Effective date: February 1, 2026 • Last updated: February 6, 2026

These Terms of Service ("Terms") constitute a legal agreement between you ("Customer", "you", or "your") and Cisodium ("we", "us", or "our") governing your access to and use of the Cisodium Information Security Management Platform, including any associated APIs, documentation, and support services (collectively, the "Service"). By accessing or using the Service, you agree to be bound by these Terms.

1. Definitions

"Service" means the Cisodium platform, including all features, integrations, APIs, and related documentation.
"Customer Data" means all data uploaded, submitted, or generated by you or your authorized users within the Service, including security controls, risk assessments, policies, compliance evidence, and configurations.
"Authorized Users" means individuals authorized by you to access and use the Service under your account.
"Subscription Term" means the period during which you have paid access to the Service, as specified in your order.

2. Account Registration and Access

2.1 Account Creation

To use the Service, you must create an account by providing accurate and complete information. You are responsible for keeping your account credentials confidential and for all activities that occur under your account.

2.2 Authorized Users

You may invite Authorized Users to access the Service within the limits of your subscription plan. You are responsible for ensuring that your Authorized Users comply with these Terms and for all actions taken by them within the Service.

2.3 Age Requirement

You must be at least 18 years old and have the legal authority to bind your organization to these Terms.

3. Use of the Service

3.1 Permitted Use

We grant you a non-exclusive, non-transferable, limited right to access and use the Service during the Subscription Term for your internal business purposes related to information security management, in accordance with these Terms and any applicable documentation.

3.2 Restrictions

You shall not:

License, sublicense, sell, resell, or otherwise make the Service available to third parties, except to your Authorized Users.
Reverse engineer, decompile, disassemble, or attempt to derive the source code of the Service.
Modify, adapt, or create derivative works based on the Service.
Use the Service to store or transmit malicious code, infringing material, or any content that violates applicable law.
Interfere with the integrity or performance of the Service, or attempt to gain unauthorized access to related systems or networks.
Use the Service for competitive benchmarking, or to build a competing product or service.
Exceed the usage limits specified in your subscription plan (e.g., number of users, integrations, or data volume).

4. Customer Data

4.1 Ownership

You retain all rights, title, and interest in your Customer Data. We do not claim ownership of any data you submit to the Service.

4.2 License to Cisodium

You grant us a limited, non-exclusive license to host, process, and display your Customer Data solely as necessary to provide the Service. We will not access your Customer Data except as required to deliver the Service, provide support at your request, or comply with law.

4.3 Data Protection

We will process Customer Data in accordance with our Privacy Policy and applicable data protection laws. Where required, we will enter into a Data Processing Agreement (DPA) with you.

4.4 Data Portability

You may export your Customer Data at any time through the Service's built-in export functionality or via the API. Upon termination, we will make your data available for export for a period of 30 days.

5. Subscription and Payment

5.1 Subscription Plans

The Service is offered under various subscription plans (Starter, Professional, Enterprise) with different feature sets and usage limits. Plan details and pricing are communicated during the sales process.

5.2 Payment Terms

Fees are invoiced in advance on an annual or monthly basis, as specified in your order. Payment is due within 30 days of invoice date. All fees are non-refundable except as expressly stated in these Terms.

5.3 Taxes

All fees are exclusive of applicable taxes. You are responsible for all taxes, levies, and duties imposed by taxing authorities, excluding taxes based on our net income.

5.4 Free Trial

We may offer a free trial period. During the trial, the Service is provided "as is" without any warranties. We reserve the right to modify or discontinue the trial at any time.

6. Intellectual Property

6.1 Cisodium IP

All rights, title, and interest in the Service, including all software, algorithms, interfaces, documentation, trademarks, and other intellectual property, are and remain the exclusive property of CISODIUM OÜ. These Terms do not grant you any rights to our intellectual property except the limited usage rights explicitly stated herein.

6.2 Feedback

If you provide feedback, suggestions, or ideas regarding the Service, you grant us an unrestricted, irrevocable, perpetual license to use such feedback for any purpose without obligation to you.

7. Service Level and Support

7.1 Availability

We target 99.9% uptime for the Service, excluding scheduled maintenance windows. Scheduled maintenance will be communicated at least 48 hours in advance. Enterprise plan customers may be eligible for a separate Service Level Agreement (SLA) with defined uptime commitments and remedies.

7.2 Support

Support is provided based on your subscription plan. Starter plans include email support during business hours. Professional plans include priority email support. Enterprise plans include a dedicated success manager and agreed-upon response time targets.

