Service Level Agreement (SLA)

Effective: February 1, 2026Last updated: February 1, 2026

LegalX Yapay Zeka Teknolojileri A.Ş.

APY Tekmer, Ataşehir Bulvarı, Atatürk, Ertuğrul Gazi Sk. D:2 Blok No:13, 34758 Ataşehir/İstanbul, Türkiye

This SLA is an appendix to the Terms of Service and applies to the Harmonity cloud service (the “Service”).

This SLA is part of the Terms of Service agreement.

1. Structure and scope

The Legal TextIn Plain English
1.1 Appendix. This Service Level Agreement (“SLA”) forms part of the Agreement between you (“Customer”) and LegalX Yapay Zeka Teknolojileri A.Ş. (“Provider”, “we”, “us”). Capitalized terms not defined here have the meaning in the Terms of Service or Order Form.This SLA is an add-on to the main contract you sign with us.
1.2 Applicability. This SLA applies to the Service identified in the applicable Order Form. If you purchase an enhanced support offering (if any) described in the Order Form (“Premium Support”), the response targets in Section 4 may be improved as stated in that Order Form.Everyone gets the baseline SLA. If you buy Premium Support, you may get faster response targets.
1.3 What we cover (and what we don’t). This SLA intentionally includes (i) clear availability measurement and formula, (ii) a severity/response table, (iii) planned maintenance rules and notice, and (iv) service credits and claim mechanics. This SLA intentionally does not measure downtime only during business hours, and does not start downtime only when the Customer reports an incident.We kept the best enterprise parts (clear uptime, severity table, maintenance, credits). We avoided the parts that can feel unfair (only counting downtime in business hours or only after you report it).

2. Definitions

The Legal TextIn Plain English
2.1 Business Hours. Unless otherwise stated in the Order Form, “Business Hours” means 09:00–18:00 Europe/Istanbul, Monday–Friday, excluding official public holidays in Türkiye.Our standard support targets run during Istanbul business hours (unless you bought Premium Support).
2.2 Availability. “Availability” means the Service is operational and materially accessible by the Customer over the public internet in a manner consistent with the Service’s normal operation.“Up” means the app is basically usable.
2.3 Downtime. “Downtime” means a period in which the Service is not Available, as determined by Provider’s reasonable monitoring and/or logs, excluding the items in Section 3.Downtime counts when the service is actually down, based on monitoring/logs (with standard exclusions).
2.4 Monthly Measurement Period. Availability is measured per calendar month.We calculate uptime each month.
2.5 Response Time. “Response Time” means the time from when we receive a properly submitted ticket to when we begin troubleshooting (not merely an automated reply).Response time means “we started working on it,” not just “we answered.”
2.6 Workaround / Restoration. An incident is considered restored when we (a) resolve the root cause, or (b) provide a commercially reasonable workaround that restores material functionality, and notify Customer.If we give you a real workaround that gets you unstuck, we treat the incident as restored.

3. Availability commitment and exclusions

The Legal TextIn Plain English
3.1 Uptime Commitment. We will use commercially reasonable efforts to achieve 99.9% Availability of the Service during each Monthly Measurement Period.Target uptime is 99.9% each month.
3.2 Availability Calculation. Availability (%) = 100 × ((Total Minutes in Month − Downtime Minutes) ÷ Total Minutes in Month).Simple monthly uptime math.
3.3 Exclusions. Downtime does not include unavailability caused by: (i) planned maintenance under Section 5; (ii) emergency maintenance necessary to address security, safety, or stability; (iii) force majeure events; (iv) Customer’s or Customer’s users’ networks, devices, browsers, or misconfiguration; (v) third-party services outside Provider’s reasonable control (including Customer’s identity provider, payment rails, or Customer-provided integrations); (vi) Customer’s violation of the Agreement; (vii) suspension due to non-payment or legal compliance.We don’t count downtime caused by things outside our control, your setup, or required suspensions.
3.4 Good-faith measurement. We will measure Availability in good faith using reasonable monitoring, logs, and incident records. Upon request, we will provide a summary of the relevant incident(s) used to calculate Availability for a month.We’ll be transparent about how we measured uptime for that month.

