Terms of Use — Klastro Platform

Version 1.1 — draftEffective date 30/09/2026

This English text is a translation provided for information only. The French version is the only one that is authoritative.

Recitals

Edixos publishes and operates Klastro, a software-as-a-service platform for creating, distributing and running ephemeral technical environments ("labs") used for training, hands-on practice and the assessment of engineering skills.

These Terms of Use govern the conditions under which any natural person accesses and uses the Platform, whatever their role (Learner, Instructor, Trainee, Recruiter, Candidate, Organization Administrator).

These Terms govern use of the Platform. They do not govern the sale of the Service, which is governed by:

• the B2C Subscription Terms for self-service offerings purchased in subscription mode (Community, Pro, Instructor); and
• the B2B Terms of Sale for offerings purchased in contract mode (Enterprise), under a quotation and order form.

In accordance with Article 1119, third paragraph, of the French Civil Code, where these Terms conflict with the special conditions set out in an order form or an Enterprise agreement, the special conditions prevail as regards the conflicting provisions only.

Access to the Platform is reserved to Users attached to a duly registered Organization. There is no public individual sign-up: creating an account requires a prior Company Registration (Article 4).

Article 1 — Definitions

Capitalised terms have the meanings set out below, in the singular and the plural alike.

Article 2 — Purpose and scope

2.1. These Terms set out the conditions of access to and use of the Platform, and the respective rights and obligations of Edixos and the User.

2.2. They apply to any access to the Platform, including free access under the Community Plan, access as a Candidate to an Assessment and access as a Trainee to a Cohort, including where the User is not itself a party to the contract of sale entered into with Edixos.

2.3. These Terms constitute a standard-form contract (contrat d'adhésion) within the meaning of Article 1110, second paragraph, of the French Civil Code, their provisions being determined in advance by Edixos and not open to negotiation.

Article 3 — Acceptance and enforceability

3.1. Acceptance. Access to the Platform requires prior, full and unreserved acceptance of these Terms. Acceptance is obtained through an explicit positive action by the User when creating their Account (an unticked checkbox), time-stamped and retained by Edixos as evidence.

3.2. Enforceability. In accordance with Article 1119, first paragraph, of the French Civil Code, these Terms take effect against the User only if they have been brought to their attention and accepted by them. They are permanently accessible from the Platform in a format allowing reproduction and retention.

3.3. Electronic evidence. In accordance with Articles 1366 and 1367 of the French Civil Code and Regulation (EU) No 910/2014 ("eIDAS"), the electronic records kept by Edixos (connection logs, acceptance time-stamps, execution traces) constitute evidence between the parties, subject to proof to the contrary by any means.

3.4. Electronic contracting. Paid Plans are purchased through the process laid down in Articles 1127-1 to 1127-3 of the French Civil Code, enabling the User to check the details of their order and its total price and to correct any errors before confirming it.

Article 4 — Access conditions and Company Registration

4.1. No public individual sign-up. Opening access to the Platform requires the prior Company Registration of an Organization. No sign-up is open to a natural person acting solely in their own name without attachment to a registered Organization.

4.2. Required information. Company Registration requires at least:

• the full company legal name;
• the registration number: the nine-digit SIREN for entities registered in France, whose structure is automatically checked by the Platform using the Luhn check digit, or the equivalent registration number issued by the competent register for foreign entities;
• the EU VAT number (optional);
• the company address;
• a valid billing email address.

4.3. Scope of the SIREN check. The check performed by the Platform on the SIREN is a formal check (validity of the check digit). It is neither a verification of existence against INSEE or the national business register, nor a verification of the accuracy of the other declarations, nor a guarantee of solvency. The truthfulness of the declared information is the sole responsibility of the Organization.

4.4. Authority. The natural person completing the Company Registration represents and warrants that they have authority to bind the Organization they purport to represent. Edixos may request supporting evidence (company register extract, delegation of authority, identity document of the representative) and suspend access pending its production.

4.5. Capacity. The User declares that they are at least sixteen (16) years old. Where the User is a minor, the Organization warrants that it has obtained the required legal authorisations and bears the resulting obligations, in particular under Article 8 of Regulation (EU) 2016/679 ("GDPR") and Article 45 of French Act No 78-17 of 6 January 1978, as amended.

