Provider Agreement

Acceptance is open for version 2026-09-19. A newly enrolled computer remains out of dispatch until its account accepts this version. Fleet-wide enrollment enforcement will be enabled only after acceptance coverage is reviewed.

1. Agreement and eligibility

This Provider Agreement (the "Agreement") is between Common Compute LLC, a Utah limited liability company ("Common Compute", "we", or "us"), and the individual or entity accepting it ("Provider" or "you"). It governs every compatible computer you enroll to supply compute capacity through the Common Compute service (each a "Device").

You must be at least 18, located in the United States, legally able to enter this Agreement, and authorized to operate every Device and associated account. If you accept for an organization, you represent that you can bind it. The Terms of Service and Acceptable Use Policy also apply. This Agreement controls if a provider-specific term conflicts with the Terms of Service.

Electronic acceptance records your account, this dated version, the time, and available request metadata. Keep a copy for your records.

2. Independent capacity provider

You offer only the Device capacity and workload lanes you enable in the approved Provider Software. You choose when to make a Device available and may stop sharing it at any time. Common Compute may accept, route, limit, pause, or reject work for capacity, quality, security, rights, safety, legal, or operational reasons and does not promise any volume of work or earnings.

You are an independent contractor and not our employee, partner, joint venturer, franchisee, or agent. You may not bind Common Compute or a customer, make promises on either party's behalf, set customer pricing, or access a customer relationship outside the assigned execution path. Contract labels do not override applicable law or the facts of the relationship.

3. Devices, software, and approved workloads

You represent that you own each Device or have written authority to use it for this purpose, including any required employer, school, lessor, network, power, or storage permission. You will maintain the supported operating system, security updates, storage, time, network, and hardware capabilities required by the current provider documentation.

You will run only an unmodified Provider Software release obtained through an official Common Compute channel and only workloads offered by the current signed workload and model manifests. You will not bypass version, signature, hash, lease, replay, cancellation, result-binding, rate, geographic, or payout controls. You will not alter usage, task, result, verification, or billing records.

Apple system-framework workloads, private or undocumented Apple frameworks, reverse-engineered ANE workloads, and research-only lanes are not offered. This Agreement does not authorize you to enable or advertise them or imply that Apple sponsors, endorses, or approves Common Compute.

4. Tasks and service standards

A "Task" is a unit of customer work assigned by the Common Compute coordinator. You will process a Task only through the approved software and only while its signed assignment and lease remain valid. You will not delegate, subcontract, replay, duplicate, fabricate, or continue a Task after cancellation or lease expiry.

You will return complete and accurate execution evidence required by the Service and will not claim work, usage, or results produced by another device. Verification, a golden fixture, benchmark, or reliability score is an operational signal, not a promise that future work will be assigned or paid.

5. Compensation, taxes, and records

The provider dashboard or an accepted written grant states your revenue share and the measurement used for an eligible completed Task. The standard share is 80 percent of the settled customer job price; a valid grant controls where it states a different share. Rates may change on the notice stated in the Terms of Service, but a change does not retroactively reduce a completed Task.

Earnings accrue only for completed, verified, payable work and are subject to reconciliation, refunds, chargebacks, duplicate or fraudulent usage, security or rights investigations, sanctions restrictions, reserves, tax forms, and lawful withholding. Payout timing depends on the platform's payout run and the payment processor's schedule. You are responsible for your own taxes, permits, insurance, equipment, electricity, connectivity, and other costs unless law requires otherwise.

We may hold or reverse unpaid earnings reasonably connected to a suspected violation while we investigate. We will provide a reason and a reasonable opportunity to respond unless notice would compromise an investigation, legal process, or the safety of a person or system.

6. Customer Data and Confidential Information

"Customer Data" means data transmitted to, staged on, generated on, or processed by your Device for a Task, including prompts, text, audio, images, video, documents, source code, datasets, intermediate artifacts, outputs, and files written to task scratch storage.

"Confidential Information" means Customer Data and non-public information you learn through provider operation, including dispatch behavior, verification mechanics, pricing internals, credentials, security material, and non-public API responses. It excludes information that you can document: (a) became public without your breach; (b) you lawfully possessed without a confidentiality duty; (c) you independently developed without using Confidential Information; or (d) a third party lawfully disclosed without restriction. A public copy of the same material does not release you as to Customer Data delivered for a Task.

Customer Data remains the customer's or its licensor's material. Neither Task delivery nor execution transfers ownership or grants you a license except the narrow, temporary right needed to execute the assigned Task.

7. Confidentiality and restricted use

You will access Customer Data only as the Provider Software automatically does to execute a Task. You will not manually read, view, listen to, open, copy, index, search, transcribe, screenshot, record, sell, disclose, or otherwise use Customer Data.

You will not use Customer Data to train, fine-tune, evaluate, or benchmark a model; build or enrich a dataset; create statistics, embeddings, or indexes; identify or profile a customer or person; develop a competing service; or make any unrelated commercial or personal decision.

You will not inspect or intercept Provider Software traffic; attach a debugger for the purpose of observing Customer Data; install capture tooling; attempt to identify a customer; or correlate content across Tasks. Ordinary security software and ordinary unrelated use of your Device are not prohibited.

If another person can administer or access your Device, you are responsible for their compliance with Sections 6 through 10. Do not enroll a public kiosk, publicly shared device, or any device accessible to people you do not control.

