Service Level Agreement

Effective 3 September 2026 · Version 1.0

This Service Level Agreement (the "SLA") forms part of the Agreement where the Order Form so provides, and applies to the Service provided by Baby Elephant B.V., trading as Aitonomy ("Aitonomy"). Capitalised terms have the meaning given in the SaaS Terms and Conditions.

1. Scope

1.1 This SLA applies to the Service. It does not apply to advisory, assessment, design or implementation work under the Services Terms, nor to a Scan.

1.2 Where the Service runs on the Customer's own environment or AI subscription, this SLA covers only the governed layer that Aitonomy operates. It does not cover the Customer's own subscription, the underlying model providers, or other third party services, whose availability is outside Aitonomy's control.

1.3 The quality, accuracy and fitness of Agent output is the Customer's responsibility under clause 5 of the SaaS Terms. This SLA covers the availability and support of the Service, not the output of Agents.

2. Availability

2.1 Aitonomy will use commercially reasonable efforts to keep the Service available. The base SLA does not set a guaranteed availability percentage and does not provide service credits.

2.2 Where the Order Form provides for it, an availability target, a measurement method and any service credits may be agreed for the Service. Absent such agreement, clause 2.1 applies.

2.3 The following are excluded from any availability measurement: planned maintenance notified under clause 3; force majeure; the Customer's systems, data or breach; and third party providers on which the Service depends, including any AI subscription or services the Customer brings and the underlying model providers.

3. Planned maintenance

3.1 Aitonomy schedules planned maintenance outside business hours where reasonably practicable and notifies the Customer in advance of maintenance expected to cause material downtime.

3.2 Emergency maintenance to address a security or integrity risk may be performed without prior notice; Aitonomy will inform the Customer as soon as reasonably possible.

4. Support and response

4.1 Support is provided on Business Days during business hours, unless the Order Form states otherwise. Support covers the use and operation of the Service and the identification and resolution of material errors, not separate development or consultancy.

4.2 Aitonomy will use reasonable efforts to give a substantive first response, and to assign an owner, within the following target times by severity. These are targets, not guarantees, measured in business hours:

4.3 Aitonomy sets the initial severity in good faith and adjusts it with the Customer as more is known. The Customer provides the information reasonably needed to reproduce and diagnose an issue.

5. Security incidents

5.1 Aitonomy notifies the Customer without undue delay after becoming aware of a security incident that materially affects the confidentiality, integrity or availability of the Service or the Customer Data.

5.2 Personal Data Breaches are handled under the Data Processing Agreement, which sets out the notification obligations and their timing.

5.3 Aitonomy provides the Customer with the information reasonably needed to meet the Customer's own notification obligations, including any notification to a supervisory authority within 72 hours under the GDPR.

6. Remedies and review

6.1 The service credits, if any, agreed in the Order Form are the Customer's exclusive financial remedy for a failure to meet an availability target. Nothing in this SLA limits a party's rights on material breach under the SaaS Terms.

6.2 On request, and at least once per quarter where the Order Form provides for it, Aitonomy reports on availability and support performance. The parties review this SLA at least once per year.

Baby Elephant B.V., trading as Aitonomy · Emmastraat 23, 2282 AM Rijswijk, The Netherlands · KvK 27299029