AI AND MCP TERMS

These AI and MCP Terms (“AI Terms”) govern access to and use of the AI Features of BUCS Analytics powered by Crunchafi (the “Service”), including the BUCS MCP Connector, by each customer (“Customer”) of Crunchafi Data Extraction, Inc. (“Crunchafi”) and by Customer’s End Users. These AI Terms are incorporated by reference into the statement of work or other ordering document under which Customer subscribes to the Service (the “SOW”), which is issued under the master agreement between Crunchafi and Customer (the “Agreement”). Capitalized terms not defined in these AI Terms have the meanings given in the SOW or the Agreement. If these AI Terms conflict with the SOW, the order of precedence stated in the SOW applies.

1. Definitions.

(a) “MCP Connector” means the BUCS MCP connector, a component of the Service that implements the Model Context Protocol (an open standard, or a successor or similar protocol) and allows a Customer AI Tool to call the Analysis Tools and retrieve Calculated Results from the Service. The MCP Connector runs within the Service’s hosting environment, and End Users connect to it by entering the URL provided by Crunchafi and signing in with their Service credentials; no software is installed by Customer.

(b) “Customer AI Tool” means any AI application, assistant, agent, large language model, or other software that is selected, configured, or controlled by Customer or its End Users (and not provided by Crunchafi), such as Microsoft 365 Copilot, Microsoft Copilot Studio, or Claude, and that connects to the MCP Connector, together with the provider of that tool (a “Third-Party AI Provider”).

(c) “Native AI Features” means AI Features provided by Crunchafi within the Service, such as auto-generated Client Advisory Briefs, which may use AI models hosted by Crunchafi’s subprocessors.

(d) “Input” means any prompt, query, instruction, or data submitted to an AI Feature, and “AI Output” means any Output generated by or returned through an AI Feature.

(e) “MCP Credentials” means the OAuth tokens, API keys, or other credentials issued to Customer or an End User to authenticate to the MCP Connector.

(f) “Analysis Tools” means the catalog of analysis functions made available through the MCP Connector, as described in the Documentation and updated from time to time, which currently include tools for receivables and payables, cash and runway, revenue and expense analysis, EBITDA and adjustments, reconciliation status, trends, customer and vendor concentration, and transaction advisory analyses (such as AR aging roll forwards, monthly EBITDA bridges, revenue concentration, and customer cohort retention).

(g) “Calculated Results” means the figures, tables, and other results that the Service calculates from Customer Data, as converted into the Service’s normalized data model, and returns in response to a call to an Analysis Tool.

(h) “Dashboard Functions” means the capability of the MCP Connector that allows authorized End Users to create and update dashboards in the BUCS client portal.

2. Access and Scope. AI Features, including MCP Connector access, are available only for client engagements on a License Tier that includes them. The MCP Connector is read-only as to Customer Data and Client financial records: it cannot create, modify, or delete any transaction or record in Customer Data or in any Client’s accounting or business system. The sole exception is the Dashboard Functions, which allow End Users authorized by Customer to create and update dashboards in the BUCS client portal; Customer is responsible for dashboards created or updated through the MCP Connector (including by an agent acting for an End User) and for reviewing their content before making them available to any Client. Each connection is limited to the firm and the companies that the authenticated End User is authorized to access under the permissions configured by Customer’s administrators. Crunchafi may update the Analysis Tools, schemas, and Documentation from time to time. “Documentation” means Crunchafi’s then-current user and technical documentation for the Service and the MCP Connector.

3. Customer AI Tools and Third-Party AI Providers. Customer selects, and is responsible for, each Customer AI Tool and Third-Party AI Provider. When Customer or an End User connects a Customer AI Tool to the MCP Connector, Customer directs and authorizes Crunchafi to transmit the requested Calculated Results and other Customer Data to that Customer AI Tool. Customer acknowledges that (a) once the MCP Connector returns data to a Customer AI Tool, the Third-Party AI Provider’s terms, and not the SOW, govern how that data is processed, retained, used (including for model training), and disclosed, and Crunchafi is not responsible for the Third-Party AI Provider’s acts or omissions; (b) Customer is responsible for configuring its Customer AI Tools appropriately, including by using enterprise accounts and settings that restrict retention and model training consistent with Customer’s professional obligations and the client authorization provisions of the SOW; and (c) the availability of the MCP Connector through any third-party marketplace or AI platform (such as the Microsoft marketplace for Copilot Studio) depends on that third party, may be subject to its terms, and may change, and no such third party is a party to or has obligations under the SOW. Crunchafi does not endorse and makes no warranty regarding any Customer AI Tool.

