These Sandbox Terms govern your access to and use of the Neosapients Sandbox. By creating a Sandbox account, ticking the acceptance box, or accessing the Sandbox, you agree to these Sandbox Terms. If you access the Sandbox on behalf of an organization, you agree to them on behalf of that organization, and "you" includes that organization. "We", "us" and "our" mean Neosapients, Inc. and its affiliates.

These Sandbox Terms supplement our Terms of Use , our Terms of Business  and our Privacy Policy. If there is a conflict between these Sandbox Terms and the Terms of Use or the Terms of Business in relation to the Sandbox, these Sandbox Terms prevail. A signed Order Form that expressly covers your use of the Sandbox prevails over these Sandbox Terms.

1. Definitions

"Sandbox" means the free, non-production evaluation environment of the Platform that we make available for you to explore, build, test and monitor workflows, Digital Workers and agents.

"Sandbox Content" means any data, files, prompts, configurations, workflows, Digital Workers, agents and other content that you upload, connect, create or process in the Sandbox, including any Platform Output and any data the Sandbox derives or generates from it, such as indexed text segments and embeddings, metadata catalogue entries, agent memory, execution traces and logs, and decision, outcome and review records.

"Permitted Test Data" means

(a) synthetic data that was generated artificially and does not relate to any real individual or organization;

(b) information that is lawfully and publicly available and is not personal data; and

(c) data that has been anonymized so that no individual can be identified by any means reasonably likely to be used.

Data that has only been masked, tokenized or pseudonymized, where re-identification remains possible, is not Permitted Test Data.

"Connected Service" means any third-party application, system or account that you connect to the Sandbox, including through OAuth, API keys or other credentials.

"Prohibited Data" has the meaning given in Section 3. Capitalized terms not defined here have the meanings given in the Terms of Business.

2. Nature of the Sandbox

2.1 The Sandbox is provided free of charge for evaluation, learning and testing only. It is not intended for production use, for processing real personal data, or for any regulated or business-critical activity.

2.2 The Sandbox is provided without any service level, support commitment, data backup or availability commitment. Features may be limited, rate-limited, changed or removed at any time.

2.3 Sections 4.3 Performance Warranty, 4.4 Service Level Agreement and 8 Fees & Payment of the Terms of Business, and any Data Processing Addendum or Business Associate Agreement, do not apply to the Sandbox.

2.4 No production-equivalent controls. The Sandbox does not have the security, compliance and regulatory controls of our production Platform. It is outside the scope of our production security certifications, audits and attestations (including our HIPAA and PCI DSS compliance program’s), and is not designed for processing sensitive, regulated or confidential data. We apply reasonable baseline security measures appropriate for Permitted Test Data.

3. Permitted and Prohibited Data

3.1 You may only use Permitted Test Data in the Sandbox.

3.2 You must not upload, connect, input, generate or otherwise process any of the following in the Sandbox ("Prohibited Data"):

(a) Protected Health Information (PHI) as defined under HIPAA, or any other health, medical or genetic data;

(b) biometric identifiers or biometric information, including facial geometry, fingerprints, voiceprints and retina or iris scans;

(c) special category or sensitive personal data, including data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, sex life or sexual orientation, or criminal convictions or offences;

(d) government-issued identification numbers, including social security numbers, passport numbers, driving licence numbers, national identity numbers (including Aadhaar) and tax identification numbers (including PAN);

(e) cardholder data or sensitive authentication data (as defined in the PCI DSS), bank account details or financial account credentials;

(f) personal data of children or of any individual under 18 years of age;

(g) precise geolocation data;

(h) passwords, authentication credentials, secrets or private keys belonging to anyone other than you;

(i) production datasets, or customer, patient or employee records, of any organization;

(j) any other personal data that is not Permitted Test Data;

(k) confidential or proprietary information, including trade secrets, of you or of any third party; and

(l) any data that is subject to export controls, is classified, or is otherwise restricted by law or contract.

(m) Where you provide API keys for tools you add, use test or scoped credentials only. We store them encrypted and delete them under Section 6.

