================================================================================
RANGERIO SOFTWARE LICENSE AND THIRD-PARTY NOTICES
================================================================================
Document Version: 2.1
Software Version: 0.13.x
Effective Date: February 12, 2026
Last Updated: September 1, 2026
Publisher: D2V Analytics Inc. ("Company", "We", "Us")
Product: RangerIO ("Software", "Product")
Editions: RangerIO (Lite edition) and RangerIO+ ("RangerIO Plus",
Full edition) — see Section 3
================================================================================
TABLE OF CONTENTS
================================================================================
1. RANGERIO PROPRIETARY LICENSE
2. INTELLECTUAL PROPERTY NOTICE
3. PRODUCT EDITIONS
4. DATA PRIVACY COMMITMENT
5. THIRD-PARTY OPEN SOURCE LICENSES — SUMMARY
6. THIRD-PARTY OPEN SOURCE LICENSES — PYTHON BACKEND
7. THIRD-PARTY OPEN SOURCE LICENSES — FRONTEND (JavaScript/TypeScript)
8. THIRD-PARTY OPEN SOURCE LICENSES — DESKTOP APPLICATION (Electron)
9. MACHINE LEARNING MODELS AND DATA ASSETS
10. SYSTEM DEPENDENCIES
11. LICENSE COMPATIBILITY STATEMENT
12. SOURCE CODE AVAILABILITY (COPYLEFT OBLIGATIONS)
13. EXPORT CONTROL AND SANCTIONS COMPLIANCE
14. DISCLAIMER OF WARRANTIES
15. LIMITATION OF LIABILITY
16. GOVERNING LAW AND JURISDICTION
17. CONTACT INFORMATION
================================================================================
1. RANGERIO PROPRIETARY LICENSE
================================================================================
Copyright (c) 2024-2026 D2V Analytics Inc. All rights reserved.
RangerIO is proprietary software developed and owned by D2V Analytics Inc.
The following terms govern your use of the Software:
GRANT OF LICENSE
Subject to the terms of your applicable license agreement (End User License
Agreement, Enterprise License, or Evaluation License), D2V Analytics Inc.
grants you a limited, non-exclusive, non-transferable, revocable license to
install and use the Software solely for your internal business purposes.
RESTRICTIONS
You may NOT, without prior written consent from D2V Analytics Inc.:
(a) Copy, modify, adapt, translate, or create derivative works based on
the Software, except as expressly permitted by applicable law;
(b) Reverse engineer, disassemble, decompile, or otherwise attempt to
derive the source code of the Software;
(c) Rent, lease, loan, sell, sublicense, distribute, or otherwise
transfer the Software or any rights therein to any third party;
(d) Remove, alter, or obscure any proprietary notices, labels, or marks
on the Software;
(e) Use the Software to develop a competing product or service;
(f) Use the Software in any manner that violates applicable law or
regulation;
(g) Circumvent or disable any security, licensing, or access control
features of the Software;
(h) Use the Software to process data on behalf of third parties in a
service bureau, managed service, or SaaS capacity, unless explicitly
authorized under an Enterprise License.
USER CONTENT AND OUTPUTS
You retain all right, title, and interest in and to the data you process
with the Software and the outputs the Software generates from your data
("User Content"). D2V Analytics Inc. claims no ownership of User Content
and, because the Software processes data locally on your device (Section 4),
never receives it. This document grants D2V Analytics Inc. no license to
User Content.
FEEDBACK
If you voluntarily provide suggestions, ideas, bug reports, or other
feedback about the Software, you grant D2V Analytics Inc. a perpetual,
irrevocable, worldwide, royalty-free license to use that feedback for any
purpose, without obligation or attribution. Feedback does not include User
Content.
NO IMPLIED LICENSES
No license or right is granted by implication, estoppel, or otherwise,
other than the licenses and rights expressly granted in this document and
your applicable license agreement.
RESERVATION OF RIGHTS
All rights not expressly granted herein are reserved by D2V Analytics Inc.
The Software is licensed, not sold. D2V Analytics Inc. retains all right,
title, and interest in and to the Software, including all intellectual
property rights.
EQUITABLE RELIEF
You acknowledge that a breach of the restrictions in this Section 1 or of
Section 2 may cause D2V Analytics Inc. irreparable harm for which monetary
damages would be an inadequate remedy, and that D2V Analytics Inc. is
entitled to seek injunctive or other equitable relief in addition to any
other remedies available at law.
