Openisec Disclaimer and Important Notice

Openisec is an open-source initiative designed to support decision accountability and organizational knowledge creation when using AI, large language models, and AI agents.

In this document, "Openisec Operator" means any individual, group, organization, or legal entity that develops, provides, operates, maintains, supports, manages the community for, or provides related services in connection with Openisec.

At present, Affection LLC is the operating entity of Openisec and the entity handling personal information in connection with Openisec.

Openisec is intended to help users organize decision-making processes, support explainability, record decisions, and develop organizational knowledge in connection with the use of AI and AI agents. Any analysis, summary, suggestion, recommendation, or other output provided through Openisec is for reference and decision-support purposes only. Openisec does not guarantee any particular outcome, effect, accuracy, completeness, legality, fitness for purpose, suitability, or usefulness of such output.

Users must not rely on Openisec outputs without review. Users are responsible for reviewing the content, applying their own judgment, and, where necessary, consulting appropriate experts, organizational decision-makers, legal, security, compliance, risk, or other relevant stakeholders before making or executing any final decision.

Openisec is not a substitute for professional advice, including legal, accounting, tax, medical, investment, employment, human resources, security, or risk management advice. For important decisions in these areas, users should consult appropriate professionals or authorized personnel within their organization.

Users are responsible for ensuring that they have the necessary rights and authority to input information into Openisec. Users must not enter confidential information, personal information, trade secrets, authentication credentials, passwords, API keys, private keys, undisclosed vulnerability information, or other sensitive information of themselves, their organization, or any third party beyond what is necessary for the use of Openisec.

The Openisec Operator will make reasonable efforts to improve the safety, continuity, and quality of Openisec. However, Openisec may become unavailable in whole or in part, or its outputs may contain errors, omissions, bias, outdated information, or inappropriate content due to system failures, communication failures, changes in external services, limitations of AI models, insufficient or inaccurate input information, or other reasons.

To the maximum extent permitted by applicable law, the Openisec Operator shall not be liable for any damage, loss, or disadvantage incurred by users or third parties arising from or in connection with the use of Openisec, except in cases of intentional misconduct or gross negligence by the Openisec Operator. Where applicable law does not permit such limitation of liability, the liability of the Openisec Operator shall be limited to the extent permitted by such law.

The handling of personal information in connection with Openisec is based on compliance with the Act on the Protection of Personal Information of Japan and other applicable laws, regulations, and guidelines of Japan. Unless expressly stated otherwise, Openisec is not intended to comply with the EU General Data Protection Regulation (GDPR) or other personal data protection laws outside Japan.

Openisec may include features, materials, source code, documentation, and community activities provided as part of an open-source initiative. The Openisec Operator or its related service providers may also provide paid support, consulting, hosting, managed services, enterprise features, or other related services.

Openisec may be provided free of charge or as part of an open-source initiative. In such cases, the Openisec Operator does not guarantee the continuous provision of Openisec, the maintenance of any specific feature, the retention of data, the provision of support, incident response, restoration, or the maintenance of any usage environment. The Openisec Operator may change, suspend, or discontinue the content, features, method of provision, retention period, operational policy, or scope of publication of Openisec where necessary.

The Openisec Operator does not guarantee the continuous retention, preservation, restoration, backup, export, or availability of any information entered, stored, or recorded in Openisec. Users are responsible for maintaining their own copies, backups, or separate records of important information where necessary.