Terms of service

Last updated: 31 August 2026

This document is issued in English, which is the governing language. If a signed contract or Data Processing Agreement with your organisation says something different, that signed document takes priority.

These terms govern use of the Corieva website and, together with any signed order form, contract and Data Processing Agreement, the Corieva platform. By accessing the service or enabling users under your organisation, you agree to these terms. If you do not agree, do not use the service.

1. The agreement

The contracting entity is Arestechub, trading as Corieva ("Arestechub", "we", "us"). "Customer" means the organisation that purchases or is authorised to use the platform. "User" means an individual the customer permits to access it. Website visitors who only join a waitlist are not platform customers until a contract is formed.

If you are accepting these terms for an organisation, you confirm you have authority to bind it. A signed contract overrides these website terms where they conflict.

2. The service

Corieva helps authorised children's services teams capture visit information (including voice notes and photographs), structure it against the customer's forms, draft records and reports for human review, translate family-facing content, support allocation and handover, and submit approved records into the customer's case management system.

We may change non-material features to improve security or performance. We will not remove a material contracted feature without notice except where needed to address a security, legal or safeguarding risk.

3. Authorised users and accounts

The platform is only for users the customer has authorised. Customers must keep user lists accurate, remove leavers promptly, and not share logins. Users must keep credentials confidential and tell us or the customer immediately if they suspect misuse.

We may suspend an account where we reasonably believe it is compromised, used unlawfully, or presents a risk to a child, another customer, or the security of the service.

4. Professional responsibility and AI-generated content

Corieva is a documentation aid. It is not a substitute for social work assessment, managerial oversight, legal advice, or a decision under the Children Act. Drafted text, auto-filled fields, Visit Guide summaries, compliance flags, translations and worker-match suggestions can contain errors, omissions, bias or misplaced emphasis.

Users and the customer remain solely responsible for reviewing, correcting and approving all content before it is relied on, shared with a family, submitted to a case system, or used in court, conference or strategy discussions. No output from Corieva is a finding of fact, a risk rating, a Child in Need or child-protection decision, or a recommendation of the tool itself.

The customer must ensure users are trained not to treat automated output as complete, that review is meaningful (reading and being able to change the output before it takes effect), and that managers retain oversight of case quality. We do not accept professional responsibility for a case outcome.

5. How we use AI and where data stays

We use AI in the United Kingdom to transcribe voice notes, map text onto the customer's forms, draft records and reports for human review, translate family-facing content, brief practitioners, and suggest matches or process flags. Children's services data used for those tasks is not sent outside the UK and is not used to train a general-purpose or shared model.

The customer must not paste case data into public or consumer AI tools, and must not configure Corieva — or any connected system — so that a significant decision about a child is taken without a competent human who can change the outcome. Significant decisions that use special category data must not be solely automated, in line with UK GDPR Articles 22A to 22D and the Data (Use and Access) Act 2025.

Further detail is in our Privacy policy (How we use AI) and Data processing page. If those pages and a signed DPA differ, the signed DPA wins.

6. Case records, accuracy and legal proceedings

The original English record is the legal record where a translation is also produced. Audit trails, drafts and source recordings may be disclosable in proceedings or to regulators. Users must not falsify records, back-date in a misleading way, or delete information to avoid scrutiny.

The customer is responsible for whether a record is complete enough for its statutory duties. We do not warrant that using Corieva will meet Ofsted, court, or local quality-assurance expectations on its own.

7. Safeguarding

Users who are practitioners remain bound by their employer's safeguarding procedures, Working Together to Safeguard Children 2023, and professional standards (including Social Work England where applicable). If Corieva is unavailable, the customer must have a fallback way to record and share information needed to protect a child.

If we receive information that a child is at immediate risk, we may share it with the customer, emergency services, or another competent authority as the law permits. That does not make Arestechub the child's social worker or the responsible local authority.

8. Acceptable use

You must not:

  • Use the service except as authorised by the customer and these terms.
  • Attempt to access other customers' data, probe, scan, or bypass security, or test the service for vulnerabilities without our written permission.
  • Upload malware, or use the service to harass, unlawfully surveil, or discriminate.
  • Copy case data into unapproved personal tools, consumer AI products, or shared drives outside the customer's instructions.
  • Record or photograph a child, family or home except as the customer's lawful casework policy allows.
  • Misrepresent AI-drafted text as having been independently authored without review where your professional or court duties require otherwise.
  • Reverse engineer the service except to the extent the law says you may.
  • Use the public website to submit other people's sensitive personal data in a waitlist message.

Breach of this section is a material breach and may be reported to the customer, a regulator, or the police.

9. Customer's legal duties

The customer warrants that it has a lawful basis to process the data it puts into Corieva, including special category and criminal offence data; that users are properly authorised and vetted for their role; that privacy information is given to staff and, where required, to families; that it will complete or maintain any DPIA required for the deployment; and that integration with its case management system is authorised.

The customer is responsible for device security, including offline use, lost devices, and joiner-mover-leaver processes.

10. Data protection

Each party will comply with UK GDPR and the Data Protection Act 2018 in its role. For platform case data, the customer is controller and Arestechub is processor, as set out in the DPA and the Data Processing page. Our Privacy policy explains storage, retrieval, retention and security in more detail.

