Advanta Legal · API Terms of Service

1. Acceptance

By generating an API key (sandbox or live) or by integrating with the Advanta API, you ("Customer") agree to these Terms on behalf of your organization.

2. Scope of services

The Advanta API ("API") provides programmatic access to:

• Creditworthiness scoring (/v1/score)
• ESG assessment (/v1/esg)
• ERP connector OAuth + sync (/v1/erp-connector/*)

Sandbox keys (sk_test_*) operate on synthetic data; live keys (sk_live_*) on real data. Sandbox is provided as-is, no SLA. Live tier carries the SLA in Section 8.

3. Customer obligations

• Keep API keys confidential. Treat them as production credentials. Rotate at least every 12 months.
• Do not share keys across organizations or environments.
• Honor end-user opt-outs and revocations within 24 hours.
• Not use the API to build a competing creditworthiness or ESG product.
• Not attempt to reverse-engineer scoring algorithms or extract bulk data beyond your own customers' submissions.
• Comply with applicable law (GDPR, DORA, Banco de Portugal supervisory framework where applicable).

4. Tenant data isolation

Advanta enforces strict per-tenant data isolation. Customer Data submitted via your API key is stored under your tenant_id and is never visible to other Customers. See our Security Overview for technical detail.

5. Rate limits + fair use

• Free / sandbox: 60 requests per minute per API key.
• Starter: 600 rpm.
• Growth: 6,000 rpm.
• Enterprise: contractually negotiated.

Burst beyond the limit is responded to with HTTP 429 + Retry-After header. Sustained abuse may result in key revocation without notice.

6. Pricing + billing

See tech.advanta.pt/pricing for current rates. Live tier is metered per call via Stripe; sandbox is free. Payment terms: net 30 days from invoice.

7. Idempotency, retries, deprecation

POST endpoints accept an Idempotency-Key header (24-hour dedup window). API versioning is path-based (/v1/). Breaking changes ship in new major versions; old versions are supported for at least 12 months after a new version's GA, with quarterly deprecation notices via the email registered at signup.

8. Service Level Agreement (live tier)

• Monthly uptime: 99.9% (excluding scheduled maintenance announced 7 days in advance via the status page).
• p99 latency: < 500ms for /v1/score and /v1/esg.
• Webhook delivery: 99% within 60 seconds.
• Service credits per the SLA Schedule available on request.

8a. Implementation timeline guarantee

For Marketplace and White-label motions where Advanta and the Customer have signed a Statement of Work specifying a go-live date, Advanta commits to the published 10-week implementation timeline.

• Penalty: if go-live is delayed beyond the SOW target by reasons attributable to Advanta (i.e. excluding Customer-side blocking items: IT/compliance review delays, kick-off rescheduling, requested scope changes, third-party-system unavailability), the first twelve (12) months of license fees (White-label) or success-commission (Marketplace) are reduced by 25%.
• Reconciliation: the project plan is published at kick-off, including a list of Customer-side blocking items with named owners. Status reviews happen weekly; delays are jointly attributed at the time they occur, not retroactively.
• Cap: the 25% credit is the sole-and-exclusive remedy for go-live delay (i.e. it does not stack on top of other credits or service-credit remedies), capped at the credit value calculated above.

8b. Funds-in-transit accounts (optional, with consent)

For operations originated through the Marketplace motion, Advanta may, at its option and with the Customer's prior written consent, hold disbursement amounts in segregated funds-in-transit accounts during the funding window between operation approval and bank-side credit to the SME (typically 24–48 hours).

• Segregation: funds-in-transit are held in named segregated accounts at an EEA-licensed credit institution, separate from Advanta's operating accounts and from any other Customer's funds. Beneficial ownership remains with the Customer (the Bank) at all times; Advanta is bare-trustee for the funding window.
• Yield: any interest accrued during the funding window is shared between the parties on terms specified in the SOW (default: 50/50 split, or by negotiation).
• Daily reconciliation: automated nightly statement to the Customer's specified treasury contact.
• Opt-in only: this clause is dormant until the Customer signs a separate funds-in-transit appendix to the SOW. Absent such an appendix, all funds flow direct between the Bank and the SME without Advanta as intermediary.

9. Data protection

The DPA at tech.advanta.pt/legal/dpa is incorporated by reference. Customer is the Controller; Advanta is the Processor. EU data residency by default (eu-central-1 + eu-west-1).

10. Liability

To the maximum extent permitted by law, Advanta's aggregate liability for direct damages is capped at twelve (12) months of fees paid for the affected Service. Indirect, consequential, and punitive damages are excluded.

11. Term + termination

• Either party may terminate for material breach unremedied within 30 days of notice.
• Sandbox access may be terminated at any time without notice for inactivity (90+ days) or abuse.
• On termination, Customer Data is exportable for 60 days and deleted within 90 days, except WORM audit log retained 7 years.

12. Governing law

Portuguese law. Exclusive jurisdiction: Lisbon, Portugal.

13. Changes

Material changes to these Terms are emailed to all active Customers 30 days in advance.

14. Contact

Operations: diogo@advanta.pt
Security: security@advanta.pt