Terms
1. Definitions
“Account” means Customer’s account for accessing and using the Service.
“Affiliate” means any entity that directly or indirectly controls, is controlled by, or is under common control with a party.
“Authorized User” means an employee, consultant, contractor, advisor, customer, partner, supplier or other individual authorized by Customer to access the Service.
“Customer Data” means data, content, files, reports, dashboards, configurations, user information, metadata, access rules, business information, personal data and other materials submitted to, connected to, processed by or made available through the Service by or on behalf of Customer.
“Documentation” means Skald BI’s then-current user guides, technical documentation, product descriptions and usage instructions made available to Customer.
“External User” means an Authorized User who is not an employee of Customer, including Customer’s customers, partners, suppliers, contractors or other third parties.
“Microsoft Services” means Microsoft Power BI, Microsoft Fabric, Power BI Embedded, Microsoft Azure, Microsoft Entra ID, Microsoft 365 and any related Microsoft services, products, APIs, infrastructure, licenses or capacity.
“Order Form” means an ordering document, online order, statement of work, subscription agreement or other written agreement specifying the Service, subscription plan, fees, term, usage limits, support level and other commercial terms.
“Personal Data” has the meaning given to it under applicable data protection laws, including the GDPR.
“Service Data” means operational data generated by the Service, including logs, usage data, diagnostic data, security data, performance data and aggregated or anonymized data.
“Skald BI Technology” means the Service, software, platform, APIs, interfaces, workflows, designs, templates, documentation, know-how, algorithms, configurations, connectors, product logic and all related intellectual property.
“Subscription Term” means the subscription period specified in the applicable Order Form.
“Third-Party Services” means third-party products, platforms, hosting services, applications, integrations, data sources or services used with or connected to the Service, including Microsoft Services.
2. Description of the Service
Skald BI provides a software-as-a-service platform that enables Customer to present, distribute, manage and provide access to business intelligence content, dashboards and reports through a branded portal.
The Service is designed to operate as a branded access, distribution and presentation layer for Microsoft Power BI reports and related business intelligence content.
Depending on Customer’s configuration and subscription plan, the Service may include functionality such as:
a. branded BI portals;
b. embedded Power BI report presentation;
c. user and role management;
d. access control;
e. customer, partner or employee-facing report distribution;
f. authentication and single sign-on integrations;
g. metadata and configuration management;
h. report grouping, presentation and navigation;
i. usage logging and audit-related functionality;
j. support and onboarding services; and
k. related administrative functionality.
Subject to these Terms and the applicable Order Form, Skald BI grants Customer a limited, non-exclusive, non-transferable, non-sublicensable right to access and use the Service during the Subscription Term for Customer’s internal business purposes and, where expressly permitted, for providing report access to External Users.
3. Microsoft Power BI and Third-Party Dependencies
Customer acknowledges that the Service may depend on Customer’s Microsoft Services, including Customer’s Power BI environment, Microsoft Fabric capacity, Azure environment, Entra ID configuration, Power BI workspaces, reports, datasets, semantic models, service principals, row-level security settings, APIs, licenses and related Microsoft infrastructure.
Customer is solely responsible for obtaining, maintaining and complying with all Microsoft licenses, subscriptions, capacity requirements, tenant configurations and terms applicable to Customer’s use of Microsoft Services.
Skald BI does not provide Microsoft licenses unless expressly stated in an Order Form.
Skald BI does not warrant that Customer’s use of the Service will eliminate all Microsoft licensing obligations.
Any statements regarding reduced licensing cost, avoiding per-viewer licenses, simplified Power BI sharing or reduced administrative burden depend on Customer’s configuration, Customer’s use case, Microsoft’s then-current licensing rules and applicable Microsoft terms.
Customer is solely responsible for the accuracy, structure, legality, governance, access control and compliance of its Power BI reports, datasets, semantic models, row-level security rules, workspace permissions, tenant configuration and underlying data sources.
Microsoft, Power BI, Microsoft Fabric, Azure, Entra ID and related names are trademarks of Microsoft. Skald BI is not Microsoft and is not endorsed by Microsoft unless expressly stated in writing.
4. Account Registration and Access
Customer is responsible for ensuring that all account, billing, technical and administrative information is accurate, complete and kept up to date.