8. Security

We implement and maintain industry-standard administrative, technical, and physical security measures to protect Customer Data. These measures include encryption at rest and in transit, role-based access control, multi-factor authentication, audit logging, and regular security assessments. Full details of our security practices are available at cisodium.com/#security.

9. Confidentiality

Each party agrees to treat the other party's confidential information with at least the same degree of care it uses to protect its own confidential information, but in no event less than reasonable care. Confidential information includes Customer Data, pricing, business plans, technical specifications, and any information marked as confidential. This obligation does not apply to information that is publicly available, independently developed, or lawfully received from a third party.

10. Term and Termination

10.1 Term

These Terms are effective from the date you first access the Service and continue until the Subscription Term expires or is terminated.

10.2 Termination for Convenience

Either party may terminate the subscription by providing written notice at least 30 days before the end of the current Subscription Term. Without such notice, the subscription will automatically renew for successive periods of the same length.

10.3 Termination for Cause

Either party may terminate these Terms immediately upon written notice if the other party materially breaches these Terms and fails to cure such breach within 30 days after receiving written notice.

10.4 Effect of Termination

Upon termination, your right to access the Service ceases immediately. We will make your Customer Data available for export for 30 days following termination, after which it will be permanently deleted. Sections that by their nature should survive termination (including Intellectual Property, Limitation of Liability, Confidentiality, and Governing Law) will continue to apply.

11. Warranties and Disclaimers

11.1 Our Warranties

We warrant that: (a) the Service will perform materially in accordance with its documentation during the Subscription Term; (b) we will provide the Service in a professional and workmanlike manner; and (c) we have the right and authority to enter into these Terms.

11.2 Disclaimer

EXCEPT AS EXPRESSLY STATED ABOVE, THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE". WE DISCLAIM ALL OTHER WARRANTIES, EXPRESS OR IMPLIED, INCLUDING IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT. WE DO NOT WARRANT THAT THE SERVICE WILL BE UNINTERRUPTED, ERROR-FREE, OR THAT ALL DEFECTS WILL BE CORRECTED.

12. Limitation of Liability

12.1 Exclusion of Indirect Damages

TO THE MAXIMUM EXTENT PERMITTED BY LAW, NEITHER PARTY SHALL BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR ANY LOSS OF PROFITS, REVENUE, DATA, OR BUSINESS OPPORTUNITIES, ARISING OUT OF OR RELATED TO THESE TERMS, REGARDLESS OF THE THEORY OF LIABILITY.

12.2 Cap on Liability

EACH PARTY'S TOTAL AGGREGATE LIABILITY ARISING OUT OF OR RELATED TO THESE TERMS SHALL NOT EXCEED THE TOTAL FEES PAID BY CUSTOMER DURING THE TWELVE (12) MONTHS PRECEDING THE EVENT GIVING RISE TO THE CLAIM.

12.3 Exceptions

The limitations in this section do not apply to: (a) your payment obligations; (b) either party's breach of confidentiality obligations; (c) either party's indemnification obligations; or (d) liability that cannot be limited by applicable law.

13. Indemnification

We will defend, indemnify, and hold you harmless from any third-party claims alleging that your authorized use of the Service infringes that third party's intellectual property rights, and will pay any resulting damages or settlement costs. This obligation does not apply if the claim arises from your modification of the Service, use in combination with products not provided by us, or use after we have notified you to cease.

14. Changes to These Terms

We may update these Terms from time to time. We will provide at least 30 days' advance notice of material changes via email or through the Service. Your continued use of the Service after the effective date of updated Terms constitutes your acceptance of the changes. If you do not agree with the updated Terms, you may terminate your subscription before the changes take effect.

15. General Provisions

15.1 Governing Law

These Terms are governed by the laws of the jurisdiction in which Cisodium is incorporated, without regard to conflict of law provisions.

15.2 Dispute Resolution

Any disputes arising from these Terms shall first be resolved through good-faith negotiation. If the dispute is not resolved within 30 days, either party may pursue resolution through binding arbitration or the courts of the governing jurisdiction.

15.3 Assignment

You may not assign these Terms without our prior written consent. We may assign these Terms in connection with a merger, acquisition, or sale of all or substantially all of our assets.

15.4 Entire Agreement

These Terms, together with any applicable order, DPA, and SLA, constitute the entire agreement between you and Cisodium and supersede all prior or contemporaneous agreements, representations, and understandings.

15.5 Severability

If any provision of these Terms is held to be invalid or unenforceable, the remaining provisions shall continue in full force and effect.

16. Contact Us

For questions about these Terms of Service, please contact us:

Email: legal@cisodium.com
Website: cisodium.com