Terms of Service

01 Agreement

These terms govern access to the website, the free readiness check and the compliance automation platform. By creating a workspace or using the service you agree to them on behalf of your organisation. If an order form or signed agreement exists, it takes priority where it conflicts with these terms.

02 The service

The platform provides a control library, automated evidence collection, policy management, vendor risk, risk register, audit room and trust page features, depending on your plan.

The service prepares organisations for audits. It does not certify, attest or guarantee the outcome of any audit. Certification and attestation decisions are made only by independent auditors and certification bodies.

03 Not legal advice

Templates, mappings and guidance, including material on the Digital Personal Data Protection Act, 2023, are readiness tools. They are not legal advice. Seek advice from qualified counsel on legal interpretation.

04 Your responsibilities

• Keep account credentials secure and enable MFA for all users.
• Connect only systems you are authorised to connect, and grant only the read access requested.
• Review AI-generated suggestions and evidence before relying on them or sharing them with auditors.
• Ensure you have a lawful basis to upload personal data of employees, vendors or others into your workspace.

05 Acceptable use

You must not use the service to attempt unauthorised access to any system, to upload malware, to probe or load-test the platform without written permission, to resell access, or to misrepresent your security or certification status on a Trust Page.

06 Free readiness check

The free check covers up to three integrations and one framework. It is provided as is, may be limited or withdrawn at any time, and the workspace may be deleted after 30 days of inactivity unless you move to a paid plan.

07 Fees and billing

Paid plans are priced per framework per year by employee band and billed annually in advance. Prices are exclusive of taxes, which are added where applicable. Auditor and certification body fees are not included and are agreed directly with them. Refunds are covered by the Refund Policy.

08 Your data

You own the data in your workspace. We process it only to provide the service and as described in the Privacy Policy and data processing agreement. You can export your data at any time during the subscription and for 30 days after it ends.

09 Auditors and third parties

You control who is invited to an Audit Room or receives documents from a Trust Page. You are responsible for any confidentiality terms you agree with auditors, prospects or customers.

10 Availability and support

We aim for high availability and announce planned maintenance in advance. Support channels and response targets depend on your plan.

11 Liability

To the extent permitted by law, neither party is liable for indirect or consequential losses, and each party’s total liability is limited to the fees paid in the twelve months before the claim. Nothing limits liability that cannot be limited by law.

12 Termination

You may cancel at the end of any billing term. We may suspend accounts that breach these terms or put the service or other customers at risk, with notice where reasonable.

13 Governing law

These terms are governed by the laws of India. The competent courts in India have exclusive jurisdiction, subject to any dispute resolution clause in a signed agreement.