Terms of service

These terms govern your use of the TryTrustable platform, the TryTrustable SDK, the consent banner and related services (the "Service"). By creating an account or using the Service you accept them on behalf of the organisation you represent, and you confirm you have the authority to do so. An order form or enterprise agreement signed by both of us takes precedence over these terms where the two conflict.

The Service is for businesses. You must be at least 18 to use it.

We provide the Service on the plan you choose: Starter (free), Growth, Scale or Enterprise, as described on our pricing page or in your order form. We improve the Service continually. We will not materially reduce the core functionality of a paid plan during a paid term; if we have to remove a feature for legal or security reasons, we tell you in advance where we can.

You are responsible for your users, the credentials you issue and the activity in your account. Use multi-factor authentication or single sign-on, keep credentials confidential, and tell us promptly at privacy@trytrustable.com if you suspect unauthorised access. Administrators you appoint can add and remove users and change settings for your organisation.

You own the data you and your users put into the Service, including evidence, control results, policies, consent records and the data collected from systems you connect ("Customer Data"). You give us permission to process Customer Data only to provide, secure and support the Service and as the law requires. We do not sell it, use it for advertising or use it to train AI models.

When we process personal data in Customer Data, we act as your processor. Our data processing terms, the privacy policy and its list of service providers form part of these terms. You are responsible for having a lawful basis for the personal data you bring into the Service, including the notices and consents your consent banner presents to your own visitors.

Integrations are read-only by default and use credentials you provide and can revoke at any time. By connecting a system you authorise us to access it to the extent of those credentials.

The SDK runs in your own environment and sends us findings, not source files. Security testing features, including web and attack surface scans and cookie scans, may only be pointed at systems and websites you own or are authorised in writing to test. You are responsible for that authorisation.

You must not, and must not let anyone else:

• scan, test or monitor systems you are not authorised to test;
• use the Service to break the law, infringe others' rights or process data you have no right to process;
• upload malware or attempt to gain unauthorised access to the Service or other customers' data;
• circumvent usage limits, rate limits or plan restrictions, or resell the Service without our agreement;
• copy, reverse engineer or build a competing product from the Service, except as the law allows;
• misrepresent a readiness score or report from the Service as an audit opinion or certification.

We provide the Service with reasonable skill and care, protect Customer Data with the security measures described in our privacy policy and on our security page, and tell you without undue delay of a personal data breach affecting your data. We use reasonable efforts to keep the Service available and publish its status at trytrustable.com/status. Planned maintenance is announced in advance where possible.

The Service produces evidence, analysis, readiness scores and documents to help you manage compliance. It is not legal advice, and it is not an audit, an attestation or a certification. A control passing in the Service, a readiness score or a sealed report does not guarantee what an auditor, certification body, regulator or court will conclude. Decisions about your compliance remain yours, and generated policies and notices should be reviewed by your advisers before you rely on them.

Paid plans are billed in advance, monthly or annually, at the prices on our pricing page or in your order form. Fees exclude taxes such as GST or VAT, which are added where they apply. Invoices are due within 15 days unless the order form says otherwise. If a payment is overdue we will remind you, and if it stays unpaid 15 days after that notice we may suspend paid features until it is paid.

We may change prices for a renewal with at least 30 days' notice before the renewal date. Fees already paid are not refundable except where the law requires or these terms say otherwise.

The Starter plan and any trial are provided as they are, without the service commitments that apply to paid plans, and we may change or end them with reasonable notice. At the end of a trial your organisation moves to Starter unless you choose a paid plan.

Paid plans renew automatically for the same period unless either of us cancels before the renewal date. You can cancel at any time from billing settings; the cancellation takes effect at the end of the paid period.

Either of us may terminate if the other materially breaches these terms and does not fix it within 30 days of notice. We may suspend access immediately, and only as far as necessary, to stop a security threat, unlawful use or a breach of acceptable use, and we will tell you why.

After termination you can export your Customer Data for 30 days. We then delete it, except what the law requires us to keep. Copies in backups are removed as those backups expire.

Each of us will keep the other's confidential information confidential, use it only for this agreement and share it only with people who need it and are bound to keep it confidential. This does not cover information that is public, already known, independently developed or that must be disclosed by law.

We own the Service, the SDK, our templates, content and everything we develop, including improvements. You own your Customer Data and the documents you create. You may use templates and documents generated in the Service for your own organisation. If you send us feedback, we may use it without obligation to you. We will not name you as a customer without your permission.

We will defend you against a third-party claim that the Service infringes their intellectual property, and pay the resulting damages and costs, provided you tell us promptly and let us control the defence. You will defend us against third-party claims arising from Customer Data you had no right to process, from security testing of systems you were not authorised to test, or from your breach of acceptable use.

Neither of us is liable for indirect or consequential loss, or for lost profits, revenue, goodwill or data, however caused. Each party's total liability under these terms is limited to the fees paid or payable for the Service in the 12 months before the event giving rise to the claim. These limits do not apply to fraud, to liability that cannot be limited by law, to the indemnities above, to breach of confidentiality, or to your obligation to pay fees.

The Service connects to third-party products you choose, such as code hosts, cloud providers, identity providers and tag managers. Their own terms govern your use of them, and we are not responsible for their availability or for changes they make to their interfaces.

We may update these terms. For a material change we give at least 30 days' notice by email or in the platform. If you do not agree, you may cancel before the change takes effect; continuing to use the Service after that date means you accept it.

These terms are governed by the laws of India. The courts of Bengaluru, Karnataka have exclusive jurisdiction, unless your order form says otherwise. Before going to court, each of us will try in good faith to resolve a dispute through senior representatives for 30 days.

Neither of us is liable for delay caused by events beyond reasonable control. You may not assign these terms without our consent, except to a successor of your business; we may assign them to a successor of ours. If a provision is unenforceable, the rest continues. Not enforcing a right is not a waiver of it. These terms, with any order form, are the whole agreement between us about the Service.

Questions about these terms: contact us. Privacy and data requests: privacy@trytrustable.com.