obligations, rights and liability

Obligations

Opisense shall deliver the System to the Customer as a service provided via the internet (Software as a Service/SaaS).
Opisense shall not use Customer data to train or fine-tune AI/ML models without the Customer's prior consent or instruction.
Opisense shall offer and further develop the System to the best of its ability.
Opisense shall correct errors in the System to the best of its ability if they occur. The Customer shall be notified depending on the severity of the error, at Opisense's discretion.
Opisense shall endeavour to maintain the System's uptime in accordance with industry standard, but the system may be unavailable and affected by errors or defects for periods. The Customer is notified of any downtime, depending on severity, at Opisense's discretion.
Opisense will assist the Customer with training in the System through chat, documentation and by email to contact@opisense.com. Opisense shall endeavour to answer questions on an ongoing basis, and usually within 2 business days. Support is limited to support for use of the System.

Rights

Opisense sells a Subscription that gives the Customer a limited, non-transferable right to use the System, as set out in this Agreement.
Opisense has all copyright and other intellectual property rights in the System, including all further development.
Opisense has the right to use the Customer's data to the extent necessary to deliver the System to the Customer.
Opisense may from time to time carry out routine maintenance that will result in downtime for the System. To the extent practically possible, Opisense will provide information about unavailability in advance.
Opisense has the right to carry out investigations that are reasonable and necessary to ensure that the System is used in accordance with the Agreement.
Opisense has the right to refuse, freeze or cancel a Subscription and/or block access to the System if the Customer or their Users have breached this Agreement.

Liability

Opisense is not responsible for the accuracy and correctness of content generated by the System. AI-generated content may be inaccurate and misleading and should always be quality assured by a human at the Customer.
Opisense shall be held harmless from all costs and loss if claims are made against Opisense by any of the Customer's third parties as a result of the Customer's use of the System, including information and data that the Customer enters in the System or that is generated in the System. The Customer agrees to hold Opisense harmless.
Any liability of Opisense under this Agreement is limited to direct loss. Opisense is not liable for indirect loss, such as loss of profit, loss due to downtime, loss of data, loss of use and third-party claims. Liability is limited to covering only the Customer's documented financial loss and may not exceed 50% of the consideration the Customer has paid for the System in the 12 months before the loss occurred.

Customer's obligations, rights and liability

Obligations

The Customer is obliged to provide correct information in the System and to ensure that their Users also provide correct information.
To use the System, the Customer and any User must receive electronic communication that is relevant to use of the System, either in the System and/or by email.
The Customer is responsible for ensuring that login information for the Customer's Users and access to the System are not shared with unauthorised persons.
The Customer shall use the System in accordance with applicable legislation, including the Working Environment Act, data protection legislation and other relevant regulation.

Rights

The Customer purchases a Subscription from Opisense that gives the Customer a limited, non-transferable right to use the System, as set out in this Agreement.
The Customer has ownership and intellectual property rights to their own Customer data.
The Customer has the right to change, export and delete their own Customer data in accordance with applicable legislation.
Upon termination of the Agreement, the Customer has the right to have all their own Customer data exported in a structured and machine-readable format.
Upon termination of the Agreement, the Customer has the right to have their own Customer data deleted, and Opisense shall carry out the deletion within a reasonable time after the Customer's written request is received.

Liability

The Customer is responsible for assessing whether the System and/or the information, answers or recommendations they receive through the System are suitable for their needs. The System may be changed at Opisense's sole discretion.
The Customer is responsible for the content and correctness of information entered in the System, as well as for complying with applicable legislation when using the System.
The Customer is responsible for the lawfulness of personal data being uploaded to the System.
The Customer and their Users shall in no way use the System with the intention of creating or contributing to creating competing solutions. If there is suspicion of a breach of this point, Opisense has the right to immediately close the customer's account and terminate the agreement without the Customer being entitled to reimbursement or other compensation.
Any liability of the Customer under this Agreement is limited to direct loss. The Customer is not liable for indirect loss, such as loss of profit, loss of data and third-party claims. Liability is limited to covering only Opisense's documented financial loss and may not exceed 50% of the consideration the Customer has paid for the System in the 12 months before the loss occurred. These limitations do not, however, apply if the Customer has been grossly negligent or acted with intent, or in the event of breach of intellectual property rights such as the System being used in breach of the Terms to develop a competing solution to the System.

