Enterprise Master Services Agreement
Version date: August 13, 2026
This Enterprise Master Services Agreement (the "MSA") is between Valkyr Labs Inc., a Delaware corporation with offices at 195 Tamal Vista Blvd #201, Corte Madera, California 94925 ("Valkyr"), and the customer identified in an Order Form that references this MSA ("Customer"). This MSA becomes effective on the effective date of the first Order Form signed by both parties ("Effective Date"). Each party may be referred to as a "Party" and together as the "Parties."
This public MSA is Valkyr's standard enterprise form. It does not bind either party until an authorized representative of each party signs an Order Form or other agreement expressly incorporating it.
1. Contract structure and precedence
1.1 Agreement components
The "Agreement" consists of this MSA and each mutually executed order form ("Order Form"), statement of work ("SOW"), Data Processing Agreement ("DPA"), and product, source-code, support, security, or marketplace addendum that expressly incorporates this MSA. The Acceptable Use Policy ("AUP") applies to use of hosted Services.
1.2 Order of precedence
An amendment signed by both Parties controls over all other Agreement documents. In a conflict, the following order applies: (a) the applicable Order Form; (b) the applicable SOW, but only for the Professional Services it covers; (c) the DPA, but only for Processing of Customer Personal Data; (d) an applicable source-code, marketplace, security, support, or product addendum, but only for its subject; (e) this MSA; and (f) the AUP and Documentation. A lower-ranking document does not modify a higher-ranking document unless it identifies the provision being changed and expressly states the Parties' intent to override it. A purchase order is administrative only and its additional or inconsistent terms are void.
1.3 Excluded online terms
The public Terms of Service and EULA do not apply to Customer's enterprise use under this Agreement. A click-through term presented to an Authorized User will not amend this Agreement.
2. Definitions
- "Affiliate" means an entity controlling, controlled by, or under common control with a Party, where control means ownership of more than 50% of voting interests or the power to direct management.
- "Authorized User" means an employee, contractor, agent, or other individual Customer authorizes to use the Services for Customer's benefit.
- "Customer Data" means electronic data, content, prompts, files, records, credentials, memory, and other information submitted to or collected by the Services for Customer, excluding Usage Data.
- "Customer Materials" means Customer Data and specifications, schemas, code, models, business rules, designs, trademarks, and other materials supplied by or for Customer.
- "Documentation" means Valkyr's then-current user and technical documentation for the Services.
- "Generated Deliverable" means customer-specific source code, object code, configuration, workflow, schema, documentation, or other artifact expressly identified as a deliverable in an Order Form or SOW or made available by the Services for Customer to export and deploy independently. Generated Deliverables exclude Valkyr Technology and Third-Party Materials.
- "Model Provider" means a third party that supplies an artificial-intelligence or machine-learning model used with the Services.
- "Output" means content or a result produced by an AI-enabled feature from Customer Materials. An Output may be a Generated Deliverable if it satisfies that definition.
- "Professional Services" means implementation, configuration, development, migration, training, or consulting services described in an SOW.
- "Services" means the hosted, downloadable, or privately deployed products identified in an Order Form, which may include ThorAPI, ValkyrAI, GrayMatter, ValorIDE, agentic workflows, integrations, APIs, and marketplace functionality.
- "Third-Party Materials" means software, models, data, content, connectors, MCP servers, libraries, or services owned or provided by a third party, including open-source components.
- "Usage Data" means technical telemetry and aggregated statistics about operation and use of the Services that do not identify Customer, an Authorized User, or any individual and cannot reasonably be linked to Customer.
- "Valkyr Technology" means the Services, Documentation, Valkyr's models, generators, frameworks, templates, runtime components, libraries, APIs, methods, algorithms, tools, interfaces, designs, know-how, and all modifications and improvements to them, excluding Customer Materials and Customer-owned Generated Deliverables.
