Terms of Service

• "Platform" means the SovereignAudit.io software-as-a-service, API, CLI, and GitHub Action.
• "Customer" means the organisation that has entered into a subscription agreement.
• "User" means an individual granted access by the Customer.
• "Scan Data" means source code, configuration files, and inference logs submitted to the platform.
• "Compliance Reports" means output generated by the platform including PDF reports, Annex IV dossiers, and JSON scan results.

Subject to these Terms and timely payment of fees, we grant Customer a limited, non-exclusive, non-transferable, revocable licence to access and use the Platform for Customer's internal compliance management purposes during the subscription term.

You must not use the Platform to:

• Circumvent, disable, or interfere with security or rate-limiting features.
• Reverse-engineer, decompile, or attempt to extract source code.
• Submit data belonging to third parties without proper authorisation.
• Use scan results as a substitute for qualified legal advice.
• Represent that a passing scan constitutes legal compliance without independent verification.
• Resell or sublicence access to the Platform without written consent.

You retain all ownership of Scan Data. By submitting Scan Data, you grant us a limited licence to process it solely to provide the Platform services. We do not claim ownership of your source code, reports, or compliance documentation.

Compliance Reports generated by the Platform are owned by the Customer. The EU AI Act legal corpus, detection rules, scoring algorithms, and platform software remain our exclusive intellectual property.

Important: The Platform provides automated compliance tooling and documentation assistance. Output from the Platform does not constitute legal advice and does not guarantee compliance with the EU AI Act or any other regulation. Customers should obtain independent legal advice for their specific circumstances. We are not liable for regulatory actions taken against Customer on the basis of Platform output.

We target 99.5% monthly uptime for the API and dashboard. Scheduled maintenance windows will be communicated with at least 48 hours notice. Enterprise customers on dedicated plans are subject to the SLA in their Order Form, which supersedes this section.

Both parties will maintain the confidentiality of the other's non-public information using at least the same care as they use to protect their own confidential information, and no less than reasonable care. This obligation survives termination for 5 years.

Fees are as set out in your Order Form or the then-current pricing page. Fees are payable monthly or annually in advance. All fees are exclusive of VAT. We reserve the right to suspend access for accounts more than 30 days overdue following written notice.

To the maximum extent permitted by law, our aggregate liability for any claims arising from these Terms shall not exceed the fees paid by you in the 12 months preceding the claim. We shall not be liable for indirect, incidental, special, consequential, or punitive damages, including loss of profits, data, or business opportunity.

• These Terms apply from the date you first access the Platform.
• Either party may terminate on 30 days written notice at renewal.
• We may terminate immediately for material breach, non-payment, or abuse.
• On termination, your access is revoked and we will provide a 30-day data export window.
• Audit event records required for legal obligations will be retained per our Privacy Policy.

These Terms are governed by the laws of England and Wales. Disputes shall be subject to the exclusive jurisdiction of the courts of England and Wales, without prejudice to your statutory rights as a consumer (if applicable).

Legal notices and contract queries: info@sovereignaudit.io

Sovereign Audit, 128 City Road, London EC1C 2NX, United Kingdom