Terms and Conditions

Terms of Service

Last updated: 4 November 2026

Introduction

Checklynx, S.L., Granell Mesado 65, 46013 Valencia, Spain (hereinafter "Service Provider," "we," "us," or "our"), incorporated in Spain (NIF: B22566111), provides AML, sanctions, customer monitoring, transaction screening and compliance decision-support tools designed to support compliance efforts with applicable legal and regulatory requirements.

By accessing or using our services ("Service"), you ("Customer") agree to these Terms of Service. If you do not accept any part of these terms, discontinue using our Service immediately. Your continued use of our Service confirms your agreement to these Terms.

Order of Precedence

These Terms apply to standard self-service use of the Service. If Customer has signed a master services agreement, order form, marketplace private offer, data processing agreement or other written agreement with Checklynx, that written agreement controls over these Terms to the extent of any conflict. A signed Data Processing Addendum controls for the personal-data processing matters it covers. Where an MSA applies, its contractual order of precedence remains in effect. The Data Protection Pack and Technical and Organizational Measures (TOMs) describe operational arrangements and do not override the applicable agreement or a signed Data Processing Addendum.

Modification of Terms

We may modify these Terms from time to time. The most current version of the Terms of Service will be available on our website. Where required by law or where changes are material, we will use reasonable efforts to provide notice through the Service, email, marketplace notice or another appropriate channel.

By accessing or using our Service after updated Terms become effective, you agree to be bound by those changes. If you do not accept the updated Terms, you must stop using the Service.

Privacy Policy

Our Privacy Policy explains how personal data is handled, including when Checklynx acts as controller and when it acts as processor for Customer. Acknowledging that notice does not itself provide consent or a lawful basis for all processing. Customer Data is governed by the processing terms below and any applicable Data Processing Addendum.

Definitions

In these Terms:

• Customer Data means data, content and information, including personal data, uploaded to or processed through the Service by or on behalf of Customer.
• Service Data means data, source information, screening outputs, match information, alerts, reports, metadata and other information made available through or generated by the Service.
• Screening Results means outputs generated by the Service in response to screening inputs, including potential matches, clear results, adverse media indicators, case links, audit events and related evidence.

Description of the Service

The Service provides AML and compliance screening tools through a web-based portal, dashboards, CSV/batch workflows and APIs. The Core AML Screening entitlement is included for active customers and covers sanctions, PEP and adverse-media screening through the dashboard and APIs, including single and batch screening. Optional entitlements depend on the subscribed package, Order Form and tenant configuration:

• AML Screening: Sanctions, politically exposed persons (PEP) and adverse media screening for individuals and entities.
• Dashboard and API Access: Web portal access, dashboards, API keys and REST API endpoints for single screening and integrations.
• Batch and CSV Screening: Batch screening through CSV upload or other supported bulk workflows.
• Optional AI Features: Summarization of screening results in the web portal using OpenAI, only when enabled for Customer. Checklynx’s APIs do not use OpenAI services.
• Optional Customer Ongoing Monitoring: Customer profile screening, monitoring policies, recurring or event-driven checks and review history.
• Optional Transaction Screening: Screening of parties involved in transactions, payments, transfers, orders, remittances or similar business events.

Checklynx may update or modify the Service, provided changes do not materially reduce the core functionality of paid services during the applicable term. Specific features may be restricted or suspended where reasonably necessary for legal, security or abuse-prevention reasons. Beta, preview and evaluation features are provided as is, may be changed or discontinued, and are excluded from service-level commitments unless expressly agreed.

Customer Decisions and Compliance Responsibility

The Service provides screening, workflow, risk and evidence-management tools only. Checklynx does not make legal, regulatory, sanctions, onboarding, offboarding, transaction-release, transaction-hold, suspicious-activity reporting, sanctions reporting or law-enforcement notification decisions for Customer.

Customer remains solely responsible for:

• determining whether and how to use the Service in its compliance program;
• reviewing screening results, AI-assisted outputs, alerts, cases and reports;
• making final onboarding, offboarding, account, transaction, payment, investigation, reporting and escalation decisions;
• complying with applicable laws, regulations, sanctions programs, AML obligations, data protection requirements and internal policies; and
• ensuring it has the necessary rights, notices, lawful basis and permissions to upload and process data through the Service.

