Continual

Continual's service operates on a subscription model, combining a fully-managed copilot engine with turnkey React components and developer SDKs for AI integration. While offering semantic search, inline citations, and custom component development, the platform prioritizes security through SSL/TLS encryption, multi-factor authentication, and continuous third-party security monitoring. The service adheres to SOC 2 Type 1 compliance and protects customer data without retaining model prompts or outputs, except with explicit permission. Usage is regulated to prevent misuse, and the terms include specific requirements for HIPAA Data protection through Business Associate Addendums. Termination conditions include account suspension due to security risks or customer breach, with limited liability of twice the preceding year's fees, excluding intentional misconduct or health-related damages.

Service Provision and Payment

Continual's service operates on a subscription model, with payment accepted through designated payment processors or directly through the company's platform. Subscriptions may begin with a trial period, during which customers have access to specified service features for a set duration. The primary license term must be purchased and registered for official service access.

Licenses are non-transferable and enable customers to use the Client Software internally, subject to ongoing subscription maintenance. Overages are billed on a prorated basis for the current subscription term, while the company reserves the right to modify fees with 30 days' notice, requiring customers to immediately report any unauthorized account activity or data loss incidents.

Customer agreements are governed by U.S. dollar payments, with invoices due within 30 days of mailing. Late payment charges apply at 1.5% per month up to legal limits, and taxes are not assessed on service performance. To prevent financial loss, the company may adjust withheld payments to cover outstanding amounts.

The service operates on a limited, non-exclusive license basis, allowing customers to use the software internally during their subscription term. Technical support and professional services are provided as outlined in the subscription agreement. The company retains the right to update the service without notice, and usage may require integration with third-party products and services, with customer responsible for maintaining necessary equipment and services.

Data collection and analysis are performed to improve service functionality, with aggregate usage data potentially shared for business purposes. Customer feedback submissions grant Continual a perpetual, non-exclusive license for use and publication without compensation.

The company provides the service "as is" with no warranties of any kind. This includes disclaimers regarding service availability, accuracy of content, and protection against viruses or harmful components. While efforts are made to ensure service security, customers are advised to maintain regular data backups.

Platform Architecture and Functionality

The platform architecture combines a fully-managed copilot engine with turnkey React components and developer SDKs, supporting a wide range of AI models including proprietary, open-source, and fine-tuned versions from leading providers. This unified approach accelerates development by enabling rapid integration of AI copilots with existing applications, while simplifying management of the AI lifecycle through a single, scalable platform.

Key capabilities include semantic knowledge base search, inline citations, persistent threads, progress indicators, action confirmations, suggested responses, and custom component development. These features facilitate seamless integration with application data and APIs, allowing for deep customization while maintaining robust security and governance. The platform's design prioritizes performance optimization and continuous improvement through comprehensive monitoring and feedback mechanisms that support various integration scenarios.

Security and Governance

Continual's secure AI architecture includes comprehensive data security and privacy features that integrate with existing access control policies. Data connections are protected using SSL/TLS, while data stored within Continual's infrastructure is fully encrypted at rest. The company supports single sign-on (SSO) via existing SAML providers for secure user authentication, and implements multi-factor authentication for enhanced security.

AI copilot behavior is continuously monitored with full tracing capabilities for complete visibility and end-to-end audit trails. The platform adheres to enterprise-grade development best practices including automated and manual testing, code reviews, continuous deployments, and comprehensive production logging and alerting systems.

Compliance and Integration

The service is built from the ground up for data security, privacy, and governance at enterprise scale. Continual implements robust security measures to protect customer data, including daily automated security checks and continuous monitoring through partnerships with secure third-party platforms like Drata. The company maintains SOC 2 Type 1 compliance and pursues SOC 2 Type 2 certification, providing a comprehensive foundation for secure AI development and deployment.

Data Protection and Security

Continual has implemented robust security measures and adheres to SOC 2 Type 1 compliance standards. Data connections utilize SSL/TLS encryption, and stored data remains fully encrypted at rest within their infrastructure. The company supports single sign-on (SSO) through existing SAML providers for secure authentication and implements multi-factor authentication to enhance security protocols.

