1. Scope of Service
GRC Flow provides software tools designed to support governance, risk management, compliance, information security documentation and IT operations. Features may include document generation, risk assessments, compliance workflows and AI-assisted recommendations. These Terms govern access to and use of the GRC Flow platform.
2. Account Security
Users are responsible for maintaining the confidentiality of their account credentials and for activities carried out through their accounts.
Users must notify GRC Flow promptly if they suspect unauthorised access or a security incident involving their account.
3. Platform Outputs and User Review
GRC Flow may generate documents, assessments, reports and recommendations using information submitted by users and, where applicable, artificial intelligence services.
All outputs are provided as decision-support materials and must be reviewed for accuracy, completeness and suitability before implementation or external use.
GRC Flow does not guarantee that any output will be accurate, complete or appropriate for every situation, satisfy all applicable legal or regulatory requirements, ensure compliance with a particular standard, or result in a successful audit or certification.
Users remain responsible for validating outputs and determining whether they are appropriate for their intended purpose.
4. Acceptable Use
Users must: provide only information they are authorised to submit; use the platform in accordance with applicable laws and regulations; refrain from activities that compromise the security, integrity or availability of the platform or other systems; avoid using the platform for fraudulent, unlawful or unauthorised purposes.
GRC Flow may take appropriate action in response to misuse or security risks.
5. Pricing and Payments
Applicable prices, subscription terms, usage limits and payment conditions will be presented before purchase.
Payments are processed through the payment methods and payment providers made available at checkout. Users are responsible for reviewing the applicable pricing and billing conditions before completing a transaction.
6. Subscription Cancellation and Refunds
Subscription cancellation procedures and any applicable refund conditions will be communicated through the relevant account interface or purchase information.
Cancellation of a subscription does not automatically entitle a user to a refund for previous payments. Refund eligibility is determined by the applicable purchase terms and mandatory legal requirements.
Nothing in this section limits any consumer rights that cannot legally be excluded, including applicable withdrawal or refund rights.
7. Intellectual Property and User Content
GRC Flow retains ownership of its platform, software, design, branding and associated intellectual property, except where otherwise agreed or required by law.
Users retain their rights to the content they submit to the platform.
Subject to applicable law, third-party rights and any relevant service-specific conditions, users may use outputs generated for them for their intended business purposes.
Users are responsible for ensuring that their submitted content and use of generated outputs do not infringe third-party rights or violate applicable laws.
Users may permanently delete, at any time, any deliverable from their account, together with all its versions and the information entered to produce it. The deletion is immediate and cannot be undone.
8. Platform Availability and Changes
GRC Flow may introduce, modify, suspend or discontinue features as the platform develops. Reasonable efforts may be made to maintain service availability and security. However, uninterrupted access and error-free operation cannot be guaranteed.
9. Responsibility and Limitations
GRC Flow is a software platform intended to support professional workflows. It does not replace independent legal advice, cybersecurity expertise, professional auditing or specialised compliance advice.
Users are responsible for their own assessments, decisions, implementations and verification of generated materials. Nothing in these Terms excludes or limits liability where such exclusion or limitation is prohibited by applicable law.
10. Suspension and Termination
GRC Flow may restrict, suspend or terminate access where reasonably necessary to address unlawful activity, fraud, security threats or serious violations of these Terms. Users may discontinue their use of the platform at any time, subject to any applicable subscription commitments and legal obligations.
11. Privacy and Data Protection
Personal data is handled in accordance with the GRC Flow Privacy Policy and applicable data protection legislation.
12. Applicable Law
These Terms are subject to Portuguese law to the extent permitted by applicable law. Mandatory consumer protection rules and other non-excludable legal rights remain unaffected.
13. Contact
Questions regarding these Terms may be sent to: Email: [email protected]