AI-Assisted Features

OpenAI is used only to summarize screening results in the web portal when the results-summarization feature is enabled through Customer’s package, Order Form or tenant configuration. Checklynx’s APIs do not use OpenAI services. OpenAI is not used to perform adverse-media searches, classification or analysis.

Only the text needed for the requested summary is submitted to OpenAI. Data submitted to OpenAI is not used for model training. Retention and processing locations depend on the applicable provider agreement and account configuration. If results summarization is disabled, the portal does not send results to OpenAI for summarization; other screening functionality remains available.

AI-assisted outputs are probabilistic and may be incomplete or inaccurate. They support review and are not legal advice, compliance advice, a final regulatory determination or a substitute for Customer review. Customer must review outputs before relying on them or taking action.

Transaction Screening

Transaction Screening enables Customer to screen parties involved in a transaction, payment, transfer, order, remittance or similar business event. A transaction-screening request may include transaction references, transaction type, timestamp, amount, currency, party roles, party names, identity information, external customer identifiers and screening profile configuration.

Transaction Screening does not itself block, release, approve, reject, report or investigate transactions. Customer remains responsible for determining whether to release, hold, reject, investigate, report or otherwise act on a transaction.

Unless expressly stated in product documentation or a written agreement, Transaction Screening does not include real-time payment blocking, automated payment release or hold decisions, webhook-based payment instructions, or a guarantee of detecting all prohibited, suspicious or reportable transactions.

Customer Ongoing Monitoring

Customer Ongoing Monitoring enables Customer to create and manage customer profiles and run recurring or event-driven monitoring checks against those customers. Monitoring frequency, supported sources, screening configuration, customer volumes, alerting behavior and retention periods depend on the applicable account configuration, plan and product documentation.

Customer remains responsible for reviewing monitoring alerts, maintaining customer data accuracy, configuring monitoring policies appropriately and making final compliance decisions based on monitoring results.

Batch and CSV Screening

Batch and CSV screening enables Customer to submit multiple individuals, entities or records for screening through supported bulk workflows. Customer is responsible for ensuring that uploaded files are accurate, properly formatted, lawful to process and uploaded with all required rights, notices, consents or lawful bases.

Batch results may not be real-time. Processing times may vary based on file size, system load, data quality, configuration and third-party services. Checklynx may reject, throttle, suspend or delete malformed, excessive, unlawful, unsupported or abusive uploads.

Data Sources and Screening Limitations

Parallel Web Systems Inc. provides data-retrieval services supporting adverse-media functionality. Only the name of the person or company being searched is submitted to this provider. Passport numbers, other identification numbers, dates of birth, addresses and other customer-provided attributes are not shared with it. Sanctions, PEP, wanted and risk screening do not depend on Parallel Web Systems Inc.

The Service may rely on official, commercial, open-source, regulatory, media or third-party data sources. We do not guarantee that third-party data is complete, error-free, continuously available, fully current or suitable for any particular purpose.

Screening results may include false positives, false negatives, incomplete records, delayed updates, duplicate records, transliteration differences, source coverage gaps, matching errors or data-source errors. Data sources, source availability, update frequency and coverage may change over time. Checklynx does not guarantee detection of all sanctions, PEP, adverse media, transaction, customer or other compliance risks.

Limitations

Customer must not use the Service, Service Data or Screening Results for credit eligibility, employment screening, housing, lending, consumer reporting, marketing, data brokering, or insurance underwriting or eligibility decisions outside the agreed compliance purpose, unless expressly agreed in writing by Checklynx and permitted by applicable law, including the FCRA where applicable.

This restriction does not prohibit lawful AML, sanctions, KYC/KYB, customer screening, transaction screening, monitoring, case-management or related regulatory compliance activities in the insurance or insurance-brokerage sector.

Misuse or unlawful use may constitute a material breach and result in suspension, termination or other remedies under these Terms.

Prohibited Uses

You may use our Service solely for lawful AML, sanctions compliance, KYC/KYB, transaction screening, customer monitoring, case-management and related compliance purposes ("the Purpose"). You agree not to reproduce, reverse-engineer, duplicate, copy, sell, resell or otherwise commercially exploit any portion of the Service, except as expressly permitted in writing by us.

The following activities are strictly prohibited:

• Unlawful Activities:

  • Using the Service for any illegal or unauthorized purpose.
  • Encouraging or engaging in activity that breaches any law, regulation or ordinance.
  • Infringing upon our intellectual property rights or those of a third party.

