Terms of Service
Last updated: May 24, 2026
1. Acceptance
By accessing or using AuditTrue's platform, website, or services ("Services"), you agree to these Terms. If you do not unconditionally agree, do not use the Services. These Terms constitute a binding contract between you ("Customer") and AuditTrue. If using on behalf of an entity, you represent authority to bind that entity. We may refuse service, terminate accounts, or modify content at any time in our sole discretion.
2. What the Services Are — And Are Not
AuditTrue is an AI governance platform offering audit trails, risk assessment, regulatory compliance mappings, governance dashboards, vendor assessment, and policy automation tools. The Services generate outputs — risk scores, mappings, templates, reports — based on algorithms, public regulatory frameworks, and information you provide. These outputs are informational reference tools only. They are not compliance certifications, legal opinions, or guarantees of regulatory alignment. The Services may not detect all risks or compliance gaps. Regulatory frameworks change rapidly — mappings may become outdated. Beta features are provided "as-is" with no commitments.
3. No Legal Advice — No Attorney-Client Relationship
AuditTrue is not a law firm, does not practice law, and does not provide legal advice. No attorney-client relationship exists or is created. All outputs are automated reference tools and not a substitute for professional legal advice. You are strongly advised to engage qualified legal counsel to review outputs and make independent compliance decisions. Any action based on platform outputs is at your own risk.
4. Regulatory Frameworks Referenced
Our compliance mappings reference the following frameworks as they exist at time of output generation. This list is non-exhaustive and does not guarantee coverage:
- EU: EU AI Act (Regulation 2024/1689) — phased 2025–2027
- US: Executive Order 14110 on AI (2023)
- US: Colorado AI Act (SB 24-205, effective 2026)
- US: Connecticut, Virginia AI legislation
- International: ISO/IEC 42001 (AI Management System)
- International: ISO/IEC 23894 (AI Risk Management)
- US: NIST AI Risk Management Framework 1.0
- EU: GDPR — for AI processing of personal data
- US: CCPA/CPRA (California)
- Canada: Proposed AIDA
- UK: AI regulation pro-innovation framework
- Japan: AI Guidelines for Business
- Brazil: Bill 2338/2023 (pending)
- China: AI generative AI regulations
- OECD: AI Principles
- UNESCO: Recommendation on AI Ethics
We do not warrant that mappings are complete, accurate, or current. You are responsible for identifying all regulations applicable to your use case and jurisdiction.
5. Your Responsibilities
You represent, warrant, and covenant: (a) you have authority to enter these Terms; (b) all information provided is accurate; (c) your use complies with all laws and third-party rights; (d) you are not located in a US-sanctioned country or on restricted party lists; (e) all data you submit is lawfully obtained; (f) you are solely responsible for your AI systems' compliance; (g) you will not use the Services for unlawful purposes or to evade regulations; (h) you maintain account confidentiality and are liable for all account activity.
6. Acceptable Use
You agree not to: (a) circumvent laws or regulations using the Services; (b) upload malicious code or breach security; (c) reverse engineer our technology; (d) scrape or crawl the Services without permission; (e) process data in violation of data protection laws; (f) resell or redistribute access; (g) use the Services for AI systems in illegal activities, weapons, or safety-critical infrastructure; (h) submit false information.
7. Intellectual Property
Our Property: The Services, software, algorithms, documentation, templates, and brand are our exclusive property. We grant you a limited, non-exclusive, non-transferable, revocable license to use the Services during your subscription for internal business purposes. All rights not expressly granted are reserved.
Your Property: You retain all rights to your data, AI models, and submitted content. You grant us a license to process your data solely to provide Services. We do not use customer data to train or improve our AI models.
Outputs: You may use generated outputs internally, provided they are provided "as-is" without warranty.
8. Fees & Payment
Fees are as specified in your agreement. Billed monthly or annually in advance. Due upon invoice. Late payments incur 1.5% monthly interest and may cause immediate suspension. Fees are non-refundable. We may change fees with 30 days notice. You are responsible for all applicable taxes.
9. Data & Privacy
Our Privacy Policy governs data handling. You retain full ownership of submitted data. We act as data processor. A DPA with SCCs is available on request (mandatory for GDPR customers). We implement encryption (AES-256 at rest, TLS 1.3 in transit), access controls, and security testing aligned with SOC 2 and ISO 27001.