4. Support and incident response targets (baseline)

The Legal TextIn Plain English
4.1 How to contact support. Customer may report incidents via email to support@harmonity.ai. Tickets should include: (i) description of issue; (ii) time observed; (iii) affected users; (iv) screenshots/logs if available; (v) business impact; and (vi) suggested severity level.Email support@harmonity.ai with details so we can move fast.
4.2 Severity classification. Customer may suggest severity; Provider may reclassify based on impact and scope.You can label severity; we may adjust it to keep things consistent.
4.3 Baseline Response Targets (Business Hours). Response Time targets apply during Business Hours unless Premium Support states otherwise.Standard response clocks run during business hours (Premium may be 24/7 for critical).
4.4 Premium Support (optional). If the Order Form includes Premium Support, the Order Form may define (i) 24/7 coverage for Sev 1 (and optionally Sev 2), (ii) faster response targets, and (iii) an escalation path. In the event of conflict between this SLA and Premium Support terms in the Order Form, the Order Form controls.Premium Support (if purchased) can mean 24/7 for critical issues and faster targets.

Table A — Baseline Severity Levels & Response Targets

SeverityThe Legal TextIn Plain English
Sev 1 (Critical)Complete outage or critical failure affecting most users; security incident with active exploitation; data integrity risk with no reasonable workaround. Response Time: 1 hour (Business Hours).Major outage / emergency. We start within 1 hour (during business hours).
Sev 2 (High)Major feature unusable or severe degradation affecting many users; no reasonable workaround. Response Time: 2 hours (Business Hours).Big problem for many users. We start within 2 hours (business hours).
Sev 3 (Medium)Partial degradation or bug affecting some users; workaround exists. Response Time: 1 Business Day.Annoying but not catastrophic. We start within 1 business day.
Sev 4 (Low)General questions, minor issues, requests for guidance or configuration. Response Time: 2 Business Days.Routine support. We start within 2 business days.

5. Planned maintenance and changes

The Legal TextIn Plain English
5.1 Planned Maintenance Window. Where reasonably feasible, planned maintenance that may materially affect Availability will be performed between 00:00–04:00 Europe/Istanbul.We try to do disruptive maintenance at night Istanbul time.
5.2 Advance Notice. We will endeavor to provide at least five (5) days’ advance notice for planned maintenance that is reasonably expected to materially affect Availability. Notice may be provided via email, in-product message, or a status page (if available).We aim for 5 days’ notice when maintenance could affect uptime.
5.3 Emergency Maintenance. We may perform emergency maintenance at any time to address security, stability, legal compliance, or urgent risk. Such maintenance is excluded from Downtime to the extent reasonably necessary.Emergencies happen; we may act immediately to keep the system safe.

6. Service credits (sole remedy)

The Legal TextIn Plain English
6.1 Sole and Exclusive Remedy. If we fail to meet the Availability commitment in Section 3.1, Customer’s sole and exclusive remedy is to receive Service Credits as described in this Section 6.If uptime misses the target, the remedy is credits (not cash damages).
6.2 Credit Calculation Basis. Service Credits are calculated as a percentage of the monthly subscription fee for the affected Service. If Customer pays annually, the monthly fee is calculated as (annual subscription fee ÷ 12). Credits do not apply to one-time services, professional services, taxes, or pass-through fees unless the Order Form states otherwise.Annual plans are prorated to a monthly amount for credits. Credits usually apply to subscription only.
6.3 Credit Tiers. Service Credits will be issued according to Table B for the applicable month.The lower the uptime, the bigger the credit.
6.4 Credit Limits. Service Credits (i) are non-refundable, (ii) are not redeemable for cash, (iii) are non-transferable, (iv) may only be applied as an offset against future subscription invoices, and (v) will not exceed the monthly subscription fee for the affected month.Credits reduce a future bill; we don’t pay cash. Credits can’t exceed that month’s fee.
6.5 Eligibility. Customer is not eligible for Service Credits if Customer is past due on payment obligations at the time the credit request is made or if the unavailability falls under the exclusions in Section 3.3.You need to be in good standing and the downtime must be “on us.”