Customer is responsible for all activity under its Account and for all acts and omissions of its Authorized Users.
Customer must ensure that Authorized Users keep login credentials confidential and do not share individual user accounts.
Customer must promptly notify Skald BI of any unauthorized access, suspected security incident, credential compromise or misuse of the Service.
Skald BI may suspend access to the Service where reasonably necessary to prevent security risks, unlawful use, material breach, harm to the Service, harm to other customers or harm to Skald BI. Where reasonably practicable, Skald BI will provide prior notice and an opportunity to remedy.
5. Authorized Users and External Users
Customer may permit Authorized Users to access the Service only in accordance with the applicable Order Form.
Customer may permit External Users to access reports, dashboards or portal content through the Service only where permitted by the applicable subscription plan or Order Form.
Customer is responsible for:
a. determining which users may access the Service;
b. assigning correct roles, groups, permissions and access rights;
c. ensuring that External Users are contractually and legally permitted to access the relevant content;
d. ensuring that External User access complies with Customer’s confidentiality, data protection, regulatory and contractual obligations; and
e. all acts and omissions of Authorized Users and External Users.
Customer must promptly remove access for users who no longer require access or are no longer authorized.
6. Customer Responsibilities
Customer is responsible for:
a. determining whether the Service is suitable for Customer’s intended use;
b. configuring the Service correctly;
c. managing users, roles, access rights, permissions and identity provider settings;
d. validating report access before making reports available to users;
e. ensuring the accuracy, quality, legality and completeness of Customer Data;
f. maintaining required Microsoft Services, licenses and capacity;
g. maintaining its own systems, data sources, devices, networks and identity infrastructure;
h. obtaining all rights, permissions, consents and legal bases required to process Customer Data through the Service;
i. complying with applicable laws, including data protection, confidentiality, employment, export control, sector-specific and regulatory laws;
j. maintaining appropriate backups of Customer Data outside the Service unless otherwise agreed in writing; and
k. ensuring that use of Third-Party Services complies with applicable third-party terms.
Customer acknowledges that Skald BI does not control Customer’s internal reporting logic, business decisions, data models, report design, Power BI configurations, user assignments, governance model or interpretation of analytics.
7. Access Control, Permissions and Row-Level Security
Customer is responsible for configuring, testing and validating all access permissions, roles, groups, row-level security rules, workspace access, report visibility, user assignments and External User access.
Skald BI provides tools to manage and support access to reports and portal content, but Customer remains responsible for ensuring that each user is granted access only to data, reports and dashboards they are authorized to view.
Customer must test and validate access configurations before making reports, dashboards or portal content available to employees, customers, partners or other third parties.
Skald BI is not responsible for unauthorized access resulting from Customer’s incorrect configuration of Power BI, Microsoft Services, identity providers, row-level security, user roles, groups, tenant settings or report permissions.
8. Customer Branding and White-Label Portal
Customer may configure the Service with Customer’s own branding, domain, logos, colors, labels, text, portal structure and customer-facing content, subject to the applicable subscription plan and Order Form.
Customer represents and warrants that it has all rights necessary to use branding, trademarks, names, content and materials uploaded to or configured in the Service.
Customer is solely responsible for all customer-facing statements, disclaimers, descriptions, report names, labels, portal content and other materials it publishes through the Service.
Skald BI may display, remove or limit Skald BI branding depending on the applicable subscription plan or Order Form.
9. Acceptable Use
Customer must not, and must not permit any Authorized User or third party to:
a. use the Service for unlawful, harmful, fraudulent, misleading or abusive purposes;
b. access or attempt to access systems, data, reports, accounts or environments without authorization;
c. interfere with, disrupt or degrade the Service, networks, infrastructure or security controls;
d. reverse engineer, decompile, disassemble or attempt to derive source code, except where such restriction is prohibited by law;
e. copy, resell, rent, lease, sublicense, distribute or make the Service available to third parties except as expressly permitted by these Terms or an Order Form;
f. use the Service to build, benchmark or improve a competing product or service;
g. bypass usage limits, security controls, technical restrictions or license restrictions;
h. upload malware, viruses, malicious code or harmful components;
i. process special categories of Personal Data, highly sensitive data or regulated data unless expressly agreed in writing and supported by appropriate safeguards;
j. remove proprietary notices;
k. conduct penetration testing, vulnerability scanning, scraping, automated security testing, load testing or similar testing without Skald BI’s prior written approval;
l. use automated means to extract data from the Service except through documented APIs expressly made available by Skald BI; or
m. use the Service in a manner that may damage Skald BI’s systems, reputation, customers or partners.