4.6. Technical prerequisites. Access to the Service requires an internet connection, a recent compatible browser and, for certain features, outbound WebSocket connections to be permitted. These prerequisites are the User's responsibility.

Article 5 — Accounts, Roles and Seats

5.1. Roles. The Platform distinguishes the following Roles in particular:

5.2. Named accounts. An Account is strictly personal and named. Sharing credentials, pooling an Account between several natural persons and using a generic Account are prohibited.

5.3. Seats. Where a paid Plan is purchased, the Plan is bought by the Organization and the Seat is held by a specific natural person within it. The periodic Lab Credit grant attached to a Seat is credited to the seat-holder's personal balance; it is not pooled at Organization level. Reassigning a Seat from one person to another does not transfer the consumed or remaining balance.

5.4. Organization responsibility. The Organization is responsible for the Users it attaches to its account, for the Roles it assigns to them and for their use of the Platform.

Article 6 — Authentication and access security

6.1. Current authentication method. As at the effective date of these Terms, authentication is performed using email address and password, through an identity management service self-hosted by Edixos.

6.2. Features not yet available. Single sign-on through an external identity provider (SSO/OIDC) and automated account provisioning (SCIM) are on the Edixos product roadmap for Enterprise customers in Contract Mode. These features are not offered to date and may not be relied upon as a characteristic of the Service until they have been made available and documented. Nothing in these Terms constitutes an undertaking as to any availability date.

6.3. User obligations. The User selects a strong password, keeps it confidential, does not reuse it on other services and informs Edixos without delay of any suspected compromise at [email protected].

6.4. Attribution. Any action taken from an Account is deemed to have been performed by its holder, subject to proof of a compromise notified to Edixos.

Article 7 — Description of the Service

7.1. Ephemeral environments. The Platform provisions isolated technical environments on demand, on the infrastructure of Edixos or of its hosting subprocessors. Depending on the Scenario, an environment may comprise one or more clusters, machines or containers, and may expose a web terminal, an online code editor and application interfaces.

7.2. Ephemeral nature and time to live. Each Lab has a maximum time to live (TTL), may be automatically paused on inactivity, and is destroyed at the end of its life. Destruction irreversibly deletes the data, files and configuration created within the environment, save for items the Platform expressly retains (task results, progress history, billing records). The User is solely responsible for exporting, before that point, anything they wish to keep.

7.3. No retention undertaking. The Platform is neither a persistent hosting service nor a backup service. Edixos does not guarantee the retention or the restoration of data created inside a Lab.

7.4. Catalogue. Access to Scenarios depends on the Plan purchased. The Community Plan gives access only to the public, pre-made Scenarios made available by Edixos; paid Plans open access to extended catalogues and, from the Instructor Plan upwards, to the creation of Scenarios belonging to the Organization.

7.5. Evolution of the Service. Edixos develops the Platform continuously. Edixos endeavours not to materially degrade the purchased features during a contractual period; where an essential feature is materially removed, the consequences are governed by the applicable terms of sale.

Article 8 — Rules of use — Prohibited conduct

8.1. Incorporation. The User undertakes to comply with the Acceptable Use Policy, which forms an integral part of these Terms. In the event of conflict, the provision most protective of the integrity of the Platform and of third parties prevails.

8.2. Principle. Lab environments are made available solely for learning, practice, instructional authoring and skills assessment, within the limits of the Scenario being run.

