Terms of Service

Last updated: September 29, 2026

1. Acceptance of Terms

By accessing or using the Compliance Enablers platform and website ("Service"), operated by Compliance Enablers LLP ("Company"), you agree to be bound by these Terms of Service. If you do not agree, do not use the Service.

2. Description of Service

Compliance Enablers provides a cloud-based Governance, Risk, and Compliance (GRC) platform with integrated security awareness training and phishing simulation capabilities. The Service includes all features, tools, and modules available through your subscription plan.

3. Account Registration

  • You must provide accurate and complete registration information.
  • You are responsible for maintaining the security of your account credentials.
  • You must notify us immediately of any unauthorized use of your account.
  • You may not share your account credentials with third parties.

4. Subscription Plans and Billing

  • Subscription fees are based on your selected plan (Starter, Professional, or Enterprise).
  • Monthly subscriptions renew automatically unless cancelled.
  • Annual subscriptions receive a 20% discount.
  • Upgrades are effective immediately with pro-rated billing.
  • Downgrades take effect at the next billing cycle.
  • We reserve the right to modify pricing with 30 days notice.

5. Trial & Evaluation Access

Trial or evaluation access may be offered at our discretion on a case-by-case basis. Trial accounts that are not converted to paid subscriptions will be deactivated after the agreed evaluation period.

6. Data Ownership

  • You retain full ownership of all data you input into the platform ("Your Data").
  • We do not access, use, or share Your Data except as necessary to provide the Service.
  • You may export Your Data at any time in standard formats.
  • Upon account termination, we will retain Your Data for 30 days before permanent deletion, unless otherwise agreed.

7. Acceptable Use

You agree not to:

  • Use the Service for any unlawful purpose
  • Attempt to gain unauthorized access to any part of the Service
  • Interfere with or disrupt the Service infrastructure
  • Reverse engineer, decompile, or disassemble the Service
  • Use the phishing simulation module against individuals who have not consented
  • Resell or sublicense access to the Service without authorization

8. Service Availability

We strive for high availability but do not guarantee uninterrupted access. Planned maintenance will be communicated in advance. Enterprise customers may receive SLA terms as part of their agreement.

9. Intellectual Property

The Service, including all software, content, designs, and documentation, is the intellectual property of Compliance Enablers LLP. Your subscription grants you a limited, non-exclusive, non-transferable license to use the Service.

10. Limitation of Liability

To the maximum extent permitted by law, Compliance Enablers LLP shall not be liable for any indirect, incidental, special, consequential, or punitive damages arising from your use of the Service. Our total liability shall not exceed the amount paid by you in the 12 months preceding the claim.

11. Indemnification

You agree to indemnify and hold harmless Compliance Enablers LLP from any claims arising from your use of the Service, violation of these Terms, or infringement of any third-party rights.

12. Termination

Either party may terminate the subscription with 30 days written notice. We may suspend or terminate your account immediately for violation of these Terms. Upon termination, your access to the Service will cease.

13. Governing Law

These Terms shall be governed by the laws of India. Any disputes shall be resolved through arbitration in accordance with applicable arbitration rules.

14. Changes to Terms

We may update these Terms periodically. Continued use of the Service after changes constitutes acceptance. Material changes will be communicated via email or in-app notification.

15. Third-Party Standards

15.1 Definitions.

  • Licensed Standard: a standard, framework or criteria set whose text is owned and licensed by a third party (a Publisher). Examples include ISO and IEC standards, the PCI Data Security Standard, the AICPA Trust Services Criteria (SOC 2), the CIS Controls and the HITRUST CSF. The Platform shows which frameworks are Licensed Standards.
  • Confirmation: the statement an administrator of the Customer gives in the Platform before a Licensed Standard's implementation journey opens.

15.2 Customer's confirmation. By giving a Confirmation, the Customer represents and warrants, and continues to represent for as long as it uses that implementation journey, that:

  • (a) it has purchased or otherwise lawfully obtained the official publication of that Licensed Standard, in the edition shown, from the Publisher or an authorised distributor;
  • (b) its personnel will use that publication in line with the Publisher's licence terms;
  • (c) the administrator giving the Confirmation is authorised to do so.

If any of these stops being true, the Customer must withdraw the Confirmation in the Platform.

15.3 No licence to Licensed Standards. Compliance Enablers does not supply, sell, host, license or distribute the text of any Licensed Standard. Nothing in these Terms or in the Platform grants the Customer any right in a Licensed Standard. The Customer's rights in a Licensed Standard come only from the Customer's own licence from the Publisher. Compliance Enablers does not verify the Customer's purchase.

15.4 Our content. The implementation journey for a Licensed Standard consists of Compliance Enablers' own work:

  • workflows, templates and scoring;
  • guidance written in Compliance Enablers' own words;
  • references to clause and control identifiers;
  • short headings.

It is licensed to the Customer as part of the subscription. It is not a substitute for the Licensed Standard. It is not certification, attestation or legal advice.

15.5 Access conditions. Compliance Enablers may close a Licensed Standard's journey when:

  • the Confirmation is withdrawn;
  • the subscription for that framework ends;
  • the edition or the Confirmation wording changes, until a new Confirmation is given.

The Customer's own records, including evidence, decisions, registers and exports, remain available to the Customer when a journey closes.

15.6 Records of Confirmations. Compliance Enablers keeps a permanent, append-only record of each Confirmation and withdrawal: who gave it, when, and the exact wording shown. This record is retained as evidence of the Customer's representations, including after the subscription ends. It is excluded from data-restore operations that would alter it.

15.7 Publisher requests. If a Publisher raises a rights concern about any part of the Platform's content for its Licensed Standard, Compliance Enablers may modify, restrict or withdraw that content. Where practical, it will give notice. Doing so is not a breach of these Terms, and the Customer's own records are unaffected.

15.8 Indemnity. The Customer will defend and indemnify Compliance Enablers against third-party claims, including claims by a Publisher, arising from:

  • (a) a Confirmation that was untrue when given or became untrue and was not withdrawn;
  • (b) the Customer's use of a Licensed Standard in breach of the Publisher's licence terms.

16. Contact

For questions about these Terms, contact us at legal@complianceenablers.com.