Contractual Principles
Engagement Terms
To ensure a trusted collaboration, all our interventions are governed by clear contract terms, built on the absence of vendor dependency and financial transparency.
- Progressive creditsThe Focused Review cost (CHF 1’500) is credited towards the AI Maturity Audit if ordered within 90 days. Similarly, the AI Maturity Audit cost (CHF 4’500) is fully credited towards the Implementation phase if ordered within 90 days.
- Fixed fees, no overrunsAll diagnostic phases (Scan, Review, Audit) and deployment phases (Proof Sprint) are executed under fixed-fee agreements defined in advance. No variable hourly fees or cost overruns will be billed without a signed, written scope change.
- Flexible terms for managed operationsManaged Operations are contracted on monthly rolling terms, with no minimum duration. They can be terminated by the client at the end of any monthly period.
- Intellectual & hardware propertyThe client retains full ownership of its data, system configurations, workflows, prompts, and operational documentation. Under on-premise deployment with hardware acquisition, the client owns the dedicated GPU hardware outright. Cytria retains ownership of its generic tooling and pre-existing know-how.
- Handover procedure ("Remise des clés")Upon termination, Cytria will ensure handover support within 30 days. This includes transferring all administrative credentials, access rights, configuration files, prompt definitions, and data exports in open formats. Cytria will delete all client copies in its possession within 30 days of the end of the handover, confirmed in writing.
- Confidentiality & data handlingAll client data remains isolated within the sovereign execution perimeter. Cytria engineers only access the inference infrastructure for maintenance or troubleshooting purposes, under explicit authorization and strict confidentiality agreements.
- Sub-processorsFor on-premise deployments, no sub-processors have access to client data. For the Swiss-hosted deployment, Infomaniak is the sole infrastructure sub-processor used by Cytria, under a Data Processing Agreement (DPA) compliant with the Swiss nLPD.
- Security incident notificationIn the event of a suspected or confirmed security incident affecting systems managed by Cytria, Cytria will notify the client without undue delay, targeting a maximum of 72 hours from detection.
- Governance & human validationNo system designed by Cytria is authorized to act autonomously on client environments. Named human validation points (designated client staff) must be defined and configured in the workflow before any deployment goes live.
- Applicable law & jurisdictionAll contract relations between Cytria and its clients are governed exclusively by Swiss law. The exclusive place of jurisdiction is Geneva, Switzerland.
Informational document, the signed mandate agreement is authoritative.