Table B — Monthly Availability & Service Credit

Monthly AvailabilityService Credit (% of monthly subscription fee)
99.9% to 99.71%10%
99.70% to 99.51%20%
99.50% to 99.11%50%
99.10% to 96.71%60%
Below 96.70%100%

7. How to request credits (60-day written notice)

The Legal TextIn Plain English
7.1 Credit Request Window. To receive a Service Credit, Customer must submit a written request within sixty (60) days after the end of the month in which the Availability fell below 99.9%.You have 60 days after that month ends to ask for credits.
7.2 Request Requirements. The request must be sent to support@harmonity.ai and include: (i) Customer name and workspace; (ii) the affected month; (iii) a description of the incident(s); and (iv) any relevant evidence (timestamps, screenshots, logs).Email us the month + details so we can validate quickly.
7.3 Issuance Timing. If approved, Service Credits will be applied to the next invoice(s) issued after approval or otherwise as reasonably determined by Provider.If approved, we apply credits to the next bill(s).

8. General

The Legal TextIn Plain English
8.1 No expansion of liability. This SLA does not expand Provider’s liability beyond the limitations in the Terms of Service and the Order Form.SLA credits don’t override the liability limits in the contract.
8.2 Changes. We may update this SLA from time to time. Updates will not materially reduce Customer’s rights during an active paid subscription term without notice; however, changes may apply at renewal or as otherwise permitted in the Agreement.We won’t sneakily downgrade your SLA mid-term without notice.
8.3 Interpretation. Headings are for convenience only. If there is a conflict, the Order Form controls, then the Terms, then this SLA.If documents conflict: Order Form wins, then Terms, then SLA.

9. Premium Support Package (Optional)

Below is a Premium Support section you can drop into the SLA (or reference from the Order Form as “Premium Support Package”). It keeps commitments clear and enterprise-friendly, without creating risky “guarantees” beyond what you can operationally deliver.

The Legal TextIn Plain English
9.1 Ordering & Scope. “Premium Support Package” (“PSP”) applies only if purchased and explicitly stated in the applicable Order Form. PSP provides enhanced support coverage and response targets compared to the baseline support described in Section 4. PSP does not modify the Availability commitment or Service Credit framework unless the Order Form expressly states otherwise.Premium Support is an add-on you buy. It mainly improves support coverage/response, not uptime credits (unless the Order Form says so).
9.2 Coverage Hours. Unless otherwise stated in the Order Form: (i) PSP provides 24x7 incident intake for Severity 1 and Severity 2 tickets; and (ii) Severity 3 and Severity 4 tickets are handled during Business Hours. “24x7 incident intake” means Customer may submit tickets at any time and Provider will begin troubleshooting according to PSP response targets.Sev 1–2: you can reach us anytime and we start quickly. Sev 3–4: handled during business hours.
9.3 Support Channels. PSP includes the following support channels: (i) email support at support@harmonity.ai; and (ii) if enabled for the Customer, an authenticated support portal and/or in-product support channel. Provider may offer an emergency phone/incident bridge for Severity 1 incidents at its discretion or as stated in the Order Form.Email always works. Portal/in-app support if enabled. For big outages, we can open a live bridge if agreed.
9.4 Authorized Contacts. Customer must designate up to three (3) authorized support contacts (“Authorized Contacts”). Provider may limit PSP access to Authorized Contacts for security and efficiency.Only your nominated people can open Priority tickets.
9.5 Ticket Quality Requirements. For PSP response targets to apply, tickets should include, to the extent available: workspace/org name, impacted users, time observed (with timezone), steps to reproduce, screenshots/logs, and business impact. Provider may request additional information and may pause troubleshooting if required information is not provided after reasonable efforts.Give us enough detail to move fast; if we’re missing essentials, the clock can pause until we have them.
9.6 Severity Reclassification. Customer may suggest severity; Provider may reclassify based on actual impact and scope, including whether a workaround exists.You can label it; we’ll normalize it so priorities are consistent.
9.7 No Guaranteed Resolution Time. Response targets indicate when Provider begins troubleshooting; they do not guarantee resolution by a specific time. Provider will use commercially reasonable efforts to restore service as quickly as practicable.We commit to fast engagement, not a hard “fix by X time” promise.
9.8 Exclusions. PSP does not include (i) professional services, implementation, custom development, or data migration; (ii) custom integrations beyond published documentation; (iii) end-user training beyond reasonable guidance; (iv) legal advice; or (v) support for third-party products not under Provider’s control. Such services may be provided under a separate statement of work or Order Form.Premium ≠ consulting. Extra work is a separate SOW.
9.9 Escalation. For Severity 1 incidents, Provider will provide an escalation path (e.g., incident manager on-call) and may initiate an incident communication cadence. For PSP customers, escalation may include involvement of engineering resources as reasonably necessary.In critical incidents, we run a real incident process with escalation.