4. Data Use; No Training or Sale. Crunchafi and its Affiliates do not use Customer Data, Anonymized Data, Inputs, Calculated Results, or AI Output to train, fine-tune, or otherwise develop any artificial intelligence or machine learning model, whether Crunchafi’s, an Affiliate’s, or a third party’s, and do not sell Customer Data. For Native AI Features, Crunchafi shall use AI model providers only under terms that prohibit the provider from using Customer Data, Inputs, or AI Output to train or improve the provider’s models. Crunchafi may create and use Anonymized Data and Aggregated Benchmark Data solely as permitted by the benchmarking and anonymized data provisions of the SOW (which do not permit model training), and may collect and use metadata relating to use of the AI Features (such as tool calls, query types, timestamps, performance, and error logs) to operate, secure, support, measure, and improve the Service.

5. Authorization, Credentials, and Agent Activity. Customer’s administrators determine which End Users may connect to the MCP Connector and which companies each connection covers. Customer is responsible for safeguarding MCP Credentials and for all activity performed using them, including activity performed by an automated agent, scheduled job, or Customer AI Tool acting on Customer’s or an End User’s behalf, which shall be deemed activity of Customer. Customer shall promptly revoke or adjust the access of any End User who leaves Customer or changes roles, and shall notify Crunchafi without undue delay of any suspected unauthorized use of MCP Credentials. Crunchafi may revoke or rotate MCP Credentials at any time to protect the Service.

6. Permitted Use; Automated Workflows. Customer may use the MCP Connector for its internal business purposes and for advisory services to its Clients in the ordinary course, consistent with the Documentation (“Permitted Use”). Permitted Use expressly includes (a) interactive queries by End Users through supported Customer AI Tools; (b) AI agents, scheduled jobs, and automated workflows that End Users initiate or configure; and (c) integration of the MCP Connector with Customer’s own internal tools and systems. Customer shall design automated workflows so that they do not loop, retry indefinitely, or make repeated requests for unchanged data.

7. Included Usage; Fair Use. MCP Connector usage is included in each License Tier that includes AI Features at no additional charge and is not metered or billed separately. Customer’s use of the MCP Connector is subject to fair use, meaning use consistent with Permitted Use, the rate limits and technical controls in Section 8, the restrictions in Section 9, and Crunchafi’s Acceptable Use Policy.

8. Rate Limits and Technical Controls. To protect performance and reliability for all customers, Crunchafi may apply rate limits, concurrency limits, request-size limits, throttling, or queuing to the MCP Connector, which may vary by License Tier and request type and, where published, appear in the Documentation. When a limit is reached, requests may be delayed or rejected with an error indicating the limit, and Customer’s integrations shall handle such responses gracefully, including by backing off before retrying.

9. Acceptable Use. Customer shall not, and shall not permit any End User, agent, or Customer AI Tool to:

(a) use the MCP Connector or AI Features to bulk-extract, scrape, cache, replicate, or reconstruct data, Aggregated Benchmark Data, Service functionality, or the Service’s normalized data models beyond what is reasonably needed for Permitted Use, or to build, benchmark, or train a competing product, data set, or AI model;

(b) attempt to re-identify any Anonymized Data or Aggregated Benchmark Data;

(c) circumvent permissions, rate limits, quotas, authentication, or other technical controls, including by spreading activity across multiple accounts or credentials, or conduct prompt-injection, jailbreak, or similar attacks against the Service;

(d) resell, sublicense, or provide access to the MCP Connector to any third party, including through a service bureau or managed-service offering, except to Clients as expressly permitted by the SOW;

(e) run automated workflows that generate excessive or repetitive requests without a business purpose, such as unbounded loops or continuous polling for unchanged data;

(f) interfere with or disrupt the MCP Connector, other customers’ use of the Service, or Crunchafi’s infrastructure;

(g) submit Inputs containing malicious code or content that Customer does not have the right to provide;

(h) use AI Output as the sole basis for any decision that produces legal or similarly significant effects on an individual (including decisions about credit, employment, insurance, or housing) without meaningful human review; or

(i) use the AI Features in violation of applicable law, the Agreement, the SOW, or Crunchafi’s Acceptable Use Policy, including laws governing artificial intelligence, privacy, consumer protection, and professional conduct.