3. Services and access
3.1 Provision of Services
Subject to the Agreement and payment of applicable fees, Valkyr will provide the Services during the applicable subscription term. Valkyr grants Customer a non-exclusive, non-transferable (except under Section 16.2) right for Authorized Users to access and use hosted Services for Customer's internal business purposes and to exercise any deployment, distribution, or commercialization rights expressly granted for Generated Deliverables.
3.2 Affiliates and contractors
Customer Affiliates may use the Services only if identified in an Order Form or permitted by the applicable usage scope. Customer is responsible for its Authorized Users and for any contractor's compliance with the Agreement. An Affiliate may sign its own Order Form, in which case it and Valkyr are the contracting parties for that Order Form and no other entity is jointly liable.
3.3 Accounts
Customer will provide accurate account information, protect credentials and API keys, apply least-privilege access, and promptly notify Valkyr of suspected unauthorized access. Customer is responsible for activity under its accounts except to the extent caused by Valkyr's breach of the Agreement.
3.4 Changes
Valkyr may improve the Services during a subscription term but will not materially reduce the core functionality, security, or support commitment of a paid Service during that term. Valkyr may discontinue a material Service on at least 90 days' notice and will provide a pro rata refund of prepaid fees for the discontinued portion if no substantially equivalent replacement is offered.
4. Customer responsibilities and restrictions
4.1 Customer responsibilities
Customer is responsible for: (a) Customer Materials and instructions; (b) configuring permissions, integrations, approval policies, retention, and deployment environments; (c) obtaining required rights, notices, and consents; (d) testing and validating Outputs and Generated Deliverables before production use; and (e) complying with law and the AUP.
4.2 Restrictions
Except to the extent a restriction is prohibited by law or expressly permitted in an Order Form, Customer will not: (a) sell, sublicense, or provide the Services as a service bureau; (b) reverse engineer or seek source code or nonpublic underlying structure of Valkyr Technology; (c) bypass access, usage, security, or rate controls; (d) use nonpublic Valkyr Technology or Confidential Information to reproduce the Services; (e) systematically extract nonpublic Service behavior, metadata, or Outputs to train or improve a model or service that substitutes for a material Service capability; (f) remove proprietary notices; (g) conduct or publish benchmark or security-test results that identify Valkyr without first giving Valkyr a reasonable opportunity to review the methodology and remediate a reported vulnerability; or (h) use the Services in violation of the AUP. This Section does not prohibit Customer from developing a competing product using Customer's independent technology, Customer Materials, or Customer-owned Generated Deliverables without misuse of Valkyr Technology or Confidential Information.
5. Customer Data, privacy, and security
5.1 Customer Data
As between the Parties, Customer owns Customer Data. Customer grants Valkyr a non-exclusive, worldwide, limited-term license to host, copy, transmit, display, modify, and otherwise process Customer Data only to provide, secure, support, and comply with law regarding the Services and as otherwise documented in the Agreement.
5.2 No training by default
Valkyr will not use Customer Data, Customer Materials, Outputs, or Generated Deliverables to train generalized models or improve services for other customers unless Customer expressly opts in through a signed Content Sharing Agreement or an authorized administrator setting that clearly describes that use. Service operation, abuse prevention, customer-directed fine-tuning, and generation of Usage Data are not generalized-model training.
5.3 DPA and security
The DPA applies when Valkyr Processes Customer Personal Data as a processor or service provider. Valkyr will maintain reasonable administrative, technical, and physical safeguards described in the DPA or an applicable Security Exhibit. Customer acknowledges that private or customer-managed deployments divide security responsibilities as described in the Order Form.
5.4 Usage Data
Valkyr may create and use Usage Data to operate, secure, support, and improve its products and business, provided Valkyr does not disclose Usage Data in a manner that identifies Customer or any individual except as required by law.
6. AI, models, agents, and integrations
6.1 AI limitations
AI features are probabilistic. Outputs may be inaccurate, incomplete, biased, insecure, infringing, or non-unique. Customer will apply qualified human review and appropriate testing before relying on an Output for production, safety-critical, legal, employment, credit, housing, insurance, healthcare, financial, or other consequential use. The Services do not provide legal, medical, accounting, or investment advice.