Table C — Premium Support Response Targets

Response Time = time from ticket receipt to when troubleshooting begins (not an automated email). For Sev 1–2, response targets apply 24x7. For Sev 3–4, response targets apply during Business Hours unless your Order Form says otherwise.

SeverityThe Legal TextIn Plain English
Sev 1 (Critical)Response Time: 30 minutes (24x7). Includes complete outage, widespread inability to access the Service, active security incident, or confirmed data integrity risk with no workaround.We start within 30 minutes, anytime.
Sev 2 (High)Response Time: 1 hour (24x7). Major feature broken or severe degradation affecting many users with no reasonable workaround.We start within 1 hour, anytime.
Sev 3 (Medium)Response Time: 4 Business Hours. Partial degradation/bug affecting some users or workaround available.We start within 4 business hours.
Sev 4 (Low)Response Time: 1 Business Day. Routine questions, minor bugs, how-to and configuration guidance.We start within 1 business day.

Optional PSP Enhancements (Enterprise Order Forms)

The Legal TextIn Plain English
9.10 Service Reviews (Optional). If stated in the Order Form, Provider will provide periodic service reviews (e.g., quarterly) covering usage, support themes, and reliability learnings.Quarterly check-ins if you sell Enterprise.
9.11 Proactive Notices (Optional). If stated in the Order Form, Provider will provide proactive notices of planned maintenance and major incidents via agreed channels.We can proactively notify your admins.

