Terms of Service

Draft, pending counsel review — not yet effective. Version 2026-07-22, last updated 2026-07-22.

These Terms of Service (the “Terms”) are an agreement between you and Hanzo AI, Inc., a Delaware corporation (“Hanzo,” “we,” “us,” or “our”). They govern your access to and use of hanzo.ai, the Hanzo Console, Hanzo APIs and SDKs, Enso and other AI services, hosted models, agents, tools, benchmark and research services, software, websites, and related products that reference these Terms (collectively, the “Services”).

These Terms incorporate our Acceptable Use Policy, Privacy Policy, and any order form, service-specific terms, Data Processing Addendum (“DPA”), or other written agreement that applies to your use. If an order form or negotiated agreement conflicts with these Terms, that agreement controls for the conflicting subject matter.

1. Hanzo and the Services

Hanzo provides an AI cloud and research platform. Depending on the feature and configuration you select, the Services may:

• host or provide access to Hanzo, open-source, or third-party AI models;
• use Enso to select among models, providers, prompts, reasoning strategies, tools, samples, verifiers, or workflows;
• send a request to one or more model providers or infrastructure providers;
• generate text, code, images, audio, video, embeddings, rankings, or other content;
• operate tools, connectors, agents, or external systems at your direction;
• execute benchmarks, evaluations, safety tests, and research experiments; or
• offer optional programs through which eligible data may be contributed to private research or a public dataset.

The model or workflow used for a request may vary based on availability, quality settings, cost, latency, safety, geography, customer configuration, or other factors. A displayed Hanzo or Enso service name may therefore represent a routed or composed service rather than one underlying model.

2. Eligibility and accounts

You must be at least 18 years old and legally capable of entering into these Terms. The Services are not directed to children. A school, parent, or other organization may not provide the Services to minors without a separate written agreement with Hanzo that addresses parental authorization and applicable student and children’s privacy laws.

You must provide accurate account information, keep credentials and API keys secure, and promptly notify [email protected] of suspected compromise. You are responsible for activity under your account and for establishing appropriate permissions for your users.

If you use an organization-controlled email address or join an organization workspace, the organization may administer your account, access or control workspace content, configure retention and training settings, and suspend or terminate access. The organization is responsible for informing its users of that control.

3. Consumer and business use

3.1 Individual use

If you use the Services in an individual capacity, these Terms govern your use unless service-specific consumer terms apply. Your statutory consumer rights remain unaffected.

3.2 Business, API, and organization use

If you use the Console, an API key, an organization workspace, or the Services for a company or other entity, you represent that you have authority to bind that entity. “Customer” then means that entity.

For business Services, Customer is responsible for its users, applications, end-user notices, lawful bases, permissions, and instructions. The DPA applies when Hanzo processes personal data on Customer’s behalf.

Business and API Customer Content is not used to train generalized Hanzo models or routers by default. Such use requires a separate, affirmative research-data election by an authorized organization administrator or a written agreement. Service telemetry that does not contain Customer Content may be used to operate, secure, measure, and improve the Services as described in the Privacy Policy and DPA.

4. Inputs, outputs, actions, and customer content

“Input” means content, data, instructions, files, prompts, media, or information submitted to or accessed by the Services at your direction. “Output” means content generated by the Services. “Action” means an operation the Services perform in an external or internal system. Inputs, Outputs, tool traces, and related materials are collectively “Customer Content” when associated with your use.

4.1 Ownership

As between you and Hanzo, you retain your rights in Inputs. Subject to these Terms and applicable law, Hanzo assigns to you any rights Hanzo may have in Outputs. This assignment does not transfer rights owned by third parties and does not make an Output unique. Other users may receive similar or identical Outputs.

Hanzo and its licensors retain all rights in the Services, models, routers, software, workflows, evaluation methods, aggregate statistics, system prompts, documentation, and improvements that do not constitute your Customer Content.

4.2 Your permissions and responsibilities

You represent that you have the rights, notices, consents, and lawful authority necessary for Hanzo and its providers to process Inputs, carry out requested Actions, and provide the Services. You must not submit content that unlawfully infringes intellectual property, privacy, publicity, confidentiality, biometric, data-protection, or other rights.

Unless Hanzo has signed an applicable BAA or specialized agreement, do not submit protected health information, payment-card data, classified information, export-controlled technical data, student education records, criminal-justice information, or other regulated data requiring special contractual safeguards. Do not submit another person’s face, voice, biometric identifier, or likeness for identification, cloning, impersonation, or synthetic-media generation without the legally required permission and disclosures.

4.3 License to provide the Services

You grant Hanzo and its subprocessors a worldwide, non-exclusive, limited license to host, reproduce, transform, transmit, and otherwise process Customer Content only as necessary to provide, secure, support, and comply with law in connection with the Services and your instructions.