TERMINATION
This license terminates automatically if you breach any of its terms. Upon
termination, you must destroy all copies of the Software in your possession.
Sections 2, 13, 14, 15, and 16 survive termination.
================================================================================
2. INTELLECTUAL PROPERTY NOTICE
================================================================================
The following are the intellectual property of D2V Analytics Inc.:
- The RangerIO and RangerIO+ names, logos, and brand identity
- All proprietary source code, algorithms, and data processing pipelines
- The RangerIO user interface design and user experience
- Proprietary prompt engineering templates, DSPy programs, and
domain-specific compilation logic
- The intelligence data framework, PII severity taxonomy, trust-gate
logic, and compliance scoring algorithms
- All documentation, marketing materials, and training content
- The architecture, design, and organization of the Software
The inclusion of open source components (listed in Sections 6-9) does not
diminish D2V Analytics Inc.'s intellectual property rights in the
proprietary portions of the Software. Open source components are used under
their respective licenses and remain the property of their respective
authors.
TRADEMARKS
"RangerIO", "RangerIO+", and associated logos are trademarks or registered
trademarks of D2V Analytics Inc. Nothing in this document grants any right
to use these marks. Any unauthorized use of the marks, or any use that
suggests affiliation with or endorsement by D2V Analytics Inc., is
prohibited. Other product and company names mentioned herein may be
trademarks of their respective owners.
NOTICES TRANSPARENCY
A copy of this document ships with every RangerIO distribution
(RangerIO_Licensing.txt in the application resources) and is updated with
each release to reflect the components actually shipped. To report an
attribution error or omission, contact D2V Analytics Inc. (Section 17);
corrections are made in the next release.
================================================================================
3. PRODUCT EDITIONS
================================================================================
RangerIO ships in two editions built from the same code base. The edition
is recorded in the installed application manifest and determines which
components are bundled:
RANGERIO (Lite edition)
- Data intelligence and sanitization engine: ingestion, profiling,
data quality, PII detection and masking, and retrieval-augmented
assistant workflows for public-beta-supported file sources
- Does NOT bundle a local large language model. Users configure a
supported cloud provider or compatible model endpoint (see Section 4)
- Minimum system memory: 8 GB RAM
RANGERIO+ ("RangerIO Plus", Full edition)
- Everything in RangerIO, PLUS a bundled local language model
(IBM Granite 4.0, GGUF format — see Section 9) for fully on-device
inference out of the box
- Minimum system memory: 16 GB RAM
Both editions include the same PII detection stack (GLiNER2 ONNX), the same
document ingestion engine (IBM Docling), and the same embedded databases
(DuckDB, SQLite, LanceDB). Third-party notices in this document apply to
both editions unless a component is expressly marked edition-specific.
================================================================================
4. DATA PRIVACY COMMITMENT
================================================================================
RangerIO is designed as a local-first data workbench for sensitive data.
The Software is architected with the following privacy principles:
- All user data is processed and stored locally on the user's device
by default
- No user data is transmitted to D2V Analytics Inc. at any time. D2V
Analytics Inc. operates no data-collection service and receives no
document content, query content, or derived intelligence
- PII detection and remediation occur locally, on-device, using a
bundled ONNX model (GLiNER2) with no network dependency
- Local language model inference (bundled in RangerIO+, user-supplied
in RangerIO) runs entirely on-device
- The Software's API server and MCP sidecar bind to the local machine
and are not exposed to the network
OPTIONAL CLOUD LLM PROVIDERS (user-configured)
RangerIO supports optional, user-configured connections to third-party
and OpenAI-compatible cloud LLM providers selected by the user as an
escalation path in its cache-first query cascade. When — and only when — a
user configures a cloud provider:
- Requests are sent directly from the user's device to the provider the
user selected, using the user's own API credentials; no traffic passes
through D2V Analytics Inc.
- Content sent to cloud providers is privacy-brokered: detected PII is
masked before transmission and masked content is explicitly marked
(e.g. "[masked for privacy]") — subject to the detection limitations
in Section 14
- Provider API keys are stored locally, encrypted at rest
- Use of a cloud provider is governed by that provider's own terms of
service and privacy policy, not by this document
The embedded local token registry can contain original sensitive values
needed to restore masked placeholders. RangerIO does not separately encrypt
that registry in the public beta; its protection depends on operating-system
account controls and device or volume encryption.