10. Customer Data and Metadata
Customer retains all rights, title and interest in Customer Data.
Customer grants Skald BI a limited, worldwide, non-exclusive right to host, copy, process, transmit, display and use Customer Data solely as necessary to:
a. provide, operate, secure, support and improve the Service;
b. authenticate users and manage access;
c. display and distribute reports through the Service;
d. manage Customer’s portal, configuration, branding and metadata;
e. prevent, investigate or resolve technical, operational or security issues;
f. comply with law; and
g. perform obligations under these Terms and applicable Order Forms.
Unless otherwise agreed or technically required for the Service, Skald BI does not store Customer’s underlying Power BI datasets or source system data.
The Service may process and store limited metadata, configuration data, access rules, user information, authentication data, report identifiers, workspace identifiers, tenant identifiers, usage logs, audit logs, branding settings and other information necessary to provide, secure and support the Service.
Customer remains responsible for the content, accuracy, legality, security classification and governance of all reports, dashboards, datasets, semantic models and data sources made available through the Service.
Skald BI will not sell Customer Data.
Skald BI will not use Customer Data to train general-purpose AI models unless expressly agreed in writing.
Skald BI may use aggregated or anonymized Service Data for analytics, benchmarking, product improvement, security, performance monitoring and business purposes, provided that such data does not identify Customer, Authorized Users or any individual.
11. Data Protection
To the extent Skald BI processes Personal Data on behalf of Customer, Customer is the controller and Skald BI is the processor, unless otherwise agreed in writing.
The parties shall comply with applicable data protection laws, including Regulation (EU) 2016/679, the General Data Protection Regulation.
The Data Processing Agreement attached as Annex 1 forms part of these Terms.
Customer is responsible for ensuring that:
a. Customer has a valid legal basis for processing Personal Data through the Service;
b. all required privacy notices have been provided;
c. all required consents have been obtained where applicable;
d. Customer Data does not include Personal Data that is unnecessary or excessive for the intended use;
e. Customer’s instructions to Skald BI are lawful; and
f. Customer has authority to make Personal Data available to Skald BI and any applicable sub-processors.
Skald BI shall process Personal Data only on documented instructions from Customer unless required by applicable law.
12. Security
Skald BI will maintain commercially reasonable administrative, technical and organizational security measures designed to protect the Service and Customer Data.
Such measures may include, as applicable:
a. access controls;
b. authentication controls;
c. encryption in transit;
d. encryption at rest where appropriate;
e. logging and monitoring;
f. backup and recovery procedures;
g. vulnerability management;
h. personnel confidentiality obligations;
i. incident response procedures; and
j. supplier and sub-processor controls.
Customer acknowledges that no system is completely secure and that Skald BI does not guarantee that unauthorized access, cyberattacks, data loss or security incidents will never occur.
Customer is responsible for securing its own systems, devices, networks, credentials, identity provider, Microsoft tenant, Power BI environment, datasets, workspaces, reports, source systems and Third-Party Services.
Where Customer requests support, Customer authorizes Skald BI personnel to access Customer’s Account, configuration, logs, metadata and, where necessary, report views or related information solely to diagnose, resolve or prevent issues. Skald BI will limit such access to authorized personnel with a need to know and subject to confidentiality obligations.
13. Third-Party Services
The Service may integrate with or depend on Third-Party Services.
Customer acknowledges that Third-Party Services are not controlled by Skald BI and may be subject to separate terms, fees, limitations, availability, security measures and data processing practices.
Skald BI is not responsible for Third-Party Services, including their availability, performance, errors, outages, security incidents, changes, discontinuation, licensing requirements or data handling, except to the extent caused by Skald BI’s breach of these Terms.
If a Third-Party Service becomes unavailable, materially changes or ceases to interoperate with the Service, Skald BI may modify the Service or relevant integration. Skald BI will use commercially reasonable efforts to minimize material disruption.
