Terms of Service

1. Agreement

These terms govern your access to and use of the GRC Eye platform and the grceye.com website. By creating an account, or by using the service on behalf of an organisation, you accept these terms. If you are accepting on behalf of an organisation, you confirm you have authority to bind it.

2. The service

GRC Eye provides a governance, risk and compliance platform covering compliance assessment, risk management and quantification, audit management, policy and document generation, third-party risk management and related functionality. We may add, change or remove features; we will not materially degrade the core functionality of a paid subscription during its term.

3. Accounts

You are responsible for the accuracy of your account details, for the security of your credentials, and for all activity under your account. Enable multi-factor authentication where it is available. Tell us promptly at security@grceye.com if you suspect unauthorised access.

4. Subscriptions and payment

Paid subscriptions run for the term stated at purchase and renew unless cancelled before the end of the current term. Fees are payable in advance and are non-refundable except where required by law. Trials are provided as described at sign-up and convert only if you choose to subscribe.

5. Acceptable use

You agree not to:

• Use the service unlawfully, or to store or transmit unlawful content.
• Attempt to gain unauthorised access to the service, other tenants, or any underlying infrastructure.
• Probe, scan or load-test the service without our prior written consent. If you want to run a security test, ask us first — we will usually say yes.
• Reverse engineer, decompile or attempt to derive the source code of the service, except to the extent that restriction is unenforceable under applicable law.
• Resell or provide the service to third parties except as expressly agreed.

6. Your data

You retain all rights in the content you put into the platform. You grant us only the licence needed to host, process and display that content in order to provide the service. We process personal data as described in our privacy policy. We do not use your content to train general-purpose AI models.

You are responsible for having the necessary rights and lawful basis for the content you upload, including any personal data it contains.

7. AI-generated output

The platform generates documents, gap analyses, risk assessments and contract reviews using AI. This output is a drafting and analysis aid, not legal, audit or regulatory advice, and it can be wrong. You are responsible for reviewing and validating any AI-generated output before relying on it, and for any decision taken on the basis of it. GRC Eye does not warrant that use of the platform will result in certification against any framework, or in a passed audit.

8. Availability

We aim for high availability but do not guarantee uninterrupted service unless a service level agreement has been agreed separately in writing. Maintenance, third-party failures and force majeure events may cause interruption.

9. Intellectual property

The platform, its software, design and documentation remain our property or that of our licensors. These terms grant you a limited, non-exclusive, non-transferable right to use the service during your subscription, and nothing more.

10. Termination

You may cancel at any time, effective at the end of the current term. We may suspend or terminate access for material breach of these terms, for non-payment, or where required by law. On termination you may export your data for a reasonable period, after which we delete it in line with our retention practice.

11. Warranties and liability

The service is provided “as is” to the fullest extent permitted by law, and we disclaim implied warranties of merchantability, fitness for a particular purpose and non-infringement. To the extent permitted by law, neither party is liable for indirect, incidental or consequential loss, or for lost profits or data, and our aggregate liability is limited to the fees you paid in the twelve months preceding the claim. Nothing limits liability that cannot lawfully be limited.

12. Changes to these terms

We may update these terms; the “last updated” date above will change and material revisions will be notified to account holders. Continued use after a change takes effect constitutes acceptance.

13. Contact

Questions about these terms: contact us or email sales@grceye.com.