10. Disclaimer of Warranties — COMPREHENSIVE
THE SERVICES ARE PROVIDED "AS IS" AND "AS AVAILABLE." AUDIT TRUE, ITS AFFILIATES, LICENSORS, AND SUPPLIERS EXPRESSLY DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO:
- Merchantability, fitness for a particular purpose, title, accuracy, non-infringement
- Uninterrupted, timely, secure, or error-free service
- Accuracy, reliability, completeness, or currency of any output or mapping
- Detection of all risks, biases, vulnerabilities, or compliance gaps
- Ensuring or guaranteeing compliance with any law, regulation, or standard
- Any warranties from course of dealing or usage of trade
No advice or output from the Services creates a warranty not in these Terms.
11. Limitation of Liability — COMPREHENSIVE
TO THE MAXIMUM EXTENT PERMITTED BY LAW, AUDIT TRUE IS NOT LIABLE FOR:
- Indirect, incidental, special, consequential, exemplary, or punitive damages
- Lost profits, revenue, data, goodwill, business opportunity, or savings
- Regulatory fines, penalties, sanctions, enforcement actions, or legal costs
- Damages from reliance on any Services output
- Damages from failure to comply with applicable laws
- Damages from unauthorized access to your data
- Any damages exceeding the cap below
OUR TOTAL AGGREGATE LIABILITY FOR ALL CLAIMS ARISING FROM THESE TERMS OR THE SERVICES — IN CONTRACT, TORT (INCLUDING NEGLIGENCE), STRICT LIABILITY, OR ANY OTHER THEORY — SHALL NOT EXCEED THE TOTAL FEES YOU PAID IN THE THREE (3) MONTHS PRECEDING THE CLAIM.
No action may be brought more than one (1) year after the cause of action accrues.
You acknowledge fees reflect this risk allocation. Without these limits, fees would be substantially higher.
These limitations do not apply to: (a) death or personal injury from negligence; (b) fraud; (c) willful misconduct; (d) liability that cannot be limited by law.
12. Indemnification by Customer
You agree to defend, indemnify, and hold AuditTrue harmless from all claims, damages, losses, and expenses (including attorneys' fees) arising from:
- Your use of the Services in violation of these Terms or applicable law
- Your reliance on Services outputs
- Your AI systems and their compliance or non-compliance
- Any data, models, or content you submit
- Any dispute between you and a regulatory authority
- Your infringement of third-party rights
- Any claim your use of the Services caused harm to a third party
We may assume exclusive defense of any indemnified matter at our option, in which case you cooperate.
13. Termination
By You: 30 days written notice. Fees paid are non-refundable. By Us: Immediate termination or suspension for: (a) breach of these Terms; (b) unlawful use; (c) non-payment; (d) security risk or legal exposure. Upon termination, your data will be exported on request and securely deleted within 60 days. Sections 3, 10, 11, 12, and 14 survive termination.
14. Governing Law & Disputes
These Terms are governed by the laws of the State of Delaware, USA, without regard to conflict of law principles. The UN Convention on Contracts for the International Sale of Goods does not apply. Any dispute shall be resolved exclusively by binding arbitration under the JAMS Streamlined Arbitration Rules. The arbitration shall be held in Wilmington, Delaware. Each party bears its own legal fees unless the arbitrator finds bad faith. CLASS ACTION WAIVER: All disputes must be brought individually. You waive any right to participate in a class, consolidated, or representative action. If this waiver is unenforceable, the dispute must be arbitrated. You waive any right to a jury trial.
15. Export Controls
You represent you are not: (a) located in a US-embargoed country; (b) on the US Treasury SDN list, Commerce Department Denied Persons List, or any restricted party list. You will not use the Services in violation of US export laws (EAR, ITAR).
16. Force Majeure
We are not liable for delays or failures caused by events beyond our reasonable control: acts of God, war, terrorism, government action, pandemic, internet outages, cyberattacks, power failures, strikes, or supplier failures.
17. General Provisions
Severability: If any provision is unenforceable, the rest remains in effect. No Waiver: Our failure to enforce any right does not waive it. Assignment: You may not assign these Terms without our written consent. We may assign freely. No Partnership: These Terms do not create a partnership, joint venture, agency, or employment relationship. Entire Agreement: These Terms, Privacy Policy, and any service agreement constitute the entire agreement, superseding prior communications. No Third-Party Beneficiaries: These Terms benefit only you and us, not any third party. Electronic Communications: We may communicate electronically; such communications satisfy legal requirements.
18. Changes to These Terms
We may update these Terms at any time. Material changes will be emailed and posted 30 days before effect. Continued use after changes constitutes acceptance. For non-material changes, notice may be provided via platform notification.
19. Contact
Legal Inquiries: [email protected]
DPA Requests: [email protected]
AuditTrue LLC, [Registered Address, Wilmington, DE 19801, USA]
These Terms were drafted with liability protection as the primary objective. They do not constitute legal advice. Consult an attorney to review these Terms for your specific circumstances.