14. Fees and Payment
Customer must pay all fees specified in the applicable Order Form.
Unless otherwise stated in an Order Form:
a. fees are stated exclusive of VAT and other taxes;
b. fees are non-refundable;
c. invoices are payable within thirty days from invoice date;
d. overdue amounts may accrue interest at the maximum rate permitted by applicable law; and
e. Skald BI may suspend the Service for undisputed overdue amounts after giving at least ten days’ written notice.
Customer is responsible for all taxes, duties and governmental charges, excluding taxes based on Skald BI’s net income.
15. Subscription Term and Renewal
The Subscription Term is set out in the applicable Order Form.
Unless otherwise stated in an Order Form, subscriptions automatically renew for successive periods equal to the initial Subscription Term unless either party gives written notice of non-renewal at least sixty days before the end of the then-current term.
Skald BI may update fees for renewal terms by giving notice at least sixty days before renewal.
16. Support and Service Levels
Support and service levels are provided as specified in the applicable Order Form, support policy or service level agreement.
Unless expressly agreed otherwise, Skald BI does not guarantee uninterrupted or error-free availability of the Service.
Skald BI may perform scheduled maintenance and emergency maintenance. Skald BI will use commercially reasonable efforts to provide advance notice of scheduled maintenance where practicable.
17. Professional Services
If Skald BI provides onboarding, configuration, implementation, customization, training, advisory, migration or other professional services, such services shall be governed by the applicable Order Form or statement of work.
Unless otherwise agreed in writing, deliverables created by Skald BI remain part of the Skald BI Technology, except for Customer Data and Customer-owned materials.
Customer is responsible for reviewing, testing and approving any configuration, implementation or deliverable before production use.
18. Beta Features
Skald BI may provide access to beta, preview, experimental or early-access features.
Beta features are provided “as is”, may be changed or discontinued at any time, and may be excluded from support, warranties, service levels and indemnities unless otherwise agreed in writing.
Customer should not use beta features for production-critical use unless expressly approved by Skald BI.
19. AI and Automated Features
The Service may include automated, AI-assisted or rule-based functionality.
Customer remains responsible for reviewing, validating and approving outputs, configurations, recommendations, classifications, permissions and business decisions generated or supported by the Service.
Skald BI does not warrant that automated outputs will be accurate, complete, unbiased, suitable for Customer’s business purpose or compliant with Customer’s internal policies.
Customer must not rely on the Service as the sole basis for decisions that may have legal, financial, employment, regulatory or significant operational consequences without appropriate human review.
20. Intellectual Property Rights
Skald BI and its licensors retain all rights, title and interest in and to the Skald BI Technology.
No rights are granted to Customer except as expressly stated in these Terms or an Order Form.
Customer may provide feedback, suggestions or improvement ideas regarding the Service. Skald BI may use such feedback without restriction or obligation, provided that Skald BI does not disclose Customer’s Confidential Information.
Customer retains all rights in Customer Data, including Customer-owned dashboards, reports, business logic, data models and materials.
21. Confidentiality
“Confidential Information” means non-public information disclosed by one party to the other that is marked confidential or should reasonably be understood to be confidential given its nature and circumstances.
Confidential Information includes Customer Data, business plans, pricing, product roadmaps, technical information, security information, financial information, trade secrets and non-public commercial information.
The receiving party shall:
a. use Confidential Information only to perform or receive the Service;
b. protect Confidential Information using reasonable care;
c. not disclose Confidential Information except to personnel, advisors, contractors, Affiliates and service providers who need to know it and are bound by confidentiality obligations; and
d. promptly notify the disclosing party of unauthorized disclosure.
Confidentiality obligations do not apply to information that:
a. is publicly available without breach;
b. was lawfully known before disclosure;
c. is lawfully received from a third party without confidentiality obligations; or
d. is independently developed without use of Confidential Information.
A party may disclose Confidential Information if required by law, court order or governmental authority, provided that it gives prior notice where legally permitted.
22. Warranties
Each party represents that it has authority to enter into these Terms.
Skald BI warrants that it will provide the Service in a professional and workmanlike manner and materially in accordance with the applicable Documentation.
