DOKIMA

Legal

Dokima Trial Terms

Last updated: 21 October 2026

These terms govern an approved evaluation of Dokima by the business identified in a trial application or organisation account registration (“Evaluator”). They are between Evaluator and Northloom Ltd, a company registered in Scotland under company number SC895860 with registered office at 5 South Charlotte Street, Edinburgh, EH2 4AN (“Northloom”).

1. Acceptance and business use

By registering for a trial, accepting a trial licence, installing or using Dokima, Evaluator agrees to these terms, the Acceptable Use Policy and, where Evaluator enables private team publishing, the hosted data-processing terms. The person accepting confirms that they have authority to bind Evaluator. Dokima trials are business-to-business only and are not offered to consumers.

2. Approval and eligibility

Trials require Northloom’s prior approval. Standard applications may be approved automatically after the applicant supplies its organisation details, confirms the permitted countries of supply and ordinary use, accepts the applicable terms and passes Northloom’s automated eligibility checks. An application that does not pass those checks is held for review rather than automatically declined. Northloom may request supporting information, decline an application in its discretion, and perform additional customer, destination, end-use or sanctions checks where appropriate.

Evaluator must be established in the United States, Canada, United Kingdom, Australia, New Zealand, Jersey, Guernsey or Isle of Man. Dokima may be procured, installed and ordinarily used only for Evaluator operations in those places and by users ordinarily based there.

A user may continue using an existing authorised installation during temporary and incidental travel elsewhere, but must not procure, install or deploy Dokima for an operation or establishment outside those places, make it available to a person ordinarily based elsewhere, or use it contrary to export, sanctions or other applicable law.

3. Trial licence and period

Subject to these terms, Northloom grants Evaluator a limited, non-exclusive, non-transferable, non-sublicensable, revocable licence to install and use Dokima solely for internal evaluation.

The trial lasts 21 days beginning on first activation, unless Northloom states another period in writing. It provides the complete product without artificial repository or review-run limits. A contributor allowance may produce a local advisory but does not block reviews. Only one trial is permitted per organisation unless Northloom agrees otherwise.

The trial is for evaluation, not for resale, provision of services to third parties, or use as Evaluator’s sole or continuing production security control. Evaluator may review its real repositories to assess suitability, but remains responsible for normal security controls and all decisions based on trial output.

4. Restrictions and responsibilities

Evaluator must:

  • own, control or have clear permission to assess every repository and item of source code reviewed;
  • comply with the Acceptable Use Policy and applicable law;
  • protect licence material, credentials, repositories and results;
  • use suitably qualified human review to verify findings before acting or disclosing them; and
  • when the trial ends, stop using and delete Dokima and trial licence material after any final report generated solely from findings already stored locally; no new or continuing review or other AI-backed work is permitted after expiry.

Evaluator must not sell, rent, sublicense, distribute, publish, host for third parties, bypass trial controls, remove proprietary notices or reverse engineer Dokima except where law does not permit that restriction.

5. AI models, runners and data

Dokima orchestrates AI command-line runners and models selected and configured by Evaluator, whether provided by a third party or hosted locally by Evaluator. Those models, runners and any other third-party services are not supplied or controlled by Northloom.

Dokima supplies structured instructions directing the selected AI model and runner to perform authorised source-code review. AI models and runners may behave unpredictably, disregard instructions or attempt actions outside that purpose. Dokima’s instructions and any available runner permission or sandboxing controls do not guarantee that unintended or harmful actions cannot occur.

Evaluator is responsible for:

  • selecting a model and runner suitable for the sensitivity and location of Evaluator’s repositories and materials;
  • the permissions, filesystem and network access, credentials and environment available to the model and runner, and for appropriate isolation, backups and system protection;
  • its runner accounts, hosting, charges, availability and usage limits;
  • reviewing any applicable model or runner provider terms, security, training, retention and international-transfer practices; and
  • ensuring it has authority to transmit its materials to the selected model and runner.

Subject to Section 11 (Liability), Northloom is not responsible or liable for the acts, omissions or output of any AI model, runner or third-party service, including actions contrary to Dokima’s instructions, unauthorised commands or network requests, modification or deletion of files, disclosure of information, damage to systems or data, service suspension or provider terms.

Dokima runs locally. Repositories, prompts, findings, reports and local state remain in Evaluator’s environment by default, except where Evaluator intentionally sends them to its runner, Northloom support or a separately documented service. Evaluator should not send Northloom personal data, secrets or repository content unless reasonably necessary and lawfully disclosed.

Northloom’s Privacy Notice explains its processing of trial applications, business contacts, screening and support data.

6. Ownership and feedback

Northloom and its licensors own Dokima, its Documentation and underlying technology. Evaluator retains its rights in its repositories and other materials, and in reports produced from them, subject to Northloom’s rights in the product and report templates.

Feedback is voluntary. If provided, Evaluator permits Northloom to use it without charge, provided Northloom does not identify Evaluator or disclose its confidential information.

7. Support, availability and changes

The trial is provided without a service level or guaranteed support or response time. Northloom may change, limit, suspend or discontinue the trial, or revoke trial access, at any time. Where practical, Northloom will give notice.