• Abusive Conduct:

  • Harassing, abusing, defaming, intimidating, discriminating or otherwise harming any individual or group.
  • Submitting false, misleading, deceptive or unlawfully obtained information.

• Malicious Activities:

  • Using robots, spiders, scrapers or automated means to access the Service except through documented APIs within applicable rate limits or as expressly permitted in writing.
  • Introducing malware, performing denial-of-service attacks or attempting to disrupt the Service.

• Data Misuse:

  • Using, disclosing or distributing data obtained from the Service without proper consent or in violation of applicable laws or data use agreements.
  • Using data obtained from the Service outside the agreed compliance purpose, such as marketing, profiling unrelated to compliance, resale or data brokering.

• Security Breach:

  • Attempting to bypass or break our security measures, access controls, rate limits or authentication systems.
  • Using the Service to damage, disable, overburden or impair our infrastructure or third-party infrastructure.

Violations may result in suspension under the Suspension section, termination under the Term and Termination section, and other available legal remedies.

Suspension

Checklynx may suspend or restrict access where reasonably necessary to prevent material security risk, suspected misuse, violation of law, non-payment, excessive usage outside agreed limits, or harm to Checklynx, the Service or third parties. We will use reasonable efforts to limit suspension to the affected account, user, module or functionality. Termination is governed by the Term and Termination section.

Where reasonably practicable and legally permitted, we will provide notice of suspension and an opportunity to remedy the issue. We may act immediately without prior notice where required to protect the Service, comply with law, prevent abuse or address an urgent security, legal or operational risk.

Account Registration and Access

To use our Service, a company must register for an account through a supported registration path:

• Self-Service Registration: Register through our website or application by providing required company and account information.
• Marketplace Customers: Register through AWS Marketplace, Google Cloud Marketplace or another supported marketplace, then complete onboarding through our website or application.
• Company Information: Provide accurate and up-to-date company, billing, administrator and contact details.
• Email Verification: We may send an activation code or verification link to the registered email. The account is activated after successful verification.
• Account Configuration: After verification, configure account settings, manage users, create API keys and set service preferences.

You are responsible for maintaining the confidentiality of account credentials and API keys, ensuring the accuracy of account information and implementing adequate security measures. You are liable for all activities that occur under your account. Each authorized user must use an individual login; shared credentials are prohibited. Remove access when no longer authorized. Report unauthorized access, credential compromise or API key misuse without undue delay, and notify support@checklynx.com within 24 hours of any suspected security incident involving the portal.

Fees and Payment

Fees, included volumes, usage limits and billing metrics are displayed in the applicable pricing page, subscription flow, marketplace listing, order form, private offer or written agreement. Pricing may be based on subscriptions, searches, API calls, screening requests, transaction-screening runs, screened parties, cases, users or another stated metric.

Subscriptions may be cancelled according to the applicable subscription flow, marketplace rules or written agreement. Monthly subscription fees are non-refundable unless otherwise stated in the applicable checkout flow, marketplace terms, order form or written agreement. No refunds or prorations are provided if you terminate mid-cycle unless required by law or expressly agreed in writing.

Price Adjustments

Unless the applicable written agreement states otherwise, Checklynx may adjust standard fees once per calendar year with at least 60 days’ written notice before the next renewal date. Customer may decline the adjustment by giving written notice to terminate the affected services at least 30 days before the adjustment takes effect. Otherwise, adjusted fees apply from the next renewal term.

Payment Terms

Billing may be conducted through Stripe, AWS Marketplace, Google Cloud Marketplace, wire transfer or another billing channel made available by Checklynx or agreed in writing. Payment timing, invoicing, taxes, marketplace rules, failed-payment handling and cancellation mechanics may depend on the selected billing channel.

Payment timing follows the agreed billing channel, subscription, marketplace order or written agreement. Unless that arrangement specifies otherwise, invoices are payable within 30 days. Fees exclude applicable taxes, other than taxes on Checklynx’s net income. Notify Checklynx of disputed charges within 15 days of the invoice date; undisputed amounts remain due. Overdue amounts accrue interest at 1.5% per month or the maximum lawful rate, if lower, calculated daily. Failure to pay undisputed amounts may result in suspension or termination.

Service Availability and Support

Checklynx uses commercially reasonable efforts to achieve 99.9% monthly availability, excluding scheduled maintenance, customer systems or configuration, third-party services outside our control and events beyond our reasonable control. Scheduled maintenance will not exceed 4 hours per calendar month and will be notified at least 48 hours in advance where practicable. Emergency maintenance may occur without full advance notice, with notice as soon as reasonably practicable.