Customer’s exclusive remedy for breach of this warranty is that Skald BI will use commercially reasonable efforts to correct the non-conformity. If Skald BI cannot correct the non-conformity within a reasonable time, Customer may terminate the affected Order Form and receive a pro-rata refund of prepaid unused fees for the terminated portion.
Except as expressly stated in these Terms, the Service is provided “as is” and “as available”.
To the maximum extent permitted by law, Skald BI disclaims all implied warranties, including warranties of merchantability, fitness for a particular purpose, non-infringement, accuracy, uninterrupted availability and error-free operation.
23. Indemnification
Skald BI shall defend Customer against third-party claims alleging that the Service, when used in accordance with these Terms, infringes such third party’s intellectual property rights, and shall pay damages finally awarded or settlement amounts approved by Skald BI.
Skald BI has no obligation for claims arising from:
a. Customer Data;
b. Customer’s reports, dashboards, datasets, semantic models or source systems;
c. Customer’s use of Microsoft Services or Third-Party Services;
d. Customer’s misuse of the Service;
e. modifications not made by Skald BI;
f. use in combination with systems, data or services not provided by Skald BI;
g. continued use after Skald BI provides a non-infringing alternative; or
h. breach of applicable Microsoft or third-party licensing terms.
If the Service becomes or is likely to become subject to an infringement claim, Skald BI may:
a. procure the right for Customer to continue using the Service;
b. modify the Service to avoid infringement;
c. replace the Service with substantially equivalent functionality; or
d. terminate the affected Service and refund prepaid unused fees.
Customer shall defend Skald BI against third-party claims arising from:
a. Customer Data;
b. Customer’s reports, dashboards, datasets, semantic models or source systems;
c. Customer’s breach of these Terms;
d. Customer’s unlawful use of the Service;
e. Customer’s violation of applicable law;
f. Customer’s violation of Microsoft or third-party terms; or
g. Customer’s incorrect access configuration resulting in unauthorized access to data, reports or dashboards.
The indemnified party must promptly notify the indemnifying party, provide reasonable cooperation and allow the indemnifying party to control the defense and settlement, provided that no settlement may impose liability or admission of wrongdoing on the indemnified party without consent.
24. Limitation of Liability
To the maximum extent permitted by law, neither party shall be liable for indirect, incidental, special, consequential, punitive or exemplary damages, including loss of profits, loss of revenue, loss of goodwill, loss of business opportunity, loss of data, business interruption or cost of substitute services.
Each party’s total aggregate liability arising out of or relating to these Terms shall not exceed the fees paid or payable by Customer to Skald BI under the applicable Order Form during the twelve months preceding the event giving rise to liability.
The above limitations do not apply to:
a. Customer’s payment obligations;
b. breach of confidentiality obligations;
c. infringement or misuse of intellectual property rights;
d. indemnification obligations;
e. liability that cannot be limited under applicable law; or
f. wilful misconduct or gross negligence.
For data loss, security incidents, service outages, Microsoft dependency issues, Third-Party Service failures and incorrect Customer configurations, Skald BI’s liability is subject to the general liability cap unless mandatory law requires otherwise.
25. Termination
Either party may terminate an Order Form or these Terms if the other party materially breaches these Terms and fails to cure the breach within thirty days after written notice.
Skald BI may terminate or suspend the Service immediately if:
a. Customer fails to pay overdue undisputed fees after notice;
b. Customer’s use creates a security risk or legal risk;
c. Customer materially breaches acceptable use restrictions;
d. continued provision of the Service would violate applicable law;
e. Customer violates Microsoft or third-party licensing terms in a way that creates risk for Skald BI; or
f. a required Third-Party Service becomes unavailable in a way that prevents provision of the Service.
Upon termination:
a. Customer’s right to access the Service ends;
b. Customer must stop using the Service;
c. Customer must pay all fees due up to the effective termination date;
d. each party must return or delete Confidential Information as required by these Terms; and
e. provisions intended to survive shall survive, including confidentiality, payment obligations, intellectual property, data protection, limitation of liability, indemnification and governing law.
26. Data Export and Deletion
During the Subscription Term, Customer may export available Customer Data using the Service’s available functionality or by reasonable request to Skald BI.