8.3. Prohibitions. The User must not, in particular:

a) attempt to access any system, network, namespace, account or data for which they have not been granted an explicit right of access, including within the Edixos infrastructure, or break out of the isolation boundary of their Lab; b) conduct, from a Lab, any offensive operation, scan, intrusion, denial of service or exfiltration against a third party or against Edixos; c) use execution resources for purposes unrelated to the Service, including crypto-asset mining, large-scale distributed computing, anonymising traffic relays, hosting publicly exposed services, sending unsolicited email, or storing content unrelated to the Scenario; d) circumvent, alter or falsify quota, cap, Lab Credit metering, billing, scoring or Assessment supervision mechanisms; e) reverse engineer, decompile or disassemble the Platform, save for acts strictly permitted by Articles L122-6-1 et seq. of the French Intellectual Property Code; f) extract or re-utilise a substantial part, evaluated qualitatively or quantitatively, of the Scenario catalogue, in breach of the database producer's right under Article L341-1 of the French Intellectual Property Code; g) upload, run or distribute unlawful, infringing, defamatory, hateful or privacy-invasive content, or malicious code intended for use outside the instructional boundary; h) make automated, bulk or improper use of the Platform's APIs outside the documented quotas; i) disclose, publish or resell to any third party the statements, model answers or solutions of an Assessment, or be assisted by or substituted with a third party during an Assessment. j) introduce into a Lab, in any form whatsoever, personal data relating to third parties, production secrets or credentials, or confidential information belonging to a third party. A Lab is an ephemeral environment, not backed up and not inspected by Edixos: its contents are destroyed with the session and Edixos is able neither to locate nor to extract them, nor to act on any request to exercise rights over them. A User who breaches this prohibition bears sole responsibility for it under Article 15.

8.4. Criminal law. The User is informed that fraudulent access to or continued presence in an automated data processing system, interference with its operation, and the fraudulent introduction, modification or deletion of data are punishable under Articles 323-1 to 323-3-1 of the French Criminal Code. Software infringement is punishable under Articles L335-2 and L335-3 of the French Intellectual Property Code.

8.5. Reporting. Abuse may be reported to [email protected].

Article 9 — User Content

9.1. Ownership. Edixos claims no ownership in User Content. Scenarios created by an Instructor through Studio remain the property of the Organization to which the Instructor belongs, subject to the rights that Organization holds under its own contractual relationship with the Instructor.

9.2. Technical operating licence. The User, and the Organization to which they belong, grant Edixos a non-exclusive, royalty-free, worldwide licence, for the duration of use of the Service, to reproduce, store, transmit, technically adapt and display User Content solely in order to provide, secure, supervise, back up and bill the Service. This licence is strictly limited to those purposes; it excludes any standalone commercial exploitation and terminates on deletion of the User Content, subject to statutory retention periods and to backups in rotation.

9.3. Warranty. The User warrants that they hold all rights necessary in the User Content and that it infringes no third-party right.

9.4. Feedback. Suggestions, feedback and feature requests submitted voluntarily by a User may be freely used by Edixos, without consideration, without thereby transferring any right in the User Content itself.

Article 10 — Edixos intellectual property

10.1. The Platform, its source and object code, its architecture, data models, interfaces, documentation, databases, trade marks, logos and graphic elements are and remain the exclusive property of Edixos, protected in particular under Articles L111-1, L112-2(13) (software), L122-6 (rights of the author of software), L341-1 (database producer's right) and L713-2 (trade marks) of the French Intellectual Property Code.

10.2. Right of use granted. Edixos grants the User a personal, non-exclusive, non-transferable, non-sublicensable and revocable right to access and use the Platform, limited to the term of validity of their Account, to the scope of their Plan and to the purposes described in Article 7. No other right is granted, expressly or by implication.

10.3. No transfer. Nothing in these Terms assigns any intellectual property right to the User or the Organization.

10.4. Third-party components. The Platform incorporates third-party software components, including free and open-source components, governed by their own licences, a list of which is available on request. In the event of conflict, the third-party licence prevails for that component only.

Article 11 — Lab Credits and quotas

11.1. Consumption of execution resources is metered in Lab Credits, as described in the Credit Metering Policy, to which express reference is made for the per-hour weights applicable to each environment type.

11.2. General principles. Metering is performed post-paid, against the actual wall-clock time for which the environment was provisioned, weighted by environment type, and expressed in centicredits (hundredths of a credit) so that short sessions are metered accurately. A failed provision is not charged.

11.3. No cash value. Lab Credits are not currency, a payment instrument or a security. They have no cash redemption value, are neither transferable between Organizations nor convertible, and are non-refundable, save where mandatory law provides otherwise or where the Assessment Integrity Guarantee set out in the SLA applies, which is available for the Enterprise Plan only.