Term and termination

Access to the System is offered as a running subscription where the duration of the subscription period is chosen in the System or agreed separately.

The Agreement may be freely terminated by either party with three (3) months' notice, unless otherwise agreed. The notice period is calculated from the first day of the month following the sending of written notice of termination. If the notice period overlaps with a new subscription period, the Customer will only be invoiced for the subscription up to the end of the notice period. Where the subscription period is less than three (3) months, the notice period applies for an equal period to the subscription period.

Price and payment terms

The price for the Subscription is set out in the System and applies per undertaking, unless otherwise agreed separately. Prices are quoted exclusive of VAT.

Opisense has the right to change the price and pricing model for the Subscription. The Customer shall be informed with 3 (three) months' notice of price changes that exceed changes in the consumer price index.

Opisense invoices for the Subscription in advance, unless otherwise agreed separately. Invoicing is with 14 days' payment deadline from the invoice date. Opisense does not refund subscription costs already paid.

In the event of late payment, Opisense reserves the right to temporarily limit access to the System until full payment is received. In such cases Opisense may also charge interest on arrears in accordance with applicable regulations. The Customer remains responsible for completing payment for the subscription, and Opisense may use alternative payment methods for collection of outstanding amounts.

Confidentiality

The parties shall not exploit, give access to or disclose information etc. that must be considered confidential to the other party. This includes, among other things, information about customers, business matters, technology, functionality, new functionality, user interface, access, costs and revenue, marketing plans and working methods etc. The parties shall treat the information with a sufficient degree of confidentiality to maintain, retain and protect the information. The confidentiality requirement applies both while the Agreement is in force and thereafter. If a party is in doubt as to whether information is confidential, the other party shall be asked before the information is exploited, disclosed, given access etc. As a main rule, all information entered in the system shall be considered confidential unless it is publicly available.

Confidentiality does not cover information that is necessary for the exercise of rights and obligations under the Agreement or for managing the relationship under the Agreement.

Miscellaneous

The parties shall endeavour to resolve any conflicts or disagreements through negotiations. Disputes that may arise and that are not resolved through negotiations within a reasonable time (no more than 60 days) shall be decided under Norwegian law with Trondheim District Court as venue.

The Agreement may be assigned in connection with, for example, mergers or company acquisitions/sales.

Contact Opisense at contact@opisense.com if you have questions about this Agreement.

Data Processing Agreement (appendix)

Last updated: 2025-11-15

Between the Customer, as set out above in the Agreement of which this data processing agreement forms part ("Data Controller") and Opisense AS ("Data Processor"), agreement on the processing of personal data ("the Data Processing Agreement") that the Data Processor shall carry out for the Data Controller as a result of the Agreement.

Purpose of the Data Processing Agreement

The Data Processor processes personal data on behalf of the Data Controller on the basis set out above.

The purpose of the processing is to deliver the System as described in the Agreement. Furthermore, the data shall give the Data Controller the opportunity to use the System for their business purposes.

The duration of the processing, the nature of the processing, the types of personal data to be processed and the categories of data subjects follow from appendices to the Data Processing Agreement.

The Data Processing Agreement shall ensure that personal data is processed in accordance with the requirements for processing of personal data applicable at any time, including the Norwegian Personal Data Act, GDPR, other Norwegian law with associated regulations that are relevant to the processing of personal data, and legislation that subsequently replaces the said legislation ("Data Protection Legislation").

The Data Processor shall process the personal data in the manner described in the Data Processing Agreement, and in other ways if this is agreed in writing between the Data Processor and the Data Controller.

Terms and definitions used in the Data Processing Agreement shall be understood in the same way as in the Data Protection Legislation.

