Terms of Service

Acceptance of Terms

These Terms of Service ("Terms") govern your access to and use of the Arcbase platform, website, and related services (collectively, the "Service") provided by [Company Name] ("Arcbase", "we", "us", or "our").

By creating an account, accessing, or using the Service, you agree to be bound by these Terms. If you are using the Service on behalf of an organisation, you represent and warrant that you have the authority to bind that organisation to these Terms, and "you" refers to both you individually and the organisation.

If you do not agree to these Terms, you must not access or use the Service.

In accordance with Article 14(1) of the Digital Services Act (DSA), these Terms are provided in clear, plain, and unambiguous language, and are publicly accessible before you enter into an agreement with us.

Service Description

Arcbase is an AI-native Governance, Risk, and Compliance (GRC) platform that helps organisations:

• Manage and assess risks across their organisation
• Monitor and automate compliance with regulatory frameworks (SOC 2, ISO 27001, HIPAA, GDPR, and 150+ others)
• Implement, test, and track internal controls
• Collect, organise, and manage compliance evidence
• Generate AI-assisted audit reports and recommendations
• Create and manage organisational policies
• Track tasks, assignments, and workflows related to GRC activities

The Service includes AI-powered features that provide recommendations, assessments, and analysis. These AI features are designed to assist and augment human decision-making, not replace it (see section "AI-Generated Content" below).

Account Registration

To use the Service, you must create an account. You agree to:

• Provide accurate, current, and complete information during registration
• Maintain and promptly update your account information
• Keep your password secure and not share it with others
• Notify us immediately of any unauthorised use of your account
• Accept responsibility for all activities that occur under your account

We reserve the right to suspend or terminate accounts that we reasonably believe contain inaccurate information, are being used fraudulently, or violate these Terms.

Subscription and Billing

Plans

Arcbase offers the following subscription tiers:

• Starter: $49/month (or $39/month billed annually) — 1 user, 100 AI assessments/month
• Pro: $199/month (or $159/month billed annually) — 5 users, 1,000 AI assessments/month, additional users at $10/user/month
• Agency: $499/month (or $399/month billed annually) — 25 users, 10,000 AI assessments/month, unlimited company profiles, additional users at $10/user/month

30-Day Free Trial

All plans include a 30-day free trial. A valid payment method is required to start the trial. You will not be charged during the trial period. If you do not cancel before the trial ends (day 31), your subscription will automatically begin and you will be charged at the applicable plan rate. You may cancel at any time during the trial period at no cost.

Billing and Renewal

• Subscriptions renew automatically at the end of each billing period (monthly or annual)
• You will be charged using the payment method on file
• Price changes will be communicated at least 30 days in advance
• You may upgrade, downgrade, or cancel your subscription at any time

Refunds

If you cancel during the 30-day free trial, no charges apply. For paid subscriptions, we do not provide refunds for partial billing periods. Annual subscriptions that are cancelled will continue to provide access until the end of the current annual billing period.

AI-Generated Content

In accordance with the EU AI Act transparency requirements, we disclose the following about our use of AI:

AI Transparency

• AI-generated content within Arcbase is clearly labelled or identifiable as such
• Our AI systems are designed as decision-support tools, not autonomous decision-makers
• AI outputs are generated based on the data you provide and publicly available regulatory frameworks
• We use third-party AI models (including large language models) to process queries and generate recommendations

Disclaimers

All AI-generated content, including but not limited to:

• Risk assessments and risk scores
• Compliance gap analyses and recommendations
• Policy suggestions and templates
• Audit report drafts
• Legal research summaries

is provided for informational purposes only and does not constitute legal, financial, or professional advice. AI outputs may contain errors, inaccuracies, or omissions. You are solely responsible for:

• Verifying all AI-generated content with qualified professionals before acting on it
• Making independent decisions based on your specific circumstances
• Ensuring compliance with applicable laws and regulations through proper professional channels

Arcbase does not guarantee that use of the Service will result in regulatory compliance. For detailed AI disclaimers, see our Legal Disclaimers page.

Acceptable Use Policy

You agree not to use the Service to:

• Violate any applicable law, regulation, or third-party rights
• Upload or transmit any malicious code, viruses, or harmful content
• Attempt to gain unauthorised access to any part of the Service or its infrastructure
• Circumvent, disable, or interfere with security features of the Service
• Use the Service to store or transmit content that is unlawful, defamatory, or infringing
• Reverse engineer, decompile, or disassemble any part of the Service
• Use automated systems (bots, scrapers) to access the Service without our written consent
• Resell, sublicense, or redistribute the Service without authorisation
• Use the AI features to generate content that could mislead regulatory authorities
• Interfere with or disrupt the Service or the servers and networks used to provide it

We reserve the right to suspend or terminate your access if you violate this Acceptable Use Policy. In accordance with DSA Article 14(1), restrictions on the use of our Service are described clearly and applied in a non-discriminatory manner.

Intellectual Property

Our Intellectual Property

The Service, including its design, features, code, documentation, AI models, and all related intellectual property, is owned by Arcbase and protected by applicable intellectual property laws. You are granted a limited, non-exclusive, non-transferable licence to use the Service during the term of your subscription.