NETWORK CONNECTIVITY
Network connectivity, when used, is limited to:
- Software update checks against D2V Analytics Inc.'s release distribution
servers where enabled for the platform and build
- Model and ML-asset downloads from Hugging Face Hub (user-initiated,
or initiated by first-use model caching)
- User-configured cloud LLM providers (above)
- No telemetry, analytics, or usage data collection
================================================================================
5. THIRD-PARTY OPEN SOURCE LICENSES — SUMMARY
================================================================================
RangerIO incorporates open source software components governed by the
following license families. The complete list of components and their
licenses follows in Sections 6-9.
LICENSE TYPES USED:
MIT License — Permissive; attribution required
MIT-CMU License — Permissive; attribution required (Pillow)
BSD 2-Clause License — Permissive; attribution required
BSD 3-Clause License — Permissive; attribution + non-endorsement
Apache License 2.0 — Permissive; attribution + patent grant
ISC License — Permissive; attribution required
Mozilla Public License 2.0 — Weak copyleft (file-level only)
Python Software Foundation — Permissive; attribution required
Matplotlib License — Permissive; PSF-based
TCL License — Permissive (portions of ujson)
SIL Open Font License 1.1 — Fonts; permissive with renaming rule
All third-party components distributed with RangerIO are governed by
permissive or weak-copyleft (file-level) open source licenses that permit
commercial use, modification, and redistribution, subject to attribution
and notice requirements.
RangerIO does NOT bundle or link any software licensed under the GNU
General Public License (GPL), GNU Affero General Public License (AGPL),
or other strong copyleft licenses that would impose licensing obligations
on the proprietary portions of the Software. Optional GPL-licensed system
utilities (Pandoc, Poppler) may be separately installed by the user and
are invoked only as independent external processes — see Section 10.
================================================================================
6. THIRD-PARTY OPEN SOURCE LICENSES — PYTHON BACKEND
================================================================================
The following open source packages are used in the RangerIO backend.
Versions marked ">=" are minimum versions; the exact installed version is
recorded in the build manifest of each release.
CORE FRAMEWORK
------------------------------------------------------------------------------
Package Version License Copyright
------------------------------------------------------------------------------
FastAPI 0.127.1 MIT Sebastian Ramirez
uvicorn 0.39.0 BSD-3-Clause Encode OSS
Pydantic 2.9.2 MIT Samuel Colvin
pydantic-settings 2.11.0 MIT Samuel Colvin
llama-cpp-python 0.3.x (fork) MIT Andrei Betlen
(D2V Analytics Inc. fork of the JamePeng fork; source:
https://github.com/D2VLabs-adm/llama-cpp-python — bundles llama.cpp,
MIT, Copyright The ggml authors / Georgi Gerganov)
LanceDB 0.26.1 Apache-2.0 LanceDB Inc.
lance-namespace 0.3.x-0.6.x Apache-2.0 LanceDB Inc.
PyArrow 14.x-17.x Apache-2.0 The Apache Software Foundation
DATA PROCESSING
------------------------------------------------------------------------------
Package Version License Copyright
------------------------------------------------------------------------------
pandas 1.5.3-2.x BSD-3-Clause pandas Development Team
NumPy 1.26.4 BSD-3-Clause NumPy Developers
DuckDB 1.4.2 MIT DuckDB Contributors
Polars 0.20.0 MIT Ritchie Vink
openpyxl 3.1.5 MIT Eric Gazoni, Charlie Clark
xlrd 2.0.1 BSD-3-Clause Stephen John Machin
aiofiles 25.1.0 Apache-2.0 Tin Tvrtkovic
python-multipart >=0.0.27 Apache-2.0 Andrew Dunham
pdfplumber 0.11.9 MIT Jeremy Singer-Vine
pdfminer.six >=20251230 MIT Yusuke Shinyama et al.
