meloki

End User License Agreement (EULA)

Version date: 10 January 2026

These end user license terms (“License Terms”) govern your use of meloki as a user (“end customer”, “you”) vis-à-vis SECUDOS GmbH, Südfeld 9C, 59174 Kamen, Germany (“provider”, “we”).

§ 1 Subject Matter, Scope

1. These License Terms govern the legal relationship between the parties regarding the use of meloki, including related software components, container configurations, administration tools (e.g., “AdminPACK”), documentation, and, where agreed, related maintenance and support services.

2. These License Terms apply worldwide to:

   • provision as an appliance (hardware with preinstalled software),
   • provision as an image/download, where agreed,
   • B2B and B2C use. Mandatory consumer protection rights at the consumer’s habitual residence remain unaffected.

3. Unless otherwise agreed, these License Terms apply in the version valid at the time of ordering, activation, installation, or first use.

4. Legally relevant declarations and notices by the end customer in relation to the contractual relationship (e.g., setting a deadline, notice of defects, termination, withdrawal, reduction) must be made in text form (e.g., email) unless a stricter form is required by law.

5. Deviating, conflicting, or supplementary terms of the end customer become part of the contract only if we expressly agree to their validity in text form. This also applies if we provide services or grant rights of use with knowledge of such terms.

§ 2 Changes to the License Terms

1. B2B: We may change these License Terms with effect for the future if there is an objective reason (e.g., changes in law, security requirements, technical development). We will notify you in text form at least two (2) months before the changes take effect. If you do not object within four (4) weeks of receiving the notice, the changes are deemed accepted. We will point out the right to object and the consequences.

2. B2C: For consumers, changes apply only if permitted by applicable law and reasonable for the consumer. Where required, the consumer’s consent will be obtained.

3. If you object in due time (B2B), the most recently agreed License Terms remain in force until the term of the last acquired license period ends. The right to terminate for cause remains unaffected.

§ 3 Offer and Contract Formation

1. Service descriptions on websites, in documentation, or in marketing materials are non-binding and subject to change unless explicitly designated as a binding offer.

2. Upon request (also via resellers/distributors), you will receive an individual offer in text form. By placing an order, you submit a binding offer to conclude a contract under the conditions stated in the offer.

3. The contract is concluded upon our order confirmation in text form or by handover of the appliance or provision of download/license information, whichever occurs first.

§ 4 Provision, Delivery, Start Date

1. The time of provision results from the order confirmation or the agreed delivery period. The delivery period begins once we have confirmed the order and all information required for performance has been provided.

2. For appliances, provision is deemed completed upon handover to the carrier or delivery in accordance with the agreed delivery terms.

3. The start date of the term is the license start date specified in the offer, invoice, or license management.

§ 5 Rights of Use

1. We grant you a simple, non-exclusive right, limited to the term, non-transferable and non-sublicensable, to install, load, display, run, copy, and store the proprietary components of meloki within the contractually agreed scope.

2. The specific scope of use (e.g., number of appliances/instances/users) results from the offer, order, invoice, or license details. In case of doubt, use is limited to the contractually agreed scope.

3. You may make copies only to the extent technically necessary for the contractual use. In addition, you may create the minimum number of backup copies required and keep them solely for backup purposes. Copyright and protection notices must be retained.

4. Any further rights in open source components arise exclusively from their respective licenses (see § 9).

§ 6 Restrictions on Use, Reverse Engineering, Protection Mechanisms

1. You are prohibited, to the extent permitted by law, from:

   • making proprietary components of meloki available to third parties, renting, lending, sublicensing, or making them publicly accessible,
   • changing or modifying proprietary components or creating derivative works thereof,
   • removing, altering, or suppressing copyright notices, serial numbers, license notices, trademarks, labels, or other identifiers,
   • circumventing or removing copy protection or other protection mechanisms.

2. Reverse engineering (proprietary components): To the extent permitted by law, it is prohibited to decompile, disassemble, reverse engineer, or otherwise analyze the proprietary components in whole or in part in order to disclose source code, internal structures, or protected functionalities.