This service license is distinct from any optional research or public-contribution license. Declining research participation does not prevent ordinary use of the Services, except for features whose stated purpose is research contribution.

5. Enso routing, model providers, and agents

Enso may analyze an Input and related request metadata to estimate which model, workflow, reasoning strategy, tool, or amount of computation is appropriate. Quality modes may call multiple models, compare candidate responses, run a verifier, resample, or invoke a multi-step workflow. As a result, more than one approved provider may process a request.

We identify material provider categories and subprocessors in our Subprocessor Register. Customer administrators may have configuration controls that restrict eligible providers, regions, retention modes, or model families. Where Hanzo is a processor, approved model and infrastructure providers act as subprocessors unless the parties expressly agree otherwise.

Agents and connectors may take consequential Actions, including reading or modifying files, executing code, accessing external services, or sending communications. You are responsible for reviewing permissions, using least privilege, maintaining backups, supervising high-impact Actions, and independently confirming results before relying on them.

6. AI research, model improvement, and benchmarks

6.1 Service operation versus research

Hanzo may use Customer Content as necessary to deliver, secure, debug, and support the Services. Hanzo will not use Customer Content to train generalized models, Enso Scout, Enso Critic, Enso Controller, Enso Conductor, Enso Genome, or other reusable capability systems unless the applicable user or authorized organization affirmatively enables research use or otherwise agrees in writing.

Research participation is governed by the AI Research and Data Contribution Terms. The setting must be presented separately from acceptance of these Terms and may be withdrawn prospectively. Hanzo will record the applicable consent version and data scope.

Content reviewed to investigate abuse, fraud, safety incidents, or security events may be retained and used for those limited purposes even when research is disabled. It will not be repurposed for generalized model training without the required separate permission.

6.2 Benchmark Arena and provenance registry

The Services may run models against public, licensed, synthetic, or customer-provided benchmark items. You authorize Hanzo to execute, cache, reproduce, store, analyze, compare, and retain standardized evaluation records generated through the Services, including:

• benchmark, dataset, task, and item identifiers;
• benchmark prompts and reference answers where Hanzo has the necessary rights;
• model, provider, endpoint, version, and date;
• system and user prompts, templates, tool definitions, and workflow topology where permitted;
• raw and normalized Outputs, candidate responses, reasoning or tool traces where collection is enabled and lawful;
• correctness, judge, verifier, recovery, damage, disagreement, co-failure, safety, and fault labels;
• seeds, sampling and decoding settings, retries, timeouts, and execution environment;
• token usage, monetary cost, latency, throughput, cache status, and reliability; and
• cryptographic hashes, provenance, consent, license, and reproducibility metadata.

These records are “Benchmark Records.” As between you and Hanzo and to the extent protectable under applicable law, Hanzo owns its compilation, normalization, measurement methodology, aggregate analyses, and Benchmark Records generated by Hanzo, excluding rights that you or a third party retain in underlying prompts, datasets, Inputs, facts, or model Outputs. You grant Hanzo the rights reasonably necessary to create and maintain Benchmark Records from materials you submit or models you authorize Hanzo to test.

Hanzo may retain nonpersonal Benchmark Records and provenance for the life of the registry or research program, including to avoid paying for duplicate runs, reproduce or dispute performance claims, detect model drift, train evaluation systems where permitted, and maintain longitudinal model histories. Personal data embedded in a Benchmark Record remains subject to the Privacy Policy, DPA, consent state, and applicable deletion rights.

Customer-provided benchmark content remains Customer Content and is private by default. Customer may separately authorize publication of identified results or contribution of a dataset. If you ask Hanzo to evaluate a private model, endpoint, dataset, or benchmark, you represent that you have authority to permit the evaluation and the requested level of storage and disclosure.

Subject to provider terms, benchmark licenses, confidentiality obligations, and applicable law, Hanzo may publish comparative scores, leaderboards, methodology, aggregate statistics, faults, replication results, and sufficient provenance to make results reproducible. Hanzo will not publish confidential prompts, private model Outputs, hidden test items, or Customer identity without authority.

User acceptance of these Terms does not create rights that a model provider or benchmark owner has not granted. Hanzo will maintain a Benchmark Rights Registry recording applicable dataset licenses, provider restrictions, publication permissions, attribution requirements, and embargoes. A result may be kept private, redacted, delayed, or removed when the necessary rights are absent or disputed.

Benchmark results describe the specific protocol, model version, date, sample, and environment tested. They are not guarantees of future performance. Hanzo may correct, qualify, or withdraw results when protocols, provider behavior, contamination, faults, or measurement errors are discovered.