python-docx 1.1.2 MIT Steve Canny
pypandoc 1.14 MIT Juho Vepsalainen
jsonschema 4.25.1 MIT Julian Berman
INTELLIGENCE FRAMEWORK (DSPy, Embeddings, RAG)
------------------------------------------------------------------------------
Package Version License Copyright
------------------------------------------------------------------------------
dspy-ai 2.5.0 MIT Stanford NLP
litellm 1.82.x MIT BerriAI
(LLM provider routing SDK used for outbound cloud LLM calls)
fastembed 0.7.4 Apache-2.0 Qdrant
onnxruntime (via deps) MIT Microsoft Corporation
rank-bm25 0.2.x Apache-2.0 Dorian Brown
rapidfuzz 3.x MIT Max Bachmann
scikit-learn 1.x BSD-3-Clause scikit-learn developers
diskcache 5.6.3 Apache-2.0 Grant Jenks
backoff 2.2.1 MIT Bob Green
DATA QUALITY AND MONITORING
------------------------------------------------------------------------------
Package Version License Copyright
------------------------------------------------------------------------------
watchdog 6.0.0 Apache-2.0 Yesudeep Mangalapilly
PII DETECTION (GLiNER2 — zero-shot NER, on-device)
------------------------------------------------------------------------------
Package Version License Copyright
------------------------------------------------------------------------------
gliner2-onnx 0.1.1 MIT GLiNER2 authors
transformers 4.40+ <5.0 Apache-2.0 Hugging Face
langdetect >=1.0.9 MIT / Apache-2.0 Michal Danilak
DOCUMENT INGESTION (IBM Docling)
------------------------------------------------------------------------------
Package Version License Copyright
------------------------------------------------------------------------------
docling 2.67-2.81 MIT IBM Corporation
docling-core >=2.50 MIT IBM Corporation
docling-ibm-models 3.0-3.11 MIT IBM Corporation
HUGGING FACE AND MODEL MANAGEMENT
------------------------------------------------------------------------------
Package Version License Copyright
------------------------------------------------------------------------------
huggingface-hub 0.35.1 Apache-2.0 Hugging Face
hf_transfer >=0.1.4 Apache-2.0 Hugging Face
hf-xet 1.2.0 Apache-2.0 Hugging Face
tokenizers 0.22.1 Apache-2.0 Hugging Face
filelock >=3.13.0 MIT Benedikt Schmitt
fsspec >=2024.1.0 BSD-3-Clause Intake Contributors
NETWORKING, SECURITY AND CONFIGURATION
------------------------------------------------------------------------------
Package Version License Copyright
------------------------------------------------------------------------------
httpx 0.28.1 BSD-3-Clause Encode OSS
h2 4.x MIT Cory Benfield
requests 2.33.0 Apache-2.0 Kenneth Reitz
urllib3 >=2.7.0 MIT Andrey Petrov
idna >=3.15 BSD-3-Clause Kim Davies
cryptography >=46.0.7 Apache-2.0/BSD PyCA
(local encryption of stored provider credentials)
python-dotenv 1.0.0 BSD-3-Clause Saurabh Kumar
PyYAML 6.0.2 MIT Kirill Simonov
anyio 4.12.0 MIT Alex Grönholm
websockets 15.0.1 BSD-3-Clause Aymeric Augustin
protobuf 6.33.5 BSD-3-Clause Google LLC
lxml >=6.1.0 BSD-3-Clause lxml team
Mako >=1.3.12 MIT Michael Bayer
Pillow 10.3-11.x MIT-CMU Jeffrey A. Clark et al.
