================================================================================ RANGERIO SOFTWARE LICENSE AND THIRD-PARTY NOTICES ================================================================================ Document Version: 2.1 Software Version: 0.13.x Effective Date: February 12, 2026 Last Updated: September 1, 2026 Publisher: D2V Analytics Inc. ("Company", "We", "Us") Product: RangerIO ("Software", "Product") Editions: RangerIO (Lite edition) and RangerIO+ ("RangerIO Plus", Full edition) — see Section 3 ================================================================================ TABLE OF CONTENTS ================================================================================ 1. RANGERIO PROPRIETARY LICENSE 2. INTELLECTUAL PROPERTY NOTICE 3. PRODUCT EDITIONS 4. DATA PRIVACY COMMITMENT 5. THIRD-PARTY OPEN SOURCE LICENSES — SUMMARY 6. THIRD-PARTY OPEN SOURCE LICENSES — PYTHON BACKEND 7. THIRD-PARTY OPEN SOURCE LICENSES — FRONTEND (JavaScript/TypeScript) 8. THIRD-PARTY OPEN SOURCE LICENSES — DESKTOP APPLICATION (Electron) 9. MACHINE LEARNING MODELS AND DATA ASSETS 10. SYSTEM DEPENDENCIES 11. LICENSE COMPATIBILITY STATEMENT 12. SOURCE CODE AVAILABILITY (COPYLEFT OBLIGATIONS) 13. EXPORT CONTROL AND SANCTIONS COMPLIANCE 14. DISCLAIMER OF WARRANTIES 15. LIMITATION OF LIABILITY 16. GOVERNING LAW AND JURISDICTION 17. CONTACT INFORMATION ================================================================================ 1. RANGERIO PROPRIETARY LICENSE ================================================================================ Copyright (c) 2024-2026 D2V Analytics Inc. All rights reserved. RangerIO is proprietary software developed and owned by D2V Analytics Inc. The following terms govern your use of the Software: GRANT OF LICENSE Subject to the terms of your applicable license agreement (End User License Agreement, Enterprise License, or Evaluation License), D2V Analytics Inc. grants you a limited, non-exclusive, non-transferable, revocable license to install and use the Software solely for your internal business purposes. RESTRICTIONS You may NOT, without prior written consent from D2V Analytics Inc.: (a) Copy, modify, adapt, translate, or create derivative works based on the Software, except as expressly permitted by applicable law; (b) Reverse engineer, disassemble, decompile, or otherwise attempt to derive the source code of the Software; (c) Rent, lease, loan, sell, sublicense, distribute, or otherwise transfer the Software or any rights therein to any third party; (d) Remove, alter, or obscure any proprietary notices, labels, or marks on the Software; (e) Use the Software to develop a competing product or service; (f) Use the Software in any manner that violates applicable law or regulation; (g) Circumvent or disable any security, licensing, or access control features of the Software; (h) Use the Software to process data on behalf of third parties in a service bureau, managed service, or SaaS capacity, unless explicitly authorized under an Enterprise License. USER CONTENT AND OUTPUTS You retain all right, title, and interest in and to the data you process with the Software and the outputs the Software generates from your data ("User Content"). D2V Analytics Inc. claims no ownership of User Content and, because the Software processes data locally on your device (Section 4), never receives it. This document grants D2V Analytics Inc. no license to User Content. FEEDBACK If you voluntarily provide suggestions, ideas, bug reports, or other feedback about the Software, you grant D2V Analytics Inc. a perpetual, irrevocable, worldwide, royalty-free license to use that feedback for any purpose, without obligation or attribution. Feedback does not include User Content. NO IMPLIED LICENSES No license or right is granted by implication, estoppel, or otherwise, other than the licenses and rights expressly granted in this document and your applicable license agreement. RESERVATION OF RIGHTS All rights not expressly granted herein are reserved by D2V Analytics Inc. The Software is licensed, not sold. D2V Analytics Inc. retains all right, title, and interest in and to the Software, including all intellectual property rights. EQUITABLE RELIEF You acknowledge that a breach of the restrictions in this Section 1 or of Section 2 may cause D2V Analytics Inc. irreparable harm for which monetary damages would be an inadequate remedy, and that D2V Analytics Inc. is entitled to seek injunctive