Your Data

You retain all ownership rights to the data you upload to the Service. By using the Service, you grant Arcbase a limited licence to process your data solely for the purpose of providing and improving the Service. We do not use your proprietary data to train AI models shared across other customers.

Data Protection

We process personal data in accordance with the GDPR and applicable data protection laws. Our Privacy Policy provides detailed information about how we collect, use, share, and protect your personal data, including:

• Categories of personal data collected
• Legal bases for processing
• Your data subject rights
• International data transfers and safeguards
• AI-specific processing disclosures

For organisations requiring a Data Processing Agreement (DPA), please contact privacy@arcbase.com.

Service Availability and SLA

We strive to maintain high availability of the Service. However, we do not guarantee uninterrupted access. The Service may be temporarily unavailable due to:

• Scheduled maintenance (we will provide reasonable advance notice)
• Emergency maintenance to address security vulnerabilities
• Events beyond our reasonable control (force majeure)
• Third-party service disruptions

For Pro and Agency plans, we target 99.9% uptime availability measured on a monthly basis, excluding scheduled maintenance windows. Specific SLA terms may be agreed upon in a separate service level agreement.

Limitation of Liability

To the maximum extent permitted by applicable law:

• The Service is provided "as is" and "as available" without warranties of any kind, whether express or implied, including but not limited to implied warranties of merchantability, fitness for a particular purpose, or non-infringement.
• Arcbase shall not be liable for any indirect, incidental, special, consequential, or punitive damages, including but not limited to loss of profits, data, business opportunities, or goodwill, arising out of or related to your use of the Service.
• Our total aggregate liability for any claims arising from your use of the Service shall not exceed the total amount paid by you to Arcbase in the twelve (12) months preceding the claim.
• Arcbase is not liable for any regulatory non-compliance, penalties, or legal consequences resulting from reliance on AI-generated content or recommendations.

Nothing in these Terms excludes or limits our liability for death or personal injury caused by negligence, fraud, or any other liability that cannot be excluded or limited by applicable law.

Termination

By You

You may cancel your subscription and terminate your account at any time through your account settings or by contacting hello@arcbase.com. Upon cancellation:

• Your access continues until the end of your current billing period
• You may export your data before the account is deactivated
• After a 90-day grace period, your data will be securely deleted

By Us

In accordance with DSA Article 14(1), we may restrict, suspend, or terminate your access to the Service if:

• You materially breach these Terms and fail to remedy the breach within 14 days of notice
• You violate the Acceptable Use Policy
• Your use of the Service poses a security risk or threatens the integrity of the platform
• Required by law or regulatory authority

Where we restrict or terminate your account, we will provide a clear statement of reasons (DSA Article 17) and information about available remedies, including internal complaint handling and out-of-court dispute settlement options.

Content Moderation and Digital Services Act

In compliance with the Digital Services Act (DSA), we provide the following information about our content moderation practices:

Content on Arcbase (DSA Art. 14)

Arcbase is a business-to-business SaaS platform. Content uploaded by users (policies, evidence, risk assessments, audit reports) is private to their organisation and is not publicly distributed. We do not host user-generated content for public consumption.

Notice and Action (DSA Art. 16)

If you become aware of content on the platform that you believe to be illegal under EU or member state law, you may submit a notice to privacy@arcbase.com containing:

• A clear identification of the content at issue
• The reason why you consider the content to be illegal
• Your contact information

We will review notices promptly, take action where appropriate, and notify the relevant parties of our decision with a statement of reasons.

Internal Complaint Handling (DSA Art. 20)

If you disagree with a content moderation decision (e.g., content removal, account restriction), you may file an internal complaint within 6 months of the decision. We will review your complaint and respond within 14 business days.

Transparency Reporting (DSA Art. 15)

We publish annual transparency reports that include information about content moderation activities, notices received, and actions taken. These reports are available on our website.

Dispute Resolution

Internal Resolution

We encourage you to contact us first at hello@arcbase.com to resolve any disputes informally. We will make reasonable efforts to address your concerns within 30 days.

Out-of-Court Settlement (DSA Art. 21)

In accordance with DSA Article 21, you have the right to select any certified out-of-court dispute settlement body to resolve disputes relating to content moderation decisions. We will engage in good faith with the selected body and accept the settlement unless we have reasonable grounds to believe the decision is not well-founded.

Formal Dispute Resolution

If a dispute cannot be resolved informally, it shall be submitted to the competent courts in [Jurisdiction]. For consumers in the EU, this does not affect your right to bring proceedings in the courts of your member state of residence.

Governing Law and Changes to Terms

Governing Law

These Terms are governed by and construed in accordance with the laws of [Jurisdiction], without regard to conflict of law principles. If you are a consumer in the EU, you will benefit from any mandatory provisions of the law of the country in which you are resident.

Changes to These Terms

We may update these Terms from time to time. In accordance with DSA Article 14(2), we will notify you of any significant changes at least 30 days before they take effect. Notification will be provided via:

• Email to the address associated with your account
• An in-platform notification
• An update to the "Last updated" date at the top of this page

Your continued use of the Service after the effective date of updated Terms constitutes acceptance of the changes. If you do not agree to the updated Terms, you must stop using the Service and cancel your subscription.

Contact

For questions about these Terms, contact us at hello@arcbase.com.