ujson >=5.12.1 BSD-3 + TCL ESN Social Software
MCP SERVER AND TOKEN HANDLING (NanoClaw sidecar)
------------------------------------------------------------------------------
Package Version License Copyright
------------------------------------------------------------------------------
sqlglot >=20.0 MIT Toby Mao
mcp (MCP Python SDK) >=1.0.0 MIT Anthropic, PBC
PyJWT >=2.8.0 MIT Jose Padilla
keyring >=25.0.0 MIT Jason R. Coombs
UTILITIES
------------------------------------------------------------------------------
Package Version License Copyright
------------------------------------------------------------------------------
psutil 7.1.3 BSD-3-Clause Giampaolo Rodola
tqdm 4.67.1 MPL-2.0 / MIT Casper da Costa-Luis
rich 13.9.4 MIT Will McGugan
orjson 3.11.6 MIT / Apache-2.0 ijl
typer >=0.9.0 MIT Sebastian Ramirez
click >=8.1.7 BSD-3-Clause Pallets Projects
markdown-it-py >=3.0.0 MIT ExecutableBookProject
mdurl 0.1.2 MIT ExecutableBookProject
Pygments 2.20.0 BSD-2-Clause Georg Brandl
Jinja2 3.1.6 BSD-3-Clause Pallets Projects
MarkupSafe 3.0.3 BSD-3-Clause Pallets Projects
python-dateutil 2.9.0.post0 Apache-2.0/BSD Gustavo Niemeyer
pytz 2025.2 MIT Stuart Bishop
tzdata 2025.3 Apache-2.0 IANA / Paul Ganssle
typing_extensions 4.15.0 PSF Guido van Rossum
setproctitle >=1.3.0 BSD-3-Clause Daniele Varrazzo
packaging 25.0 Apache-2.0/BSD PyPA
six 1.17.0 MIT Benjamin Peterson
PLATFORM BINDINGS
------------------------------------------------------------------------------
Package Version License Copyright
------------------------------------------------------------------------------
pyobjc (Core, Cocoa, 11.1 MIT Ronald Oussoren
CoreML, Quartz, (macOS only)
Vision)
pywin32 311 PSF Mark Hammond
(Windows only)
REPORTS AND EXPORT
------------------------------------------------------------------------------
Package Version License Copyright
------------------------------------------------------------------------------
ReportLab >=4.0 BSD ReportLab Inc.
matplotlib 3.7-3.x Matplotlib (PSF- Matplotlib Development
based) Team
DEVELOPMENT ONLY (not distributed with the Product)
------------------------------------------------------------------------------
pytest 9.x MIT Holger Krekel
iniconfig 2.x MIT Ronny Pfannschmidt
pluggy 1.x MIT Holger Krekel
OPTIONAL DATABASE CONNECTORS (separate install, requirements-db.txt)
------------------------------------------------------------------------------
PostgreSQL, SQL Server, and SQLAlchemy connectors are an optional add-on
installed separately by the user and are not part of the default
distribution. Their notices ship with that add-on.
================================================================================
7. THIRD-PARTY OPEN SOURCE LICENSES — FRONTEND (JavaScript/TypeScript)
================================================================================
The following open source packages are used in the RangerIO frontend.
RUNTIME DEPENDENCIES
------------------------------------------------------------------------------
Package Version License Copyright
------------------------------------------------------------------------------
React 18.2.x MIT Meta Platforms, Inc.
react-dom 18.2.x MIT Meta Platforms, Inc.
react-router-dom 6.20.x MIT Remix Software
@tanstack/react-query 5.8.x MIT Tanner Linsley
@tanstack/react-table 8.10.x MIT Tanner Linsley
@headlessui/react 2.2.x MIT Tailwind Labs
@tremor/react 3.18.x Apache-2.0 Tremor
@dnd-kit/core 6.3.x MIT Claudéric Demers
@dnd-kit/sortable 10.0.x MIT Claudéric Demers
@dnd-kit/utilities 3.2.x MIT Claudéric Demers
zustand 4.4.x MIT Daishi Kato
axios 1.16.x MIT Matt Zabriskie
framer-motion 12.26.x MIT Framer B.V.
recharts 2.10.x MIT Recharts Group
react-hook-form 7.48.x MIT Bill Luo
react-hot-toast 2.4.x MIT Timo Lins
react-markdown 10.1.x MIT Titus Wormer
react-resizable-panels 4.1.x MIT Brian Vaughn
remark-gfm 4.0.x MIT Titus Wormer
date-fns 4.1.x MIT Sasha Koss
pdfjs-dist 4.10.x Apache-2.0 Mozilla Foundation
FONTS
------------------------------------------------------------------------------
Package Version License Copyright
------------------------------------------------------------------------------
@fontsource-variable/plus-jakarta-sans 5.2.x OFL-1.1 Tokotype
@fontsource/ibm-plex-mono 5.2.x OFL-1.1 IBM Corporation
@fontsource/inter 5.2.x OFL-1.1 Rasmus Andersson
@fontsource/outfit 5.2.x OFL-1.1 Rodrigo Fuenzalida
BUILD AND DEVELOPMENT TOOLS (not distributed with the Product)
------------------------------------------------------------------------------
Package Version License Copyright
------------------------------------------------------------------------------
Vite 5.0.x MIT Evan You
TypeScript 5.2.x Apache-2.0 Microsoft Corporation
Tailwind CSS 3.3.x MIT Tailwind Labs
PostCSS 8.4.x MIT Andrey Sitnik
Autoprefixer 10.4.x MIT Andrey Sitnik
ESLint 8.53.x MIT OpenJS Foundation
@vitejs/plugin-react 4.2.x MIT Evan You
Vitest 3.2.x MIT VoidZero Inc.