or other equitable relief in addition to any other remedies available at law. TERMINATION This license terminates automatically if you breach any of its terms. Upon termination, you must destroy all copies of the Software in your possession. Sections 2, 13, 14, 15, and 16 survive termination. ================================================================================ 2. INTELLECTUAL PROPERTY NOTICE ================================================================================ The following are the intellectual property of D2V Analytics Inc.: - The RangerIO and RangerIO+ names, logos, and brand identity - All proprietary source code, algorithms, and data processing pipelines - The RangerIO user interface design and user experience - Proprietary prompt engineering templates, DSPy programs, and domain-specific compilation logic - The intelligence data framework, PII severity taxonomy, trust-gate logic, and compliance scoring algorithms - All documentation, marketing materials, and training content - The architecture, design, and organization of the Software The inclusion of open source components (listed in Sections 6-9) does not diminish D2V Analytics Inc.'s intellectual property rights in the proprietary portions of the Software. Open source components are used under their respective licenses and remain the property of their respective authors. TRADEMARKS "RangerIO", "RangerIO+", and associated logos are trademarks or registered trademarks of D2V Analytics Inc. Nothing in this document grants any right to use these marks. Any unauthorized use of the marks, or any use that suggests affiliation with or endorsement by D2V Analytics Inc., is prohibited. Other product and company names mentioned herein may be trademarks of their respective owners. NOTICES TRANSPARENCY A copy of this document ships with every RangerIO distribution (RangerIO_Licensing.txt in the application resources) and is updated with each release to reflect the components actually shipped. To report an attribution error or omission, contact D2V Analytics Inc. (Section 17); corrections are made in the next release. ================================================================================ 3. PRODUCT EDITIONS ================================================================================ RangerIO ships in two editions built from the same code base. The edition is recorded in the installed application manifest and determines which components are bundled: RANGERIO (Lite edition) - Data intelligence and sanitization engine: ingestion, profiling, data quality, PII detection and masking, and retrieval-augmented assistant workflows for public-beta-supported file sources - Does NOT bundle a local large language model. Users configure a supported cloud provider or compatible model endpoint (see Section 4) - Minimum system memory: 8 GB RAM RANGERIO+ ("RangerIO Plus", Full edition) - Everything in RangerIO, PLUS a bundled local language model (IBM Granite 4.0, GGUF format — see Section 9) for fully on-device inference out of the box - Minimum system memory: 16 GB RAM Both editions include the same PII detection stack (GLiNER2 ONNX), the same document ingestion engine (IBM Docling), and the same embedded databases (DuckDB, SQLite, LanceDB). Third-party notices in this document apply to both editions unless a component is expressly marked edition-specific. ================================================================================ 4. DATA PRIVACY COMMITMENT ================================================================================ RangerIO is designed as a local-first data workbench for sensitive data. The Software is architected with the following privacy principles: - All user data is processed and stored locally on the user's device by default - No user data is transmitted to D2V Analytics Inc. at any time. D2V Analytics Inc. operates no data-collection service and receives no document content, query content, or derived intelligence - PII detection and remediation occur locally, on-device, using a bundled ONNX model (GLiNER2) with no network dependency - Local language model inference (bundled in RangerIO+, user-supplied in RangerIO) runs entirely on-device - The Software's API server and MCP sidecar bind to the local machine and are not exposed to the network OPTIONAL CLOUD LLM PROVIDERS (user-configured) RangerIO supports optional, user-configured connections to third-party and OpenAI-compatible cloud