Applies to the ARX website and, unless a separate agreement provides otherwise, to use of the ARX platform.

Last updated: 1 October 2026

1. About these Terms

These Terms of Use (the Terms) govern the use of the ARX website, demonstration environment, API and software platform (together, the Services) provided by UAB “Prodest”, legal entity code 304063823, VAT number LT100009510819, registered office at Guobų g. 19, Puskelnių k., LT-68104 Marijampolė Municipality, Lithuania (Prodest, we, us or our).

By using the Website or the Services, the user confirms that they have read these Terms. If the Services are provided under a separate order form, services agreement, licence agreement, data processing agreement (DPA) or other written agreement with the customer, the provisions of that agreement shall prevail to the extent they conflict with these Terms.

2. Purpose of ARX

ARX is an anti-money laundering and financial crime prevention technology platform intended for business and professional use. It may include transaction monitoring, customer screening, alert generation, investigation and case management, audit trails, reporting, API integrations and other related functionality.

Signals, risk indicators, AI-generated alerts, summaries or other outputs provided by ARX are supporting information only. They do not in themselves constitute a legal conclusion, regulatory approval or a guarantee that any particular activity is lawful, unlawful, suspicious or non-suspicious. The customer remains responsible for its legal and regulatory obligations, final investigation decisions and the filing of reports with competent authorities.

3. Accounts and Authorised Users

The customer is responsible for ensuring that access to ARX is granted only to its duly authorised users. Users must protect their login credentials, must not use shared accounts where this is not permitted, and must promptly notify the customer or Prodest of any suspected unauthorised access.

The customer is responsible for the actions of its users within the Services, the permissions granted to them and the review of access rights.

4. Permitted Use

The Services may be used only for lawful purposes and in compliance with applicable laws, contractual obligations and the organisation’s internal policies.

·       not attempt to circumvent access controls, authentication, usage limits or security measures;

·       not attempt to breach, disrupt or scan ARX infrastructure without authorisation;

·       not upload malicious code, unlawful content or data for which the customer does not have a lawful basis;

·       not resell, transfer or sublicense the Services unless expressly permitted by written agreement;

·       not use ARX to create a competing service, copy essential platform functionality or reverse engineer the Services to the extent such restrictions are permitted by applicable law.

5. Customer Data and Responsibility

The customer retains its rights in the data that it or persons acting on its behalf submit to ARX (Customer Data). The customer confirms that it has the right and, where required, an appropriate lawful basis to provide such data to Prodest and to process it within ARX.

Where Prodest processes personal data contained in Customer Data on behalf of the customer, the customer generally acts as the data controller and Prodest as the data processor. Such processing must be governed by a separate data processing agreement or equivalent arrangement in accordance with Article 28 of the GDPR.

6. Artificial Intelligence Features

ARX may use statistical, machine-learning or other AI methods to identify unusual behaviour, anomalies and potential risk patterns and to generate alerts for investigation. Such outputs may be inaccurate, incomplete or require additional context.

The customer must ensure appropriate human oversight and should not make significant decisions solely on the basis of an automated ARX output where applicable law, the customer’s policy or the circumstances of the case require human review.

7. APIs and Integrations

ARX may provide REST APIs, data import mechanisms and integrations with customer or third-party systems. The customer is responsible for the configuration of integrations under its control, the accuracy of data provided and ensuring that integrations are used in accordance with applicable legal and licensing terms.

Third-party services may be subject to separate terms of the relevant providers. Prodest is not responsible for the operation of third-party services to the extent that such services are outside its control.

8. Intellectual Property

All rights in the ARX software, its design, code, models, documentation, trademarks, methodologies and other materials created by Prodest belong to Prodest or its licensors. The customer is granted a limited, non-exclusive and non-transferable right to use the Services for the agreed period and within the agreed scope.

These Terms do not transfer any ownership rights in ARX to the customer other than the expressly granted right of use.

9. Confidentiality

The parties must protect non-public technical, commercial, security and other confidential information and use it only for contractual purposes. The confidentiality obligation does not apply to information that lawfully becomes public, was lawfully known before receipt or must be disclosed under law or at the request of a competent authority.

10. Data Protection and Security

Prodest applies technical and organisational measures designed to protect the data it processes from unauthorised access, loss, alteration or disclosure, taking into account the nature of the processing and the associated risks. Specific security measures, data storage locations, subprocessors and incident-management timeframes may be set out in a separate services agreement or data processing agreement.

The customer is responsible for appropriate management of its users’ access rights, data quality, endpoint security and other security aspects under its control.

11. Activity Logs and Audit Trail

To ensure traceability, security, investigation integrity and system administration, ARX may record user actions, logins, configuration changes, alert and case status changes, assignments, comments, approvals and other actions carried out on the platform. Access to such records depends on the user’s permissions and the agreed scope of functionality.

12. Service Availability, Changes and Maintenance

Prodest may periodically update, improve or modify the Services. Planned maintenance, security work or circumstances beyond Prodest’s control may temporarily affect availability. If a specific service level agreement (SLA) applies to the customer, its provisions shall prevail.

13. Fees and Billing

Fees, subscription period, user or data-volume limits, payment terms and other commercial conditions are set out in an order form, proposal or separate agreement. Unless such agreement provides otherwise, all stated fees are exclusive of applicable taxes, including VAT.

14. Disclaimer of Warranties

Prodest aims to ensure that ARX is reliable and suitable for its agreed purpose; however, to the extent permitted by applicable law, Prodest does not guarantee that the Services will always operate without interruption, that every suspicious transaction will be detected, or that there will be no false positive or false negative results.

ARX does not replace the customer’s legal, compliance, risk-management or professional judgement.

15. Limitation of Liability

To the extent permitted by applicable law and unless a separate agreement provides otherwise, Prodest shall not be liable for indirect or consequential losses, lost profits, lost business opportunities or loss of data, except where such liability cannot lawfully be limited.

Unless a separate agreement provides otherwise, Prodest’s total contractual liability in connection with the Services shall not exceed the fees actually paid by the customer for the relevant Services during the 2 months preceding the event giving rise to the claim. This limitation does not apply to the extent that its application is prohibited by mandatory law.

16. Suspension and Termination

Prodest may temporarily restrict access if it reasonably believes that use of the Services creates a security risk, violates the law, these Terms or the rights of others, or if the customer fails to meet material payment or security obligations. Where possible, the customer will be notified in advance.

The procedure for termination of the agreement or subscription, data export and deletion is governed by the separate agreement and data processing terms.

17. Changes to these Terms

Prodest may update these Terms when the Services, applicable laws or business processes change. Material changes will be published on the Website and, where reasonably necessary, customers will be notified by other agreed means. The latest version applies from the date stated in it.

18. Governing Law and Disputes

These Terms are governed by the laws of the Republic of Lithuania. Disputes shall first be resolved through negotiations. If no agreement can be reached, the dispute shall be resolved by the competent court of the Republic of Lithuania, unless a separate agreement or mandatory law provides otherwise.

19. Contact Details

UAB “Prodest”