3. Mandatory exceptions: The restrictions do not apply to the extent and for as long as reverse engineering is mandatorily permitted under applicable law, in particular to achieve interoperability, or actions are expressly permitted by applicable open source licenses.

4. It is prohibited to use or perform devices, software, data, or interventions that are suitable to impair or manipulate the physical or logical structure of the systems and services (including update, signature, or provisioning mechanisms).

§ 7 AI Compliance and Role Allocation under Regulation (EU) 2024/1689 (EU AI Act)

7.1 Purpose of this Section

This section serves to classify the AI platform meloki within the meaning of Regulation (EU) 2024/1689 (“EU AI Act”) and to clearly delineate the roles between:

• SECUDOS GmbH (software provider) and
• Landitec GmbH (hardware and solution provider), as well as the respective end customer.

This section is compliance information and does not replace individual legal advice for the end customer’s specific use cases.

7.2 System Architecture and Product Scope “meloki”

1. meloki is a modular, locally operable AI platform for using large language models (LLMs) in enterprise environments.

2. The software solution is developed and provided by SECUDOS GmbH; meloki is operated on a Linux base (currently standard Debian, optionally DOMOS in the future).

3. Depending on the sales and delivery model, Landitec supplements this software solution with:

   • preconfigured hardware platforms (e.g., scope7 appliances),
   • integration services,
   • installation and commissioning services,
   • support and maintenance offerings,
   • channel management and distribution.

4. meloki is designed as a generic AI infrastructure platform and is not aimed at a specific high-risk application.

7.3 Overall Product Definition “meloki”

Depending on the configuration, meloki may consist of the following components:

a) meloki AdminPACK (software platform)
Developed and provided by SECUDOS GmbH. AdminPACK forms the central management, configuration, and integration layer of the platform.

b) Open Source AI components
Integration of established open source technologies, in particular:

• LLM runtime (e.g., Ollama or comparable runtime environments),
• user interfaces such as Open WebUI,
• automation platforms such as n8n,
• RAG architecture for knowledge integration.
  These components are not developed by SECUDOS or Landitec, but are integrated and configured. Their use is governed by the respective licenses and project terms.

c) Hardware platform (optional as an appliance)
Provided by Landitec GmbH based on the respective system platform (e.g., scope7). The hardware may include:

• server/appliance hardware,
• BIOS configuration,
• preinstallation,
• quality assurance (manufacturing and functional tests),
• support and maintenance options.

7.4 System Nature within the Meaning of the EU AI Act

meloki is to be understood as an integrated technical system in which:

• AI models are provided via open source components,
• control, administration, and integration are performed via AdminPACK,
• the physical infrastructure may optionally be provided by Landitec.
  AI functionality arises from the interaction of these components during operation at the end customer.

7.5 Classification under the EU AI Act

1. Prohibited AI practices (Art. 5):
   meloki does not meet the characteristics of prohibited AI systems under Art. 5 EU AI Act.

2. High-risk AI systems (Art. 6 in conjunction with Annex III):
   meloki is not a high-risk AI system within the meaning of Art. 6 in conjunction with Annex III, in particular because

• no specific high-risk purpose is implemented,
• no automated decisions with legal effect are intended,
• no biometric identification systems are included,
• no safety-critical infrastructures are directly controlled.
  Regulatory classification can arise only from the operator’s specific deployment scenario.

3. System category:
   meloki is to be classified as a general AI infrastructure platform.

7.6 Role Allocation under Art. 3 EU AI Act

1. Role of SECUDOS GmbH:
   SECUDOS is the provider of the AI software platform (AdminPACK) and the associated system integration; SECUDOS is not a provider of foundation models, but integrates third-party models and components under their respective license terms. SECUDOS:

• develops and maintains the software,
• defines the system architecture,
• integrates open source components,
• provides software updates.
  SECUDOS does not develop its own foundation models but integrates existing models.

2. Role of Landitec GmbH:
   Depending on the delivery model, Landitec is:

• provider of a technical overall solution (hardware + integration),

• system integrator.

