Terms of Service

These Terms of Service ("Terms") govern your access to and use of the Compeas website and compliance platform (the "Service") provided by Compeas AB, org. no. 559590-5703 ("Compeas", "we", "us"). By creating an account or using the Service, you agree to these Terms. If you use the Service on behalf of an organisation, you represent that you have authority to bind that organisation, and "you" refers to that organisation. If you or your organisation have entered into a Master Subscription and Services Agreement ("MSSA") with Compeas, the MSSA together with its order forms and annexes governs your use of the Service and prevails over these Terms to the extent of any conflict.

1. The Service

Compeas provides continuous security monitoring, compliance management, evidence collection, and audit-preparation tooling for frameworks such as NIS2, ISO 27001, NIST CSF 2.0, and GDPR. The Service supports your compliance programme but does not constitute legal advice, and use of the Service does not by itself guarantee certification or compliance with any framework or law.

2. Accounts

• You must provide accurate registration information and keep it up to date.
• You are responsible for safeguarding your credentials and for all activity under your account. Where your organisation uses single sign-on (Google Workspace or Microsoft Entra), access is governed by your identity provider's policies.
• You must be at least 18 years old to use the Service.

3. Free Trial

Request a trial via the signup form and we will provision a trial environment after a short onboarding call. Unless your order form states otherwise, trials last 14 days, and continued access after the trial requires a paid subscription. We may limit trial features or usage at our discretion.

4. Subscriptions & Payment

• Subscriptions are billed in advance on the basis set out in your order form (monthly, annual, or the full subscription term).
• Fees are non-refundable except as required by law or stated in your order form.
• Unless your order form or MSSA provides otherwise, you may change plans with effect from your next billing cycle.
• Prices are quoted in EUR and are exclusive of VAT and other taxes, which you are responsible for.

5. Service Levels & Support

We target monthly uptime of at least 99.7% for the Service, measured per calendar month and excluding scheduled maintenance announced in advance. If we fall below this target in a calendar month, you may be entitled to service credits as set out in our Service Level Agreement (Annex B to the MSSA). Support is provided by email at [email protected]. We classify and respond to support requests by priority:

• Priority 1 – Critical: initial response within 30 minutes, status updates every hour, continuous effort until service is restored or a workaround that materially restores the affected functionality is implemented.
• Priority 2 – High: initial response within 2 hours, status updates every 4 hours, resolution as soon as reasonably practicable and in any event within 24 hours of initial response.
• Priority 3 – Medium: initial response within 1 business day, status updates as appropriate, resolution included in a planned maintenance release or agreed timeframe.
• Priority 4 – Low: initial response within 2 business days, status updates on request, considered for a future release or product improvement.

Current and historical availability is published at status.compeas.com.

6. Acceptable Use

You agree not to:

• Use the Service in violation of any law or third-party rights.
• Attempt to probe, scan, or test the vulnerability of the Service except as authorized by our responsible disclosure process.
• Interfere with or disrupt the Service or its infrastructure.
• Reverse engineer the Service except where permitted by law.
• Resell or provide the Service to third parties except as permitted by your plan or a partner agreement.

7. Your Data

You retain all rights to the data you submit to the Service ("Customer Data"). You grant us the right to process Customer Data solely to provide and improve the Service, as described in our Privacy Policy and Data Processing Agreement. You represent that you have all necessary rights and consents to submit Customer Data.

8. Intellectual Property

We own the Service, including all software, designs, and documentation, and all improvements to them. These Terms grant you a limited, non-exclusive, non-transferable right to use the Service during your subscription. Feedback you provide may be used by us without restriction.

9. Confidentiality

Each party agrees to protect the other's non-public information with the same care it uses for its own, and to use it only for the purposes of these Terms.

10. Warranties & Disclaimer

We warrant that the Service will perform materially as described. Except for this warranty, the Service is provided "as is" and we disclaim all other warranties, express or implied, including merchantability, fitness for a particular purpose, and non-infringement.

11. Indemnification

We will defend and indemnify you against third-party claims alleging that the Service, as provided by us and used in accordance with these Terms, infringes intellectual property rights. You will defend and indemnify us against third-party claims arising from Customer Data or your unlawful use of the Service. The indemnified party must promptly notify the other, allow control of the defence, and reasonably cooperate.

12. Limitation of Liability

To the maximum extent permitted by law, neither party will be liable for indirect, incidental, special, or consequential damages, and each party's aggregate liability under these Terms is limited to the amounts paid or payable by you in the 12 months preceding the claim. Nothing in these Terms limits liability that cannot be limited by law, including liability for wilful misconduct or gross negligence.

13. Term & Termination

• These Terms apply while you use the Service.
• Unless your subscription is governed by an MSSA or an order form with a fixed term, you may cancel at any time with effect from the end of the current billing cycle. Subscriptions under an MSSA run for the fixed term stated in the order form and are non-cancellable during the term except as set out there.
• We may suspend or terminate access for breach of these Terms, with notice where practicable.
• Upon termination, you may request export or deletion of your Customer Data as described in our Privacy Policy.

14. Governing Law & Disputes

These Terms are governed by the laws of Sweden. Any dispute arising out of or in connection with these Terms shall be finally settled by arbitration administered by the Arbitration Institute of the Stockholm Chamber of Commerce (SCC). The seat of arbitration shall be Stockholm, Sweden. The arbitral tribunal shall consist of one (1) arbitrator. The language of the arbitration shall be English. The arbitral award shall be final and binding upon the Parties, unless otherwise agreed in your order form.

15. General

• Order of precedence. Where you have signed an MSSA, the order of precedence in the MSSA applies: order form, Data Processing Agreement, Security & Compliance Addendum, Service Level Agreement, then the MSSA. Otherwise, the order form prevails over the Data Processing Agreement, which prevails over these Terms.
• Force majeure. Neither party is liable for delays caused by events beyond its reasonable control.
• Assignment. You may not assign these Terms without our consent, except to an affiliate or in connection with a merger or sale of substantially all assets.
• Notices. Legal notices are sent to the addresses in your order form, or to [email protected] for Compeas.
• Severability & waiver. If a provision is unenforceable, the remainder stays in effect; failure to enforce a right is not a waiver.
• Entire agreement. These Terms, together with your order form and the DPA, are the entire agreement between the parties regarding the Service.

16. Changes

We may update these Terms from time to time. We will post the updated version here and, for material changes, notify account holders in advance by email or in-product notice.

17. Contact

Compeas AB, org. no. 559590-5703
Östra långgatan 35, 731 30 Köping, Sweden
Email: [email protected]