After termination or expiry, Skald BI will make Customer Data stored in the Service available for export for thirty days, unless prohibited by law or unless the Account was terminated for severe misuse, security reasons or unlawful activity.
After the export period, Skald BI may delete Customer Data from active systems in accordance with its standard deletion procedures, unless retention is required by law, backup cycles, dispute management, security, audit requirements or legitimate business needs.
Skald BI may retain aggregated or anonymized data that does not identify Customer, Authorized Users or individuals.
Customer acknowledges that Power BI reports, datasets, semantic models and source system data may remain in Customer’s Microsoft Services and are not deleted by Skald BI unless expressly stated in writing.
27. Publicity
Skald BI may identify Customer as a customer using Customer’s name and logo on its website, pitch materials and customer lists, unless Customer objects in writing.
Any case study, press release or detailed public announcement requires Customer’s prior written approval.
28. Changes to Terms
Skald BI may update these Terms from time to time.
For material changes, Skald BI will provide reasonable notice, for example by email, in-app notification or posting on its website.
Updated Terms will apply from the effective date stated in the notice.
Changes will not materially reduce Customer’s rights during an active Subscription Term unless required by law or necessary for security, compliance, technical or third-party dependency reasons.
If Customer objects to material changes, Customer may terminate the affected Service before the changes take effect and receive a pro-rata refund of prepaid unused fees, unless the changes are required by law.
29. Force Majeure
Neither party is liable for failure or delay caused by events beyond its reasonable control, including natural disasters, war, terrorism, labor disputes, government action, internet or hosting failures, cyberattacks, utility failures, epidemics, sanctions, supply chain disruptions or failures of Third-Party Services.
Payment obligations are not excused by force majeure.
30. Assignment
Customer may not assign or transfer these Terms without Skald BI’s prior written consent, except to an Affiliate or in connection with a merger, acquisition, corporate reorganization or sale of substantially all assets, provided that the assignee assumes all obligations.
Skald BI may assign these Terms to an Affiliate or in connection with a merger, acquisition, restructuring or sale of assets.
31. Notices
Notices must be given in writing and sent to the addresses specified in the applicable Order Form or otherwise notified by the parties.
Skald BI may provide operational notices by email, in-app notification or through the Service.
Legal notices to Skald BI must be sent to:
Wahsel AB
Sjömärkesvägen 33, 423 39 Torslanda
Email: info@wahsel.com
32. Governing Law and Disputes
These Terms are governed by the laws of Sweden, excluding conflict of law rules.
Any dispute, controversy or claim arising out of or in connection with these Terms shall be finally settled by the courts of Sweden, with Stockholm District Court as the court of first instance.
33. Miscellaneous
These Terms, together with the applicable Order Form, DPA and any referenced policies, constitute the entire agreement between the parties regarding the Service.
If there is a conflict between documents, the following order applies unless expressly stated otherwise:
- Order Form
- Data Processing Agreement
- these Terms
- Documentation
- policies referenced by these Terms
No waiver is effective unless in writing.
If any provision is held invalid or unenforceable, the remaining provisions remain in effect.
The parties are independent contractors. These Terms do not create a partnership, joint venture, employment, agency or fiduciary relationship.
ANNEX 1 — DATA PROCESSING AGREEMENT
This Data Processing Agreement (“DPA”) forms part of the Terms and applies where Skald BI processes Personal Data on behalf of Customer.
1. Roles of the Parties
Customer is the controller of Personal Data processed through the Service.
Skald BI is the processor of such Personal Data.
Where Customer acts as processor for a third-party controller, Skald BI acts as sub-processor, and Customer is responsible for ensuring that its instructions to Skald BI are consistent with Customer’s obligations to the relevant controller.
2. Subject Matter
Skald BI processes Personal Data to provide, operate, secure, support and improve the Service.
3. Duration
Processing continues for the Subscription Term and any post-termination period required for export, deletion, legal compliance, backup retention, dispute management or security purposes.
4. Nature and Purpose of Processing
Processing may include:
a. hosting;
b. storage;
c. transmission;
d. retrieval;
e. display;
f. authentication;
g. access management;
h. logging;
i. support;
j. troubleshooting;
k. security monitoring;
l. deletion; and
m. other processing necessary to provide the Service.
