Terms of Service

1. Who We Are

RiskForce is a cybersecurity and risk management software and services company building reliable, efficient and effective risk management solutions. We conduct research, develop and apply risk management tools and techniques, and deploy these resources via software and API applications and partnerships.

2. Account Creation and Access

Minimum age. You must be at least 18 years old or the minimum age required to consent to use the Services in your location, whichever is higher.

Your RiskForce Account. To access our Services, we may ask you to create an Account. You agree to provide correct, current, and complete Account information and allow us to use it to communicate with you about our Services. Our communications to you using your Account information will satisfy any requirements for legal notices.

You may not share your Account login information, RiskForce API key, or Account credentials with anyone else. You also may not make your Account available to anyone else. You are responsible for all activity occurring under your Account, and you agree to notify us immediately if you become aware of any unauthorized access by emailing [email protected].

Business Domains. If you use an email address owned by your employer or another organization, your Account may be linked to the organization's RiskForce enterprise account, and the organization's administrator may be able to monitor and control the Account, including having access to Materials. We will provide notice before linking your Account to an organization's enterprise account unless the organization is responsible for notifying you.

Evaluation and Additional Services. In some cases, we may permit you to evaluate our Services for a limited time or with limited functionality. Use for evaluation purposes is for your personal, non-commercial use only. You may need to accept additional terms to use certain Services.

3. Use of Our Services

You may access and use our Services only in compliance with our Terms, including our Acceptable Use Policy, and any guidelines or supplemental terms we may post on the Services. You are responsible for all activity under your account.

You may not access or use, or help another person to access or use, our Services in the following ways:

• In any manner that violates any applicable law or regulation.
• To develop any products or services that compete with our Services, including to develop or train any AI or ML algorithms or models, or resell the Services.
• To decompile, reverse engineer, disassemble, or otherwise reduce our Services to human-readable form, except when prohibited by applicable law.
• To crawl, scrape, or otherwise harvest data or information from our Services other than as permitted under these Terms.
• To use our Services or Materials to obtain unauthorized access to any system or information, or to deceive any person.
• To infringe, misappropriate, or violate intellectual property or other legal rights.
• Except when accessing via a RiskForce API Key or where we otherwise explicitly permit it, to access the Services through automated or non-human means.
• To engage in any other conduct that restricts or inhibits any person from using or enjoying our Services.

4. Customer Information and Artificial Intelligence

4.1 Ownership

Each party will retain all rights, title, and interest in and to any of its patents, inventions, copyrights, trademarks, domain names, trade secrets, know-how, and any other intellectual property and/or proprietary rights (“Intellectual Property Rights”). RiskForce will retain Intellectual Property Rights in the Services and all documentation and components of, or used to, provide the Services or created by the Services or by RiskForce in the course of providing the Services (the “Services Information”). Customer will retain Intellectual Property Rights in all information it provides to RiskForce as part of this Agreement (other than Feedback and Aggregated Anonymous Data as described below), including but not limited to in the course of its use of the Services (the “Customer Information”).

4.2 Feedback

Customer may provide suggestions, enhancement requests, recommendations about the Services, or other feedback to RiskForce (the “Feedback”). Customer hereby assigns and agrees to assign to RiskForce all right, title, and interest in and to any Feedback. RiskForce reserves the right to seek intellectual property protection for any features, functionality, or components that may be based on or that were initiated by such Feedback.

4.3 License to RiskForce; Aggregated Anonymous Data

Customer hereby grants RiskForce a non-exclusive right and license to use Customer Information to provide the Services to Customer. Notwithstanding anything to the contrary in this Agreement, Customer acknowledges and agrees that RiskForce may (i) internally use, copy, and modify (but not disclose) Customer Information for the purposes of (a) providing the Services to Customer and (b) generating Aggregated Anonymous Data (as defined below); and (ii) freely use, retain, and make available Aggregated Anonymous Data for the purpose of improving, testing, and operating RiskForce's products and services.

“Aggregated Anonymous Data” means data submitted to, collected by, or generated by RiskForce in connection with Customer's use of the Service, but only in aggregate, anonymized form that cannot be linked specifically to Customer, any individual person, or any specific system, asset, product, or piece of intellectual property.

