Terms of Service for the Resio Service

Provider: VisionEdge s. r. o., 29. augusta 1503/1A, 958 01 Partizánske, Slovak Republic Company ID (IČO): 51962161, Tax ID (DIČ): 2120848521, not a VAT payer Registration: Commercial Register of the District Court Trenčín, Section Sro, Insert No. 37109/R

Version: 1.0 · Effective date: 21 June 2026

1. Introductory provisions

1.1 These Terms of Service (the "Terms") govern the rights and obligations between VisionEdge s. r. o. (the "Provider") and the Customer in relation to the provision of the Resio software service.

1.2 Resio is a software tool provided as a cloud service (SaaS) for preparing and validating the register of information under Regulation (EU) 2022/2554 on digital operational resilience for the financial sector ("DORA") and for generating it into a structurally valid package in the xBRL-CSV format. The service is provided through a web interface at the domain resio.visionedge.sk.

1.3 These Terms form an integral part of the agreement between the Provider and the Customer. By using the Service, the Customer confirms that they have read and agree to these Terms.

1.4 The following documents are an integral part of these Terms or are linked to them: the Disclaimer, the Privacy Policy, the Data Processing Agreement (DPA), the Cookie Policy and the SLA (service level agreement). In the event of a conflict, the DPA prevails on matters of personal data processing and the Disclaimer prevails on matters concerning the nature and limits of the Service.

2. Definitions

Service / Resio: the software service provided by the Provider as SaaS, including the web interface, functionalities, validation engine, package generator and related documentation.
Customer: an entrepreneur (a legal entity or a natural person — entrepreneur) or other entity using the Service for the purposes of its activity, in particular a financial entity or a person preparing a register of information for financial entities.
User: a natural person who actually uses the Service, whether without an account (account-free use) or under access set up by the Customer.
Account / Tenant: the Customer's separate data space within the Service, logically isolated from other Customers, available after registration and sign-in.
Account-free use: use of the Service without registering an account (uploading a template, validation and package generation), where data is processed transiently and is not stored in a persistent (living) register.
EBA template: the completed standard master template of the register of information corresponding to Commission Implementing Regulation (EU) 2024/2956 and the relevant EBA reporting framework, which the Customer uploads to the Service.
Customer Content: all data, documents and information that the Customer or a User enters into the Service (in particular the content of the uploaded template, register of information data, saved registers and generated packages).
xBRL-CSV package: the output file (package) generated by the Service, containing data and control files corresponding to the structure of the EBA reporting framework.
Validation: automated checking of the Customer Content against the published EBA rules at the level of format, code lists and cross-references between templates; validation verifies structural and formal conformity, not the factual correctness of the data.
Living register: a feature allowing a signed-in Customer to save a work-in-progress register of information and update it later.
Subscription: a paid entitlement to use the Service or its paid features for an agreed period under the Price List, where such a plan is introduced.
Price List: the current overview of prices and the scope of paid plans published by the Provider (where introduced).

3. Nature of the relationship (B2B)

3.1 The Service is intended exclusively for entrepreneurs and professional entities (in particular financial entities and persons preparing a register of information) for the purposes of their activity. The Customer declares that they use the Service as an entrepreneur or professional entity, not as a consumer.

3.2 The relationship is governed by Act No. 513/1991 Coll., the Commercial Code. Consumer protection provisions (including the 14-day right of withdrawal) do not apply.

4. Nature of the Service and limits of responsibility

4.1 Resio is a tool for preparing and validating the register of information and for generating it into the xBRL-CSV format. Resio does not submit any report, register or generated package to the competent supervisory authority (for example a national competent authority or a European supervisory authority). Submission, filing and the fulfilment of the reporting obligation towards the regulator are solely the Customer's responsibility.

4.2 Resio does not replace legal, regulatory, compliance, tax, accounting or other professional advice and does not constitute an official filing or a decision of the regulator.

4.3 Validation reflects the published EBA rules (in particular EBA Reporting Framework version 4.0 and the relevant XBRL taxonomy) and the implementing technical standards under Commission Implementing Regulation (EU) 2024/2956, as implemented at the time the validation is performed. These rules, taxonomies and regulators' expectations may change. A structurally valid package generated by the Service is not a guarantee of its acceptance by the competent supervisory authority, nor a guarantee of the factual correctness, completeness or truthfulness of the data entered by the Customer.

4.4 A detailed description of the nature of the Service, the limits of its use and the Customer's responsibility is set out in the separate Disclaimer, which forms an integral part of these Terms.

5. Formation and term of the agreement

5.1 The Service may be used in two modes:

(a) without an account — uploading a template, validation and package generation; by using this mode the Customer confirms agreement with these Terms;

(b) with an account — after registration and sign-in the Customer gains access to the living register feature (saving and later updating a register) and to other features depending on the scope of the plan. By registering the Customer confirms agreement with these Terms.

