Document

Legal

August 10, 2026

1. Company information (imprint / legal disclosure)

Required by the EU e-Commerce Directive (2000/31/EC), Germany’s Digitale-Dienste-Gesetz, and equivalent disclosure rules across the EEA.

2. Document index

DocumentApplies toLink
Privacy PolicyWebsite visitors, contacts, applicants/privacy-policy
Terms & Conditions of Website UseWebsite visitors/terms-and-conditions
Cookie PolicyWebsite visitorsSection 3 below
Acceptable Use PolicyCustomers, partners, end usersSection 4 below
Responsible AI StatementAll stakeholdersSection 5 below
Data Processing Agreement (DPA)Customers[Download / on request]
Sub-processor listCustomers[/legal/sub-processors]
Security Statement & Vulnerability DisclosureAllSection 6 below
Accessibility StatementWebsite visitorsSection 7 below
Anti-Bribery & Modern Slavery StatementSuppliers, partnersSection 8 below

3. Cookie Policy

We use cookies and similar technologies (local storage, pixels, SDKs) on obzerve.ai.

Consent. Strictly necessary cookies are set automatically. All other cookies are set only after you give consent through our cookie banner. The banner offers “Accept all”, “Reject all” and “Manage preferences” with equal prominence. You may withdraw or change consent at any time through the Cookie settings link in the footer. Rejecting non-essential cookies does not restrict access to any part of the site.

This table must be generated from an actual cookie scan of the live site and updated whenever a script is added. An out-of-date cookie table is a common enforcement finding.

Do Not Track / Global Privacy Control. We honour the Global Privacy Control (GPC) signal as an opt-out of sale/sharing where applicable law requires.

4. Acceptable Use Policy (products)

This policy forms part of every Obzerve licence and partner agreement. It binds customers, resellers, integrators and end users.

4.1 Permitted use

Obzerve products are licensed for lawful, proportionate, transparent purposes — including workplace safety monitoring, perimeter and asset protection, access control, traffic and mobility management, airside operations, and operational analytics — where the deployer has a valid legal basis and has met its transparency obligations to affected individuals.

4.2 Prohibited uses

Customers, partners and end users must not use Obzerve products:

Fundamental rights

  • to infer race, ethnic origin, political opinions, trade union membership, religious or philosophical beliefs, sex life or sexual orientation from biometric data;
  • to infer emotions in workplaces or educational settings, other than for medical or safety purposes;
  • to score, rank or classify individuals in ways causing detrimental or disproportionate treatment unrelated to the original context (social scoring);
  • to target individuals or groups on the basis of protected characteristics, disability, or the exercise of rights such as protest, worship, journalism, legal representation or trade union activity;
  • to exploit vulnerabilities of children, elderly people or people with disabilities.

Biometrics and identification

  • to build or expand facial recognition databases through untargeted scraping of the internet or CCTV footage;
  • to conduct real-time remote biometric identification in publicly accessible spaces for law enforcement purposes, except by an authorised public authority acting under a specific national legal exception with the required judicial or administrative authorisation;
  • to enrol individuals in a facial recognition system without the notice, legal basis and, where required, freely given consent mandated by applicable law;
  • to conduct covert surveillance of employees without required notice, consultation and works council or union agreement.

Safety and reliance

  • as the sole detection mechanism for life-safety functions, or as a substitute for certified fire detection and alarm systems, statutory safety equipment, or trained personnel;
  • to make automated decisions with legal or similarly significant effects on an individual without meaningful human review.

Security and integrity

  • to circumvent licensing, tamper with model outputs or audit logs, or misrepresent detection results as forensic evidence without appropriate validation;
  • to resell, sublicense or transfer the products in breach of export control or sanctions law (see Section 4.4).
4.3 Human oversight

Obzerve products generate alerts and analytics for human review. Deployers must designate competent personnel to interpret alerts, must have a documented process for handling false positives and false negatives, and must not configure fully automated enforcement or disciplinary action based solely on system output.

4.4 Export control and sanctions

Obzerve products may fall within controls on dual-use and cyber-surveillance items, including Regulation (EU) 2021/821, UK and US export control regimes, and Indian export law. Supply is subject to counterparty screening and end-user due diligence. Diversion to embargoed destinations, listed parties, or prohibited end uses is a material breach.