3.3  Our Data Processing Addendum and any Business Associate Agreement do not apply to the Sandbox. To the extent Sandbox Content contains personal data, we process it as your processor solely on your instructions as set out in these Sandbox Terms. We will:

(a) ensure personnel are bound by confidentiality;

(b) apply the measures described in Section 2.4;

(c) use the sub-processors described in Section 6.4;

(d) assist you, where reasonable, with data-subject requests and breach obligations; and

(e) delete Sandbox Content as described in Section 6. Sensitive, confidential or regulated data may only be processed on our production Platform under a signed Order Form and, where applicable, a DPA or BAA.”

3.4 If you become aware that Prohibited Data has been uploaded to or connected with the Sandbox, you must delete it immediately and notify us at [email protected]. On notification, we will delete the affected Sandbox Content, including any data derived from it, within 5 business days.

3.5 To the fullest extent permitted by law, we are not responsible for any loss, disclosure, regulatory consequence or other harm arising from Prohibited Data that you upload or connect in breach of these Sandbox Terms. This does not limit any obligation that applicable law places on us and that cannot be excluded by contract.

4. Your Responsibilities

By using the Sandbox, you represent, warrant and agree that:

(a) you are at least 18 years old and have the legal capacity to accept these Sandbox Terms.

(b) you have all rights, permissions, notices and consents required under applicable law to provide, connect and process your Sandbox Content.

(c) if you use the Sandbox on behalf of, or connect systems or data belonging to, your employer or any other organization, you are authorized by that organization to do so and your use complies with its policies.

(d) your use of each Connected Service complies with that service's terms and permissions

(e) you are solely responsible for your Sandbox Content and for all activity under your Sandbox account, including keeping your credentials secure

(f) you are not located in a sanctioned country or listed as a restricted party under applicable export control or sanctions laws.

5. Our Rights

5.1 We may, but are not obliged to, use automated and manual means to detect, review, block, quarantine, remove or delete Sandbox Content that we reasonably believe contains Prohibited Data or otherwise breaches these Sandbox Terms.

5.2 We may suspend or terminate your access to the Sandbox, in whole or in part, at any time and without prior notice, including where we reasonably suspect a breach of these Sandbox Terms, a security risk or unlawful use.

5.3 Our failure to detect, block or remove Prohibited Data does not mean that we have accepted it, consented to its processing, or assumed any obligation in relation to it.

5.4 If we become aware of a security incident affecting Sandbox Content, we will notify affected users where required by applicable law.

6. Retention, Deletion and Location

6.1 Sandbox Content is permanently deleted 90 days after it is created or uploaded, or after 45 consecutive days of inactivity on your Sandbox account, whichever occurs first. Deletion extends to all data derived from Sandbox Content, including indexed segments, embeddings, metadata entries, agent memory, traces and decision records. We may also reset the Sandbox environment at any time.

6.2 Sandbox Content is not backed up and cannot be recovered after deletion. You are responsible for exporting anything you wish to keep before it is deleted.

6.3 We do not use Sandbox Content or any data derived from it to train, retrain or fine-tune AI models. Our handling of your account and usage information is described in our Privacy Policy.

6.4 The Sandbox is hosted on Amazon Web Services in US East. Sandbox Content may be processed by the AI and model-inference providers listed at neosapients.ai/subprocessors, which may be located in other countries. These include providers of model inference, embedding generation and managed agent-memory services.

6.5 Sandbox Content is not migrated to production unless you request it under a signed Order Form. Production terms, including any DPA or BAA, apply only from migration.

7. Agents, Workflows and Connected Services

7.1 You are solely responsible for configuring the agents, Digital Workers and workflows you build in the Sandbox, including the permissions you grant them, and for all actions they take, including in Connected Services.

7.2 AI-driven agents may behave unpredictably, may produce inaccurate output and may be manipulated by malicious content (including prompt injection). Grant only the minimum permissions necessary, review agent actions before relying on them, and do not connect accounts that contain Prohibited Data. Connect only test or demonstration accounts. Real mailboxes, drives and business applications typically contain personal data and must not be connected.

7.3 Connected Services are provided by third parties and are governed by their own terms. We are not responsible for them. You may revoke our access to a Connected Service at any time through Settings > Connections or through that Connected Service.

