Terms of Service

1. Acceptance of Terms

These Terms of Service ("Terms") govern your use of InfoSecGRC ("Platform", "Service") operated by InfoSecGRC ("we", "us", "our"). By creating an account or using the Platform, you agree to these Terms. If you do not agree, do not use the Platform.

If you are using the Platform on behalf of an organization, you represent that you have the authority to bind that organization to these Terms.

2. Description of Service

InfoSecGRC is an AI-powered information security assessment platform that provides:

• Automated security risk assessments and scoring
• Compliance gap analysis against industry frameworks
• Threat modeling and vulnerability analysis
• Security policy review and recommendations
• Phishing and social engineering analysis
• Vendor risk assessment tools
• Professional PDF report generation
• White-label deployment capabilities

3. Account Registration

3.1 Eligibility

You must be at least 18 years old and capable of entering into a legally binding agreement to use the Platform. The Platform is intended for professional and business use.

3.2 Account Security

You are responsible for:

• Maintaining the confidentiality of your account credentials
• All activities that occur under your account
• Enabling and maintaining multi-factor authentication (MFA)
• Notifying us immediately of any unauthorized access

3.3 Account Approval

New accounts require administrator approval before access is granted. We reserve the right to deny or revoke access at our discretion.

4. Acceptable Use

4.1 Permitted Use

You may use the Platform for legitimate security assessment purposes including:

• Assessing your own organization's security posture
• Providing professional security assessment services to clients
• Research and educational purposes related to information security
• Compliance reporting and auditing

4.2 Prohibited Use

You must NOT use the Platform to:

• Assess or attack systems you do not own or have explicit written authorization to assess
• Generate reports to deceive, defraud, or mislead any party
• Conduct assessments of critical infrastructure without proper authorization
• Circumvent, disable, or interfere with security features
• Attempt to reverse-engineer, scrape, or copy the Platform
• Use automated scripts to generate excessive API requests
• Share account credentials with unauthorized parties
• Upload malware, exploits, or other harmful code
• Violate any applicable laws or regulations

5. AI-Generated Content Disclaimer

InfoSecGRC uses artificial intelligence to generate security assessment reports. You acknowledge and agree that:

• AI-generated assessments are for informational purposes only and do not constitute professional legal, compliance, or security advice
• Outputs should be reviewed and validated by qualified security professionals before implementation
• We make no warranties regarding the accuracy, completeness, or fitness for purpose of AI-generated content
• You are solely responsible for decisions made based on Platform outputs
• AI models may produce errors, hallucinations, or outdated information

6. Subscription and Payment

6.1 Plans

The Platform offers Trial (free), Basic, Pro, and Enterprise subscription plans. Features and usage limits vary by plan as described on our pricing page.

6.2 Billing

Paid subscriptions are billed monthly or annually in advance. All fees are non-refundable except as required by applicable law or as specified in our refund policy.

6.3 Plan Changes

You may upgrade your plan at any time. Downgrades take effect at the end of the current billing period. We reserve the right to modify pricing with 30 days notice.

6.4 Suspension for Non-Payment

We may suspend your account for failure to pay. Access will be restored upon payment of outstanding amounts.

7. White-Label Services

Users with eligible plans may deploy white-label instances. White-label operators:

• Are responsible for compliance with these Terms within their instances
• Must not misrepresent the nature of the underlying Platform
• Are responsible for their end-users' compliance with these Terms
• Must maintain their own privacy policy and terms for their users
• May not use white-label features to provide services competing with InfoSecGRC

8. Intellectual Property

8.1 Platform Ownership

The Platform, including its software, design, and content, is owned by InfoSecGRC and protected by intellectual property laws. You may not copy, modify, or distribute any part of the Platform without our written consent.

8.2 Your Content

You retain ownership of the data and files you upload. By uploading content, you grant us a limited license to process it solely for the purpose of delivering the Service to you.

8.3 Assessment Outputs

AI-generated assessment reports are provided for your use. You may share them with your clients and organization as part of your professional services.

9. Privacy

Your use of the Platform is also governed by our Privacy Policy, which is incorporated into these Terms by reference.

10. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW:

• THE PLATFORM IS PROVIDED "AS IS" WITHOUT WARRANTIES OF ANY KIND
• WE ARE NOT LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, OR CONSEQUENTIAL DAMAGES
• OUR TOTAL LIABILITY SHALL NOT EXCEED THE AMOUNT YOU PAID IN THE 3 MONTHS PRECEDING THE CLAIM
• WE ARE NOT LIABLE FOR DECISIONS MADE BASED ON AI-GENERATED ASSESSMENTS
• WE ARE NOT LIABLE FOR UNAUTHORIZED ACCESS TO YOUR ACCOUNT IF YOU FAILED TO MAINTAIN ADEQUATE SECURITY

11. Indemnification

You agree to indemnify and hold harmless InfoSecGRC, its officers, directors, and employees from any claims, damages, or expenses arising from:

• Your violation of these Terms
• Your use of the Platform in violation of applicable laws
• Your unauthorized security testing activities
• Any breach of your representations or warranties

12. Termination

12.1 By You

You may close your account at any time by contacting us. Account closure does not entitle you to a refund of prepaid subscription fees.

12.2 By Us

We may suspend or terminate your account immediately if you:

• Violate these Terms
• Engage in fraudulent or abusive behavior
• Fail to pay applicable fees
• Pose a security risk to the Platform or other users

12.3 Effect of Termination

Upon termination, your access to the Platform will cease. Account data will be deleted in accordance with our Privacy Policy.

13. Governing Law

These Terms are governed by applicable law. Any disputes shall be resolved through binding arbitration or in courts of competent jurisdiction.

14. Changes to Terms

We may update these Terms from time to time. We will notify users of material changes via email and by updating the "Last updated" date. Continued use after changes constitutes acceptance.

15. Contact

For questions about these Terms:

• Email: legal@infosecgrc.io
• Website: infosecgrc.io