Terms of Service

These Terms of Service ("Terms") govern your access to and use of the Compeas website and compliance platform (the "Service") provided by Compeas AB, org. no. 559590-5703 ("Compeas", "we", "us"). By creating an account or using the Service, you agree to these Terms. If you use the Service on behalf of an organisation, you represent that you have authority to bind that organisation, and "you" refers to that organisation.

1. The Service

Compeas provides continuous security monitoring, compliance management, evidence collection, and audit-preparation tooling for frameworks such as NIS2, ISO 27001, NIST CSF 2.0, and GDPR. The Service supports your compliance programme but does not constitute legal advice, and use of the Service does not by itself guarantee certification or compliance with any framework or law.

2. Accounts

• You must provide accurate registration information and keep it up to date.
• You are responsible for safeguarding your credentials and for all activity under your account. Where your organisation uses single sign-on (Google Workspace or Microsoft Entra), access is governed by your identity provider's policies.
• You must be at least 18 years old to use the Service.

3. Free Trial

Request a trial via the signup form and we will provision a trial environment after a short onboarding call. Unless your order form states otherwise, trials last 14 days, and continued access after the trial requires a paid subscription. We may limit trial features or usage at our discretion.

4. Subscriptions & Payment

• Subscriptions are billed in advance on a monthly or annual basis as set out in your order form.
• Fees are non-refundable except as required by law or stated in your order form.
• You may change plans at any time; changes take effect on your next billing cycle.
• Prices are quoted in EUR and are exclusive of VAT and other taxes, which you are responsible for.

5. Service Levels & Support

We target monthly uptime of at least 99.7% for the Service, measured per calendar month and excluding scheduled maintenance announced in advance. If we fall below this target in a calendar month, you are entitled to service credits as set out in your order form. Support is provided by email at support@compeas.com. We classify and respond to support requests by priority:

• Priority 1 – Critical: initial response within 30 minutes, status updates every hour, continuous effort until service is restored or a workaround that materially restores the affected functionality is implemented.
• Priority 2 – High: initial response within 2 hours, status updates every 4 hours, resolution as soon as reasonably practicable.
• Priority 3 – Medium: initial response within 1 business day, status updates as appropriate, resolution included in a planned maintenance release or agreed timeframe.
• Priority 4 – Low: initial response within 2 business days, status updates on request, considered for a future release or product improvement.

Current and historical availability is published at status.compeas.com.

6. Acceptable Use

You agree not to:

• Use the Service in violation of any law or third-party rights.
• Attempt to probe, scan, or test the vulnerability of the Service except as authorized by our responsible disclosure process.
• Interfere with or disrupt the Service or its infrastructure.
• Reverse engineer the Service except where permitted by law.
• Resell or provide the Service to third parties except as permitted by your plan or a partner agreement.

7. Your Data

You retain all rights to the data you submit to the Service ("Customer Data"). You grant us the right to process Customer Data solely to provide and improve the Service, as described in our Privacy Policy and Data Processing Addendum. You represent that you have all necessary rights and consents to submit Customer Data.

8. Intellectual Property

We own the Service, including all software, designs, and documentation, and all improvements to them. These Terms grant you a limited, non-exclusive, non-transferable right to use the Service during your subscription. Feedback you provide may be used by us without restriction.

9. Confidentiality

Each party agrees to protect the other's non-public information with the same care it uses for its own, and to use it only for the purposes of these Terms.

10. Warranties & Disclaimer

We warrant that the Service will perform materially as described. Except for this warranty, the Service is provided "as is" and we disclaim all other warranties, express or implied, including merchantability, fitness for a particular purpose, and non-infringement.

11. Indemnification

We will defend and indemnify you against third-party claims alleging that the Service, as provided by us and used in accordance with these Terms, infringes intellectual property rights. You will defend and indemnify us against third-party claims arising from Customer Data or your unlawful use of the Service. The indemnified party must promptly notify the other, allow control of the defence, and reasonably cooperate.

12. Limitation of Liability

To the maximum extent permitted by law, neither party will be liable for indirect, incidental, special, or consequential damages, and each party's aggregate liability under these Terms is limited to the amounts paid or payable by you in the 12 months preceding the claim. Nothing in these Terms limits liability that cannot be limited by law, including liability for wilful misconduct or gross negligence.

13. Term & Termination

• These Terms apply while you use the Service.
• You may cancel at any time; cancellation takes effect at the end of the current billing cycle.
• We may suspend or terminate access for breach of these Terms, with notice where practicable.
• Upon termination, you may request export or deletion of your Customer Data as described in our Privacy Policy.

14. Governing Law & Disputes

These Terms are governed by the laws of Sweden. Any dispute arising out of or in connection with these Terms shall be finally settled by arbitration administered by the Arbitration Institute of the Stockholm Chamber of Commerce (SCC). The seat of arbitration shall be Stockholm, Sweden. The arbitral tribunal shall consist of one (1) arbitrator. The language of the arbitration shall be English. The arbitral award shall be final and binding upon the Parties, unless otherwise agreed in your order form.

15. General

• Order of precedence. If documents conflict, the order form prevails over the Data Processing Addendum, which prevails over these Terms.
• Force majeure. Neither party is liable for delays caused by events beyond its reasonable control.
• Assignment. You may not assign these Terms without our consent, except to an affiliate or in connection with a merger or sale of substantially all assets.
• Notices. Legal notices are sent to the addresses in your order form, or to legal@compeas.com for Compeas.
• Severability & waiver. If a provision is unenforceable, the remainder stays in effect; failure to enforce a right is not a waiver.
• Entire agreement. These Terms, together with your order form and the DPA, are the entire agreement between the parties regarding the Service.

16. Changes

We may update these Terms from time to time. We will post the updated version here and, for material changes, notify account holders in advance by email or in-product notice.

17. Contact

Compeas AB, org. no. 559590-5703
Östra långgatan 35, 731 30 Köping, Sweden
Email: legal@compeas.com