← Back to Services
Contractual Principles

Engagement Terms

To ensure a trusted collaboration, all our interventions are governed by clear contract terms, built on the absence of vendor dependency and financial transparency.

  1. Commercial principles & fee confirmationIndicative fees for Cytria's current services are published on the Services page. The precise scope, fee and any credit toward a subsequent engagement are confirmed in writing before each paid engagement. No credit or subsequent engagement is implied unless it is stated in the applicable proposal or mandate.
  2. Fixed fees, no overrunsAll diagnostic phases (Scan, Review, Audit) and deployment phases (Proof Sprint) are executed under fixed-fee agreements defined in advance. No variable hourly fees or cost overruns will be billed without a signed, written scope change.
  3. Flexible terms for managed operationsManaged Operations are contracted on monthly rolling terms, with no minimum duration. They can be terminated by the client at the end of any monthly period.
  4. Intellectual & hardware propertyThe client retains full ownership of its data, system configurations, workflows, prompts, and operational documentation. Under on-premise deployment with hardware acquisition, the client owns the dedicated GPU hardware outright. Cytria retains ownership of its generic tooling and pre-existing know-how.
  5. Handover procedure ("Remise des clés")Upon termination, Cytria will ensure handover support within 30 days. This includes transferring all administrative credentials, access rights, configuration files, prompt definitions, and data exports in open formats. Cytria will delete all client copies in its possession within 30 days of the end of the handover, confirmed in writing.
  6. Confidentiality & data handlingAll client data remains isolated within the sovereign execution perimeter. Cytria engineers only access the inference infrastructure for maintenance or troubleshooting purposes, under explicit authorization and strict confidentiality agreements.
  7. Sub-processorsFor on-premise deployments, no sub-processors have access to client data. For the relevant Swiss-hosted configuration, Infomaniak is the primary infrastructure provider. Any additional provider or subprocessor dependency is explicitly documented for the selected deployment.
  8. Security incident notificationIn the event of a suspected or confirmed security incident affecting systems managed by Cytria, Cytria will notify the client without undue delay, targeting a maximum of 72 hours from detection.
  9. Governance & human validationAction authority is defined per workflow. Consequential client-facing or judgement-based actions require the agreed human approval; low-risk deterministic steps may be automated where explicitly authorised in the specification.
  10. Applicable law & jurisdictionAll contract relations between Cytria and its clients are governed exclusively by Swiss law. The exclusive place of jurisdiction is Geneva, Switzerland.
Informational document, the signed mandate agreement is authoritative.