10. Calculated Results, AI Output, and Professional Responsibility. The Service calculates Calculated Results deterministically from Customer Data as converted into the Service’s normalized data model, in accordance with the Documentation, and is designed to report data that is unavailable as missing rather than estimate it. The Customer AI Tool, and not Crunchafi, determines how Calculated Results are interpreted, summarized, phrased, or combined with other information, and Crunchafi is not responsible for any AI Output generated by a Customer AI Tool. Calculated Results depend on the accuracy and completeness of the source data in each Client’s accounting and business systems and on the mapping of that data to the normalized data model, which Crunchafi does not audit or verify. Native AI Features use probabilistic technologies, and their AI Output may be inaccurate or incomplete. Calculated Results and AI Output are calculated data and information only, and are not audit, attest, review, tax, legal, valuation, investment, or credit advice.

Customer is solely responsible for (a) reviewing and validating Calculated Results and AI Output before relying on them or sharing them with Clients or third parties; (b) any decision Customer or its Clients make based on them; (c) exercising its own professional judgment and complying with applicable professional standards (including AICPA and, where applicable, PCAOB standards); and (d) any disclosures to Clients regarding Customer’s use of AI. Customer shall not rely on Calculated Results or AI Output as the sole basis for any attest conclusion.

11. Ownership of AI Output. As between Crunchafi and Customer, and subject to the provisions of the SOW governing ownership of Outputs and to Crunchafi’s and its Affiliates’ rights in the Service and Aggregated Benchmark Data, Customer owns AI Output generated from Customer Data. Nothing in these AI Terms grants Customer any rights in the MCP Connector, the Service’s data models, schemas, prompts, or tools, all of which are owned by Crunchafi, its Affiliates, or their licensors.

12. Changes; Beta Features. Crunchafi may add, modify, or deprecate AI Features, supported protocols, tools, and AI models, provided that Crunchafi shall give Customer at least thirty (30) days’ prior notice of any change that materially reduces the AI Features included in Customer’s License Tier. Features identified as “beta,” “preview,” or similar are provided for evaluation, may be discontinued at any time, and are excluded from any commitments in these AI Terms.

13. Suspension and Restoration. Crunchafi may restrict or suspend access to the MCP Connector or any AI Feature if Customer’s usage exceeds fair use under Section 7, is inconsistent with Permitted Use or Section 9, threatens the security or stability of the Service or other customers, or if required by law. Where reasonably practicable, Crunchafi will give notice first and an opportunity to correct the issue; Crunchafi may act immediately upon notice where necessary to address a security risk. Crunchafi shall limit any restriction to the affected credentials, integrations, End Users, or features where feasible and to the duration reasonably necessary, and shall restore access promptly once the issue is resolved. Suspension under this Section 13 does not suspend Customer’s access to the remainder of the Service.

14. Disclaimers and Liability. AI Features are Services subject to the warranty, exclusion of certain claims, and limitation of liability provisions of the Agreement. Without limiting the foregoing, Crunchafi and its Affiliates shall have no liability arising from (a) any Customer AI Tool or the acts or omissions of any Third-Party AI Provider; (b) Customer’s or its End Users’ reliance on AI Output in violation of Section 10; or (c) any use of the AI Features in breach of Section 9. Customer’s indemnification obligations under the Agreement include Claims arising from the matters described in clauses (a) through (c).

15. Updates to These AI Terms; MCP Services Usage Policy. Crunchafi may update these AI Terms by posting an updated version on this page, subject to any notice requirements and limits on updates set out in the SOW. The “Last updated” date at the top of this page shows when these AI Terms were last changed. Crunchafi may also update its Documentation for the MCP Connector and AI Features from time to time, provided such updates do not materially reduce Crunchafi’s obligations under these AI Terms. If Crunchafi publishes an MCP Services Usage Policy, it shall apply to Customer’s use of the MCP Connector only to the extent consistent with these AI Terms, and these AI Terms shall control in the event of any conflict.

16. Governing Law. These AI Terms and any dispute relating to the MCP Connector or the AI Features are governed by the governing law and venue provisions of the Agreement.

Crunchafi – BUCS AI and MCP Terms

Last updated October 5, 2026