6.3 Verified Commons

Private research participation does not authorize public release. Publication to the Hanzo Verified Commons, Hugging Face, or another public repository requires a separate contribution action specifying the data and license. Public release may be difficult or impossible to retract from third-party copies; the contribution flow will explain this before publication.

7. Feedback

You may provide suggestions, ratings, bug reports, or other feedback. Hanzo may use feedback without payment or restriction to improve its products. A rating does not by itself authorize use of the full related conversation for generalized model training; any such use follows your research setting or separate contribution consent.

8. Acceptable use and high-impact applications

You must comply with the Acceptable Use Policy and all applicable laws. You may not use the Services to make fully automated decisions that determine another person’s eligibility for employment, housing, education, credit, insurance, healthcare, legal services, essential government services, or other similarly significant opportunities unless you have a separate written agreement with Hanzo and implement legally required notices, testing, human review, appeal, and risk management.

You must clearly disclose AI interaction or synthetic content when required by law. You may not use synthetic audio, video, images, or text to impersonate, defraud, deceive, harass, or violate another person’s rights. Where legally required, you must preserve Hanzo-provided machine-readable provenance or watermarking information.

9. Output limitations and professional use

AI systems can produce inaccurate, incomplete, outdated, biased, insecure, or offensive Outputs, including plausible-looking errors and nonexistent citations. Routing, voting, verification, or additional computation reduces some errors but does not guarantee correctness.

You must independently evaluate Outputs and Actions for your use case. The Services are not a substitute for licensed medical, legal, financial, accounting, engineering, or other professional advice. Do not rely on Outputs for high-stakes decisions without qualified human review and appropriate independent evidence.

Generated code may contain vulnerabilities or incompatible licenses. You are responsible for testing, security review, attribution, and license compliance before deployment.

10. Third-party services and open-source software

The Services may interoperate with third-party models, APIs, tools, websites, datasets, repositories, or other services. Third-party services may be governed by additional terms and privacy notices. Hanzo is not responsible for third-party services that you independently enable or direct the Services to access.

Open-source components and models remain governed by their applicable licenses. If an open-source license conflicts with these Terms for that component, the open-source license controls for that component.

11. Fees, credits, billing, and subscriptions

You agree to pay applicable subscription, usage, model-provider, tool, storage, and other charges shown at purchase, in the Console, in an order form, or on the pricing page. Usage estimates may differ from final metered charges. Taxes are additional unless stated otherwise.

Prepaid credits are non-transferable, have no cash value, and may expire as disclosed at purchase, except where prohibited by law. We may suspend usage when balances or limits are exhausted.

Subscriptions automatically renew for the disclosed period until canceled. Before purchase, we will clearly disclose the renewal price, frequency, and cancellation method. You may cancel through the same general medium used to subscribe or another easy method we provide. Cancellation takes effect at the end of the paid term unless law or an order form provides otherwise. Payments are non-refundable except as required by law or expressly stated.

We may change future pricing with reasonable notice. Material price increases for recurring consumer subscriptions will receive advance notice required by applicable law.

EEA, UK, and other consumers retain any mandatory withdrawal, refund, or cancellation rights in their jurisdiction. If you request immediate performance during a statutory withdrawal period, we may ask for the legally required express request and acknowledgement and may charge a proportionate amount where permitted.

12. Suspension and termination

You may stop using the Services and close your account at any time, subject to outstanding charges and organization controls. We may limit, suspend, or terminate access when reasonably necessary to address security, legal requirements, nonpayment, material breach, abuse, risk to others or the Services, or discontinuation of a feature.

Where practicable, we will provide notice and an opportunity to appeal. We may act immediately when delay would create material harm, legal exposure, or security risk.

Upon termination, the licenses necessary to provide the Services end, except as required to complete requested transactions, comply with law, resolve disputes, enforce agreements, or honor a valid research or public-contribution license. Data deletion and return are governed by the Privacy Policy, DPA, and applicable order form.

13. Intellectual-property complaints

If you believe content available through the Services infringes your copyright or other rights, send a notice containing the information required by applicable law to [email protected] with the subject “IP Notice.” Hanzo may remove or restrict content and terminate repeat infringers when appropriate. Hanzo will publish a designated DMCA agent and address before these Terms become effective.

14. Confidentiality

For business use, each party may receive nonpublic information that is identified as confidential or should reasonably be understood as confidential. The receiving party will use it only to perform or receive the Services and protect it using reasonable care. Confidential information excludes information lawfully known without restriction, independently developed, rightfully received from another source, or publicly available without breach.

If disclosure is legally required, the receiving party will provide notice when legally permitted and disclose only what is required. Customer Content is Customer confidential information. This section does not replace stronger confidentiality obligations in an order form.