Support response and restoration targets are:

Severity 1 and 2 incidents are eligible for 24/7 escalation; Severity 3 and 4 are handled on Business Days, meaning weekdays other than public holidays in Spain. Response time runs from the incident report until acknowledgement and the start of investigation. Restoration may use a temporary workaround and is measured from acknowledgement of a reproducible incident, subject to Customer cooperation and diagnostic information. These are service objectives and support commitments, not guaranteed service levels or service-credit commitments unless expressly agreed in an Order Form. Contact support@checklynx.com or the designated escalation channel.

Disclaimer of Warranties

Except as expressly stated in these Terms or an applicable written agreement, the Service is provided "as is" and "as available," without warranties of any kind, express or implied, to the fullest extent permitted by law. We do not guarantee uninterrupted, error-free, fully secure or fully current service. You acknowledge the inherent risks of data transmission, storage, third-party services, third-party data sources and internet-based systems.

Nothing in these Terms limits any obligations Checklynx has under applicable data protection law or any separate written data processing agreement that applies to Customer.

Data Protection Roles

Customer is controller and Checklynx is processor for Customer Data processed through the Service, unless otherwise agreed in a signed Data Processing Addendum. Checklynx acts as an independent controller for account, billing, support, website, prospect and business-contact data processed for its own purposes. Customer determines its lawful basis, provides required notices and submits only data it may lawfully process.

Checklynx processes Customer Data only on documented Customer instructions, including these Terms, the applicable Order Form, tenant configuration, API requests, authorized support instructions and any agreed Data Processing Addendum, unless required by applicable law. Customer Data remains Customer’s property. Aggregated and anonymized information may be used for legitimate business purposes, including service improvement, provided no individual Customer Data is disclosed.

Checklynx applies confidentiality obligations and appropriate technical and organizational safeguards described in the Data Protection Pack and TOMs. Checklynx-operated production systems and our storage of Customer Data, logs and backups are hosted exclusively in AWS Europe (Ireland), eu-west-1. External-provider processing is separate: provider agreements and subprocessor disclosures govern processing locations, retention, model-training conditions and lawful international-transfer safeguards. Ireland-only hosting does not mean all external-provider processing occurs in the EEA.

Customer authorizes relevant subprocessors subject to written data-protection obligations no less protective for the relevant processing. We maintain or make available material-subprocessor information through the Data Protection Pack, processing terms or notices. Where required by law or an agreed Data Processing Addendum, we give at least 30 days’ notice before adding a new material subprocessor, with 14 days to object on reasonable data-protection grounds.

Checklynx reasonably assists Customer with data-subject requests, data-protection impact assessments, prior consultation and regulatory enquiries, taking account of the processing and information available. Requests received directly concerning Customer Data are notified promptly to Customer unless prohibited by law. Checklynx notifies Customer within 24 hours of discovery of a personal data breach affecting Customer Data and provides reasonable information and assistance.

Customer may audit compliance with these processing terms once per year on reasonable notice during business hours, without unreasonable disruption or exposure of other customers’ data or confidential information. Appropriate documentation, security summaries, questionnaires or remote review may satisfy audit requests unless an agreed Data Processing Addendum requires otherwise.

Operational retention periods and deletion procedures are set out in the Privacy Policy and Data Protection Pack. On termination or expiration, Checklynx returns Customer Data in a common export format or securely deletes it within 30 days, at Customer’s option. Legal, dispute, security, audit, backup and compliance retention exceptions remain subject to confidentiality and security protections. Daily backups expire within 30 days.

These processing terms apply alongside any agreed Data Processing Addendum, which controls for conflicting personal-data processing terms. Customer-specific processing details are set out in the applicable agreement or agreed implementation plan.

Customer Responsibilities

By using our Service, you acknowledge and agree that:

• You are solely responsible for ensuring compliance with all applicable laws, regulations and internal policies when uploading data or using screening results.
• You will maintain appropriate security controls for systems, users, API keys, CSV files, customer data and integrations under your control.
• You will not upload data unless you have the required rights, notices, consents or lawful basis.
• You will review screening results, AI-assisted outputs, alerts and reports before making decisions.
• If you require additional safeguards, workflows, approvals or controls, you must implement them on your own systems or request them through a written agreement.

