Integration Partner Terms
Last updated: 22/05/2026
These Integration Partner Terms govern access to and use of Trac by integration partners, developers, software providers, data partners, and other organisations connecting their systems or services to Trac.
1. Overview
Trac is a cloud-based integration and operational data platform operated by Caterlytix Ltd.
Integration Partners may use Trac to enable secure data exchange between their services and authorised organisations, including schools, trusts, caterers, point of sale systems, online payment systems, finance systems, MIS platforms, and other third-party platforms.
2. Licence
Subject to these terms and any applicable order form, Caterlytix grants the Integration Partner a limited, non-exclusive, non-transferable, revocable licence to access and use Trac solely for the agreed purpose.
No rights are granted except those expressly set out in these terms.
3. Partner authority and customer permissions
Before enabling, requesting, or facilitating any integration through Trac, the Integration Partner must obtain all necessary permissions, consents, instructions, authorisations, and contractual rights from the relevant organisation and, where applicable, the relevant data controller.
The Integration Partner must maintain appropriate records evidencing such authority and provide reasonable evidence to Caterlytix upon request.
The Integration Partner is responsible for ensuring that each integration is properly authorised and lawful.
4. Third-party systems
Where Trac interacts with or depends upon any third-party system, the Integration Partner must comply with all applicable terms, technical requirements, permissions, data access restrictions, usage limits, and policies relating to that third-party system.
The Integration Partner must not act, or fail to act, in any way that causes or may reasonably be expected to cause Caterlytix to breach any agreement with, or obligation owed to, a third-party system provider.
Third-party systems may include MIS platforms, middleware providers, point of sale systems, finance systems, online payment systems, cloud platforms, APIs, or other external services.
5. Data use restrictions
The Integration Partner must:
- process data only for the agreed purpose;
- request and access only the data required for that purpose;
- comply with data minimisation principles;
- not resell, commercialise, or redistribute data without permission;
- not create derivative datasets without written authorisation;
- not use data to train AI or machine learning models without explicit written permission;
- not use Trac data to replicate or compete with Trac.
6. API usage
Use of Trac APIs is subject to:
- API documentation;
- authentication requirements;
- rate limits;
- technical constraints;
- data scopes;
- usage thresholds;
- any applicable Fair Usage Policy.
Caterlytix may monitor API usage and may throttle, suspend, restrict, or revoke access where usage exceeds agreed thresholds or creates risk to platform performance, security, availability, or compliance.
7. Security
The Integration Partner must:
- protect credentials, tokens, API keys, and access rights;
- implement appropriate technical and organisational measures;
- ensure only authorised personnel access Trac;
- maintain secure systems and integrations;
- notify Caterlytix promptly of any unauthorised access, security incident, or suspected compromise.
Where a personal data breach affects data processed through Trac, the Integration Partner must notify Caterlytix without undue delay and provide reasonable assistance.
8. Testing and acceptance
The Integration Partner must test integrations in accordance with Caterlytix’s technical requirements.
Where formal acceptance testing is agreed, the Integration Partner must confirm acceptance once testing has been successfully completed.
Where no formal acceptance process is agreed, the integration will be deemed accepted upon first live use in a production environment.
Caterlytix is not responsible for issues arising from the Integration Partner using the platform in a manner different from that tested, accepted, or documented.
9. Support
Caterlytix will provide platform-level support in accordance with the applicable Service Level Agreement.
The Integration Partner remains responsible for:
- its own systems and applications;
- support provided to its customers;
- customer communications relating to its services;
- resolving issues caused by its systems, configuration, credentials, or use.
10. Audit and records
The Integration Partner must maintain accurate records of:
- connected organisations;
- authorised users;
- customer permissions;
- data access scopes;
- API usage;
- integrations enabled through Trac.
Caterlytix may request reasonable evidence of compliance and may audit usage where necessary to verify compliance with these terms.
11. Fees
Access to Trac may be subject to fees, including one-off onboarding fees, recurring platform fees, per-site fees, per-integration fees, API access fees, and usage-based charges.
Fees will be set out in an order form or otherwise agreed in writing.
12. Intellectual property
Caterlytix retains all intellectual property rights in Trac, including its platform, APIs, documentation, data structures, integration logic, and related materials.
The Integration Partner retains ownership of its own systems and applications.
The Integration Partner must not reverse engineer, copy, reproduce, modify, or create derivative works based on Trac except as expressly permitted in writing.
13. Indemnity
The Integration Partner shall indemnify Caterlytix against losses, claims, damages, liabilities, costs, expenses, and Data Protection Losses arising from or connected with:
- unauthorised or unlawful data access;
- breach of applicable law;
- breach of data protection obligations;
- breach of third-party system terms;
- misuse of the platform;
- infringement caused by Integration Partner data, software, or systems;
- failure to obtain required customer permissions or authorisations.
14. Liability
To the maximum extent permitted by law, Caterlytix’s liability shall be limited to the fees paid or payable by the Integration Partner in the 12 months preceding the claim.
Caterlytix shall not be liable for indirect or consequential loss, loss of profit, revenue, data, goodwill, contract, software, systems, or commercial opportunity.
Nothing limits liability that cannot be limited by law.
15. Suspension and termination
Caterlytix may suspend or terminate access immediately where:
- these terms are breached;
- there is a security, legal, operational, or compliance risk;
- required by law or a third-party system provider;
- the Integration Partner fails to pay fees;
- customer authority is withdrawn or cannot be verified.
Upon termination, the Integration Partner must cease access to Trac and delete or return data obtained through Trac unless legally required to retain it.
16. Governing law
These terms are governed by the laws of England and Wales.