jsdom 29.x MIT jsdom contributors
Testing Library (dom/react/ 10.x/16.x/ MIT Kent C. Dodds
user-event) 14.x
Playwright 1.40+ Apache-2.0 Microsoft Corporation
@axe-core/playwright 4.11.x MPL-2.0 Deque Systems
(accessibility testing; dev-only, never distributed)
================================================================================
8. THIRD-PARTY OPEN SOURCE LICENSES — DESKTOP APPLICATION (Electron)
================================================================================
RUNTIME FRAMEWORK
------------------------------------------------------------------------------
Package Version License Copyright
------------------------------------------------------------------------------
Electron 37.10.x MIT OpenJS Foundation
Chromium (bundled) BSD-3-Clause The Chromium Authors
Node.js (bundled) MIT OpenJS Foundation
ELECTRON DEPENDENCIES
------------------------------------------------------------------------------
Package Version License Copyright
------------------------------------------------------------------------------
electron-updater 6.7.x MIT Loopline Systems
electron-store 8.1.x MIT Sindre Sorhus
extract-zip 2.0.x BSD-2-Clause Max Ogden
js-yaml 4.1.x MIT Vitaly Puzrin
node-windows 1.0.0-beta MIT Corey Butler
(Windows only)
BUILD TOOLS (not distributed with the Product)
------------------------------------------------------------------------------
Package Version License Copyright
------------------------------------------------------------------------------
electron-builder 26.7.x MIT Loopline Systems
@electron/notarize 3.1.x MIT OpenJS Foundation
================================================================================
9. MACHINE LEARNING MODELS AND DATA ASSETS
================================================================================
RangerIO uses machine learning models governed by their own license terms.
Some models are pre-cached inside the installer for offline operation;
others are downloaded by the user on demand.
BUNDLED / PRE-CACHED MODELS (included in the distribution)
------------------------------------------------------------------------------
Model License Copyright / Source
------------------------------------------------------------------------------
GLiNER2 multilingual NER (ONNX) Apache-2.0 GLiNER2 authors
(PII detection, ~197 MB; covers English, French, Spanish, German)
nomic-embed-text-v1.5 (embedder) Apache-2.0 Nomic AI
jina-reranker-v1-turbo-en Apache-2.0 Jina AI
IBM Granite 4.0 (GGUF, quantized) Apache-2.0 IBM Corporation
(bundled local LLM — RangerIO+ edition only)
DOWNLOADED MODELS AND ML ASSETS (not included in the distribution)
------------------------------------------------------------------------------
Model License Source
------------------------------------------------------------------------------
IBM Docling document-processing Apache-2.0 / IBM Corporation
models (~506 MB, cached on CDLA-Permissive-
first use; pre-cached in 2.0
offline builds)
Users are responsible for reviewing and accepting the license terms of any
models or ML assets they choose to download or configure for use with
RangerIO.
CLOUD MODELS
Cloud LLM providers configured by the user (Section 4) host their own
models; no cloud model weights are distributed with or downloaded by
RangerIO, and their use is governed by the provider's terms.
DISCONTINUED (no longer used as of 0.13.x): Microsoft Presidio, spaCy and
spaCy language models (en/fr/es/de_core_news), sentence-transformers
models (all-MiniLM-L6-v2, ms-marco-MiniLM-L-6-v2), and ChromaDB. These
appeared in prior versions of this document and are no longer part of the
Product.
================================================================================
10. SYSTEM DEPENDENCIES
================================================================================
RangerIO desktop packages bundle their own Python runtime (PSF license)
and embed SQLite (public domain) via the Python standard library. The
following OPTIONAL system-level utilities may be used when — and only
when — the user has installed them on the host operating system. They are
NOT bundled with, linked into, or distributed by RangerIO.