Neither a trial nor discussions about it obliges either party to enter a paid agreement. Continued use after the trial requires an accepted Order under the Subscription and Software Licence Terms.

8. Confidentiality

Each party will protect the other’s non-public technical, business and commercial information with reasonable care, use it only for the trial and disclose it only to people who need it and are subject to confidentiality duties. The usual exceptions apply to information lawfully known, independently developed, received without restriction or made public without breach. Disclosure required by law is permitted, with prior notice where legally allowed.

9. Compliance and termination

Evaluator must comply with applicable export-control, sanctions, trade and anti-bribery law. Evaluator represents that neither it nor, to its knowledge after reasonable checks, its controlling owners or intended end users is a prohibited or sanctioned person, and that Dokima will not be used for a prohibited end use or diverted to a prohibited destination.

Northloom may immediately suspend or terminate the trial for suspected misuse, inaccurate application information, legal or sanctions risk, security risk or breach. On expiry or termination, the trial licence ends. Local findings and reports are not erased by Northloom. Only final report generation from existing local state, as described above, remains available before deletion.

10. No warranty

Dokima and all trial support are provided “as is” and “as available” for evaluation. To the fullest extent permitted by law, Northloom excludes all warranties, conditions and terms not expressly stated. Northloom does not warrant uninterrupted or error-free operation, compatibility with every repository or runner, discovery of every vulnerability, absence of false positives or negatives, or any security or compliance outcome.

Dokima is not a replacement for professional judgement, secure development, testing, penetration testing, legal advice or an independent security assessment.

11. Liability

Nothing in these terms excludes or limits liability that cannot lawfully be excluded or limited under the laws of Scotland, including liability for death or personal injury caused by negligence, or for fraud or fraudulent misrepresentation.

Subject to the first paragraph of this section, Northloom is not liable, whether in contract, delict (including negligence), breach of statutory duty or otherwise, for loss of profit, revenue, business, anticipated savings, goodwill, opportunity or contracts; loss or corruption of data; business interruption; or indirect or consequential loss, in each case arising out of or in connection with the trial, even if foreseeable (each category being independent and severable).

Subject to the first paragraph of this section, Northloom’s total aggregate liability arising out of or in connection with the trial, whether in contract, delict (including negligence), breach of statutory duty or otherwise, is limited to £100. Evaluator is responsible for maintaining appropriate backups, isolation and security controls, for its selected AI models and runners, and for human validation of output. The exclusions and cap reflect that the trial is provided free of charge for evaluation between businesses.

12. Private team accounts and optional hosted reports

An organisation account is required for new trial and purchase requests. Individuals register a username and a long password and may add passkeys. Accounts are never automatically merged by matching email. Passkeys are optional until the individual explicitly requires them; password sign-in and email recovery are then disabled, and support cannot bypass that requirement. Evaluator must keep independent backup passkeys and another authorised owner. The organisation owns its trial entitlement, subscription and licences. Owners control billing and ownership; owners/admins administer invited membership and publishing installations; viewers can read private reports. Evaluator must maintain authorised owners and promptly remove departed members.

Local HTML reports remain available. Private Dokima.net publishing begins only after a user confirms the publishing choice and an authorised owner/admin links the installation to the organisation. Publishing includes report findings, evidence (which may contain source excerpts or personal data), repository/component information and worker status. Evaluator instructs Northloom to store and display this data privately for its invited team, subject to the hosted data-processing terms. It is not public disclosure and is separate from the open-source programme.

Evaluator retains its rights in uploaded materials and grants only the rights needed to operate the requested hosted service. Turning publishing off stops future uploads; owners/admins can separately revoke credentials or delete hosted report data. Only the latest complete report is retained per installation. Inactive report/status payloads expire after 30 days without contact, with hourly cleanup. Active payload deletion is immediate; recovery copies expire under the managed backup schedule. Hosted availability has no additional service-level commitment unless expressly agreed. Evaluator should retain its local report and not rely on hosted copies as a backup.

13. General

These terms, the Acceptable Use Policy, the hosted data-processing terms (where Evaluator enables private team publishing) and any written trial approval are the entire agreement for the trial and replace earlier statements on that subject. Neither party relies on a statement not set out in the agreement, without limiting liability for fraud or fraudulent misrepresentation. Evaluator may not assign, novate or otherwise transfer these terms or any rights or obligations under them without Northloom’s prior written consent; Northloom may assign or transfer them as part of a reorganisation or sale of its business or relevant assets. A delay in enforcing a right is not a waiver. If a provision is unenforceable, it will be adjusted to the minimum extent necessary and the remainder will continue. Nothing creates a partnership, agency or employment relationship. These terms do not create any rights in favour of any person who is not a party to them, whether under the Contract (Third Party Rights) (Scotland) Act 2017 or otherwise.

Notices to Northloom should be sent to contact@northloom.ai. Support requests may be sent to support@dokima.net.

14. Governing law and courts

These terms and any non-contractual obligations or disputes arising out of or in connection with them are governed by the laws of Scotland. The courts of Scotland have exclusive jurisdiction.