8. Security requirements

For every enrolled Device, you will:

• use a password, PIN, or biometric lock and disable automatic administrator login;
• keep full-disk encryption enabled when the approved lane requires it;
• apply supported operating-system and Provider Software security updates within a reasonable period;
• protect credentials and never share API keys, session tokens, payout credentials, or signing material;
• use only approved model and runtime artifacts and preserve required signatures and hashes;
• keep Customer Data out of personal backups, cloud-sync folders, screenshots, crash reports, support tickets, and unrelated logs; and
• promptly stop sharing a lost, stolen, compromised, sold, or transferred Device.

You will not give customer work arbitrary shell access, persistence, host shares, or network egress outside an offered lane's enforced policy. You will not weaken or bypass the Provider Software, its XPC services, task scratch controls, or other execution boundary.

9. Retention and deletion

You will not copy Customer Data outside the approved task path or configure a backup or synchronization service to retain it. You will permit the Provider Software to perform terminal cleanup and will not take steps to preserve Task data after that cleanup.

If you discover Customer Data in a backup, log, copied file, screenshot, cache, or other location outside the approved path, delete it promptly and notify [email protected]. On unenrollment or termination, delete Customer Data and Common Compute credentials in your possession, subject only to a lawful preservation instruction. We may request written confirmation.

10. Security and data incidents

Notify [email protected] without undue delay and no later than 72 hours after you become aware of actual or suspected unauthorized access, disclosure, loss, malware, credential compromise, model tampering, or residual Customer Data. Include only the information needed to investigate.

Preserve relevant evidence, stop the affected lane when directed, cooperate in good faith, and do not contact a customer or publicly disclose the incident before notifying us unless law requires it. Good-faith reporting is not, by itself, a breach.

11. Compelled disclosure

If law, subpoena, or court order requires disclosure of Customer Data, notify us before disclosure to the extent legally permitted, allow a reasonable opportunity to seek protection, and disclose only what is legally required. Nothing in this Agreement requires you to violate law.

12. Intellectual property and third-party terms

Common Compute and its licensors retain the Provider Software, APIs, SDKs, documentation, manifests, marks, models, and platform technology. Customers and their licensors retain Customer Data. You receive no right to redistribute weights, converted artifacts, Apple software, platform software, Customer Data, or outputs.

You will preserve required notices and comply with the license and model card for every offered model and runtime. Report a rights concern to [email protected] and do not make a legal determination or contact a customer yourself.

13. Suspension and termination

You may stop sharing capacity or terminate this Agreement at any time. We may drain work, disable enrollment, suspend unpaid earnings, or terminate access for security, fraud, quality, capacity, rights, sanctions, legal, payment, or contract reasons. Where practical, we will give notice and an opportunity to respond. Immediate action may be necessary to protect people, data, systems, or legal obligations.

Sections 5 through 16 survive to the extent needed to enforce their purpose. Confidentiality obligations survive for three years after your last Task, and for a trade secret as long as it remains a trade secret under applicable law.

14. Architecture disclosure

An assigned Device receives the plaintext needed to execute a marketplace Task. Transport security, signatures, object-storage encryption, process isolation, and task cleanup reduce risk but do not make plaintext technically inaccessible to the Device operator. This Agreement makes unauthorized access or reuse a contract breach; it does not create a hardware enclave or zero-knowledge system. The current trust boundary is described at /security/trust-model.

We do not continuously monitor the contents of your Device and cannot directly detect every breach. You will not represent the Service as provider-blind, confidential computing, Apple-approved, or otherwise stronger than the current published trust model.

15. Disclaimers, liability, and indemnity

THE PROVIDER SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE." TO THE MAXIMUM EXTENT PERMITTED BY LAW, COMMON COMPUTE DISCLAIMS IMPLIED WARRANTIES, DOES NOT PROMISE WORK OR EARNINGS, AND IS NOT LIABLE FOR INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES. THE AGGREGATE LIABILITY CAP IN THE TERMS OF SERVICE APPLIES TO THIS AGREEMENT. MANDATORY RIGHTS THAT CANNOT LAWFULLY BE WAIVED ARE NOT WAIVED.

You will indemnify Common Compute against third-party claims and reasonable defense costs arising from your unlawful conduct, unauthorized access or use of Customer Data, or material breach of Sections 3, 6, 7, 8, 9, 10, or 12. This does not cover a claim caused by Common Compute's own conduct or the disclosed plaintext architecture itself.

16. General terms

Utah law governs this Agreement without regard to conflict-of-law rules. Disputes are resolved under the dispute provision in the Terms of Service. Either party may seek injunctive relief for unauthorized use of Confidential Information or intellectual property.

You may not assign this Agreement without our written consent. We may assign it in connection with a merger, financing, reorganization, or sale of the relevant business. If a provision is unenforceable, it will be limited to the minimum extent necessary and the rest remains effective. Failure to enforce a provision is not a waiver. This Agreement, the Terms of Service, the Acceptable Use Policy, and a written grant or order are the complete agreement for provider participation.

We may update this Agreement for legal, security, operational, or product changes. A substantive update receives a new dated version and requires new acceptance before it can be enforced. Questions and legal notices may be sent to [email protected].

Checking your acceptance status…