Nothing in these terms limits either party's duties that cannot be limited by contract, including duties to the ICO.

11. Confidentiality

Each party must keep the other's confidential information secure and use it only to perform the contract. Children's and families' data is confidential. This duty does not stop a disclosure required by law, a court, a regulator, or a necessary safeguarding disclosure. The duty continues after the contract ends.

12. Intellectual property

Arestechub and its licensors own the platform, software, models we supply, branding and documentation. The customer owns its case content and, where applicable, its own historic reports used to tune a council-specific drafting style. The customer grants us a limited licence to host, process, transmit and display that content solely to provide the service and meet the contract.

We do not claim copyright in a child's or family's personal data. Feedback you give us about the product may be used to improve the service without obligation to you, but not by copying identifiable case content into other customers' environments.

13. Third-party and case management systems

The service may send approved records into a case system the customer already uses. We are not responsible for that system's availability, configuration, or data handling once the customer has taken the data back under its control. Outages or mapping errors in a third-party system are not a breach by us unless caused by our failure to meet an agreed integration specification.

14. Availability, support and changes

We aim to keep the platform available and to support customers during agreed hours. Specific service levels, maintenance windows and support response times are those in the signed contract. Planned maintenance will be notified where practicable.

The public website and waitlist are provided as they are, without a service-level commitment.

15. Fees

Platform fees, indexes and payment terms are set in the order form or contract. Fees are exclusive of VAT unless stated. Late sums may attract statutory interest. We may suspend access for undisputed sums that remain unpaid after notice, except that we will not use suspension in a way that is intended to put a child at risk; the customer must still have a fallback recording method.

16. Warranties and disclaimers

We warrant that we will provide the contracted service with reasonable care and skill, and that we have the right to offer it. Except as expressly stated, and except for terms that the law does not allow us to exclude, the service is provided without other warranties, including fitness for a particular court outcome, Ofsted judgement, or staffing result.

We do not warrant that transcription, translation, field mapping or drafts will be error-free. Human review is mandatory before reliance.

17. Limitation of liability

Nothing in these terms excludes or limits liability for death or personal injury caused by negligence, fraud or fraudulent misrepresentation, or any other liability that English law does not allow to be limited.

Subject to that: we are not liable for loss of profit, revenue, anticipated savings, goodwill, or indirect or consequential loss; we are not liable for a case decision, court finding, or regulatory judgement that turns on professional content a user approved; and our total liability arising out of the service in any 12-month period is limited to the fees paid by the customer for the service in that period (or, if none, £1,000).

The customer is liable for users' misuse, for data it instructs us to process unlawfully, and for failing to review automated output.

These caps are a genuine allocation of risk and are reflected in the fees. They apply to contract, tort (including negligence) and statutory claims so far as the law allows, including the Unfair Contract Terms Act 1977 for business-to-business standard terms.

18. Indemnity

The customer will indemnify Arestechub against claims, losses and costs arising from: content the customer or its users submit; use of the service in breach of these terms or the law; a claim that the customer lacked authority or lawful basis to process personal data in Corieva; and third-party claims caused by the customer's case-system configuration or user instructions, except to the extent caused by our negligence or wilful default.

19. Suspension, term and termination

Website terms apply whenever you use the website. Platform subscriptions run for the period in the contract and renew as that contract says. Either party may terminate as the contract provides, including for material breach that is not remedied within a stated period.

We may suspend or terminate immediately if required by law, if continuing would create a serious security or safeguarding risk, or if the customer becomes insolvent.

20. What happens when the service ends

The customer should export records it needs before access ends. We will return or delete controller personal data as the DPA requires. Sections that should survive (including confidentiality, IP, data protection, liability, indemnity, and governing law) remain in force.

21. Events beyond reasonable control

A party is not liable for delay or failure caused by events beyond its reasonable control, including infrastructure failure, cyber-attack despite appropriate measures, strike, epidemic, or change in law, provided it mitigates and keeps the other party informed. This does not excuse payment of undisputed fees already due.

22. Changes to these terms

We may update these website terms by posting a new version with a new date. For paying customers, changes to contracted terms follow the contract's variation clause. If you continue to use the public website after a posting, the new website terms apply to that use.

23. General

These terms are the entire agreement for website use and, with the order form and DPA, for the platform, and replace prior discussions on the same subject. A failure to enforce a right is not a waiver. If a court finds a term unenforceable, the rest remains in force. The customer may not assign the contract without our consent, not to be unreasonably withheld; we may assign to a successor of the Corieva business. There are no third-party rights under the Contracts (Rights of Third Parties) Act 1999 except as the DPA may grant a controller or processor where expressly stated.

Notices may be sent to hello@corieva.com and to the customer's contract email. Formal legal notices should also be sent by a method that provides proof of delivery where the contract requires it.

24. Governing law and courts

These terms and any dispute or claim (including non-contractual disputes) are governed by the law of England and Wales. The courts of England and Wales have exclusive jurisdiction, except that we may seek injunctive relief in any jurisdiction to protect data, IP or confidentiality.

25. Contact

hello@corieva.com for contracts and general queries. privacy@corieva.com for data protection. Do not send children's case records to these mailboxes unless we have given a secure channel for a specific incident.