LLM providers selected by the user as an escalation path in its cache-first query cascade. When — and only when — a user configures a cloud provider: - Requests are sent directly from the user's device to the provider the user selected, using the user's own API credentials; no traffic passes through D2V Analytics Inc. - Content sent to cloud providers is privacy-brokered: detected PII is masked before transmission and masked content is explicitly marked (e.g. "[masked for privacy]") — subject to the detection limitations in Section 14 - Provider API keys are stored locally, encrypted at rest - Use of a cloud provider is governed by that provider's own terms of service and privacy policy, not by this document The embedded local token registry can contain original sensitive values needed to restore masked placeholders. RangerIO does not separately encrypt that registry in the public beta; its protection depends on operating-system account controls and device or volume encryption. NETWORK CONNECTIVITY Network connectivity, when used, is limited to: - Software update checks against D2V Analytics Inc.'s release distribution servers where enabled for the platform and build - Model and ML-asset downloads from Hugging Face Hub (user-initiated, or initiated by first-use model caching) - User-configured cloud LLM providers (above) - No telemetry, analytics, or usage data collection ================================================================================ 5. THIRD-PARTY OPEN SOURCE LICENSES — SUMMARY ================================================================================ RangerIO incorporates open source software components governed by the following license families. The complete list of components and their licenses follows in Sections 6-9. LICENSE TYPES USED: MIT License — Permissive; attribution required MIT-CMU License — Permissive; attribution required (Pillow) BSD 2-Clause License — Permissive; attribution required BSD 3-Clause License — Permissive; attribution + non-endorsement Apache License 2.0 — Permissive; attribution + patent grant ISC License — Permissive; attribution required Mozilla Public License 2.0 — Weak copyleft (file-level only) Python Software Foundation — Permissive; attribution required Matplotlib License — Permissive; PSF-based TCL License — Permissive (portions of ujson) SIL Open Font License 1.1 — Fonts; permissive with renaming rule All third-party components distributed with RangerIO are governed by permissive or weak-copyleft (file-level) open source licenses that permit commercial use, modification, and redistribution, subject to attribution and notice requirements. RangerIO does NOT bundle or link any software licensed under the GNU General Public License (GPL), GNU Affero General Public License (AGPL), or other strong copyleft licenses that would impose licensing obligations on the proprietary portions of the Software. Optional GPL-licensed system utilities (Pandoc, Poppler) may be separately installed by the user and are invoked only as independent external processes — see Section 10. ================================================================================ 6. THIRD-PARTY OPEN SOURCE LICENSES — PYTHON BACKEND ================================================================================ The following open source packages are used in the RangerIO backend. Versions marked ">=" are minimum versions; the exact installed version is recorded in the build manifest of each release. CORE FRAMEWORK ------------------------------------------------------------------------------ Package Version License Copyright ------------------------------------------------------------------------------ FastAPI 0.127.1 MIT Sebastian Ramirez uvicorn 0.39.0 BSD-3-Clause Encode OSS Pydantic 2.9.2 MIT Samuel Colvin pydantic-settings 2.11.0 MIT Samuel Colvin llama-cpp-python 0.3.x (fork) MIT Andrei Betlen (D2V Analytics Inc. fork of the JamePeng fork; source: https://github.com/D2VLabs-adm/llama-cpp-python — bundles llama.cpp, MIT, Copyright The ggml authors / Georgi Gerganov) LanceDB 0.26.1 Apache-2.0 LanceDB Inc. lance-namespace 0.3.x-0.6.x Apache-2.0 LanceDB Inc. PyArrow 14.x-17.x Apache-2.0 The Apache Software Foundation DATA PROCESSING ------------------------------------------------------------------------------ Package Version License Copyright ------------------------------------------------------------------------------ pandas 1.5.3-2.x BSD-3-Clause