5.2 The Provider is entitled to introduce paid plans (Subscription) under the Price List. Where a paid plan is introduced, use of the relevant paid features is subject to an order or agreement confirmed by the Provider and payment of the Subscription under the Price List. The Price List may include a free trial period or a one-off setup fee.

5.3 An agreement for paid provision of the Service is concluded for an indefinite period unless agreed otherwise.

5.4 The Customer is obliged to provide true and complete identification and billing details and to keep them up to date.

6. Description and scope of the Service

6.1 Resio enables in particular: uploading a completed EBA template, validating it at the level of format, code lists and cross-references between templates, generating a structurally valid package in the xBRL-CSV format (data and control files corresponding to the EBA reporting framework), providing concrete suggestions for fixing identified issues, downloading a blank EBA template, and (for signed-in Customers) saving and updating a living register.

6.2 The Service's web interface is available in several language versions (in particular EN, DE, FR and SK). These Terms are provided in Slovak and English versions.

6.3 The specific scope of features may depend on the mode of use and on the selected plan under the Price List, where introduced. The Provider is entitled to develop, improve and change the Service's features on an ongoing basis while preserving its essential purpose, in particular in response to changes in EBA rules, taxonomies and regulatory requirements.

6.4 Availability of the Service and support are governed by the separate SLA document. The SLA applies to paid or hosted use under its terms; it does not apply to account-free, free use or to beta features.

7. Prices and payment terms

7.1 At the effective date of these Terms, the core features of the Service (uploading a template, validation and package generation) are provided free of charge and without the need to register an account. The Provider is entitled to change the scope of free features and to introduce paid plans under the Price List.

7.2 Where a paid plan is introduced, the Customer pays a Subscription for the Service or its paid features under the applicable Price List. The Provider issues an invoice (tax document) electronically. The invoice is due within 14 days unless agreed otherwise.

7.3 The Provider is not a VAT payer. Prices in the Price List are final and invoices are issued without VAT. If the Provider becomes a VAT payer, VAT will be added to the prices at the statutory rate.

7.4 In the event of late payment, the Provider is entitled to claim default interest under the applicable law and, after prior notice, to suspend access to the paid features until payment is made. Suspension does not relieve the Customer of the obligation to pay the amount due.

7.5 The Provider is entitled to change the Price List. The Provider will notify the Customer of a change in the price of an existing Subscription at least 30 days in advance. If the Customer does not agree with the change, they may terminate the agreement as of the effective date of the price change.

8. Rights and obligations of the Provider

8.1 The Provider undertakes to provide the Service with professional care and to the extent set out in these Terms and the selected plan.

8.2 The Provider makes reasonable efforts to keep the validation engine aligned with the published EBA rules and taxonomies. However, the Provider does not guarantee that validation will at all times fully conform to the current, future or amended interpretation of the rules by the regulator (see the Disclaimer).

8.3 The Provider implements appropriate technical and organisational measures to secure the Service and protect data (in particular encrypted transmission via HTTPS/TLS, logical isolation of individual Customers' data, access management and regular backups of stored data).

8.4 The Provider is entitled to carry out planned maintenance of the Service. It will give advance notice of planned maintenance with a material impact on availability in accordance with the SLA.

8.5 The Provider is not responsible for the Customer Content, in particular for the factual correctness, completeness, truthfulness or lawfulness of the data uploaded to the Service.

9. Rights and obligations of the Customer

9.1 The Customer is obliged to use the Service in accordance with these Terms, applicable law and the Acceptable Use Rules (Art. 10).

9.2 The Customer is responsible for protecting Users' access credentials, for all actions carried out under their account, and for the correctness, completeness, truthfulness and lawfulness of the Customer Content.

9.3 The Customer is responsible for fulfilling their obligations under DORA and related regulations, including meeting deadlines, for the selection and content of the register of information data, and for the actual submission of the package to the competent supervisory authority. Before using a generated package, the Customer is obliged to verify its content and, where appropriate, have it checked by a qualified professional.

9.4 The Customer is responsible for having a lawful basis for processing personal data they enter into the Service. Where the Customer Content contains personal data and this is stored in the Service, the processing is governed by the Data Processing Agreement (DPA).

9.5 The Customer may not make the Service available to third parties beyond the agreed scope, nor use it to provide a competing service to third parties.

10. Acceptable Use Rules

10.1 The Customer and Users may not, in particular: (a) enter unlawful, harmful or third-party-rights-infringing content into the Service; (b) compromise the security or integrity of the Service, attempt unauthorised access, intrusion or overload; (c) obtain the source code of the Service (reverse engineering) beyond what is permitted by law; (d) place automated load on the Service in a manner that threatens its operation; (e) misuse the Service to send unsolicited communications; (f) enter into the Service special categories of personal data under Art. 9 GDPR beyond what is necessary for the purpose of the register of information.

10.2 In the event of a serious or repeated breach, the Provider is entitled to restrict or suspend access, including without prior notice where there is a risk of imminent harm.

11. Customer Content and data

11.1 The Customer Content remains the property of the Customer. The Provider obtains only the limited authorisation necessary to provide and secure the Service.