SOFTWARE LICENSE NOTES
------------------------------------------------------------------------------
Pandoc GPL-2.0+ Optional: RTF/DOC conversion,
invoked as an external process
Tesseract OCR Apache-2.0 Optional: OCR for scanned
documents (Windows path; macOS
uses the built-in Apple Vision
framework instead)
Poppler GPL-2.0+ Optional: PDF utilities, invoked
as an external process
GPL SYSTEM DEPENDENCIES — DISTRIBUTION DETAILS:
Pandoc and Poppler are NOT bundled with any RangerIO distribution. They
are optional system utilities invoked as separate external processes
only when installed by the user. RangerIO does not link to, modify, or
distribute these tools. Per established legal guidance, invoking an
independent GPL-licensed program as a separate process does not create
a derivative work of that program. Upstream sources:
- Pandoc: https://github.com/jgm/pandoc
- Poppler: https://poppler.freedesktop.org/
- Tesseract: https://github.com/tesseract-ocr/tesseract
RangerIO is distributed as a desktop application (Electron) for macOS and
Windows. D2V Analytics Inc. does not currently publish server or
Docker-image distributions of the Product; statements about Docker images in
prior versions of this document are withdrawn.
================================================================================
11. LICENSE COMPATIBILITY STATEMENT
================================================================================
D2V Analytics Inc. has conducted a license compatibility review of all
third-party components incorporated into or used by RangerIO. Our findings:
(a) All directly bundled dependencies use permissive licenses
(MIT, MIT-CMU, BSD, TCL, Apache-2.0, ISC, PSF, Matplotlib, or
OFL-1.1 for fonts), with the file-level-copyleft exception noted
in (c).
(b) No bundled component uses a strong copyleft license (GPL, AGPL,
LGPL) that would impose source code disclosure obligations on the
proprietary portions of RangerIO.
(c) The Mozilla Public License 2.0 (used by tqdm, dual-licensed
MPL-2.0/MIT) is a weak copyleft license that applies only at the
file level. It does not require the proprietary code of RangerIO to
be disclosed or relicensed. The MPL-2.0-licensed @axe-core/playwright
package is a development-only test tool and is never distributed.
(d) Dual-licensed packages (tqdm, python-dateutil, packaging, orjson,
cryptography) are used under their most permissive applicable
license.
(e) GPL system utilities (Pandoc, Poppler) are optional, user-installed,
invoked as separate processes, and are not bundled with or linked
into the Software in any distribution.
(f) Machine learning models bundled with the Product (GLiNER2 NER,
nomic-embed-text-v1.5, jina-reranker-v1-turbo-en, and — in
RangerIO+ — IBM Granite 4.0) are used under Apache-2.0. Models
downloaded separately by users are governed by their own license
terms, displayed at download time.
(g) The bundled LLM inference stack (llama-cpp-python and llama.cpp) is
used under the MIT license via a D2V Analytics Inc.-maintained fork
whose source is publicly available (Section 12).
This review was last conducted on August 6, 2026. D2V Analytics Inc. commits
to maintaining license compliance as dependencies are updated.
================================================================================
12. SOURCE CODE AVAILABILITY (COPYLEFT OBLIGATIONS)
================================================================================
RangerIO does not incorporate any software that requires the distribution
of source code for the proprietary portions of the Software.
For components licensed under the Mozilla Public License 2.0 (MPL-2.0),
the source code for those specific files is available from their
respective upstream repositories. RangerIO does not modify
MPL-2.0-licensed files.
D2V Analytics Inc. maintains a public fork of llama-cpp-python (MIT) used
for local LLM inference; its complete source code is available at:
- https://github.com/D2VLabs-adm/llama-cpp-python
GPL-licensed tools (Pandoc, Poppler) are not included in any RangerIO
distribution; their sources are available from the upstream repositories
listed in Section 10.
================================================================================
13. EXPORT CONTROL AND SANCTIONS COMPLIANCE
================================================================================
RangerIO includes cryptographic functionality through its bundled Electron
framework (Chromium/Node.js) and the Python "cryptography" library (used
for local encryption of stored provider credentials). The Software may be
subject to export control regulations including, but not limited to, the
U.S. Export Administration Regulations (EAR) and applicable sanctions
laws.
Users are responsible for ensuring their use and distribution of the
Software complies with all applicable export control and sanctions laws
in their jurisdiction.