  Landitec does not develop AI models and does not change the core functionality of the AI software. Landitec in particular provides:

• hardware supply,

• preconfigured installation,

• quality assurance,

• support and maintenance services,

• sales and channel management.
  Landitec is not an operator within the meaning of the EU AI Act.

3. Role of the end customer:
   The respective end customer is the operator (deployer) under Art. 3 EU AI Act, in particular because the end customer:

• determines the specific purpose of use,
• selects and integrates training or content data,
• defines organizational conditions,
• is responsible for use and evaluation of results.

7.7 Risk Assessment (Summary)

1. Technical risks:

• fully on-premises operation is possible,
• no mandatory permanent cloud connection (if applicable, only for initial configuration/updates/obtaining external sources),
• no automatic data transfer to SECUDOS or Landitec,
• no telemetry.

2. Data protection:
   Processing of personal data generally takes place within the operator’s responsibility. SECUDOS and Landitec do not access productive customer data unless explicitly agreed (e.g., in the context of support services).

3. System nature:
   meloki is an assistant system. It does not make autonomous decisions with legal effect. There are no hidden scoring systems or manipulation mechanisms.

7.8 Documentation and Transparency

1. The following documentation is typically available:

• software-related documentation (provided by SECUDOS GmbH),
• hardware and integration documentation (provided by Landitec GmbH, where applicable),
• documentation for open source components according to the respective projects.

2. The end customer is responsible for documenting meloki’s concrete use in a legally compliant manner and for fulfilling any required notices/transparency obligations within the end customer’s own area of responsibility.

§ 8 Software Bill of Materials (SBOM)

1. For all versions and builds, we may provide a Software Bill of Materials (SBOM). It is available in a machine-readable SPDX format.

2. The SBOM contains information about software components included in meloki and their known dependencies at the time of creation.

3. The respective SBOM can be accessed on the system, typically under /usr/share/sbom/ and/or in meloki-specific paths as described in the documentation, if provided.

4. The SBOM is provided solely for transparency, security analysis, and compliance support.

5. To the extent permitted by law, providing an SBOM does not constitute any assurance regarding completeness, freedom from errors, up-to-dateness, or absence of security vulnerabilities and does not give rise to any further warranty or liability claims.

6. There is no obligation to continuously update SBOMs already provided unless expressly agreed or required by law.

§ 9 Free and Open Source Software (FOSS)

1. meloki contains free and open source software (“FOSS components”) under the respective FOSS licenses.

2. Rights of use in FOSS components are granted to you directly by the respective rights holders in accordance with the applicable FOSS licenses. These License Terms do not restrict your rights under FOSS licenses.

3. License texts of the open source components included in meloki are available on the system (under the license paths provided by the respective operating system; under DOMOS typically e.g. /usr/share/licenses) and, where applicable, in meloki-specific directories.

4. Source code offer (GPL components): We will provide the complete source code of GPL-licensed components, including our modifications, upon request. If delivery on a data carrier or shipping is desired or required, we may charge reasonable reimbursement for the data carrier and shipping. The source code will be kept available for at least three (3) years from provision of the respective version.

5. Any support, warranty, liability, or indemnity commitments we provide apply exclusively in the relationship between us and you. The relationship between you and the rights holders of the FOSS components is governed exclusively by the respective FOSS licenses.

6. AI models and other third-party components: AI models used in meloki (e.g., LLMs) as well as other third-party components may be subject to additional, different license and usage terms. You are responsible for complying with these terms, in particular for productive use, sharing outputs, or commercial use.

§ 10 Access Data, Downloads, Telemetry, Updates

1. Where required, we will provide access data, download access, license files, or license keys in text form.

2. You are obliged to keep access data and license information confidential, to protect them from access by third parties, and to act promptly in the event of suspected unauthorized use.

3. No telemetry: meloki does not transmit telemetry or usage data to us. This does not affect technical connections that arise solely from update sources, package repositories, model downloads, or third-party network infrastructure used by you.

4. Updates: We may provide updates, in particular security-relevant updates. Installation and operation are generally your responsibility unless maintenance services have been agreed.

