Platform Terms

The signed agreement governs

Access to the Taiga platform is granted only under a written services agreement between Taiga AI Oy and a customer organization. That agreement, together with any terms it incorporates, sets out the commercial terms, service levels, intellectual property, confidentiality, data processing, and liability that apply.

This page is subordinate to that agreement. Where the signed agreement, or any terms it incorporates, addresses a matter, that governs and this page has no effect on it. These terms apply only where the signed agreement is silent. An organization with no signed agreement with Taiga has no right of access to the platform.

Who we are

Taiga AI Oy Business ID: 3607851-2 Lapinlahdenkatu 16 00180 Helsinki, Finland Email: hello@tai.ga Security: security@tai.ga

What the platform is

Taiga is a managed EU software-as-a-service platform that turns business intent into production software: application code, infrastructure as code, CI/CD pipelines, and an audit trail. It runs on AWS in eu-central-1 (Frankfurt). Model inference runs through Amazon Bedrock inside EU regions.

Accounts and access

Each customer organization is a separate tenant. Amazon Cognito is the platform's identity provider, and the customer organization decides who holds an account, what role they hold, and when that access ends. Roles are enforced server-side and at the database layer, not in the browser.

Accounts are personal to the individual they are issued to. Credentials and API keys must not be shared. Tell us at security@tai.ga if you believe a credential or key has been exposed.

Single sign-on with Microsoft Entra ID

A customer organization can optionally federate its own Microsoft Entra ID directory, so its people sign in with the work accounts they already have. Taiga operates a multi-tenant Entra application that acts as the federation broker into Cognito.

The application requests three scopes: openid, email, and profile. Those are sign-in scopes. It requests no directory permissions, so Taiga cannot read your directory, enumerate your users, or see anyone who has not signed in. Three claims pass through the broker on each sign-in: email address, display name, and the OpenID Connect subject identifier. They are not stored in Taiga's own Entra tenant.

Single sign-on can be enabled only for an email domain whose ownership the organization has verified by DNS, so no organization can federate a domain it does not control. Someone signing in for the first time is provisioned to the least-privilege member role. An administrator can withdraw consent for the Taiga application at any time from the Enterprise applications area of their own Entra admin centre, which stops new sign-ins through the federation without terminating the agreement or deleting data.

Your repositories and cloud accounts

Your source code stays in your own version control. Taiga connects through a GitHub App that your organization installs and can revoke at any time; the platform does not keep a copy of your repository. Applications the factory builds deploy to a cloud account you connect, or to a Taiga-managed one, as agreed.

You control what the connected App and cloud credentials are permitted to do. Revoking the installation or the connection ends Taiga's access through it. Keeping those grants scoped and current is the customer's responsibility.

Your content

You keep ownership of what you bring to the platform and of what it produces for you: specifications, uploaded reference documents, conversations, source code, and the delivered application. Intellectual property is governed by the signed agreement, which is where the ownership terms actually live.

You are responsible for having the right to upload what you upload, and for not putting content into the platform that you are not permitted to process there. If your content includes personal data, that processing is governed by the data processing agreement.

AI-generated output

The platform produces software with AI. Its output is probabilistic: it can be wrong, incomplete, or unsuited to your purpose, and the same input will not always produce the same result. The governance around a factory run, meaning the specification, the threat model, the review gates, and the audit trail, exists to make that output reviewable. It does not make it infallible. Output must be reviewed by a competent person before it is relied on in production.

You own what the factory produces for you. Any rights Taiga might otherwise hold in that output are dealt with in the signed agreement, which is where the ownership terms live. Taiga keeps its own platform, models, prompts, and processes.

Your content is not used to train models. Inference runs through Amazon Bedrock, which does not use prompts or outputs to train foundation models, and an organization-wide policy opts Taiga out of AWS AI services using its content.

The platform depends on third-party foundation models, currently Anthropic Claude accessed through Amazon Bedrock. Model behaviour, availability, and versions change over time, and we may change model or provider where the signed agreement permits.

Where you converse with the platform's agents, you are interacting with an AI system and not with a person. Artifacts the factory produces are generated by an AI system. We say so plainly rather than relying on it being obvious.

Acceptable use

How the platform may and may not be used is set out in our acceptable use policy, which forms part of these terms. The acceptable-use provisions of the signed agreement take precedence over it.

Acceptable Use Policy

Warranties

Warranties, and the disclaimer of them, are set out in the signed agreement. Beyond those, the platform is provided as it stands. It is under active development, its functionality changes, and we do not warrant uninterrupted or error-free operation. Where the platform is supplied on beta or pilot terms, the beta provisions of the signed agreement apply and take precedence over anything on this page.

Liability and indemnities

Liability caps, exclusions, and any indemnities are set out in the signed agreement and any terms it incorporates. This page neither adds to them nor reduces them. Nothing anywhere excludes liability that cannot be excluded under Finnish law.

Changes to the service

The platform is under active development and changes regularly. We add, alter, and retire functionality. Where a change would materially disrupt how a customer already uses the platform, the notice and change provisions of the signed agreement apply. Availability commitments, where any exist, come from that agreement and not from this page.

Feedback

If you send us feedback, bug reports, or suggestions, we may use them to improve the platform without obligation to you. This does not give us any right to your content, your code, or your confidential information.

Suspension

We may suspend access where there is a genuine security risk, unlawful use, or a serious breach of the acceptable-use terms, and where the signed agreement permits it. We aim to warn first and to suspend no more than the situation requires. The grounds and process in the signed agreement govern.

Leaving the platform

A tenant owner can export the tenant's data, and can instruct erasure. Erasure runs on a grace period during which the tenant stays fully usable and the instruction can be cancelled; after it elapses, data is purged and a signed deletion certificate is issued. How this works in detail, including timescales, is set out in our platform privacy statement. Termination itself is governed by the signed agreement.

Personal data

For personal data processed in the platform, Taiga acts as processor on the customer's instructions, under the data processing agreement annexed to the services agreement. What that means in practice is set out in our platform privacy statement.

Changes to this page

We may update this page as the platform changes. The date at the top shows when it last changed. Changes here do not alter a signed agreement, which is amended only as that agreement itself provides.

Governing law

This page is governed by Finnish law. It does not vary the governing-law or dispute-resolution provisions of any signed agreement, which continue to apply between the parties.

Contact

Questions about these terms go to hello@tai.ga