4.5 Enforcement

We may audit compliance on reasonable notice, suspend support, disable licences, and terminate agreements for breach. We report suspected serious misuse to competent authorities where required or appropriate.

Report suspected misuse: [email protected]

5. Responsible AI Statement

Our role. Obzerve is a provider of AI systems within the meaning of Regulation (EU) 2024/1689 (the EU AI Act). Our customers are deployers. Both carry obligations, and we design our products, documentation and contracts to support customers in meeting theirs.

Regulatory position. Prohibited AI practices under Article 5 of the EU AI Act have applied since 2 February 2025 and are reflected in our Acceptable Use Policy above. Products involving biometric identification and categorisation fall within the high-risk categories of Annex III; obligations for stand-alone Annex III systems currently apply from 2 December 2027 following the Digital Omnibus amendment, with transparency obligations under Article 50 already in force. Obzerve is building its conformity programme against that timetable and will publish its status here. AI literacy obligations under Article 4 apply to us and to our customers now.

Our commitments

Known limitations. No video analytics system is perfect. Accuracy depends on camera placement, resolution, lighting, occlusion, weather and scene complexity. Facial recognition performance varies across demographic groups and conditions. Published figures are indicative of controlled reference conditions, not guarantees. Customers should validate performance in their own environment before relying on it.

Customer support materials. We provide: intended-purpose documentation, technical documentation for conformity assessment, a DPIA/FRIA support template, model and dataset information, logging capability, and a human oversight guide. Request these at [email protected].

6. Security Statement & Vulnerability Disclosure

Our controls. [Summarise honestly: encryption in transit and at rest, MFA, least-privilege access, network segmentation, logging and monitoring, secure SDLC, dependency scanning, penetration testing cadence, backup and DR testing, vendor risk assessment, security awareness training, documented incident response.]

Certifications. [State only what you actually hold — e.g. ISO/IEC 27001:2022, SOC 2 Type II — with certificate number, issuing body and scope. If certification is in progress, say “in progress, target [date]”. Never imply a certification you do not hold; enterprise procurement will verify.]

Breach notification. We notify affected customers without undue delay and, where we act as processor, in time for them to meet their own 72-hour GDPR obligation.

Responsible disclosure. We welcome security research conducted in good faith. Report to [email protected], ideally with PGP key [fingerprint]. We acknowledge within [3] business days and aim to remediate critical issues within [30] days. We will not pursue legal action against researchers who act in good faith, avoid privacy violations and service disruption, and give us reasonable time to remediate before disclosure. Testing must be limited to systems we own — never customer deployments.

Publish this as a /.well-known/security.txt file as well as on this page.

7. Accessibility Statement

8. Business conduct

Anti-bribery and anti-corruption. Obzerve prohibits bribery, facilitation payments and improper inducements in any form, and complies with the Prevention of Corruption Act 1988 (India), the UK Bribery Act 2010 and the US Foreign Corrupt Practices Act where applicable. Channel partners and agents are contractually bound to the same standard.

Modern slavery and labour standards. We do not tolerate forced labour, child labour or human trafficking in our operations or supply chain, consistent with the UK Modern Slavery Act 2015 and the EU Corporate Sustainability Due Diligence framework. [Publish an annual statement if turnover thresholds apply.]

Whistleblowing. Concerns about legal or ethical breaches may be raised confidentially to [email protected]. We prohibit retaliation, consistent with Directive (EU) 2019/1937.

Conflict minerals and environment. [Include if you supply hardware — RoHS, WEEE, REACH and battery regulation status for the ONE box and any bundled hardware sold into the EU. Hardware sold in the EU also requires CE marking and a Declaration of Conformity.]

9. Regulatory and legal contact

This Legal & Trust Centre is reviewed at least annually and whenever there is a material change to our products, processing activities or applicable law. Last reviewed: [date].

We use cookies

We use cookies to improve your experience on this website. You may choose which types of cookies to allow and change your preferences at any time. Disabling cookies may impact your experience on this website. You can learn more by viewing our Cookie Policy.