5. Update and source repositories: Where meloki accesses external sources (e.g., Debian or DOMOS repositories, model registries), availability and content of those sources are the responsibility of the respective operators. If we provide our own repositories or update mechanisms, their availability and scope are governed by the service description.

6. Support periods and product lifecycle: If support periods, maintenance windows, release lines, or end-of-life information (EOL/EOS) are stated, they define the framework. Without an explicit commitment, there is no entitlement to updates for a specific duration or frequency.

§ 11 Restriction or Blocking of Use

1. We are entitled to restrict or block the use of meloki and/or related services if

   • you materially breach these License Terms,
   • the use is unlawful or abusive,
   • this is necessary to mitigate security risks or to protect system integrity,
   • we are required to do so by law, authorities, or a court.

2. In the case of planned maintenance work, services may be temporarily restricted. Where reasonable, we will announce maintenance windows with appropriate advance notice.

3. If a block is due to reasons attributable to you, costs for blocking/unblocking may be charged according to the current price list, if agreed and permissible under applicable law. You may prove lower costs.

§ 12 End Customer Responsibility for Content and Operation

1. You are solely responsible for ensuring that you have the necessary rights to use your own or third-party content and that such use is lawful.

2. We are not obliged and are generally not able to review content processed by you for legal violations.

3. You are responsible for all activities carried out via your accounts. Access data must not be shared with third parties. If you suspect unauthorized use, you must inform us without undue delay.

4. You are obliged to implement appropriate IT security measures, in particular regular backups, patch management, access protection, and malware protection. This applies in particular when using container backups/restores.

§ 13 Prices and Payment Terms (where applicable)

1. Unless otherwise agreed, the prices stated in the offer/invoice apply plus statutory VAT (where applicable).

2. Payment periods result from the invoice. In case of late payment, the statutory rules apply.

3. If circumstances become known after contract conclusion that materially impair creditworthiness, we may request appropriate security or refuse performance in accordance with statutory provisions.

§ 14 Assignment, Set-off, Right of Retention

1. Assignment of claims against us is permitted only with our prior consent in text form, unless mandatory law provides otherwise. § 354a of the German Commercial Code (HGB) remains unaffected.

2. Set-off and rights of retention are permitted only with undisputed or legally established claims. For consumers, this applies only to the extent permitted by applicable law.

§ 15 Technical Notices, Documents

1. We may inform you by email about security-critical events, technical changes, and relevant updates. You will provide a suitable contact address and keep it up to date.

2. Documents provided by us (documentation, manuals, service descriptions) remain our property and/or subject to our rights unless otherwise agreed. Disclosure to third parties is permitted only with prior consent in text form, unless mandatory law provides otherwise.

§ 16 Term, Termination, End of Use

1. The term results from the offer/order/invoice or license details. Unless otherwise agreed, the initial term is twelve (12) months and is extended by twelve (12) months each unless terminated with three (3) months’ notice before the end of the term. Mandatory consumer rules may provide otherwise.

2. The right to terminate for cause remains unaffected. Cause exists in particular if

   • you materially exceed the license scope and do not remedy the breach within a reasonable period despite notice,
   • you are significantly in arrears with due payments (for paid licenses),
   • insolvency proceedings are applied for or opened (B2B) or comparable circumstances exist,
   • the use is unlawful or endangers security.

3. Upon termination of the right of use, you must cease using the proprietary components and remove installed copies. Backup copies must be deleted or destroyed unless statutory retention obligations apply. Rights and obligations under open source licenses remain unaffected.

4. Where data or files are stored with us (e.g., in optional support or download portals), they may be deleted after contract end. You are obliged to back up your data in good time. Statutory retention obligations and preservation of evidence remain unaffected.

§ 17 Warranty, Defect Rights

1. For open source components, the respective FOSS licenses apply.

2. B2B (entrepreneurs): For proprietary components, to the extent permitted by law, no warranty applies beyond expressly warranted characteristics. Otherwise, statutory provisions apply insofar as they cannot be effectively excluded or limited.