pandas Development Team NumPy 1.26.4 BSD-3-Clause NumPy Developers DuckDB 1.4.2 MIT DuckDB Contributors Polars 0.20.0 MIT Ritchie Vink openpyxl 3.1.5 MIT Eric Gazoni, Charlie Clark xlrd 2.0.1 BSD-3-Clause Stephen John Machin aiofiles 25.1.0 Apache-2.0 Tin Tvrtkovic python-multipart >=0.0.27 Apache-2.0 Andrew Dunham pdfplumber 0.11.9 MIT Jeremy Singer-Vine pdfminer.six >=20251230 MIT Yusuke Shinyama et al. python-docx 1.1.2 MIT Steve Canny pypandoc 1.14 MIT Juho Vepsalainen jsonschema 4.25.1 MIT Julian Berman INTELLIGENCE FRAMEWORK (DSPy, Embeddings, RAG) ------------------------------------------------------------------------------ Package Version License Copyright ------------------------------------------------------------------------------ dspy-ai 2.5.0 MIT Stanford NLP litellm 1.82.x MIT BerriAI (LLM provider routing SDK used for outbound cloud LLM calls) fastembed 0.7.4 Apache-2.0 Qdrant onnxruntime (via deps) MIT Microsoft Corporation rank-bm25 0.2.x Apache-2.0 Dorian Brown rapidfuzz 3.x MIT Max Bachmann scikit-learn 1.x BSD-3-Clause scikit-learn developers diskcache 5.6.3 Apache-2.0 Grant Jenks backoff 2.2.1 MIT Bob Green DATA QUALITY AND MONITORING ------------------------------------------------------------------------------ Package Version License Copyright ------------------------------------------------------------------------------ watchdog 6.0.0 Apache-2.0 Yesudeep Mangalapilly PII DETECTION (GLiNER2 — zero-shot NER, on-device) ------------------------------------------------------------------------------ Package Version License Copyright ------------------------------------------------------------------------------ gliner2-onnx 0.1.1 MIT GLiNER2 authors transformers 4.40+ <5.0 Apache-2.0 Hugging Face langdetect >=1.0.9 MIT / Apache-2.0 Michal Danilak DOCUMENT INGESTION (IBM Docling) ------------------------------------------------------------------------------ Package Version License Copyright ------------------------------------------------------------------------------ docling 2.67-2.81 MIT IBM Corporation docling-core >=2.50 MIT IBM Corporation docling-ibm-models 3.0-3.11 MIT IBM Corporation HUGGING FACE AND MODEL MANAGEMENT ------------------------------------------------------------------------------ Package Version License Copyright ------------------------------------------------------------------------------ huggingface-hub 0.35.1 Apache-2.0 Hugging Face hf_transfer >=0.1.4 Apache-2.0 Hugging Face hf-xet 1.2.0 Apache-2.0 Hugging Face tokenizers 0.22.1 Apache-2.0 Hugging Face filelock >=3.13.0 MIT Benedikt Schmitt fsspec >=2024.1.0 BSD-3-Clause Intake Contributors NETWORKING, SECURITY AND CONFIGURATION ------------------------------------------------------------------------------ Package Version License Copyright ------------------------------------------------------------------------------ httpx 0.28.1 BSD-3-Clause Encode OSS h2 4.x MIT Cory Benfield requests 2.33.0 Apache-2.0 Kenneth Reitz urllib3 >=2.7.0 MIT Andrey Petrov idna >=3.15 BSD-3-Clause Kim Davies cryptography >=46.0.7 Apache-2.0/BSD PyCA (local encryption of stored provider credentials) python-dotenv 1.0.0 BSD-3-Clause Saurabh Kumar PyYAML 6.0.2 MIT Kirill Simonov anyio 4.12.0 MIT Alex Grönholm websockets 15.0.1 BSD-3-Clause Aymeric Augustin protobuf 6.33.5 BSD-3-Clause Google LLC lxml >=6.1.0 BSD-3-Clause lxml team Mako >=1.3.12 MIT Michael Bayer Pillow 10.3-11.x MIT-CMU Jeffrey A. Clark et al. ujson >=5.12.1 BSD-3 + TCL ESN Social Software MCP SERVER AND TOKEN HANDLING (NanoClaw sidecar) ------------------------------------------------------------------------------ Package Version License Copyright ------------------------------------------------------------------------------ sqlglot >=20.0 MIT Toby Mao mcp (MCP Python SDK) >=1.0.0 MIT Anthropic, PBC PyJWT >=2.8.0 MIT Jose Padilla keyring >=25.0.0 MIT Jason R. Coombs UTILITIES ------------------------------------------------------------------------------ Package Version License Copyright ------------------------------------------------------------------------------ psutil 7.1.3 BSD-3-Clause Giampaolo Rodola tqdm 4.67.1 MPL-2.0 / MIT Casper da Costa-Luis rich 13.9.4 MIT Will McGugan orjson 3.11.6 MIT / Apache-2.0 ijl typer >=0.9.0 MIT Sebastian Ramirez click >=8.1.7 BSD-3-Clause Pallets Projects markdown-it-py >=3.0.0 MIT ExecutableBookProject mdurl 0.1.2 MIT ExecutableBookProject Pygments 2.20.0 BSD-2-Clause Georg Brandl Jinja2 3.1.6 BSD-3-Clause