5. Categories of Data Subjects
Data subjects may include:
a. Customer’s employees;
b. Customer’s consultants and contractors;
c. Customer’s customers;
d. Customer’s partners;
e. Customer’s suppliers;
f. External Users;
g. individuals represented in dashboards, reports or datasets; and
h. administrative users of the Service.
6. Categories of Personal Data
Personal Data may include:
a. names;
b. email addresses;
c. job titles;
d. company names;
e. user IDs;
f. login and authentication data;
g. IP addresses;
h. usage logs;
i. access rights and role information;
j. business contact details;
k. report access history;
l. metadata;
m. support communications; and
n. other Personal Data included in Customer Data.
7. Special Categories of Personal Data
Customer must not submit or make available special categories of Personal Data, criminal offence data, health data, sensitive employment data or other highly regulated data through the Service unless expressly agreed in writing and supported by appropriate safeguards.
If Customer submits such data without written agreement, Customer remains solely responsible for the legality and consequences of such processing.
8. Customer Instructions
Skald BI shall process Personal Data only on documented instructions from Customer, including these Terms, the Order Form, this DPA and Customer’s configuration of the Service.
Skald BI shall notify Customer if, in Skald BI’s reasonable opinion, an instruction infringes applicable data protection law, unless prohibited by law.
9. Confidentiality
Skald BI shall ensure that persons authorized to process Personal Data are bound by confidentiality obligations or are subject to appropriate statutory confidentiality obligations.
10. Security Measures
Skald BI shall implement appropriate technical and organizational measures designed to protect Personal Data against unauthorized or unlawful processing and accidental loss, destruction, damage, alteration or disclosure.
Such measures may include, as applicable:
a. access control;
b. authentication;
c. encryption in transit;
d. encryption at rest where appropriate;
e. logging and monitoring;
f. least-privilege access;
g. personnel confidentiality;
h. backup and recovery procedures;
i. vulnerability management;
j. supplier controls; and
k. incident response procedures.
11. Sub-processors
Customer authorizes Skald BI to engage sub-processors to provide the Service.
Skald BI shall impose data protection obligations on sub-processors that are materially equivalent to this DPA.
Skald BI remains responsible for the performance of its sub-processors as required by applicable data protection law.
Skald BI shall maintain a list of sub-processors at [URL] or provide it upon request.
Skald BI shall notify Customer of new sub-processors by reasonable means.
Customer may object to a new sub-processor on reasonable data protection grounds. If the parties cannot resolve the objection, Customer may terminate the affected Service and receive a pro-rata refund of prepaid unused fees.
12. International Transfers
Skald BI shall not transfer Personal Data outside the EEA unless appropriate safeguards are in place under applicable data protection law.
Such safeguards may include adequacy decisions, EU Standard Contractual Clauses or another lawful transfer mechanism.
Customer authorizes Skald BI to enter into appropriate transfer mechanisms on Customer’s behalf where necessary to provide the Service.
13. Assistance to Customer
Taking into account the nature of the processing, Skald BI shall provide reasonable assistance to Customer with:
a. responding to data subject requests;
b. security obligations;
c. personal data breach notifications;
d. data protection impact assessments; and
e. prior consultation with supervisory authorities where required.
Customer shall reimburse Skald BI for reasonable costs arising from assistance that exceeds standard Service functionality, unless the assistance is required due to Skald BI’s breach of this DPA.
14. Personal Data Breach
Skald BI shall notify Customer without undue delay after becoming aware of a Personal Data breach affecting Customer Personal Data.
The notification shall include available information reasonably required for Customer to meet its breach notification obligations.
Skald BI shall take reasonable steps to contain, investigate and mitigate the breach.
Skald BI’s notification of a Personal Data breach is not an admission of fault or liability.
15. Deletion and Return
Upon termination or expiry of the Service, Skald BI shall delete or return Personal Data in accordance with the Terms, unless retention is required by applicable law, backup procedures, dispute management, security, audit requirements or legitimate business needs.
Personal Data retained in backups shall remain protected and shall be deleted in accordance with Skald BI’s standard backup retention cycles.
16. Audits
Skald BI shall make available information reasonably necessary to demonstrate compliance with this DPA.