AI copilot behavior is continuously monitored through detailed tracing capabilities that provide complete visibility and end-to-end audit trails. To maintain enterprise-grade security and compliance, Continual employs third-party security tools like Drata for continuous security and compliance monitoring, performing daily automated checks on cloud infrastructure and internal business tools.

The company's data protection framework restricts data retrieval and tool usage based on business context and operational guardrails, grounding model prompts and responses in specific business applications. Customer data, including model prompts and outputs, is never retained or used to train third-party or Continual-hosted language models without explicit permission, demonstrating their commitment to maintaining data privacy and security standards.

Usage Restrictions and Compliance

Customer access and use of the Service are strictly regulated to prevent misuse and protect Continual's intellectual property. Unauthorized actions that violate others' legal rights, including intellectual property infringement, or engage in unlawful activities are strictly prohibited. The Service may not be used for unlawful purposes, including phishing, pyramid schemes, or unauthorized website activities. Users must remove all copyright and proprietary notices from Service output and refrain from attempting to bypass or modify security measures implemented by Continual.

Additionally, the Service is protected under Federal Acquisition Regulation (FAR) and Department of Defense Acquisition Regulations (DFAR), classifying it as commercial computer software and documentation. Users must adhere to the Acceptable Use Policy, which outlines specific prohibited activities including the distribution of viruses, interference with Service functionality, and unauthorized data collection or transmission. Service use must strictly comply with the terms of the Agreement, and violations must be promptly addressed by the customer to maintain service access.

Data protection requirements mandate that Customer Data must not contain payment card industry data or HIPAA-regulated personal health information. While Continual maintains SOC 2 Type 1 compliance, specific handling requirements apply, particularly for HIPAA Data, which requires a Business Associate Addendum (BAA) for proper handling and protection. Customer is responsible for safeguarding all Customer Data, maintaining regular backups, and ensuring compliance with all applicable laws and regulations.

The company's indemnification obligations are limited to defending against third-party claims of patent or copyright infringement, with some exclusions for customer-created content or third-party integrations. Liability limitations apply, with damages capped at twice the fees paid within the preceding year, though intentional misconduct or harm to health is not subject to this limitation. The agreement includes specific restrictions on assignment and sublicensing, requiring all modifications or transfers to be approved in writing by Continual. All disputes are subject to binding arbitration through the American Arbitration Association, with limited exceptions for intellectual property disputes.

Termination and Liability

Termination of service agreements follows specific conditions and procedures outlined in Continual's terms and conditions. The company may terminate service for discontinuation of certain service offerings, account suspension by the customer, security risks, adverse impacts on other users, and matters of liability exposure. Customer-initiated account suspension and security breaches that endanger the service or third parties may also result in termination.

When service is discontinued, customers must immediately cease all usage except for data retrieval purposes. All outstanding fees become due upon termination, and the company retains the right to delete stored customer data after 30 days. The agreement stipulates that certain sections remain in effect, including provisions related to payments, confidentiality obligations, warranty disclaimers, and liability limitations.

Continual reserves the right to make changes, suspend, or discontinue any part of the service. If the company discontinues service without customer breach, the customer receives a pro-rata refund for unused fees. The service operates "as is" and "as available" without warranties of any kind, and the company disclaims all warranties, including merchantability and fitness for a particular purpose.

Continual warranties that the service conforms to specifications for the subscription term. If the service fails to meet these specifications, the company provides a pro-rata refund. The warranty does not apply to misuse or issues related to third-party hardware or software. Service availability may be affected by scheduled maintenance, unscheduled emergency maintenance, or factors beyond the company's control. Customers are advised to regularly back up their data to protect against potential service disruptions.

The company provides the service through a limited, non-transferable license. Rights are granted only for internal use during the subscription term, with no sublicensing or assignment permitted without company approval. Liability for the service is limited to twice the fees paid within the preceding year, with some exceptions. The company is not liable for incidental, special, punitive, consequential, or indirect damages, though this limitation does not apply to certain intentional actions or health-related damages.