7.4 We may limit the number, frequency or type of actions that agents can take in the Sandbox.

8. Prohibited Uses

In addition to the restrictions in the Terms of Use and the Terms of Business, you must not use the Sandbox to: make, or materially support, any decision that produces legal or similarly significant effects on an individual; engage in any practice prohibited under the EU Artificial Intelligence Act or any other applicable AI law; monitor, profile or surveil any individual; impersonate any person; send spam or phishing messages; or test, probe or attack the security of the Platform or of any third-party system or develop a competing product, publish benchmarks without our consent, or attempt to extract system prompts, model configurations or other non-public aspects of the Platform

9. Sharing and Templates

9.1 Before you share, publish or export any workflow, agent or template to other users, you must remove all personal data, confidential information and credentials.

9.2 You grant us and other Sandbox users a non-exclusive, royalty-free, worldwide licence to use, copy and adapt any workflow, agent or template that you choose to share, for the purpose of using the Sandbox and the Platform.

10. Sandbox Content and Feedback

10.1 Section 5 User Contributions of the Terms of Use does not apply to Sandbox Content. We use Sandbox Content only to provide, secure and support the Sandbox for you and as described in Section 6.

10.2 If you give us suggestions or feedback about the Sandbox or the Platform, we may use them without restriction or obligation to you.

10.3 You retain your rights in Sandbox Content and we retain all rights in the Platform. We may use aggregated, de-identified statistics about Sandbox usage that contain no Sandbox Content.”

11. Disclaimers

TO THE FULLEST EXTENT PERMITTED BY LAW, THE SANDBOX IS PROVIDED "AS IS" AND "AS AVAILABLE", WITHOUT WARRANTIES OF ANY KIND, WHETHER EXPRESS, IMPLIED OR STATUTORY, INCLUDING ANY WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, NON-INFRINGEMENT, ACCURACY, SECURITY, OR UNINTERRUPTED OR ERROR-FREE OPERATION. PLATFORM OUTPUT GENERATED IN THE SANDBOX MAY BE INACCURATE, INCOMPLETE OR INAPPROPRIATE, AND YOU ARE SOLELY RESPONSIBLE FOR VALIDATING IT BEFORE ANY USE.

12. Limitation of Liability

12.1 Nothing in these Sandbox Terms limits or excludes any liability that cannot be limited or excluded by law.

12.2 Subject to Section 12.1, we will not be liable for any indirect, incidental, special, consequential or punitive damages, or for any loss of profits, revenue, data, goodwill or business opportunity, arising out of or in connection with the Sandbox.

12.3 Subject to Section 12.1, our total aggregate liability arising out of or in connection with the Sandbox, whether in contract, tort (including negligence) or otherwise, will not exceed USD 100.

13. Indemnity

You will defend, indemnify and hold harmless us and our affiliates, officers, employees and agents from and against any claims, losses, liabilities, damages, fines, penalties, costs and expenses (including reasonable legal fees) arising out of or relating to:

(a) your Sandbox Content, including any Prohibited Data;

(b) your use of any Connected Service;

(c) any action taken by an agent, Digital Worker or workflow that you configured; or

(d) your breach of these Sandbox Terms or of applicable law. Where you use the Sandbox on behalf of an organization, that organization is responsible for these obligations together with you.

14. Changes, Suspension and Termination

14.1 We may modify, suspend or discontinue the Sandbox, or update these Sandbox Terms, at any time. Where changes are material, we will notify you by email or within the Sandbox at least 7 days before they take effect. Continued use after that date means you accept the updated Sandbox Terms.

14.2 Sections 3.5, 4, 5.3, 10, 11, 12, 13 and 15 survive termination.

15. Governing Law and Consumer Rights

15.1 The dispute resolution, governing law and jurisdiction provisions of the Terms of Business apply to these Sandbox Terms.

15.2 If you use the Sandbox as a consumer, nothing in these Sandbox Terms affects any rights you have under mandatory consumer protection laws of your country of residence.

16. Contact and Reporting

Questions about these Sandbox Terms: [email protected].

Privacy requests: [email protected] or https://trust.neosapients.ai/your-data.

To report Prohibited Data, abuse or a security vulnerability: [email protected].

We aim to acknowledge reports within 2 business days.