Optional Severity 1 Phone/SMS Escalation Add-On

The Legal TextIn Plain English
9.12 Optional On-Call Escalation Add-On (Severity 1). If the Order Form includes the On-Call Escalation Add-On, Provider will use commercially reasonable efforts to notify Customer’s designated on-call contact(s) by telephone call and/or SMS for Severity 1 Incidents, in addition to standard ticketing and Status Page updates.If you buy this add-on, we’ll try to reach your on-call person by phone/SMS for Sev 1.
9.13 Designated Contacts. Customer may designate up to two (2) on-call contacts (each may be an individual or a role-based on-call number) and must provide current phone numbers capable of receiving calls and SMS (or equivalent messaging where supported). Customer may update contacts upon written notice (including email) and such updates will apply within a reasonable administrative timeframe.You give us up to 2 on-call numbers. Keep them up to date.
9.14 Escalation Attempts. For a confirmed Severity 1 Incident, Provider will attempt to notify the on-call contact(s) using a reasonable sequence of attempts (e.g., up to two (2) call attempts and two (2) SMS attempts per contact), within a reasonable period after incident confirmation, subject to availability of telecommunications networks. Provider may adjust the sequence and method of attempts based on circumstances and operational safety.We’ll try a few times, but phone networks can fail and we may adapt.
9.15 Acknowledgement and Start of Support Response. The Support response time for Severity 1 Incidents is measured from the time Provider receives the incident report (or detects the incident) and opens a support case, not from the time Customer acknowledges a call/SMS. Provider will proceed with incident response regardless of whether Customer acknowledges phone/SMS notifications.We won’t wait for you to pick up to start working.
9.16 Fallback Channels. If Provider cannot reach the designated on-call contacts after the attempts in Section 9.14, Provider will continue communications via the standard support email/ticket channel and, where available, the Status Page.If we can’t reach you by phone/SMS, we’ll still update you by email/status page.
9.17 Customer Responsibilities. Customer is responsible for: (i) ensuring designated numbers are monitored; (ii) allowlisting/whitelisting where applicable; (iii) ensuring mobile carriers or security settings do not block Provider notifications; and (iv) ensuring that receiving such communications complies with Customer policies and applicable law. Provider is not responsible for missed notifications due to Customer-side filtering, misconfiguration, carrier limitations, roaming restrictions, or third-party delivery failures.If your carrier/spam filters block it, that’s on you.
9.18 Not for Emergency or Life-Safety Use. The Service and the On-Call Escalation Add-On are not intended for emergency, life-safety, or mission-critical alerting where failure could lead to bodily harm or physical damage. Customer must not rely on these notifications as the sole method of emergency alerting.Don’t use this like a 911 system.
9.19 Personal Data. Phone numbers and contact details are personal data. Provider will process such data solely to deliver support and operational notifications, in accordance with the Privacy Policy and applicable data protection laws.We’ll only use the phone numbers to send support/incident alerts.
9.20 Scope and Charges. The On-Call Escalation Add-On is available only if explicitly purchased in the Order Form and may be subject to additional fees. Unless otherwise stated in the Order Form, the Add-On applies only to Severity 1 Incidents.This is a paid add-on and typically only for Sev 1.
9.21 Definitions (On-Call Escalation). For purposes of the On-Call Escalation Add-On: “Severity 1 Incident” means (i) complete production outage of the Service affecting the majority of Customer users; or (ii) a critical loss of core functionality or material data integrity issue where no reasonable workaround exists, as determined by Provider in good faith. “Incident Confirmation” means Provider has (a) verified the incident through its monitoring systems or (b) validated the incident based on Customer’s report and Provider’s initial triage, and has opened an incident record/case.What counts as Sev 1: big outage, core feature broken, or serious data integrity issue with no workaround. Confirmed = we verified it (monitoring or triage) and opened an incident case.
9.22 Provider Classification Controls. Customer may propose a severity level when reporting an issue, however Provider may reclassify severity based on impact, scope, and available workaround. On-Call Escalation obligations apply only after Provider has classified the event as a Severity 1 Incident and reached Incident Confirmation.You can suggest “Sev 1,” but we decide after triage. Phone/SMS starts only once we confirm and classify it as Sev 1.
9.23 Exclusions. A Severity 1 Incident does not include (i) scheduled maintenance or releases notified in advance; (ii) issues caused by Customer systems, networks, browsers, integrations, or third-party services outside Provider’s reasonable control; (iii) beta/preview features unless explicitly included in the Order Form; or (iv) degraded performance that does not materially prevent use of core Service functions.Sev 1 doesn’t include planned maintenance, your own systems, third-party failures, or minor slowness.