11.4. Quotas. Edixos applies quotas and caps (concurrent environments, maximum duration, spend cap) designed to preserve the integrity and availability of the Platform. Exceeding a quota may result in provisioning being refused, or a Lab being paused or stopped.

Article 12 — Availability, maintenance and support

12.1. Best-efforts obligation. Edixos applies reasonable means to ensure the availability and continuity of the Platform. Edixos is bound by an obligation of best efforts (obligation de moyens) and not of result as regards availability.

12.2. No service level commitment for non-eligible plans. No quantified availability commitment is given under the Community Plan or in respect of free, trial or preview access. Service level commitments, their measurement and their remedies are defined exclusively in the SLA, which applies only to the Plans expressly eligible for it. These Terms neither restate nor amend the figures set out in the SLA.

12.3. Maintenance. Edixos may interrupt all or part of the Service for maintenance. Planned maintenance is notified in advance on the conditions set out in the SLA for eligible Plans. Emergency maintenance, in particular for security reasons, may be carried out without notice.

12.4. Third-party dependencies. The Service relies on third-party infrastructure and services (hosting, network, payment processor, image registries). A failure of those third parties may affect the Service; the consequences are governed, as the case may be, by Article 19 (force majeure) or by the SLA.

12.5. Support. The support channel, hours and response targets depend on the Plan. The Community Plan carries community support only, with no response commitment.

Article 13 — Liability

13.1. Edixos liability. Edixos is liable for direct and foreseeable loss caused by a breach of its obligations, under general law (Articles 1217 et seq. and 1231-3 of the French Civil Code, under which a debtor is liable only for loss that was foreseen or could have been foreseen at the time the contract was concluded, save in the case of gross negligence or wilful misconduct).

13.2. Exclusions. To the fullest extent permitted by law, no compensation is payable for indirect loss, loss of revenue, margin, customers, opportunity or reputation, nor for the loss, corruption or non-restoration of data created inside a Lab, whose ephemeral nature is brought to the User's attention (Article 7.2).

13.3. Caps. The liability caps applicable to commercial relationships are set out in the corresponding terms of sale. As against a User who is not a party to the contract of sale and who accesses the Service free of charge, Edixos's liability is limited to compensation for direct, material and foreseeable loss.

13.4. Mandatory limits. In accordance with Articles 1170 (a clause depriving an essential obligation of its substance) and 1171 (significant imbalance in a standard-form contract) of the French Civil Code and, as against a consumer, Articles L212-1, R212-1 and R212-2 of the French Consumer Code, nothing in these Terms is intended to, or has the effect of, excluding or limiting Edixos's liability for wilful misconduct, gross negligence or death or personal injury, or of depriving Edixos's essential obligation of its substance. Any provision having such an effect is deemed unwritten to that extent only.

13.5. User liability. The User is liable for loss caused by a breach of Articles 6, 8 and 9, including any additional infrastructure cost generated by prohibited use.

Article 14 — Indemnity for third-party claims

14.1. The User, and jointly and severally the Organization to which they belong where that Organization is a professional, indemnifies Edixos against any third-party claim, action or award arising out of (i) User Content, (ii) a breach of Article 8, or (iii) an inaccuracy in the statements made on Company Registration.

14.2. Edixos notifies the User of any claim within a reasonable time, allows the User to conduct the defence upon written request, and does not settle without the User's prior consent, which may not be withheld without legitimate reason.

14.3. This indemnity is not enforceable against a consumer beyond what Articles L212-1 and R212-1 of the French Consumer Code permit.

Article 15 — Suspension and closure of access

15.1. Immediate suspension. Edixos may suspend a User's or an Organization's access without notice where (i) there is an established or imminent threat to the security, integrity or availability of the Platform or of third parties, (ii) there is a manifest breach of Article 8, (iii) a competent authority so requires, or (iv) payment is outstanding on the conditions set out in the applicable terms of sale.

15.2. Proportionality and information. Suspension is limited in scope and duration to what is strictly necessary. Edixos informs the User or the Organization Administrator of the grounds for suspension, unless doing so would compromise an ongoing investigation or is prohibited by law.

