GRCWatch

GRCWatch Terms of Service

Effective date: September 19, 2026

These Terms of Service govern access to and use of GRCWatch (the Service). They are provided as reasonable operating terms for the Service and are not legal advice. If you accept these terms for an organization, you represent that you have authority to bind that organization.

1. The Service

GRCWatch provides software for organizing governance, risk, compliance, evidence, policy, vendor, and related security-program work. The Service may include automated and AI-assisted suggestions. Those suggestions are informational and must be reviewed by qualified people before use.

2. Accounts and authorized use

You must provide accurate account information, protect your credentials, and promptly notify us of suspected unauthorized access. You are responsible for activity by users you authorize and for assigning appropriate roles and permissions.

You may not:

  • use the Service unlawfully or to infringe another person's rights
  • probe, disrupt, overload, or bypass security controls for the Service
  • introduce malware or harmful content
  • reverse engineer the Service except where applicable law expressly permits it
  • use the Service or its output to build a competing product through systematic extraction

3. Customer data

You retain ownership of content and data you submit to the Service (Customer Data). You grant GRCWatch a limited right to host, process, transmit, and display Customer Data only as needed to provide, secure, support, and improve the Service and to comply with law.

You are responsible for having the rights and permissions needed to submit Customer Data. Our handling of personal information is described in the Privacy Policy.

4. Security and compliance responsibility

GRCWatch is a workflow and decision-support tool. It does not provide legal, audit, accounting, certification, or regulatory advice, and it does not guarantee that you will achieve or maintain compliance with any framework or law. You remain responsible for your controls, evidence, decisions, filings, and professional advice.

5. Fees, trials, and billing

Paid subscriptions are billed through Stripe at the price and interval shown at checkout or in an applicable order. Trials, if offered, convert to a paid subscription unless canceled before the trial ends. You authorize recurring charges until cancellation. Taxes may apply.

You may manage or cancel a subscription through the Stripe billing portal available in organization billing settings. Except where law requires otherwise, fees already paid are non-refundable.

6. Availability and changes

We aim to keep the Service available and secure, but do not promise uninterrupted or error-free operation. We may update features, security controls, integrations, or these terms as the Service evolves. Material changes will be communicated through reasonable means and will apply prospectively.

7. Third-party services

The Service relies on third-party providers and may connect to services you choose. Their terms and availability are outside our control. You authorize the exchanges of data needed for integrations you enable.

8. Suspension and termination

You may stop using the Service at any time. We may suspend or terminate access for material breach, security risk, unlawful use, nonpayment, or where required by law. Where practical, we will provide notice and an opportunity to cure.

After termination, access ends and Customer Data may be deleted according to our retention practices and legal obligations. Export important data before closing an account.

9. Intellectual property

GRCWatch and its licensors retain all rights in the Service, software, branding, documentation, and underlying technology. Feedback may be used without restriction or obligation, provided it does not identify you or disclose your confidential information.

10. Disclaimers and liability

To the maximum extent permitted by law, the Service is provided “as is” and “as available,” without implied warranties. GRCWatch is not liable for indirect, incidental, special, consequential, or punitive damages, or for lost profits, revenues, data, or business opportunities.

To the maximum extent permitted by law, GRCWatch's aggregate liability arising from the Service will not exceed the fees you paid for the Service during the 12 months before the event giving rise to the claim. Some jurisdictions do not allow certain exclusions or limits, so parts of this section may not apply.

11. General

These terms and any applicable order form are the entire agreement about the Service and supersede prior discussions on that subject. If a provision is unenforceable, the remainder stays effective. Failure to enforce a provision is not a waiver. You may not assign the agreement without our consent; we may assign it as part of a merger, acquisition, reorganization, or sale of assets.

12. Contact

Questions about these terms may be sent to support@grcwatch.io.