Limitation of Liability

Except for the exclusions below, each party’s aggregate liability arising from the Service is limited to fees paid or payable by Customer for the affected services in the 12 months preceding the claim. For monthly, trial or short-term subscriptions, the cap is the greater of that amount or three months of recurring subscription fees.

The cap does not limit Customer’s payment obligations; either party’s liability for fraud, wilful misconduct or liabilities that cannot lawfully be limited; either party’s breach of confidentiality; either party’s infringement or misuse of the other’s intellectual property rights; Customer’s breach of permitted-use restrictions; or liability expressly made uncapped in a signed Order Form or Data Processing Addendum.

Subject to those exclusions, neither party is liable for indirect, incidental, consequential, special, exemplary or punitive damages, loss of profits, revenue, goodwill, anticipated savings or business interruption.

Indemnification

Checklynx will defend Customer against third-party claims that the Service, as provided and used in accordance with these Terms, infringes intellectual property rights, and indemnify Customer for damages and costs finally awarded. If use is enjoined, Checklynx may procure a licence, modify or replace the affected part, or terminate it and refund prepaid unused fees. This obligation excludes claims arising from Customer Data or instructions, unauthorized changes, combinations with non-Checklynx technology, or use outside these Terms or the documentation.

Customer will defend Checklynx against third-party claims arising from Customer Data, misuse, breach of these Terms or violation of applicable law, and indemnify Checklynx for damages and costs finally awarded.

The protected party must give prompt written notice, allow the defending party to control the defence and settlement without an admission of liability without consent, and cooperate reasonably at the defending party’s expense.

Service and Data Warranties

We do not guarantee that the Service, Service Data or screening results will be uninterrupted, accurate, up-to-date, complete or suitable for any particular purpose. You acknowledge that Service Data may not reflect the most current information and may be subject to technical errors, source errors, coverage gaps or disruptions.

Customer remains responsible for decisions made using Service Data, screening results and AI-assisted outputs. Liability in connection with the Service, including interruptions, is governed by the Limitation of Liability section and applicable law.

Third-Party Services

Our Service may integrate with or rely on third-party services, marketplaces, cloud providers, AI providers, data providers and other external systems. We do not control or endorse these external services and do not guarantee their availability, accuracy or coverage. This does not limit Checklynx’s security, data-protection or subprocessor obligations under the Data Protection Roles section, applicable law or an agreed Data Processing Addendum. Customer’s own use of third-party services may be governed by their terms and policies.

Term and Termination

The term and renewal cycle follow the applicable subscription, marketplace order or Order Form. Unless otherwise agreed, the initial term renews for successive periods of the same length unless either party gives at least 30 days’ written notice of non-renewal. Convenience termination during the initial term requires express permission in the applicable arrangement. After the initial term, either party may give at least 30 days’ notice to end the Service at the end of the current term. Subscription and marketplace cancellation mechanics remain subject to the applicable arrangement.

Either party may terminate on written notice for a material breach not remedied within 30 days after notice, or if the other party becomes insolvent, assigns assets for creditors or has a receiver appointed. Immediate protective suspension remains available under the Suspension section.

At termination, access rights end and accrued undisputed fees remain payable. Data return, deletion and retention follow the Data Protection Roles section. Obligations that by their nature must continue survive, including accrued payment, confidentiality, intellectual property, permitted-use restrictions, data protection, liability, indemnification and governing law.

Intellectual Property and Confidentiality

Checklynx retains its rights in the Service, software, APIs, documentation and updates. Subject to these Terms and payment, Customer receives a limited, non-exclusive, non-transferable, non-sublicensable right to use the Service and documentation for its internal business purposes during the term. No ownership transfers. Customer retains its rights in Customer Data.

Each party must use the other’s confidential information only to perform or exercise rights under the applicable agreement, protect it with at least the same care it uses for its own confidential information and no less than reasonable care, and disclose it only to people with a need to know who are bound by confidentiality duties. A party must promptly notify the other of unauthorized use or disclosure. These obligations do not cover information that is public without breach, already lawfully known, lawfully received from another source or independently developed. Legally required disclosure is limited to what is necessary, with prior notice where legally permitted.

Governing Law

These Terms of Service shall be governed by and construed in accordance with the laws of Spain, without regard to conflict of law principles. Any legal action or proceeding related to these Terms shall be brought exclusively in the courts of Madrid, Spain, and you consent to their jurisdiction.