Terms and Conditions

Last updated: 2026-09-20

FundTrace is demo software and is not for production use. It follows the security practices described in its own documentation, but it holds no SOC 2 report, no HIPAA compliance and no PCI DSS attestation, and it has not been audited by anyone. Do not use it where a certification is required.

1. What FundTrace is

FundTrace is self-hosted software for reconstructing a syndication ledger from annual platform exports, reviewing the exceptions that reconstruction raises, and preparing a tax close from the result. It is built for a single operator running it on a host they control. KAL Technologies LLC provides the software; it does not run a service on your behalf, does not hold your data, and has no access to the machine you install it on.

"You" in this document means whoever deploys and operates an installation. "We" means KAL Technologies LLC.

2. Demo software, not for production use

FundTrace is made available as a demonstration of an approach. It is not sold, not supported, and not offered as a product you can depend on for a filing, a deadline or a counterparty obligation. Using it for real records is a decision you make with that in front of you.

3. No compliance certification

The application implements the controls its documentation describes: multi-factor authentication, credentials stored as hashes rather than passwords, an append-only audit trail of every state change, and TLS terminated at the edge. Those are real and they are testable.

None of them has been certified by anybody. Specifically:

• There is no SOC 2 Type I or Type II report, and no audit is in progress.
• There is no HIPAA compliance. FundTrace is not designed for protected health information, no business associate agreement is offered, and it should not be used with PHI at all.
• There is no PCI DSS attestation. It does not process card data and is not assessed.
• There has been no independent security assessment or penetration test.

If your circumstances require a certification, FundTrace does not meet them, and no configuration of it will.

4. As is, and no warranty

The software is provided "as is" and "as available", without warranty of any kind, express or implied, including any implied warranty of merchantability, fitness for a particular purpose, accuracy or non-infringement. We do not warrant that it will run without interruption, that it is free of defects, or that any result it produces is correct.

There is no availability commitment, no service level, no maintenance obligation and no support channel. Nothing is promised about future versions, and a version you are running may stop being updated without notice.

5. Limitation of liability

To the fullest extent the law allows, KAL Technologies LLC is not liable for any indirect, incidental, special, consequential or punitive damages, nor for lost profits, lost data, business interruption, an understated or overstated tax position, a penalty, an interest charge, or the cost of substitute software — however caused and on any theory of liability, whether or not we were advised such damages were possible. Our total aggregate liability arising out of or relating to the software is limited to the amount you paid for it, which for this software is zero.

6. Not professional advice

Every figure, schedule, reconciliation and export bundle FundTrace produces is a working paper. None of it is tax, legal, accounting or investment advice, and no part of it is a filing. The operator remains responsible for verifying every number and for everything they submit to a tax authority or to anyone else. These documents are intended to be reviewed by a qualified accountant before they are relied on.

7. Your responsibilities as the operator

• You run the host, the database and the blob store, and you keep them patched and reachable only by the people you intend.
• You decide who may sign in, you create the accounts, and you control the secrets that make them work.
• You take backups and you test that they restore. The repository ships scripts for both; running them is yours.
• You are responsible for the data you put into an installation and for having the right to put it there — including any obligation you owe to the counterparties, funders and merchants whose records appear in the workbooks you import.

8. Accuracy and reproducibility are not the same thing

The calculation engine is deterministic and is covered by a golden test: the same inputs produce the same outputs, and a change that moves a number fails the build. That makes results reproducible. Reproducible is not the same as correct for your circumstances, and it is not a statement about the quality of the data you imported. A reproducible wrong answer is still a wrong answer.

9. Changes to these terms

These terms may change. When they do, the "Last updated" date at the top of this page changes with them and the revised text replaces this one. Continued use of the software after that is acceptance of the revision. There is no notification mechanism — the current text is always the text on this page.

10. Contact

Questions about these terms go to lala@mrkaltech.com. How an installation handles data is described in the Privacy Policy.