3. B2C (consumers): Your statutory defect rights remain unaffected. This applies in particular to statutory rules for digital products, including conformity requirements and statutory obligations to provide updates, insofar as applicable to the contract.

4. Assurances, guarantees, or agreed qualities exist only if expressly agreed in text form (e.g., in the offer, service description, or a separate guarantee statement).

§ 18 Liability

1. Unless otherwise provided in these License Terms, we are liable in accordance with statutory provisions.

2. We are liable for damages, regardless of legal basis, in cases of intent and gross negligence.

3. In cases of simple negligence, we are liable only

   • for damages arising from injury to life, body, or health,
   • and for breach of essential contractual obligations (cardinal obligations).
     In this case, liability is limited to the foreseeable damage typical at the time of contract conclusion.

4. We are not liable for indirect damages or consequential damages (in particular loss of profit, business interruption, data loss) unless mandatory law provides otherwise or the damage is due to intent/gross negligence.

5. You are obliged to take appropriate measures to prevent and mitigate damage, in particular by creating regular backup copies of data and performing security checks.

6. The liability limitations also apply in favor of our corporate bodies, employees, representatives, and vicarious agents.

7. Force majeure: We are released from the obligation to perform for as long and to the extent an event of force majeure exists (e.g., natural events, war, riots, sabotage, governmental interventions, outages of networks/providers outside our control). Statutory privileges remain unaffected.

§ 19 Data Protection

1. Where we process personal data, this is done exclusively in accordance with our privacy notice at:
   https://secudos.de/de/datenschutz

2. If you obtain maintenance services and we thereby gain access to personal data within your responsibility, a data processing agreement pursuant to Art. 28 GDPR must be concluded where required. For such an agreement, please contact us at datenschutz@secudos.com.

3. You remain responsible for complying with data protection obligations within your area of responsibility, including informing data subjects and safeguarding data subject rights.

§ 20 Confidentiality

1. Both parties undertake to keep confidential information secret. This obligation continues for two (2) years after the end of the contract.

2. Excluded are information that

   • was demonstrably already known,
   • becomes publicly known without breach of duty,
   • is lawfully obtained from third parties without a confidentiality obligation,
   • must be disclosed due to a legal obligation or an official/court order.
     Where permitted, the disclosing party will inform the other party in advance.

3. Access to confidential information is granted only to persons who need it for contract performance and who are bound by confidentiality.

§ 21 Trademarks, Project Separation, Hardware

1. meloki, logos and marks of SECUDOS are protected. You do not receive any rights to our trademarks.

2. Ollama, OpenWebUI, AI models, and other third-party software are products of third parties. These License Terms do not establish any economic or organizational connection to the respective rights holders.

3. For appliances, hardware components may originate from third parties. For hardware, the respective manufacturer terms apply. To the extent not mandatorily required by law, we assume no liability for hardware defects not caused by us.

§ 22 Governing Law, Language, Jurisdiction

1. The laws of the Federal Republic of Germany apply, excluding the UN Convention on Contracts for the International Sale of Goods (CISG), to the extent permitted.

2. Consumers: This choice of law applies only insofar as it does not deprive you of the protection of mandatory provisions of the law of the state in which you have your habitual residence.

3. If translations of these License Terms exist, the German version prevails in case of doubt, to the extent permitted by applicable law.

4. Jurisdiction (B2B): Exclusive jurisdiction for all disputes arising directly or indirectly from the contractual relationship and all disputes related to the contractual relationship is the registered office of SECUDOS in Kamen. SECUDOS is also entitled to bring an action at the place of performance pursuant to these provisions or a prevailing individual agreement, or at the general place of jurisdiction of the end customer. Mandatory statutory provisions, in particular on exclusive jurisdiction, remain unaffected.
   Regardless, both parties should, where possible, seek an amicable settlement by contacting each other before taking legal action.

§ 23 Severability Clause

If any provision of these License Terms is or becomes invalid, the validity of the remaining provisions remains unaffected. The invalid provision will be replaced by a valid provision that comes closest to the intended economic purpose, to the extent permitted by applicable law.

Our general terms and conditions apply.