15. Security

Hanzo uses reasonable administrative, technical, and organizational safeguards designed to protect the Services and personal data. No system is completely secure, and Hanzo does not warrant that unauthorized access or loss can never occur. Business security obligations are described in the DPA and applicable order form.

You are responsible for securely configuring accounts, credentials, integrations, agents, data permissions, and applications built on the Services.

16. Disclaimers

TO THE MAXIMUM EXTENT PERMITTED BY LAW, THE SERVICES, OUTPUTS, BENCHMARKS, MODELS, ROUTES, ACTIONS, AND THIRD-PARTY COMPONENTS ARE PROVIDED “AS IS” AND “AS AVAILABLE.” HANZO AND ITS AFFILIATES AND LICENSORS DISCLAIM IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, NON-INFRINGEMENT, ACCURACY, AND QUIET ENJOYMENT, AND WARRANTIES ARISING FROM COURSE OF DEALING OR USAGE OF TRADE.

HANZO DOES NOT WARRANT THAT A PARTICULAR MODEL OR PROVIDER WILL REMAIN AVAILABLE; THAT ROUTING WILL SELECT THE BEST MODEL; THAT OUTPUTS WILL BE CORRECT, UNIQUE, OR NON-INFRINGING; OR THAT ANY BENCHMARK OR PERFORMANCE LEVEL WILL BE MAINTAINED.

Nothing in these Terms excludes warranties or rights that cannot lawfully be excluded.

17. Limitation of liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, NEITHER PARTY WILL BE LIABLE FOR INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES, OR FOR LOST PROFITS, REVENUE, GOODWILL, OR DATA, EVEN IF ADVISED OF THE POSSIBILITY.

EXCEPT FOR EXCLUDED CLAIMS BELOW, EACH PARTY’S AGGREGATE LIABILITY ARISING OUT OF OR RELATING TO THE SERVICES OR THESE TERMS WILL NOT EXCEED THE GREATER OF (A) AMOUNTS PAID OR PAYABLE BY YOU FOR THE SERVICES DURING THE 12 MONTHS BEFORE THE EVENT GIVING RISE TO LIABILITY OR (B) US$100.

The cap and exclusions do not apply to amounts owed, a party’s fraud or willful misconduct, your infringement or misappropriation of Hanzo’s rights, your indemnification obligations, or liability that cannot legally be limited. Consumer rights under mandatory law are not limited.

18. Indemnification

If you use the Services for a business, you will defend and indemnify Hanzo and its affiliates, officers, employees, and agents against third-party claims arising from your Customer Content, applications, Actions, violation of law, violation of these Terms, or infringement of third-party rights. Hanzo will provide prompt notice and reasonable cooperation, and you may control the defense subject to Hanzo’s right to participate and to approve settlements that admit fault or impose obligations on Hanzo.

This section does not apply to individual consumers to the extent prohibited by law.

19. Changes

We may update the Services and these Terms. For material changes, we will provide reasonable advance notice and, where required, request renewed acceptance. We will not retroactively expand permission to use previously collected Customer Content for AI training or public release merely by changing these Terms. A materially broader research purpose requires a new affirmative election where required by law or our stated consent model.

20. General

These Terms and incorporated agreements are the entire agreement regarding the Services. If a provision is unenforceable, it will be modified only as necessary and the remainder remains effective. Failure to enforce a provision is not a waiver. You may not assign these Terms without Hanzo’s consent; Hanzo may assign them in connection with a merger, acquisition, reorganization, or sale of substantially all relevant assets, subject to applicable privacy law.

Neither party is liable for delay caused by events beyond reasonable control, except payment obligations. The parties are independent contractors. There are no third-party beneficiaries except as expressly stated.

The Services are commercial computer software developed at private expense. Export-control and sanctions laws apply. You represent that you are not prohibited from receiving the Services under applicable sanctions or export laws.

21. Governing law and disputes

For business users and to the extent permitted for consumers, California law governs without regard to conflicts rules. The state and federal courts located in San Francisco County, California have exclusive jurisdiction. Before filing a claim, each party will provide written notice and attempt in good faith to resolve the dispute for at least 30 days, except for urgent injunctive relief.

Consumers retain mandatory rights and venues provided by the law of their country or state of residence. Nothing in these Terms deprives an EEA or UK consumer of protections that cannot be waived by contract.

22. Contact

Hanzo AI, Inc.
[CONFIRM REGISTERED/NOTICE ADDRESS BEFORE PUBLICATION]
1828 Golden Gate Avenue
San Francisco, California 94115, USA

• Support: [email protected]
• Legal notices: [email protected]
• Privacy requests: [email protected]
• Security reports: [email protected]

Publication gate: Hanzo must activate and monitor these addresses and publish the incorporated policies, subprocessor register, privacy-request mechanism, and DMCA-agent information before these Terms become effective.