Underwrit Software Licence

Underwrit Software Licence Version 1.1 Copyright (c) 2026 CAID LLC. All rights reserved. Effective 28 October 2026. This licence is granted by CAID LLC, a Georgia limited liability company. Where this licence refers to Underwrit as a party (granting, issuing, deciding or receiving notice), it means CAID LLC. This licence covers the software published as the "underwrit" Python package, the Underwrit container images and Helm chart, the Underwrit console, and any other Underwrit software that refers to it (the "Software"). The files listed in NOTICE under "MIT" are not covered by this licence; they are under the MIT License in LICENSE-MIT. 1. Grant Subject to these terms, Underwrit grants you a worldwide, non-exclusive, non-transferable, non-sublicensable licence to install and use the Software for your own internal business purposes: (a) Free Edition. Without a Licence Key or Subscription, for one team and one environment. A "team" is one organisation's set of members and roles (a tenant). An "environment" is one data plane deployment, however many replicas share it. (b) Paid Editions. With a valid Licence Key issued by Underwrit, or while you hold an active Underwrit Cloud Subscription, to the extent the Licence Key or the Subscription's plan states (teams, environments, features and term). No fee is payable for the Free Edition. Paid Editions are subject to the order form or online terms under which you bought them, which prevail over this licence where they conflict. 2. Restrictions You may not, and may not allow anyone else to: (a) copy, distribute, sell, lease, lend or sublicense the Software, except copies needed to run it as permitted in section 1 and reasonable backups; (b) provide the Software, or any substantial part of its functionality, to third parties as a hosted, managed or embedded service; (c) move, change, disable or circumvent the licence check, the Licence Key mechanism, the build integrity check, or the limits in section 1, or use a Licence Key not issued to you; (d) modify the Software or create derivative works of it, except configuration and policy files the Software is designed to read; (e) reverse engineer, decompile or disassemble the Software, except to the extent applicable law expressly permits it despite this restriction; (f) remove or alter any licence, copyright or other notice in the Software; or (g) use the Software to build a competing product or service; or (h) alter, suppress or falsify the build statement the Software writes into evidence, its build manifest, or a check-in report, or cause the Software to state an edition, licence, usage count or build status that is not true. Anti-circumvention. Section 2(c) and 2(h) apply to any means, including editing the Software's files, replacing or patching them at runtime, intercepting or forging the Software's network requests, and supplying a modified copy to someone else. Running a copy that reports itself as modified is not a breach in itself; using such a copy to exceed section 1 is. The Software is distributed in a form that may be human-readable (for example, Python source in a wheel). That does not grant any right beyond this licence. 3. Ownership The Software is licensed, not sold. Underwrit and its licensors keep all rights, title and interest in it, including all intellectual property rights. All rights not expressly granted are reserved. 4. Your data The Software runs on infrastructure you control. Underwrit claims no rights in the data, policies or evidence you process with it. Evidence bundles the Software produces are yours, and the verifier embedded in each bundle is MIT licensed. 5. Feedback If you give Underwrit suggestions or feedback, Underwrit may use them without obligation to you. 6. Third-party components The Software includes or depends on third-party components under their own licences. Those licences govern those components. 7. Check-in Once a day the Software sends Underwrit a short report: an install identifier derived from its public key, its role, node name, version, edition, Licence Key identifier, the limits that apply, the number of teams and environments it counts, and its build status and build hash. It sends nothing about your agents, decisions, policies, evidence or users. docs/LICENSING.md lists the fields. You may switch it off (UNDERWRIT_CHECKIN=off); if you do, section 8 is how Underwrit verifies use. 8. Verification and audit (a) On request, no more than once in any twelve months, you will within 30 days give Underwrit a written statement, signed by an authorised officer, of the number of teams and environments on which you run the Software, with the records reasonably needed to support it (for example the Software's own usage and evidence output). (b) If that statement or Underwrit's reasonable information indicates use beyond section 1, Underwrit may, on 30 days' written notice and during business hours, have an independent auditor bound by confidentiality verify your use. Underwrit pays for the audit unless it finds use beyond your entitlement of more than five percent, in which case you pay its reasonable cost. (c) For any use beyond your entitlement, however discovered, you will pay Underwrit's list fees then current for that use, for the whole period of the excess use, within 30 days of invoice. Paying them does not cure a breach of section 2(c) or 2(h). 9. Term and termination This licence lasts until terminated. It terminates automatically if you breach it and do not cure the breach within 30 days of notice from Underwrit. A breach of section 2(c) or 2(h) terminates it on notice, without a cure period. A Paid Edition right ends when its Licence Key expires or its Subscription ends, after which the Free Edition terms apply. On termination you must stop using the Software and delete all copies, except that you may keep and use evidence bundles and the MIT verifier. Sections 2, 3, 8(c) and 9 to 13 survive termination, as do fees owed under section 8. Remedies. A breach of section 2 would cause Underwrit harm that money alone may not repair, so Underwrit may seek an injunction or other equitable relief, without posting a bond where the law allows, in addition to any other remedy. In any action to enforce this licence the prevailing party may recover its reasonable attorneys' fees and costs. 10. No warranty THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE AND NON-INFRINGEMENT, EXCEPT AS A PAID EDITION'S ORDER FORM EXPRESSLY STATES. 11. Limitation of liability TO THE MAXIMUM EXTENT PERMITTED BY LAW, UNDERWRIT WILL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL OR PUNITIVE DAMAGES, OR LOST PROFITS, REVENUE OR DATA, ARISING OUT OF OR RELATING TO THE SOFTWARE. FOR THE FREE EDITION, UNDERWRIT'S TOTAL LIABILITY IS ZERO TO THE EXTENT PERMITTED BY LAW; FOR A PAID EDITION, IT IS LIMITED AS ITS ORDER FORM STATES. 12. General This licence is governed by the laws of the State of Georgia, USA, excluding its conflict-of-laws rules. The state and federal courts located in Georgia have exclusive jurisdiction over any dispute arising out of or relating to this licence, and you consent to their jurisdiction. You must comply with applicable export control and sanctions laws. If any part of this licence is unenforceable, the rest remains in effect. Underwrit may publish new versions of this licence; a new version applies to releases that carry it. 13. Notices Notices to Underwrit go to admin@underwrit.io. Underwrit may give you notice at the email address associated with your account or Licence Key, or, for the Free Edition, at any address it reasonably believes reaches you. Contact: admin@underwrit.io