OpenDataRoom

Terms of service — invited pilot

Service commitments, security boundaries and your rights when using OpenDataRoom.

Draft for review — invited pilot. This page has not been adopted as general commercial terms. Operator details and the final agreement will be confirmed before paid subscriptions open.

The service

OpenDataRoom helps you keep selected documents together, authorise compatible AI applications to retrieve them and review requests received by our service. You choose the material and access permissions. Your chosen AI service is provided separately and has its own terms.

Optional owner-operated assistance

If enabled for a pack, explicit questions and agent responses are separate communications. The owner supplies and runs the agent, controls its source policy and selects a disclosed retention period. OpenDataRoom does not provide the agent, model-provider account or independent verification of its research. The owner must review answers before release. Existing recipient permissions and deadlines continue to apply. Submitted requests cannot guarantee immediate attention or stop external work already underway.

Our service commitments

We will provide the service with reasonable care and skill and maintain technical and organisational measures appropriate to the personal data we process and the risks involved. We will handle security incidents and make notifications where required by applicable law.

Security and availability

Security measures reduce risk but cannot eliminate it. We do not guarantee that the service will be uninterrupted, error-free or free from vulnerabilities, unauthorised access, hacking, loss or corruption of data. A subscription does not include insurance cover or a promise to reimburse losses simply because a security incident occurs. These statements do not remove our service commitments or exclude liability that cannot lawfully be excluded.

Your account and material

Upload only material you are entitled to use and share. Protect your email account, devices and recovery credentials, review the recipients and permissions you approve, and retain copies of important originals. Tell us promptly if you suspect unauthorised access. Company administration does not, by itself, authorise access to another member’s private encrypted material.

Lawful and non-malicious uploads

You are responsible for the material you upload and share, including ensuring that its possession, upload and intended sharing are lawful and that you have the necessary rights and permissions. Do not upload or share illegal material, viruses, ransomware, trojans or other malicious code, or material intended to compromise devices, accounts or services. Take reasonable precautions before uploading, including checking files from unfamiliar sources with up-to-date security software.

If you suspect a file is malicious or unlawfully shared, stop sharing it, revoke access where available and report its support reference to us promptly. Do not email us the suspected file or your decryption key. We may restrict access or suspend use where reasonably necessary to address suspected abuse, protect users or comply with law. Your responsibilities do not replace our own service commitments or legal obligations.

File checks and malware

Supported file-type, readable-text and size checks are not an antivirus scan or a guarantee that a file is safe. We do not currently provide malware scanning or certify uploads as malware-free. We cannot inspect the contents of your private encrypted files without decryption. Preparing text for AI access does not remove malicious content from an original file. Keep your devices and document readers updated, and scan downloaded originals before opening them.

Files and AI access

Your private library is encrypted in your browser. When you approve a separate hosted access copy, our service can decrypt that copy to answer authorised requests, and the receiving AI obtains the content it retrieves. Expiry and revocation stop future access; they cannot recall copies already received. If every copy of a private recovery key is lost, email verification alone cannot decrypt that material.

The request record

The ledger records activity visible to OpenDataRoom, including MCP requests and responses prepared by our server. It does not establish that a person read the material, that an AI relied on it or what happened elsewhere in an AI conversation. The current pilot’s retention periods are described in the privacy notice and account interface. A future retention policy will be identified before it applies; this draft does not activate an archive service or extend an existing deadline.

Your rights

Nothing in these terms excludes or limits liability for fraud or fraudulent misrepresentation, death or personal injury caused by negligence, or any other liability that cannot lawfully be excluded or limited. These terms do not remove applicable statutory consumer rights or our obligations under data-protection law.

Questions and incident reports

Contact amir@i2ntelligence.com. Include the relevant support reference where available. Do not send private recovery keys, passwords or verification codes.

A real MCP connection

Ask your AI about OpenDataRoom.

Public information only. This connection cannot access customer files.

Opening this sample records a unique launch reference. Its requests, search text and document metadata are kept for 30 days for the OpenDataRoom operator. Anonymous means unidentified—not unlogged. Do not enter personal or confidential information.