Data Processor's obligations

The Data Processor confirms that it will implement appropriate technical and organisational measures that ensure that all processing under this Data Processing Agreement meets the requirements of the Data Protection Legislation and protection of the data subject's rights, including meeting all requirements under Article 32 of the General Data Protection Regulation. See also further obligations in the section on "Security and breaches" below.

The Data Processor shall only process the personal data on the basis of documented instructions from the Data Controller. The Data Processor shall at all times be able to document such instructions. The Data Processor shall not process personal data that the Data Processor has access to in any way other than what is necessary to carry out the processing that the Data Processor is to perform for the Data Controller.

The Data Processor shall assist the Data Controller in responding to requests from data subjects. The Data Processor shall keep a record of processing activities. The Data Processor shall make available to the Data Controller all information necessary to demonstrate that the obligations have been fulfilled, and enable audits. The Data Processor has a duty of confidentiality. The Data Processor shall not disclose information to others without explicit instruction from the Data Controller. If the Data Processor is of the opinion that an instruction is in conflict with the Data Protection Legislation, the Data Processor shall immediately notify the Data Controller.

Data Controller's obligations and rights

The Data Controller is responsible for ensuring that personal data is processed in accordance with the Data Protection Legislation and shall give the Data Processor documented instructions. The Data Controller has the right to terminate the Data Processing Agreement if the Data Processor no longer meets the requirements of Article 28(1) of the General Data Protection Regulation.

Use of sub-processors

The Data Processor shall only use sub-processors (sub-data processors) that are approved in writing by the Data Controller. Approved sub-data processors are specified in appendices. The Data Controller gives general consent to the use of sub-data processors. For new or other sub-data processors, the Data Processor shall give at least four weeks' notice. Current sub-data processors: opisense.com/juridisk/underdatabehandlere. The same obligations are imposed on sub-data processors; the Data Processor has full responsibility to the Data Controller for the sub-data processor fulfilling its obligations.

Security and breaches

The Data Processor shall meet the requirements for security measures under the Data Protection Legislation and industry standards, and be able to document procedures. In the event of security or data protection breaches, the Data Controller shall be notified without undue delay; the notification shall at minimum contain what follows from Article 33(3) of the General Data Protection Regulation. The Data Controller is responsible for notification to the supervisory authority; the Data Processor is given the right to contact the supervisory authority in the event of breaches.

Transfer to countries outside the EEA (third countries)

Personal data shall only be transferred to third countries on instruction from the Data Controller. The Data Processor shall not transfer or allow persons in third countries to have access without explicit written approval and instruction. Transfer requires that requirements for security and protection are satisfied.

Duration of the Data Processing Agreement, order to cease, obligations upon termination

The DPA applies for as long as the Data Processor processes or has access to personal data on behalf of the Data Controller. In the event of breach, the Data Controller may order cessation with immediate effect. The Data Processor deletes or returns all personal data in accordance with the Data Controller's instructions and deletes copies; the Data Controller shall receive written confirmation.

Other obligations and rights

Other obligations and rights follow from the Agreement. The same contact persons apply.

Appendix: Description of processing of personal data

Purpose: Give the Data Controller access to the System and use services under the Agreement.

Duration: For as long as services are provided and thereafter up to 12 months (deletion of undertaking/user with physical deletion up to 12 months after logical deletion; backup up to 3 months; log data 3 years). Contact the Data Processor in writing for faster deletion for special reasons.

Nature of processing: All processing necessitated by the Agreement.

Types of personal data: Name and contact details (users, employees, customers, suppliers), activities in Opisense, free text in documents/fields, technical data (security logs, IP, activity recording).

Categories of data subjects: Users, the Customer's employees, contact persons at customers/suppliers/partners, others who may be identified in information in the System.

Sub-data processors: See opisense.com/juridisk/underdatabehandlere.

Security measures: Encryption (all communication and production data encrypted); passwords are not stored in plain text, only secure hash; limited employee access; servers in Norway (ISO 27001:2013, ISO 9001:2015); two-factor authentication on operational services and available for customers on login.