Pallets Projects MarkupSafe 3.0.3 BSD-3-Clause Pallets Projects python-dateutil 2.9.0.post0 Apache-2.0/BSD Gustavo Niemeyer pytz 2025.2 MIT Stuart Bishop tzdata 2025.3 Apache-2.0 IANA / Paul Ganssle typing_extensions 4.15.0 PSF Guido van Rossum setproctitle >=1.3.0 BSD-3-Clause Daniele Varrazzo packaging 25.0 Apache-2.0/BSD PyPA six 1.17.0 MIT Benjamin Peterson PLATFORM BINDINGS ------------------------------------------------------------------------------ Package Version License Copyright ------------------------------------------------------------------------------ pyobjc (Core, Cocoa, 11.1 MIT Ronald Oussoren CoreML, Quartz, (macOS only) Vision) pywin32 311 PSF Mark Hammond (Windows only) REPORTS AND EXPORT ------------------------------------------------------------------------------ Package Version License Copyright ------------------------------------------------------------------------------ ReportLab >=4.0 BSD ReportLab Inc. matplotlib 3.7-3.x Matplotlib (PSF- Matplotlib Development based) Team DEVELOPMENT ONLY (not distributed with the Product) ------------------------------------------------------------------------------ pytest 9.x MIT Holger Krekel iniconfig 2.x MIT Ronny Pfannschmidt pluggy 1.x MIT Holger Krekel OPTIONAL DATABASE CONNECTORS (separate install, requirements-db.txt) ------------------------------------------------------------------------------ PostgreSQL, SQL Server, and SQLAlchemy connectors are an optional add-on installed separately by the user and are not part of the default distribution. Their notices ship with that add-on. ================================================================================ 7. THIRD-PARTY OPEN SOURCE LICENSES — FRONTEND (JavaScript/TypeScript) ================================================================================ The following open source packages are used in the RangerIO frontend. RUNTIME DEPENDENCIES ------------------------------------------------------------------------------ Package Version License Copyright ------------------------------------------------------------------------------ React 18.2.x MIT Meta Platforms, Inc. react-dom 18.2.x MIT Meta Platforms, Inc. react-router-dom 6.20.x MIT Remix Software @tanstack/react-query 5.8.x MIT Tanner Linsley @tanstack/react-table 8.10.x MIT Tanner Linsley @headlessui/react 2.2.x MIT Tailwind Labs @tremor/react 3.18.x Apache-2.0 Tremor @dnd-kit/core 6.3.x MIT Claudéric Demers @dnd-kit/sortable 10.0.x MIT Claudéric Demers @dnd-kit/utilities 3.2.x MIT Claudéric Demers zustand 4.4.x MIT Daishi Kato axios 1.16.x MIT Matt Zabriskie framer-motion 12.26.x MIT Framer B.V. recharts 2.10.x MIT Recharts Group react-hook-form 7.48.x MIT Bill Luo react-hot-toast 2.4.x MIT Timo Lins react-markdown 10.1.x MIT Titus Wormer react-resizable-panels 4.1.x MIT Brian Vaughn remark-gfm 4.0.x MIT Titus Wormer date-fns 4.1.x MIT Sasha Koss pdfjs-dist 4.10.x Apache-2.0 Mozilla Foundation FONTS ------------------------------------------------------------------------------ Package Version License Copyright ------------------------------------------------------------------------------ @fontsource-variable/plus-jakarta-sans 5.2.x OFL-1.1 Tokotype @fontsource/ibm-plex-mono 5.2.x OFL-1.1 IBM Corporation @fontsource/inter 5.2.x OFL-1.1 Rasmus Andersson @fontsource/outfit 5.2.x OFL-1.1 Rodrigo Fuenzalida BUILD AND DEVELOPMENT TOOLS (not distributed with the Product) ------------------------------------------------------------------------------ Package Version License Copyright ------------------------------------------------------------------------------ Vite 5.0.x MIT Evan You TypeScript 5.2.x Apache-2.0 Microsoft Corporation Tailwind CSS 3.3.x MIT Tailwind Labs PostCSS 8.4.x MIT Andrey Sitnik Autoprefixer 10.4.x MIT Andrey Sitnik ESLint 8.53.x MIT OpenJS Foundation @vitejs/plugin-react 4.2.x MIT Evan You Vitest 3.2.x MIT VoidZero Inc. jsdom 29.x MIT jsdom contributors Testing Library (dom/react/ 10.x/16.x/ MIT Kent C. Dodds user-event) 14.x Playwright 1.40+ Apache-2.0 Microsoft Corporation @axe-core/playwright 4.11.x MPL-2.0 Deque Systems (accessibility testing; dev-only, never distributed) ================================================================================ 8. THIRD-PARTY OPEN SOURCE LICENSES — DESKTOP APPLICATION (Electron) ================================================================================ RUNTIME FRAMEWORK ------------------------------------------------------------------------------ Package Version License Copyright ------------------------------------------------------------------------------ Electron 37.10.x MIT OpenJS Foundation Chromium (bundled) BSD-3-Clause The Chromium Authors Node.js (bundled) MIT OpenJS Foundation ELECTRON DEPENDENCIES ------------------------------------------------------------------------------ Package Version License Copyright ------------------------------------------------------------------------------ electron-updater 6.7.x MIT Loopline Systems electron-store 8.1.x MIT Sindre Sorhus extract-zip 2.0.x BSD-2-Clause Max Ogden js-yaml 4.1.x MIT Vitaly Puzrin node-windows 1.0.0-beta MIT Corey Butler (Windows only) BUILD TOOLS (not distributed with the Product) ------------------------------------------------------------------------------ Package Version License Copyright ------------------------------------------------------------------------------ electron-builder 26.7.x MIT Loopline Systems @electron/notarize 3.1.x MIT OpenJS Foundation ================================================================================ 9. MACHINE LEARNING MODELS AND DATA ASSETS ================================================================================ RangerIO uses machine learning models governed by their own license terms. Some models are pre-cached inside the installer for offline operation; others are downloaded by the user on demand. BUNDLED / PRE-CACHED MODELS (included in the distribution) ------------------------------------------------------------------------------ Model License Copyright / Source ------------------------------------------------------------------------------ GLiNER2 multilingual NER (ONNX) Apache-2.0 GLiNER2 authors (PII detection, ~197 MB; covers English, French, Spanish, German) nomic-embed-text-v1.5 (embedder) Apache-2.0 Nomic AI jina-reranker-v1-turbo-en Apache-2.0 Jina AI IBM Granite 4.0 (GGUF, quantized) Apache-2.0 IBM Corporation (bundled local LLM — RangerIO+ edition only) DOWNLOADED MODELS AND ML ASSETS (not included in the distribution) ------------------------------------------------------------------------------ Model License Source ------------------------------------------------------------------------------ IBM Docling document-processing Apache-2.0 / IBM Corporation models (~506 MB, cached on CDLA-Permissive- first use; pre-cached in 2.0 offline builds) Users are responsible for reviewing and accepting the license terms of any models or ML assets they choose to download or configure for use with RangerIO. CLOUD MODELS Cloud LLM providers configured by the user (Section 4) host their own models; no cloud model weights are distributed with or downloaded by RangerIO, and their use is governed by the provider's terms. DISCONTINUED (no longer used as of 0.13.x): Microsoft Presidio, spaCy and spaCy language models (en/fr/es/de_core_news), sentence-transformers models (all-MiniLM-L6-v2, ms-marco-MiniLM-L-6-v2), and ChromaDB. These appeared in prior versions of this document and are no longer part of the Product. ================================================================================ 10. SYSTEM DEPENDENCIES ================================================================================ RangerIO desktop packages bundle their own Python runtime (PSF license) and embed SQLite (public domain) via the Python standard library. The following OPTIONAL system-level utilities may be used when — and only when — the user has installed them on the host operating system. They are NOT bundled with, linked into, or distributed by RangerIO. SOFTWARE LICENSE NOTES ------------------------------------------------------------------------------ Pandoc GPL-2.0+ Optional: RTF/DOC conversion, invoked as an external process Tesseract OCR Apache-2.0 Optional: OCR for scanned documents (Windows path; macOS uses the built-in Apple Vision framework instead) Poppler GPL-2.0+ Optional: PDF utilities, invoked as an external process GPL SYSTEM DEPENDENCIES — DISTRIBUTION DETAILS: Pandoc and Poppler are NOT bundled with any RangerIO distribution. They are optional system utilities invoked as separate external processes only when installed by the user. RangerIO does not link to, modify, or distribute these tools. Per established legal guidance, invoking an independent GPL-licensed program as a separate process does not create a derivative work of that program. Upstream sources: - Pandoc: https://github.com/jgm/pandoc - Poppler: https://poppler.freedesktop.org/ - Tesseract: https://github.com/tesseract-ocr/tesseract RangerIO is distributed as a desktop application (Electron) for macOS and Windows. D2V Analytics Inc. does not currently publish server or Docker-image distributions of the Product; statements about Docker images in prior versions of this document are withdrawn. ================================================================================ 11. LICENSE COMPATIBILITY STATEMENT ================================================================================ D2V Analytics Inc. has conducted a license compatibility review of all third-party components incorporated into or used by RangerIO. Our findings: (a) All directly bundled dependencies use permissive licenses (MIT, MIT-CMU, BSD, TCL, Apache-2.0, ISC, PSF, Matplotlib, or OFL-1.1 for fonts), with the file-level-copyleft exception noted in (c). (b) No bundled component uses a strong copyleft license (GPL, AGPL, LGPL) that would impose source code disclosure obligations on the proprietary portions of RangerIO. (c) The Mozilla Public License 2.0 (used by tqdm, dual-licensed MPL-2.0/MIT) is a weak copyleft license that applies only at the file level. It does not require the proprietary code of RangerIO to be disclosed or relicensed. The MPL-2.0-licensed @axe-core/playwright package is a development-only test tool and is never distributed. (d) Dual-licensed packages (tqdm, python-dateutil, packaging, orjson, cryptography) are used under their most permissive applicable license. (e) GPL system utilities (Pandoc, Poppler) are optional, user-installed, invoked as separate processes, and are not bundled with or linked into the Software in any distribution. (f) Machine learning models bundled with the Product (GLiNER2 NER, nomic-embed-text-v1.5, jina-reranker-v1-turbo-en, and — in RangerIO+ — IBM Granite 4.0) are used under Apache-2.0. Models downloaded separately by users are governed by their own license terms, displayed at download time. (g) The bundled LLM inference stack (llama-cpp-python and llama.cpp) is used under the MIT license via a D2V Analytics Inc.-maintained fork whose source is publicly available (Section 12). This review was last conducted on August 6, 2026. D2V Analytics Inc. commits to maintaining license compliance as dependencies are updated. ================================================================================ 12. SOURCE CODE AVAILABILITY (COPYLEFT OBLIGATIONS) ================================================================================ RangerIO does not incorporate any software that requires the distribution of source code for the proprietary portions of the Software. For components licensed under the Mozilla Public License 2.0 (MPL-2.0), the source code for those specific files is available from their respective upstream repositories. RangerIO does not modify MPL-2.0-licensed files. D2V Analytics Inc. maintains a public fork of llama-cpp-python (MIT) used for local LLM inference; its complete source code is available at: - https://github.com/D2VLabs-adm/llama-cpp-python GPL-licensed tools (Pandoc, Poppler) are not included in any RangerIO distribution; their sources are available from the upstream repositories listed in Section 10. ================================================================================ 13. EXPORT CONTROL AND SANCTIONS COMPLIANCE ================================================================================ RangerIO includes cryptographic functionality through its bundled Electron framework (Chromium/Node.js) and the Python "cryptography" library (used for local encryption of stored provider credentials). The Software may be subject to export control regulations including, but not limited to, the U.S. Export Administration Regulations (EAR) and applicable sanctions laws. Users are responsible for ensuring their use and distribution of the Software complies with all applicable export control and sanctions laws in their jurisdiction. RangerIO does not transmit data outside the user's device during normal operation except as described in Section 4 (user-configured cloud providers, update checks, and user-initiated downloads and ingestion) and does not provide encryption-as-a-service. ================================================================================ 14. DISCLAIMER OF WARRANTIES ================================================================================ THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NONINFRINGEMENT. THIRD-PARTY OPEN SOURCE COMPONENTS ARE PROVIDED UNDER THEIR RESPECTIVE LICENSES AND COME WITH NO WARRANTIES FROM D2V LABS. D2V LABS DOES NOT WARRANT THAT THIRD-PARTY COMPONENTS WILL BE FREE OF DEFECTS, SECURITY VULNERABILITIES, OR ERRORS. D2V LABS DOES NOT WARRANT THAT: (a) The Software will meet your specific requirements; (b) The Software will operate without interruption or error; (c) PII detection will identify all instances of personal data; (d) PII masking applied before transmission to user-configured cloud providers will remove all instances of personal data; (e) Compliance reports constitute legal advice or certification; (f) Data processing results will be accurate in all circumstances; (g) Third-party cloud LLM providers configured by the user will meet any particular privacy, security, or availability standard. PII DETECTION DISCLAIMER: RangerIO's PII detection capabilities are provided as a tool to assist with data privacy compliance. They do not replace professional legal counsel or formal compliance audits. Detection rates depend on data quality, language, and PII type. No automated system can guarantee 100% detection accuracy. Where the on-device NER engine is unavailable for a given scan, the Software marks affected data as unverified and withholds its PII-scanned status rather than reporting a clean result. ================================================================================ 15. LIMITATION OF LIABILITY ================================================================================ TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT SHALL D2V LABS, ITS OFFICERS, DIRECTORS, EMPLOYEES, AGENTS, OR AFFILIATES BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, INCLUDING BUT NOT LIMITED TO LOSS OF PROFITS, DATA, BUSINESS OPPORTUNITY, OR GOODWILL, ARISING OUT OF OR IN CONNECTION WITH: (a) Your use of or inability to use the Software; (b) Any unauthorized access to or alteration of your data; (c) Any failure of PII detection, PII masking, or compliance reporting features; (d) Any third-party component included in or used by the Software; (e) Any third-party cloud LLM provider configured and used at your election; (f) Any action taken or not taken in reliance on the Software's output. IN NO EVENT SHALL D2V LABS' TOTAL LIABILITY EXCEED THE AMOUNT PAID BY YOU FOR THE SOFTWARE IN THE TWELVE (12) MONTHS PRECEDING THE CLAIM. ================================================================================ 16. GOVERNING LAW AND JURISDICTION ================================================================================ This document and any dispute arising out of or relating to the Software are governed by the laws of the Province of Quebec and the federal laws of Canada applicable therein, without regard to conflict-of-law principles. The United Nations Convention on Contracts for the International Sale of Goods (CISG) does not apply. Subject to the consumer-rights paragraph below, the courts of the Province of Quebec, Canada have exclusive jurisdiction over any dispute arising out of or relating to this document or the Software, and each party consents to the personal jurisdiction of those courts. CONSUMER RIGHTS The Software is sold globally. If you are a consumer in a jurisdiction whose laws grant you mandatory rights or protections that cannot be waived by contract — including mandatory warranty, remedy, or forum rights under local consumer protection law — nothing in this document limits or excludes those rights, and the exclusions and limitations in Sections 14 and 15 apply only to the maximum extent permitted by the law applicable to you. ================================================================================ 17. CONTACT INFORMATION ================================================================================ For licensing inquiries, compliance questions, open source attribution concerns, source code requests for copyleft-licensed components, or security vulnerability reports: D2V Analytics Inc. Email: info@rangerio.com Web: https://www.rangerio.com/legal ================================================================================ END OF RANGERIO SOFTWARE LICENSE AND THIRD-PARTY NOTICES ================================================================================ Document created: February 2026 Document updated: August 2026 (v2.0 — aligned with RangerIO 0.13.x)