Terms of Service

By creating an account or otherwise using ComplyHub (the “Service”), you agree to these Terms on behalf of yourself and, if you're signing up for an organization, on behalf of that organization. If you don't agree, don't use the Service.

ComplyHub is a governance, risk and compliance platform: frameworks, requirements, controls, evidence, policies, a risk register, vendor risk, audit trail and reporting, run as a hosted, multi-tenant application. Each customer's data is logically isolated by organization at the database level.

• Self-serve signup starts a 7-day free trial. Email verification is required before the account is usable.
• You're responsible for the accuracy of the information you provide and for safeguarding your credentials — enabling multi-factor authentication is strongly recommended and may be required by your organization's admin.
• Each plan has a seat limit; exceeding it requires upgrading the plan before new members can be added.

Plans (Starter, Growth, Enterprise — see pricing) are activated for a fixed term via a license key issued after payment is arranged directly with us. Continued access after a trial or license period ends requires renewal; access to paid features is suspended, not data deleted, if a subscription lapses — see the deletion timelines in the Privacy Policy.

• No unlawful use, and no use that infringes others' rights.
• No attempting to probe, bypass or defeat the Service's access controls or tenant isolation, or to access another organization's data.
• No reverse engineering, except where law permits it.
• No excessive automated load against the Service outside documented API usage.

You own the data you and your organization put into the Service. We process it only to provide and support the Service, as described in the Privacy Policy. You're responsible for the accuracy and legality of data you upload, including any evidence or documents.

We apply reasonable technical and organizational measures — tenant-level data isolation, virus scanning on uploads, optional single sign-on and multi-factor authentication, encrypted transport. We do not currently hold formal third-party security certifications (e.g. SOC 2, ISO 27001) for the Service itself; ask us for our current security posture before relying on the Service for a regulated workload.

Either party may terminate if the other materially breaches these Terms and doesn't cure within a reasonable period after notice. On termination, your data is retained per the deletion schedule in the Privacy Policy, then purged.

The Service is provided “as is.” ComplyHub helps you track and manage compliance activity, but using it does not, by itself, guarantee compliance with any framework, law or regulation — that responsibility remains yours. To the extent permitted by law, our aggregate liability arising from the Service is limited to the amount you paid us in the 12 months preceding the claim, and neither party is liable for indirect or consequential damages.

We may update these Terms from time to time; material changes will be notified in-app or by email before they take effect.

[Placeholder — governing law and dispute-resolution venue to be set by legal counsel before publication.]

Questions about these Terms: complyhub@persol.net.