10. Status Page & Incident Communications

The Legal TextIn Plain English
10.1 Status Page. Provider maintains a public or customer-accessible service status page (the “Status Page”) describing current Service status, incident summaries, and planned maintenance notices. The Status Page is informational only and does not modify Provider’s obligations under this SLA unless explicitly stated in the Order Form.We have a status page for transparency. It’s informative, not a separate contract promise.
10.2 Notification Channels. Provider may communicate Service status and incidents via: (i) the Status Page; (ii) email to Customer’s designated notification contacts and/or Authorized Contacts; and (iii) in-product notices or support portal announcements (where available). Customer is responsible for keeping notification contacts current and subscribing to Status Page updates where supported.We’ll post updates on the status page and may email/in-app notify. You need to keep contacts up to date.
10.3 Incident Declaration. Provider may declare an incident when it determines there is a material Service disruption, security event, or degradation affecting multiple customers or a Customer’s production use. Incidents may be categorized consistent with Severity 1–4 in this SLA, but Provider may use different operational labels on the Status Page (e.g., “Investigating,” “Identified,” “Monitoring,” “Resolved”).If something serious happens, we’ll “declare an incident” and track it publicly with standard stages.
10.4 Initial Acknowledgement Targets (PSP). For Premium Support customers, Provider will use commercially reasonable efforts to post an initial Status Page update or send an initial notification within: (i) 60 minutes after confirming a Severity 1 incident; and (ii) 2 hours after confirming a Severity 2 incident. These targets are not guarantees and may be delayed where disclosure would increase security risk or violate legal obligations.For big incidents, we try to acknowledge quickly—unless sharing details would create security/legal risk.
10.5 Update Cadence (PSP). For Premium Support customers, Provider will use commercially reasonable efforts to provide updates during an active incident at approximately the following cadence: (i) Severity 1: at least every 60 minutes; (ii) Severity 2: at least every 4 hours; (iii) Severity 3–4: as reasonably appropriate based on impact. Provider may increase frequency at its discretion.During an incident, we’ll keep you posted regularly (more often for Sev 1).
10.6 Content of Updates. Incident communications may include: current status, impacted components, known symptoms, mitigation steps/workarounds (if any), and estimated next update time. Provider does not commit to providing an estimated time to resolution.We’ll share what’s happening and what to do, but we won’t promise exact fix times.
10.7 Customer-Specific Communications. Where an issue affects only Customer (or where details are customer-specific), Provider may communicate primarily through support tickets rather than the Status Page. Such communications may be Confidential Information.If it’s just your workspace, we’ll handle it in your ticket (more private + detailed).
10.8 Post-Incident Report (PSP). For Severity 1 incidents, upon Customer’s written request, Provider will use commercially reasonable efforts to provide a written incident summary (“Post-Incident Report”) within 10 Business Days after resolution, describing: (i) high-level root cause category; (ii) timeline of key events; (iii) mitigation performed; and (iv) corrective actions planned. Post-Incident Reports may omit sensitive security details and may be shared in aggregated form if multiple customers were affected.For Sev 1, you can request a postmortem-style summary. We’ll share meaningful learnings without exposing sensitive security info.
10.9 Planned Maintenance Notices. Provider may perform planned maintenance, updates, and releases. Where planned maintenance is reasonably expected to materially affect availability, Provider will use commercially reasonable efforts to: (i) schedule work during off-hours where feasible; and (ii) provide at least five (5) Business Days prior notice via the Status Page and/or email. Emergency maintenance may be performed with as much notice as practicable.We try to do maintenance off-hours and give ~5 business days notice. Emergencies can happen with short notice.
10.10 Maintenance Windows (Optional). If stated in the Order Form, Provider will maintain a standard maintenance window (e.g., weekday late-night hours in the agreed time zone). If not stated, Provider may choose reasonable windows based on operational needs.If you want a defined maintenance window, we can put it in the Order Form.
10.11 Service Credits & Uptime Measurements. Status Page postings and incident communications do not determine whether downtime qualifies as “Unavailable Time” under the SLA or whether service credits apply. Uptime and credits (if any) are calculated solely in accordance with the SLA’s Availability and Service Credit terms.The status page is not the official “credit calculator.” SLA rules decide that.
10.12 Language. Unless otherwise agreed in the Order Form, Provider may issue Status Page updates and incident communications in English.By default, updates are in English (we can change per contract).
10.13 Subscribing to Updates. Where supported, Customer may subscribe to Status Page notifications (e.g., email, RSS/Atom feed, webhook, or similar mechanisms) by following the instructions made available on the Status Page. Subscription availability and formats may change over time.If the status page supports it, you can subscribe (email/RSS/webhook). The exact options may change.
10.14 Customer Configuration. Customer is responsible for configuring its systems and filters to receive Status Page notifications (including allowlisting domains, checking spam filtering, and maintaining valid recipients). Provider is not responsible for missed notifications due to Customer-side filtering, misconfiguration, or third-party delivery failures.If your email/security tools block the notifications, that’s on you—please configure allowlists/recipients.
10.15 Dedicated Notification Contacts (PSP). For Premium Support customers, Customer may designate up to two (2) incident-notification email addresses (or distribution lists) for operational alerts, in addition to support ticket communications. Provider will use commercially reasonable efforts to send Severity 1–2 incident notifications to such contacts when an incident is confirmed.Premium customers can give us 2 alert addresses (e.g., ops@ / oncall@). We’ll notify them for Sev 1–2.
10.16 Webhooks and Integrations. If Provider offers webhook endpoints or third-party integrations for Status Page notifications, Customer’s use is subject to Provider documentation and any applicable third-party terms. Provider does not guarantee uninterrupted delivery via third-party platforms.If we offer webhooks/Slack/PagerDuty/etc., they’re “best effort” and depend on third parties too.

If there’s any question, please email support@harmonity.ai support@harmonity.ai