4.4 Public Contributions

The Services may include features that allow Customer or its users to submit content to publicly-accessible or community-accessible areas of the Service (“Public Contributions”). Content submitted as a Public Contribution is intentionally made available to other users and is not Customer Information for purposes of this Agreement. RiskForce may incorporate Public Contributions into community datasets, into RiskForce's AI/ML models, and into other Services functionality. Customer may delete its Public Contributions where technically feasible; however, aggregated insights derived from Public Contributions may persist after deletion.

4.5 Artificial Intelligence

4.5.1 AI Features

The Services include features that leverage artificial intelligence, machine learning, or similar technologies provided by RiskForce and/or its licensors (“AI Features”). AI Features are clearly identified in the Service user interface. When an AI Feature is invoked by Customer or its users, Customer-supplied inputs may be transmitted to one or more third-party AI providers for inference. RiskForce routes such transmissions through model providers and routing services that offer Zero Data Retention (“ZDR”) configurations wherever available; under a ZDR configuration, the provider does not retain prompts, completions, or related inference data after the request is processed, except for limited retention required for safety review of content that violates the provider's content policies. Customer may disable use of AI Features at the organization administrator level using the functionality of the Service.

4.5.2 No Training on Customer Information

RiskForce will not, and will not permit any third party (including any third-party AI provider used in providing the Services) to, use Customer Information to train, retrain, or otherwise develop any artificial intelligence or machine learning models. RiskForce may use Feedback and Aggregated Anonymous Data for the purpose of training, evaluating, and improving its AI Features and other Services.

4.5.3 AI Output Disclaimer

RiskForce makes no covenants, representations, or warranties regarding any outputs generated, transmitted, or made available in connection with Customer's or any user's use of AI Features (“AI Outputs”), including, without limitation, with respect to the accuracy, quality, or truthfulness thereof. AI Outputs are produced by probabilistic models and may contain errors or omissions, may not be up-to-date, and are provided for informational purposes only. AI Outputs should be used at Customer's own risk. Due to the nature of AI Features generally, Customer acknowledges that (a) Customer's AI Outputs may be similar to outputs generated by other RiskForce customers' use of the Services, (b) the same input may result in different AI Outputs from one use to the next, and (c) AI Outputs may not be accurate, reliable, or suitable for Customer's requirements. Customer is responsible for independently verifying any information in AI Outputs before relying on it. Customer and its users may not represent that any AI Outputs were human generated.

4.5.4 Agentic Features and Automation

Certain AI Features can take actions within the Services at Customer's direction or based on configurations Customer enables, including querying Customer Information and performing state-changing actions such as attaching evidence, updating control implementation status or assessment objectives, and executing automation profiles that may operate without step-by-step confirmation (“Agentic Actions”). Customer is responsible for Agentic Actions performed under its Account or configuration to the same extent as actions Customer performs manually, and remains solely responsible for the accuracy, completeness, and appropriateness of its compliance records, assessment results, and any authorization artifacts derived from them. Where the Services provide human-review or confirmation checkpoints, Customer is responsible for exercising that review. Agentic Actions are not a substitute for independent verification by qualified personnel.

5. Content Removal Requests

To submit a request to remove any content or data, contact us at [email protected].

6. Subscriptions, Fees and Payment

You may be required to pay fees to access or use our Services. If you purchase access, you must provide complete and accurate billing information. You agree that we may charge the Payment Method for applicable fees and tax on a periodic basis for recurring or usage-based services.

Except as expressly provided in these Terms, our Subscription & Refund Policy, or where required by law, all payments are non-refundable after the applicable refund window. See our Subscription & Refund Policy for additional details.

When you sign up for a Subscription, it will automatically renew and your Payment Method will be charged until you cancel. To avoid renewal charges, cancel your subscription at least 24 hours before the last day of the current term. In the event of a cancellation, your access continues through the end of the period for which you previously paid.

7. Third-Party Services and Links

Our Services may use or be used in connection with third-party content, services, or integrations. We do not control or accept responsibility for any loss or damage that may arise from your use of any third-party content, services, and integrations.

8. Software

We may offer manual or automatic updates to our software without advance notice. RiskForce Software may include open source software. In the event of any conflict between these Terms and any other terms applicable to any portion of RiskForce Software, such other terms will control as to that portion.

