How our paperwork works

Updated September 30, 2026

One plain-English Customer Agreement covers the whole relationship. We send it with your proposal, you read it in full, and we both sign it electronically. There is no stack of cross-referenced documents to reconcile.

One agreement

The Customer Agreement is a contract between your business and Andy Labs LLC, a Wyoming limited liability company. It opens with a short deal summary for your details and the choices you make, followed by the terms. If your counsel wants changes, that conversation happens before anyone signs.

The main points, in plain English

• A service we run for you. We set up and run an AI assistant for your business on our own equipment, and you get the results. You work with it through chat, email and its settings. There is no server login and nothing for you to maintain.
• No lock-in. There is no minimum term. After go-live the agreement runs month to month, and either side can end it on written notice.
• Your choice of AI. Your Andy can run on your own Claude subscription (the default), on your own Anthropic API key, or on AI we supply. You can switch any time.
• You own your data and your output. Your data, the memory Andy builds from it, and everything Andy produces for you belong to you. We own our technology: the code, prompts, configuration and agent designs that make Andy work.
• Make it yours. You customize your Andy by asking it or in its settings: its name and personality, its instructions, skills and workflows, its automations and scheduled reports, the systems it connects to, and your approval rules.
• Your customizations are yours. The instructions, settings, skills, workflows and tools you create, or Andy builds at your request, are your data, and they come with you in any export.
• Approvals, by default. Unless you change your settings, sending an email or message on your behalf, anything else sent outside your organization, making or starting a payment, and deleting data all wait for your named approver. Routine housekeeping runs on its own: labeling, sorting and archiving email, and adding, moving or updating calendar entries, including the automatic updates your calendar sends to attendees. So do reading, summarizing and drafting. The approval rules are yours to set. You can tighten or loosen them in Andy’s settings, by asking Andy or by email to us, and every change is logged. We recommend keeping approval for payments and for anything sent outside your organization.
• Hosting in the region you choose. You pick the hosting region from the ones we offer, which can include your own country. If you don’t pick one, the default is Toronto, Canada. Data held in the service stays in that region. Content sent to the AI model for each task is processed where the model provider operates, currently the United States.
• How your data is handled. We use your data only to run the service for you, on your instructions. We never sell it, and we never train AI models on it. Data moves encrypted using TLS 1.2 or higher, and your data is kept separate from other customers’.
• Who handles your data. Vultr for hosting, in your hosting region. Anthropic for the AI model, under your own Anthropic account in Subscription and Own-key modes. OpenRouter for AI access when we supply the AI, if we route through it. Deepgram for voice dictation. Tavily for web search, if you turn it on. We email you 30 days before adding a provider.
• Security, honestly. We take reasonable measures to keep your data secure, but we hold no SOC 2 or ISO certification, we do not promise backups, and no system is completely secure. Ask for an export any time to keep your own copy.
• We keep root and admin control. Andy runs on equipment we hold and control. You get application-level access through chat, email and Andy’s settings.
• Breach notice. If we confirm a security breach affecting your data, we tell you within 72 hours of confirming it.
• What stays out. Health information, payment card data and special-category personal data stay out of the service unless we both sign an addendum for them.
• AI output needs a human eye. Andy’s output can be wrong. It is not legal, tax, accounting, financial or medical advice, so review it before you rely on it.
• Export any time, and when it ends. You can ask for an export of your data at any time, in common, usable formats. After the agreement ends there is a 90-day Exit Window to export your data or buy out your Andy. Then we delete your data, including Andy’s memory and any AI credentials you gave us, and confirm the deletion in writing.
• Buy out your Andy. While the agreement is in force, or during the Exit Window, you can buy a copy of your Andy and have us move it to a server or cloud account in your own name, with a license to run it for your own business.
• Wyoming law, with arbitration. Wyoming law governs the agreement. Disputes go to binding arbitration with the American Arbitration Association, or its International Centre for Dispute Resolution if you are outside the United States.
• Business customers in any country. We work with businesses wherever they are, subject to sanctions and export rules. The agreement is for business use, not for consumers.

Data processing addendum

If you are subject to the EU or UK GDPR, or to a similar law that requires specific terms with a provider that processes personal data for you, our standard data processing addendum is available on request. It includes the EU Standard Contractual Clauses and the UK International Data Transfer Addendum for transfers that need them. Ask at hello@andylabs.io.

Website terms

Use of this website is governed by the Terms of Use and the Privacy Policy.

Contact

Andy Labs LLC, a Wyoming limited liability company. 30 N Gould St, Ste N, Sheridan, WY 82801. Notices and inquiries: hello@andylabs.io.