15.3. Termination for breach. In the event of a serious or repeated breach, Edixos may close the Account after a formal notice has remained without effect for fifteen (15) days, save where the seriousness of the breach, in particular a security breach, justifies immediate closure.

15.4. Effects. Closure results in the destruction of running Labs and loss of access to the Platform. It does not release the Organization from payment of sums due. Data return conditions are set out in the Privacy Policy and, for the Enterprise Plan, in the B2B Terms of Sale.

15.5. Inactivity. A free Account inactive for more than twenty-four (24) months may be closed after prior notice sent to the declared email address at least thirty (30) days beforehand.

Article 16 — Personal data

16.1. The processing of Users' personal data is described in the Privacy Policy, drawn up in accordance with Articles 12 to 14 GDPR.

16.2. Allocation of roles. Edixos acts as controller for processing necessary to manage the contractual relationship, security, billing and improvement of the Service. Edixos acts as processor within the meaning of Articles 4(8) and 28 GDPR for processing it carries out on behalf of a customer Organization, in particular Candidate data in Contract Mode; that processing is governed by the DPA.

16.3. Candidates. Candidates taking an Assessment receive specific information under Article 14 GDPR, in the Candidate Privacy Notice.

16.4. AI systems. Where the Platform operates an artificial intelligence system, in particular to support evaluation or scoring, the information required by Regulation (EU) 2024/1689 (the "AI Act") is set out in the EU AI Act Disclosure. The User is informed that AI systems intended to be used for the recruitment, selection or evaluation of candidates fall within Annex III, point 4, of Regulation (EU) 2024/1689.

16.5. Cookies and trackers. The use of trackers is described in the Cookie Policy, drawn up in accordance with Article 82 of French Act No 78-17 of 6 January 1978, as amended, and the CNIL guidelines.

Article 17 — Reporting unlawful content

17.1. To the extent that Edixos provides a hosting service for User Content, any person may report content they consider unlawful to [email protected], stating the URL or identifier of the content, the grounds for the report and their contact details.

17.2. The notice and action mechanism is operated in accordance with Article 16 of Regulation (EU) 2022/2065 (the "DSA") and Article 6 of French Act No 2004-575 of 21 June 2004 on confidence in the digital economy (LCEN). Edixos acknowledges receipt of the report, examines it diligently, and informs the reporting party of the decision taken and of the available redress.

17.3. Reporting manifestly lawful content in order to obtain its removal engages the liability of the reporting party.

Article 18 — Amendments to these Terms

18.1. Edixos may amend these Terms, in particular to reflect a change in the Service, a legislative or regulatory development, or a security requirement.

18.2. Any material amendment is notified to Users and Organization Administrators by electronic means or by posting on the Platform at least thirty (30) days before it takes effect.

18.3. A User who rejects the amendment may cease using the Platform and request closure of their Account before the effective date. The financial consequences of a rejection by a subscribing Organization are governed by the applicable terms of sale.

18.4. Continued use after the effective date constitutes acceptance of the amended version.

Article 19 — Force majeure

19.1. Neither party is liable for a failure caused by force majeure within the meaning of Article 1218 of the French Civil Code, namely an event beyond its control which could not reasonably have been foreseen when the contract was concluded and whose effects cannot be avoided by appropriate measures.

19.2. The affected party informs the other without delay. If the impediment is permanent, the contract is terminated by operation of law; if it is temporary, performance is suspended, unless the delay justifies termination.

19.3. Insolvency, cash-flow failure and non-payment do not constitute force majeure.

Article 20 — Miscellaneous

20.1. Severability. If any provision is held void, deemed unwritten or unenforceable, the remaining provisions retain full effect and the parties negotiate in good faith a replacement provision of equivalent economic effect.

20.2. No waiver. Edixos's failure to invoke a breach does not constitute a waiver of its right to invoke it subsequently.

20.3. Assignment. The User may not assign its rights under these Terms. Edixos may assign these Terms, in whole or in part, to a group company or in connection with a restructuring, merger, partial contribution of assets or transfer of the Klastro business line, subject to informing the User and without degrading the level of the commitments given.

20.4. Subcontracting. Edixos may use subcontractors to perform the Service and remains liable to the User for their acts.