9. Ownership of the Services

The Services are owned, operated, and provided by us and our affiliates, licensors, distributors, and service providers (collectively “Providers”). We and our Providers retain all of our respective rights, title, and interest, including intellectual property rights, in and to the Services.

10. Disclaimer of Warranties, Limitations of Liability, and Indemnity

YOUR USE OF THE SERVICES AND MATERIALS IS SOLELY AT YOUR OWN RISK. THE SERVICES AND OUTPUTS ARE PROVIDED ON AN “AS IS” AND “AS AVAILABLE” BASIS AND, TO THE FULLEST EXTENT PERMISSIBLE UNDER APPLICABLE LAW, ARE PROVIDED WITHOUT WARRANTIES OF ANY KIND, WHETHER EXPRESS, IMPLIED, OR STATUTORY. WE AND OUR PROVIDERS EXPRESSLY DISCLAIM ANY AND ALL WARRANTIES OF FITNESS FOR A PARTICULAR PURPOSE, TITLE, MERCHANTABILITY, ACCURACY, AVAILABILITY, RELIABILITY, SECURITY, PRIVACY, COMPATIBILITY, NON-INFRINGEMENT, AND ANY WARRANTY IMPLIED BY COURSE OF DEALING, COURSE OF PERFORMANCE, OR TRADE USAGE.

TO THE FULLEST EXTENT PERMISSIBLE UNDER APPLICABLE LAW, THE RISKFORCE PARTIES' TOTAL AGGREGATE LIABILITY TO YOU FOR ALL DAMAGES, LOSSES AND CAUSES OF ACTION WILL NOT EXCEED THE GREATER OF THE AMOUNT YOU PAID TO US IN THE SIX MONTHS PRECEDING THE DATE SUCH DAMAGES FIRST AROSE, AND $100.

YOU AGREE TO INDEMNIFY AND HOLD HARMLESS THE RISKFORCE PARTIES FROM AND AGAINST ANY AND ALL LIABILITIES, CLAIMS, DAMAGES, EXPENSES (INCLUDING REASONABLE ATTORNEYS' FEES AND COSTS), AND OTHER LOSSES ARISING OUT OF OR RELATED TO YOUR BREACH OF THESE TERMS; YOUR ACCESS TO, USE OF, OR ALLEGED USE OF THE SERVICES; YOUR FEEDBACK; ANY PRODUCTS OR SERVICES THAT YOU DEVELOP USING THE SERVICES; YOUR VIOLATION OF APPLICABLE LAW OR ANY THIRD-PARTY RIGHT; AND ANY ACTUAL OR ALLEGED FRAUD, INTENTIONAL MISCONDUCT, GROSS NEGLIGENCE, OR CRIMINAL ACTS COMMITTED BY YOU OR YOUR EMPLOYEES OR AGENTS.

11. General Terms

Changes to the Services. We reserve the right to modify, suspend, or discontinue the Services or your access to them, in whole or in part, at any time without notice. We will strive to provide reasonable advance notice if we stop offering a Service, but urgent situations may not allow this.

Changes to these Terms. We may revise and update these Terms at our discretion. We may require you to acknowledge and accept updated Terms within the Services before continuing to use them. If you continue to access the Services after we post updated Terms, you agree to the updated Terms. If you do not accept the updated Terms, you must stop using our Services.

Termination. You may stop accessing the Services at any time. We may suspend or terminate your access at any time without notice if we believe you have breached these Terms or if required by law. We may also terminate your Account if you have been inactive for over a year and do not have a paid Account.

Export Controls. You may not export or provide access to the Services into any U.S. embargoed countries or to anyone on restricted party lists identified by the U.S. Treasury Department, Department of Commerce, or Office of Foreign Asset Control.

12. In Case of Disputes

Governing law and exclusive jurisdiction. Our Terms will be governed by, and construed and interpreted in accordance with, the laws of the State of Delaware without giving effect to conflict of law principles. You and RiskForce agree that any disputes arising out of or relating to these Terms will be resolved exclusively in the state or federal courts located in Delaware, and you submit to the personal and exclusive jurisdiction of those courts.

Contact

For questions about these Terms, contact us at [email protected].