# Third-Party Notices

This product includes software developed by third parties.
All third-party components, their authors, and their licenses are listed below.

Use of these components is governed by their respective open-source licenses.
Tokto AI does not claim ownership of these third-party works.

---

# 1. Java Backend Components

## Spring Boot, Spring Framework and Related Modules

**License:** Apache License 2.0
**Copyright:** © The Apache Software Foundation
[https://www.apache.org/licenses/LICENSE-2.0](https://www.apache.org/licenses/LICENSE-2.0)

Includes:

* spring-boot-starter-web
* spring-boot-starter-webflux
* spring-boot-starter-data-jpa
* spring-boot-starter-validation
* spring-boot-starter-data-redis
* spring-core, spring-web, spring-webmvc, spring-context, spring-aop, spring-tx
* springdoc-openapi

---

## Hibernate ORM & JPA Components

**License:** LGPL 2.1
**Copyright:** © Red Hat
[https://www.gnu.org/licenses/old-licenses/lgpl-2.1.html](https://www.gnu.org/licenses/old-licenses/lgpl-2.1.html)

Includes:

* hibernate-core
* hibernate-jcache
* hibernate-commons-annotations

---

## MySQL Connector/J

**License:** GPL-2.0 WITH FOSS License Exception
Copyright © Oracle
[https://oss.oracle.com/licenses/universal-foss-exception/](https://oss.oracle.com/licenses/universal-foss-exception/)

This license permits dynamic linking with proprietary applications.

---

## Lettuce Redis Client

**License:** Apache 2.0
© Mark Paluch & Contributors
[https://www.apache.org/licenses/LICENSE-2.0](https://www.apache.org/licenses/LICENSE-2.0)

---

## Jackson JSON Processor

**License:** Apache 2.0
© FasterXML

Includes:

* jackson-core
* jackson-databind
* jackson-annotations
* jackson-datatype-jsr310

---

## Nimbus JOSE + JWT

**License:** Apache 2.0
© NimbusDS
[https://www.apache.org/licenses/LICENSE-2.0](https://www.apache.org/licenses/LICENSE-2.0)

---

## AWS SDK for Java v2

**License:** Apache 2.0
© Amazon Web Services

Modules include:

* bedrockruntime
* auth
* regions
* netty-nio-client

---

## Azure SDK

**License:** MIT
© Microsoft

Includes:

* azure-ai-openai
* azure-core
* azure-core-http-netty

---

## Google GenAI Client

**License:** Apache 2.0
© Google

Includes:

* google-genai
* google-auth-library-oauth2-http

---

## OpenNLP

**License:** Apache 2.0
© Apache Software Foundation

---

## Iban4j

**License:** Apache 2.0
© Artur Hefczyc

---

## Caffeine

**License:** Apache 2.0
© Ben Manes

---

## RE2J Regular Expression Engine

**License:** BSD 3-Clause
© Google

---

## Commons Validator, BeanUtils, Logging

**License:** Apache 2.0
© Apache Software Foundation

---

# 2. Java Test Dependencies

All test libraries are excluded from the distributed artifact, but are listed here for completeness.

Includes:

* JUnit 5 (EPL 2.0)
* Mockito (MIT)
* Reactor Test (Apache 2.0)

---

# 3. JavaScript Frontend Components

All frontend components are under MIT, ISC, BSD, or Apache 2.0 licenses unless stated otherwise.

Major component groups:

---

## React & React DOM

**License:** MIT
© Meta Platforms

---

## Vite Build System

**License:** MIT
© Vite Contributors

---

## TailwindCSS & Plugins

**License:** MIT
© Tailwind Labs

---

## Radix UI Components

**License:** MIT
© WorkOS

---

## Framer Motion

**License:** MIT
© Framer

---

## Lucide Icons

**License:** ISC
© Lucide Contributors

---

## Recharts

**License:** MIT
© Recharts Contributors

---

## Unified / Remark / Rehype Markdown & HTML Processing Stack

**License:** MIT
© Unified Collective and Contributors

Includes:

* unified
* remark-parse
* remark-gfm
* remark-rehype
* rehype-raw
* rehype-sanitize
* rehype-stringify

---

## DayPicker, Date-FNS, JSZip, html2canvas

**License:** MIT

---

## Zod

**License:** MIT
© Zod Authors

---

## Command Palette (cmdk)

**License:** MIT
© Vercel

---

## ESLint, TypeScript type definitions

**License:** MIT

---

# 4. General Notices

This product is proprietary software.
Third-party components remain the property of their respective authors and licensors.

Tokto AI includes these components under the terms of their licenses and does not modify their licensing in any way.

Model- and user-generated Markdown content is treated as untrusted input and is processed through HTML sanitization before rendering.

---

# 5. Warranty Disclaimer

All third-party components are provided **“as-is”** without warranty of any kind.
Any security updates to third-party dependencies will be incorporated on a reasonable-effort basis.

---