Terms of Service

EHForder
Skiwo AS · Pilestredet 17, 0164 Oslo · legal@ehforder.com
Effective date: 25 May 2026

These Terms of Service ("Terms") govern access to and use of the EHForder platform and related services (the "Service").

EHForder is operated by:
Skiwo AS
Org. no.: 916 636 660
Pilestredet 17, 0164 Oslo, Norway
("Operator", "we", "us")

"EHForder" refers to the inbound purchase-order automation platform and brand operated by the Operator.

By accessing or using the Service, you agree to be bound by these Terms. If you do not agree, you must not use the Service.

1. Purpose of the Service

EHForder receives inbound purchase orders by email, extracts structured order data using AI assistance, presents the extracted order to a human Reviewer at the Customer for approval (or auto-approves where the Customer has opted in and confidence thresholds are met), and transmits the resulting EHF Ordre 3.0 / Peppol BIS Order 3.0 document via Peppol AS4 to the Customer's designated receiving endpoint.

EHForder is a technical platform only. The Reviewer at the Customer is the authoritative approver of every transmitted order, and the Customer remains responsible for the accuracy and legitimacy of orders it approves (or has auto-approved on its behalf).

2. Who may use the Service

EHForder may be used by:

• Customers: organisations subscribing to the Service, typically wholesalers, distributors, public-sector procurement bodies, or other entities receiving high volumes of inbound purchase orders.
• Authorised users: employees or representatives of Customers, including Reviewers, administrators, and finance team members.
• Customer Group administrators: where multiple country tenants are bound under a single corporate umbrella.

EHForder is intended for B2B use only. The Customer must be a Peppol-receiving participant — i.e. its ERP must be configured to accept EHF Order documents via Peppol — before the Service can deliver orders into the Customer's environment.

3. Accounts and access

3.1 Access methods

Access to EHForder is provided through email-based passwordless login. A one-time token is delivered to the user's verified email address; this token authenticates the session.

3.2 Responsibility for access

You are responsible for:

• Safeguarding access to the email account where login tokens are delivered.
• All activity carried out using your access.
• Notifying the Operator without undue delay if you suspect unauthorised access.

4. Acceptable use

You agree to use EHForder only for lawful, legitimate, commercial procurement-automation purposes.

You must not:

• Use the Service to transmit fraudulent, fabricated, or unauthorised orders.
• Attempt to access data, orders, or systems you are not authorised to access, including across tenants.
• Interfere with the security, integrity, or availability of the Service.
• Upload malicious files or attempt to bypass security measures.
• Use the Service in a manner that violates applicable export controls, sanctions, or trade restrictions.

5. Customer responsibilities

The Customer is responsible for ensuring that:

• Its Reviewer team reviews and approves each non-auto-approved order before transmission.
• Auto-approval, where enabled, is configured with thresholds and safety caps appropriate to the Customer's risk tolerance.
• Its ERP and Peppol participant configuration accept EHF Order documents in the formats listed in its onboarding configuration.
• It informs senders (its own customers) that orders sent to its EHForder ingress address are processed by a third party (the Operator) on the Customer's behalf, where required by applicable law.

Where the Customer has enabled auto-approval, the Customer accepts liability for those auto-approved transmissions.

6. Data protection and roles

Personal data and commercial content processed through EHForder is handled in accordance with applicable data protection law, including the GDPR.

In relation to purchase-order content processed via the Service:

• The Customer is the data controller for the purchase orders it receives, the senders it interacts with, and the EHF Orders transmitted into its ERP.
• The Operator acts as data processor on the Customer's behalf for the limited purpose of providing the Service.
• The Operator's role is limited to receiving the email, extracting structured data, validating against the Peppol BIS schematron, and transmitting via efacto's Peppol Access Point.

The Operator's processing of personal data in the role of controller (i.e. user accounts, audit logs, billing) is further described in our Privacy Policy. The terms governing the Operator's processing as data processor are set out in our DPA.

7. Confidentiality

Users who gain access to orders, sender information, or other Customer business data must treat such information as strictly confidential and must not disclose it except where authorised by the Customer or legally required.

8. No professional advice

EHForder does not provide legal, tax, accounting, customs, or trade advice through the Service.

AI-assisted extraction is a productivity aid. The Reviewer at the Customer is the authoritative party for approving any extracted order, and any business decision taken on the basis of an EHForder-extracted order is the Customer's responsibility.

9. Intellectual property

All intellectual property rights in and to the Service, including software, design, documentation, models, and prompts, belong to the Operator or its licensors.

Users are granted a limited, non-exclusive, non-transferable right to use EHForder solely for its intended purpose during the term of the service agreement.

The Customer retains all rights in its own commercial data, including the inbound emails, extracted orders, catalogue data, and transmitted EHF documents.

10. Availability and changes

EHForder is provided on a best-effort basis. Continuous or uninterrupted availability is not guaranteed.

The Operator may:

• Modify or improve the Service.
• Add or remove functionality.
• Temporarily suspend access for maintenance, security, or legal reasons.

Material changes will be published on the website and, where reasonable, notified to Customer administrators by email.

11. Fees and billing

Fees, billing cadence, currency, and the small one-time setup fee are set out in the Customer's onboarding configuration and on the public pricing page. Billing is monthly in arrears via Skiwo's PoP accounting service unless otherwise agreed in writing.

The first ten transmitted orders are free as part of calibration. Volume discounts apply above 10,000 delivered order-lines per calendar month, as published on the pricing page or as agreed in writing.

12. Suspension and termination

Access may be restricted or suspended where necessary to:

• Protect security or personal data.
• Investigate misuse, suspected fraud, or unauthorised order transmission.
• Comply with legal obligations.
• Address non-payment of fees after reasonable notice.

Either party may terminate the Service on one month's written notice unless a longer commitment has been agreed. Termination does not affect obligations relating to confidentiality, data protection, fees accrued prior to termination, or applicable law.

13. Disclaimer

EHForder is provided "as is" and "as available".

The Operator does not guarantee that every AI-extracted order is correct in every field. The Reviewer-approval flow, calibration period, confidence thresholds, anomaly detection, and schematron validation exist precisely to mitigate the risk of incorrect extraction reaching transmission. Customers that enable auto-approval do so at their own risk.

14. Limitation of liability

To the extent permitted by law:

• The Operator is not liable for indirect or consequential loss, including lost profits, lost contracts, or loss of business opportunity.
• The Operator's aggregate liability for any direct loss arising under or in connection with the Service is limited to the fees paid by the Customer in the twelve months preceding the event giving rise to the claim.
• The Operator is not responsible for actions or decisions taken by the Customer, by the Customer's Reviewer team, by recipients of transmitted EHF documents, or by any third party based on use of the Service.

Nothing in these Terms limits liability that cannot be excluded under Norwegian law.

15. Governing law and jurisdiction

These Terms are governed by Norwegian law.

Any dispute arising out of or in connection with EHForder shall be subject to the exclusive jurisdiction of Oslo District Court, unless mandatory law provides otherwise.

16. Language

These Terms are made available in multiple languages for convenience.

In the event of any inconsistency or conflict between versions, the English version shall prevail.

17. Contact

EHForder
Operated by Skiwo AS
Pilestredet 17, 0164 Oslo, Norway
Email: legal@ehforder.com