Customer may request an audit where required by applicable data protection law. Audits shall be subject to reasonable notice, confidentiality, security restrictions, operational limitations and shall not unreasonably interfere with Skald BI’s business.
Where Skald BI makes available independent audit reports, certifications or security documentation, Customer shall rely on such materials where reasonably sufficient.
17. Customer Responsibilities
Customer is responsible for:
a. the lawfulness of Personal Data processing;
b. providing required notices to data subjects;
c. obtaining consents where required;
d. ensuring Personal Data is accurate, relevant and limited to what is necessary;
e. configuring access rights correctly;
f. ensuring that External Users are authorized to access relevant Personal Data;
g. responding to data subject requests where Customer controls the relevant data; and
h. ensuring that Customer’s use of the Service complies with applicable data protection law.
ANNEX 2 — MICROSOFT AND POWER BI RESPONSIBILITY MATRIX
This Annex clarifies responsibility between Customer and Skald BI.
| Area | Responsible Party |
|---|---|
| Microsoft Power BI licenses | Customer |
| Microsoft Fabric / Power BI Embedded capacity | Customer, unless expressly provided by Skald BI in Order Form |
| Microsoft tenant configuration | Customer |
| Power BI workspace permissions | Customer |
| Power BI reports and dashboards | Customer |
| Datasets and semantic models | Customer |
| Source system data | Customer |
| Row-level security rules | Customer |
| User roles and report access setup | Customer |
| Branded portal functionality | Skald BI |
| Skald BI platform availability | Skald BI, subject to agreed SLA |
| Skald BI application security | Skald BI |
| Skald BI metadata storage | Skald BI |
| Customer branding materials | Customer |
| External User authorization | Customer |
| Microsoft service outages | Microsoft / Customer’s Microsoft relationship |
| Third-party integration failures | Relevant third party, unless caused by Skald BI |
| Support for Skald BI functionality | Skald BI |
| Support for Customer’s Power BI model/report logic | Customer, unless professional services are agreed |
ANNEX 3 — SUPPORT POLICY
Unless otherwise agreed in an Order Form, Skald BI provides support during normal business hours: Monday to Friday, excluding Swedish public holidays.
Support may be provided by email, ticketing system, in-app support or other channels specified by Skald BI.
Severity Levels
Severity 1 — Critical
The production Service is unavailable for all users or a material security incident is suspected.
Severity 2 — High
Major functionality is unavailable or materially degraded for a significant number of users.
Severity 3 — Medium
Non-critical functionality is impaired, but a workaround exists.
Severity 4 — Low
General questions, minor issues, configuration support or feature requests.
Unless expressly agreed in an SLA, response and resolution times are targets only and not guarantees.
Skald BI is not responsible for support issues caused by Customer’s Microsoft environment, Power BI configuration, datasets, reports, identity provider, network, devices, browser, third-party tools or incorrect use of the Service.
ANNEX 4 — SECURITY MEASURES
Skald BI shall maintain commercially reasonable security measures appropriate to the nature of the Service.
These may include:
a. role-based access control;
b. least-privilege access;
c. personnel confidentiality obligations;
d. secure development practices;
e. encryption in transit;
f. encryption at rest where appropriate;
g. logging and monitoring;
h. backup and recovery procedures;
i. vulnerability management;
j. supplier review and sub-processor controls;
k. incident response process;
l. production access restrictions;
m. separation of customer environments where applicable; and
n. periodic review of access rights.
Customer remains responsible for securing its own Microsoft tenant, Power BI workspaces, datasets, semantic models, reports, identity provider, user devices, networks and source systems.
ANNEX 5 — ORDER FORM TEMPLATE
Customer: [●]
Skald BI legal entity: [●]
Effective date: [●]
Initial Subscription Term: [●]
Renewal Term: [●]
Subscription plan: [●]
Fees: [●]
Payment terms: [●]
Included environments: [Production / Test / Development]
Included users: [●]
External Users permitted: Yes / No
Custom domain: Yes / No
White-label branding: Yes / No
Microsoft capacity provided by: Customer / Skald BI
Support level: Standard / Premium / Enterprise
SLA: None / As attached
Professional services: [●]
Special terms: [●]
By signing, the parties agree that this Order Form is governed by the Skald BI Terms of Service.