11.2 In account-free use, the Customer Content is processed transiently, solely for the purpose of performing validation and generating the package, and is not stored in a persistent (living) register. After processing or the session ends, the transiently processed data is deleted; technical logs may be retained to the extent necessary for security and operation.

11.3 In use with an account, the Customer Content (including a saved living register) is stored in the Customer's Account. The Provider performs regular backups of stored data in accordance with the SLA; backups do not replace the Customer's own records.

11.4 During the term of the agreement, the Customer is able to export their data and generated packages from the Service.

11.5 After termination of the agreement or deletion of the account, the Provider makes the export of stored data available for a period of 30 days, after which it is entitled to delete the Customer's data unless a specific legal regulation requires further retention.

12. Intellectual property

12.1 The Resio Service, its software, validation engine, design, documentation and trademarks are the intellectual property of the Provider or its licensors.

12.2 The Customer is granted a non-exclusive, non-transferable and time-limited (for the duration of using the Service) right to use the Service for the purposes of their activity. No provision of these Terms transfers ownership rights in the Service to the Customer.

12.3 The Customer may use the generated packages and outputs created from the Customer Content for their own purposes, including submission to the regulator.

13. Personal data protection

13.1 The processing of personal data is governed by the Privacy Policy and, as regards personal data contained in the Customer Content that is stored in the Service, by the Data Processing Agreement (DPA).

13.2 With respect to account data, billing and operation of the Service, the Provider acts as a controller. With respect to personal data contained in the Customer Content, the Customer acts as a controller and the Provider as a processor under Art. 28 GDPR.

14. Confidentiality

14.1 The parties undertake to keep confidential the other party's confidential information obtained in connection with the Service and not to use it for any purpose other than the performance of the agreement. This is without prejudice to statutory obligations to provide information to the competent authorities.

15. Liability for defects and damage, limitation of liability

15.1 The Provider provides the Service "as is" and "as available", to the extent and quality set out in these Terms and the SLA. The Provider does not warrant that the Service will be entirely error-free or uninterrupted, nor that a generated package will be accepted by the competent supervisory authority.

15.2 The Provider is liable for actual damage caused by a breach of its obligations. The Provider is not liable for lost profit, indirect or consequential damage, penalties or measures imposed on the Customer by the regulator, loss of data caused on the Customer's side, nor for damage arising from improper use of the Service or from incorrect, incomplete or untrue data entered by the Customer.

15.3 The Provider's total aggregate liability for damage is limited to the amount actually paid by the Customer for the Service for the 12 months preceding the occurrence of the damage. If the Service was provided free of charge during the relevant period, the Provider's total aggregate liability is limited to EUR 100. This limitation does not apply to damage caused intentionally or by gross negligence, unless the law provides otherwise.

15.4 Neither party is liable for a breach of obligations caused by circumstances excluding liability (force majeure), for example outages of third-party infrastructure beyond its control.

16. Term and termination of the agreement

16.1 The agreement may be terminated by mutual agreement, notice or withdrawal in accordance with these Terms and applicable law. Account-free use does not establish a lasting contractual relationship; it ends when use of the Service ceases.

16.2 Either party may terminate an agreement concluded for an indefinite period without giving a reason, with a notice period of 1 month, unless agreed otherwise. The Customer may delete their account at any time.

16.3 The Provider is entitled to withdraw from the agreement in the event of a serious breach of the Customer's obligations (in particular a breach of Art. 10 or late payment despite notice).

16.4 Upon termination, the Customer's right to use the Service ceases. Art. 11.5 applies to the export and deletion of data.

17. Changes to the Terms and the Service

17.1 The Provider is entitled to amend these Terms, in particular due to changes in legislation, EBA rules and taxonomies, development of the Service or operational reasons. It will notify Customers with an account in an appropriate manner (e.g. by email or within the Service interface) at least 15 days before the effective date.

17.2 If the Customer does not agree with a change, they are entitled to terminate the agreement as of the effective date of the change. By continuing to use the Service after the change takes effect, the Customer expresses agreement with the new wording.

18. Governing law and dispute resolution

18.1 The agreement and these Terms are governed by the law of the Slovak Republic, in particular the Commercial Code.

18.2 The parties will primarily seek to resolve disputes by agreement. If no agreement is reached, the courts of the Slovak Republic have jurisdiction.

19. Final provisions

19.1 If any provision of these Terms becomes invalid or ineffective, the remaining provisions remain in force. The invalid provision is replaced by a provision that most closely approximates its purpose.

19.2 The Customer may not assign rights and obligations under the agreement to a third party without the Provider's prior written consent.

19.3 Service of communications is carried out electronically to the parties' contact emails, unless agreed otherwise.

19.4 These Terms take effect on 21 June 2026.

20. Contact

VisionEdge s. r. o., 29. augusta 1503/1A, 958 01 Partizánske, Slovak Republic Service and terms matters: info@visionedge.sk Support: podpora@visionedge.sk · Web: https://visionedge.sk