RangerIO does not transmit data outside the user's device during normal
operation except as described in Section 4 (user-configured cloud
providers, update checks, and user-initiated downloads and ingestion) and
does not provide encryption-as-a-service.
================================================================================
14. DISCLAIMER OF WARRANTIES
================================================================================
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
FITNESS FOR A PARTICULAR PURPOSE, AND NONINFRINGEMENT.
THIRD-PARTY OPEN SOURCE COMPONENTS ARE PROVIDED UNDER THEIR RESPECTIVE
LICENSES AND COME WITH NO WARRANTIES FROM D2V LABS. D2V LABS DOES NOT
WARRANT THAT THIRD-PARTY COMPONENTS WILL BE FREE OF DEFECTS, SECURITY
VULNERABILITIES, OR ERRORS.
D2V LABS DOES NOT WARRANT THAT:
(a) The Software will meet your specific requirements;
(b) The Software will operate without interruption or error;
(c) PII detection will identify all instances of personal data;
(d) PII masking applied before transmission to user-configured cloud
providers will remove all instances of personal data;
(e) Compliance reports constitute legal advice or certification;
(f) Data processing results will be accurate in all circumstances;
(g) Third-party cloud LLM providers configured by the user will meet
any particular privacy, security, or availability standard.
PII DETECTION DISCLAIMER: RangerIO's PII detection capabilities are
provided as a tool to assist with data privacy compliance. They do not
replace professional legal counsel or formal compliance audits. Detection
rates depend on data quality, language, and PII type. No automated system
can guarantee 100% detection accuracy. Where the on-device NER engine is
unavailable for a given scan, the Software marks affected data as
unverified and withholds its PII-scanned status rather than reporting a
clean result.
================================================================================
15. LIMITATION OF LIABILITY
================================================================================
TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT SHALL D2V
LABS, ITS OFFICERS, DIRECTORS, EMPLOYEES, AGENTS, OR AFFILIATES BE LIABLE
FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES,
INCLUDING BUT NOT LIMITED TO LOSS OF PROFITS, DATA, BUSINESS OPPORTUNITY,
OR GOODWILL, ARISING OUT OF OR IN CONNECTION WITH:
(a) Your use of or inability to use the Software;
(b) Any unauthorized access to or alteration of your data;
(c) Any failure of PII detection, PII masking, or compliance reporting
features;
(d) Any third-party component included in or used by the Software;
(e) Any third-party cloud LLM provider configured and used at your
election;
(f) Any action taken or not taken in reliance on the Software's output.
IN NO EVENT SHALL D2V LABS' TOTAL LIABILITY EXCEED THE AMOUNT PAID BY YOU
FOR THE SOFTWARE IN THE TWELVE (12) MONTHS PRECEDING THE CLAIM.
================================================================================
16. GOVERNING LAW AND JURISDICTION
================================================================================
This document and any dispute arising out of or relating to the Software
are governed by the laws of the Province of Quebec and the federal laws of
Canada applicable therein, without regard to conflict-of-law principles.
The United Nations Convention on Contracts for the International Sale of
Goods (CISG) does not apply.
Subject to the consumer-rights paragraph below, the courts of the Province
of Quebec, Canada have exclusive jurisdiction over any dispute arising out
of or relating to this document or the Software, and each party consents
to the personal jurisdiction of those courts.
CONSUMER RIGHTS
The Software is sold globally. If you are a consumer in a jurisdiction
whose laws grant you mandatory rights or protections that cannot be waived
by contract — including mandatory warranty, remedy, or forum rights under
local consumer protection law — nothing in this document limits or
excludes those rights, and the exclusions and limitations in Sections 14
and 15 apply only to the maximum extent permitted by the law applicable
to you.
================================================================================
17. CONTACT INFORMATION
================================================================================
For licensing inquiries, compliance questions, open source attribution
concerns, source code requests for copyleft-licensed components, or
security vulnerability reports:
D2V Analytics Inc.
Email: info@rangerio.com
Web: https://www.rangerio.com/legal
================================================================================
END OF RANGERIO SOFTWARE LICENSE AND THIRD-PARTY NOTICES
================================================================================
Document created: February 2026
Document updated: August 2026 (v2.0 — aligned with RangerIO 0.13.x)