Terms of Service

1. Acceptance of Terms

These Terms of Service (“Terms”) constitute a legally binding agreement between you (“Customer”, “you”) and SecuryxAI (“SecuryxAI”, “we”, “our”) governing your access to and use of the SecuryxAI platform and related services (collectively, the “Service”).

If you are accepting these Terms on behalf of an organisation, you represent that you have authority to bind that organisation. “Customer” then refers to that organisation.

2. Description of Service

SecuryxAI is a cloud-based governance, risk, and compliance (GRC) platform that enables organisations to:

• Map security controls to compliance frameworks (SOC 2, ISO 27001, NIST AI RMF, ISO 42001, EU AI Act, and others)
• Manage control implementations, evidence, and policies
• Process vendor security questionnaires using AI-assisted mapping
• Publish a public or NDA-gated Trust Center
• Coordinate audit workflows with external auditors

3. Service Availability

SecuryxAI targets 99.9% monthly uptime for paid plans. We do not guarantee:

• Uninterrupted availability during scheduled or emergency maintenance
• That the Service will be entirely free of bugs or defects
• Specific uptime percentages outside of Enterprise SLA agreements

We recommend maintaining your own records for critical compliance artefacts as part of a sound data governance practice.

4. Account Registration

To access the Service, you must create an account with accurate and complete information. You are responsible for:

• Maintaining the confidentiality of your login credentials
• All activity that occurs under your account
• Promptly notifying us of any unauthorised access at security@securyxai.com
• Ensuring that all users you invite comply with these Terms

We reserve the right to suspend or terminate accounts that violate these Terms or our Acceptable Use Policy.

5. Customer Responsibilities

You agree to:

• Use the Service only for lawful business purposes
• Comply with all applicable laws and regulations in your use of the Service
• Ensure that content you upload (evidence, policies, questionnaire responses) does not infringe third-party intellectual property rights
• Not upload content that contains malware, viruses, or other malicious code
• Maintain appropriate data protection agreements with us where required by law (see our DPA)

6. Acceptable Use

Your use of the Service must comply with our Acceptable Use Policy, which is incorporated into these Terms by reference. Prohibited uses include but are not limited to illegal activity, attempting to reverse-engineer the platform, and using the Service to harm others.

7. Intellectual Property

7.1 SecuryxAI Platform

SecuryxAI and its licensors own all rights, title, and interest in the Service, including all software, design, trademarks, and proprietary content. These Terms grant you a limited, non-exclusive, non-transferable, revocable licence to access and use the Service during your subscription.

7.2 Control Framework Content

The platform includes content derived from public frameworks including the Secure Controls Framework (SCF), ISO 42001, NIST AI RMF, and EU AI Act. This content is used under the respective public licenses of each framework. SecuryxAI is not affiliated with any standards body.

7.3 Customer Content

You retain all ownership of data, content, and materials you upload to the Service (“Customer Content”). You grant SecuryxAI a limited licence to host, process, and display your Customer Content solely to provide the Service. We do not use your compliance data to train AI models.

8. Payment & Subscription

Fees are charged according to the plan selected at sign-up. A free Starter tier is available with limited features. Paid plans (Pro and Business) are billed monthly or annually:

• Fees will be stated on our pricing page and invoiced in advance
• Subscriptions automatically renew unless cancelled before the renewal date
• All fees are non-refundable except where required by law
• We will provide at least 30 days’ notice of price changes

9. Confidentiality

Each party agrees to keep confidential any non-public information disclosed by the other party in connection with the Service that is marked as confidential or that a reasonable person would understand to be confidential. This obligation does not apply to information that is publicly available, independently developed, or required to be disclosed by law.

10. Warranties & Disclaimers

TO THE MAXIMUM EXTENT PERMITTED BY LAW, SECURYXAI PROVIDES THE SERVICE “AS IS” WITHOUT ANY WARRANTY, EXPRESS OR IMPLIED, INCLUDING WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT. SECURYXAI DOES NOT WARRANT THAT THE SERVICE WILL MEET YOUR SPECIFIC COMPLIANCE OR AUDIT REQUIREMENTS.

The Service is a tool to assist compliance teams — it does not constitute legal, accounting, or compliance advice. You are solely responsible for your organisation’s compliance posture.

11. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW:

• SECURYXAI’S TOTAL AGGREGATE LIABILITY ARISING OUT OF OR RELATED TO THESE TERMS WILL NOT EXCEED THE GREATER OF (A) FEES PAID BY YOU IN THE TWELVE MONTHS PRECEDING THE CLAIM OR (B) USD $100.
• SECURYXAI WILL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, INCLUDING LOSS OF PROFITS, DATA, OR BUSINESS OPPORTUNITIES, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

12. Indemnification

You agree to indemnify, defend, and hold harmless SecuryxAI and its officers, directors, employees, and agents from any claims, damages, liabilities, and expenses (including reasonable legal fees) arising from: (a) your use of the Service in violation of these Terms; (b) your Customer Content; or (c) your violation of any applicable law or third-party rights.

13. Termination

Either party may terminate these Terms at any time with written notice. We may also suspend or terminate your access immediately without notice if you materially breach these Terms.

On termination:

• Your access to the Service will cease immediately
• We will provide a 30-day window for you to export your Customer Content
• After 30 days, Customer Content will be deleted from our systems
• Provisions of these Terms that by their nature should survive (limitation of liability, indemnification, governing law) will remain in effect

14. Governing Law & Dispute Resolution

These Terms are governed by the laws of [Jurisdiction — to be confirmed by legal counsel]. Any disputes arising from these Terms will be resolved through binding arbitration, except that either party may seek injunctive relief in a court of competent jurisdiction for matters involving intellectual property or data security.

15. Changes to These Terms

We may update these Terms from time to time. Material changes will be notified by email at least 30 days in advance. Your continued use of the Service after the effective date constitutes acceptance of the revised Terms.

16. Contact

Legal questions: legal@securyxai.com
General contact: securyxai.com/contact