20.5. Language. These Terms are drawn up in French. An English translation is made available for information. In the event of any discrepancy in interpretation, the French version prevails, except where the law applicable to a consumer User requires a version in another language of the Union to prevail.

20.6. Interpretation. In accordance with Article 1190 of the French Civil Code, in case of doubt a standard-form contract is interpreted against Edixos, which proposed it.

20.7. Evidential agreement. See Article 3.3.

Article 21 — Governing law, complaints and jurisdiction

21.1. Governing law. These Terms are governed by French law.

21.2. Consumer reservation (Rome I). Where the User is a consumer within the meaning of the introductory article (article liminaire) of the French Consumer Code and is habitually resident in another Member State of the European Union, the choice of French law may not deprive them of the protection afforded by the mandatory provisions of the law of their habitual residence, in accordance with Article 6 of Regulation (EC) No 593/2008 ("Rome I").

21.3. Prior complaint. Any complaint should be sent to [email protected]. The parties endeavour to reach an amicable solution within thirty (30) days.

21.4. Consumer mediation. In accordance with Articles L612-1 and L616-1 and Article R616-1 of the French Consumer Code, a consumer User may refer the dispute free of charge to a consumer ombudsman (médiateur de la consommation) with a view to its amicable resolution, after first attempting to resolve it directly with Edixos by written complaint. The ombudsman appointed by Edixos is set out below as soon as Edixos's membership of a consumer mediation scheme takes effect. That membership is in progress and will be effective before any sale to a consumer; its full details (name, postal address, website) will appear in this clause and will be notified by email to consumer Users already registered. Until then, Edixos undertakes to examine any consumer User's complaint under the procedure in Article 21.3 and will raise no objection to admissibility based on the absence of an appointed ombudsman.

Note: the European online dispute resolution platform established by Regulation (EU) No 524/2013 ceased operating following the repeal of that regulation by Regulation (EU) 2024/3228 (the repeal taking effect on 20 July 2025); no reference to that platform is therefore made here.

21.5. Jurisdiction — professional User. For any dispute between Edixos and a User or Organization having the status of a trader (commerçant), exclusive jurisdiction is conferred on the Commercial Court of Paris (Tribunal de commerce de Paris), including where there are multiple defendants, third-party proceedings or urgent applications, in accordance with Article 48 of the French Code of Civil Procedure. Where the dispute does not fall within commercial court jurisdiction, it is brought before the Judicial Court of Paris (Tribunal judiciaire de Paris).

21.6. Jurisdiction — consumer User. No jurisdiction clause is enforceable against a consumer. A consumer may bring proceedings, at their choice, before any court having territorial jurisdiction under Article 42 or Article 46 of the French Code of Civil Procedure, or before the court of the place where they were living when the contract was concluded or when the harmful event occurred, in accordance with Article R631-3 of the French Consumer Code. Within the European Union, the mandatory rules of Articles 17 to 19 of Regulation (EU) No 1215/2012 ("Brussels I bis") apply, under which a consumer may be sued only in the courts of the Member State in which they are domiciled.

21.7. Collective redress. Nothing in these Terms prevents the bringing of a collective action under Articles L623-1 et seq. of the French Consumer Code and Directive (EU) 2020/1828.

Article 22 — Publisher's legal notices

In accordance with Article 6 III-1 of French Act No 2004-575 of 21 June 2004 (LCEN):

Acceptance

These Terms of Use are accepted electronically, by a positive action of the User when creating their Account or when the Terms are updated, on the conditions set out in Article 3.

Notice — draft document. Identification of the publisher was completed and verified on 20 September 2026 (INSEE SIRENE, INPI, VIES), and the characterisation of hosting status under Regulation (EU) 2022/2065 is addressed in Article 4 of the legal notice (en/01-terms-and-conditions/legal-notice.md). Two points remain open before publication: (i) appointment of a consumer ombudsman under Article L612-1 of the French Consumer Code, mandatory before any sale to a consumer and not yet arranged (see Article 21.4); (ii) external counsel review of the document as a whole. During the private preview, the Private Preview Supplemental Terms (en/01-terms-and-conditions/private-preview-terms.md) prevail over these Terms in respect of conflicting provisions.