Terms of Service

1. Acceptance

By accessing or using Enigma Comply at enigmacomply.com (“the Service”) you agree to be bound by these Terms of Service (“Terms”). If you are accepting on behalf of a company or other legal entity, you represent that you have authority to bind that entity. If you do not accept these Terms, do not use the Service.

The Service is operated by Enigma Partners Global Limited, a company registered in Scotland (SC893958) with its registered office at Third Floor, 3 Hill Street, Edinburgh EH2 3JP (“Enigma”, “we”, “us”).

2. AI Features and Output Disclaimer

3. The Service

Enigma Comply is a compliance management platform. It helps organisations assess, document, and manage compliance with frameworks including ISO 27001, ISO 42001, GDPR / UK GDPR, the EU AI Act, NIST AI RMF, NIST CSF, NCSC CAF, SOC 2, and OWASP. AI-assisted features are in development and, where offered, are advisory only: their output is not legal advice and is not equivalent to third-party certification.

The Service is provided in Early Access. Features may change, be removed, or be unavailable. We aim for high availability but do not guarantee uptime or performance during this phase. The Service is provided “as is” during Early Access.

4. Accounts

You must provide accurate information when creating an account. You are responsible for maintaining the confidentiality of your credentials and for all activity that occurs under your account. Notify us immediately at [email protected] if you suspect unauthorised access.

You must not share account credentials, create accounts on behalf of others without their knowledge, or use automated means to create accounts.

5. Access and Billing

Framework access is provided on a recurring monthly subscription, billed via Stripe. All plans include a 14-day free trial; a payment card is required to start the trial.

• Your subscription starts with a 14-day free trial. You may cancel at any time during the trial and you will not be charged.
• If you do not cancel before the trial ends, your card is charged automatically and your subscription renews monthly until you cancel.
• You may cancel at any time from Settings. Cancellation takes effect at the end of your current billing period; we do not provide partial-month refunds.
• Prices are shown exclusive of VAT. UK VAT at the prevailing rate will be added at checkout where applicable.
• We reserve the right to change subscription pricing on notice. Price changes apply from your next billing cycle, not retroactively.
• All payments are processed by Stripe. We do not store your payment card details.

6. Acceptable Use

You must not use the Service to:

• Submit AI-generated outputs as your own human-authored work for regulatory submissions, audits, or legal proceedings without appropriate disclosure
• Obtain regulatory approval or certification under false pretences
• Reverse engineer, decompile, or attempt to extract our AI models or source code
• Conduct automated scraping, denial-of-service attacks, or security testing of our infrastructure without prior written authorisation
• Upload data you do not have the right to process or share
• Process special category personal data (health, biometric, criminal records) unless you have a valid legal basis and a signed Data Processing Agreement with us
• Violate any applicable law or regulation

We reserve the right to suspend or terminate accounts that breach these restrictions without notice.

7. Data and Privacy

Your data belongs to you. We process it solely to deliver the Service and as described in our Privacy Policy. We do not sell your data or use it to train AI models.

If you intend to process personal data through the Service on behalf of individuals, you are the data controller and we are a data processor. A Data Processing Agreement (DPA) is available on request at [email protected]. Processing of special category data requires a signed DPA.

On termination of your account, your data remains available for export for 30 days, after which it is deleted in accordance with our retention policy.

8. Intellectual Property

We own all rights in the platform, code, AI models, and Service outputs (excluding your input data). You own all data and content you upload to the Service.

You grant us a limited, non-exclusive licence to process your content for the purpose of delivering the Service to you. This licence ends when you delete your account or the applicable data.

AI-generated outputs produced by the Service are provided to you for your use. We do not claim ownership of outputs generated on your behalf.

9. Limitation of Liability

To the maximum extent permitted by applicable law:

• We are not liable for any loss, damage, regulatory penalty, or liability arising from reliance on AI-generated outputs without independent expert review
• We are not liable for any failure to achieve or maintain any compliance standard, certification, or regulatory status
• We exclude all implied warranties of merchantability, fitness for a particular purpose, and non-infringement
• Our aggregate liability for any claim shall not exceed the total fees paid by you in the 12 months immediately preceding the event giving rise to the claim
• We exclude liability for indirect, special, consequential, incidental, or punitive losses

Nothing in these Terms limits liability for death or personal injury caused by our negligence, for fraud or fraudulent misrepresentation, or for any other liability that cannot be excluded by law.

10. Changes to These Terms

We may update these Terms at any time. We will notify you of material changes by email at least 30 days before they take effect. Your continued use of the Service after that date constitutes acceptance of the updated Terms. If you do not accept the changes, you must stop using the Service before the effective date. Changes to these Terms do not affect previously purchased framework access.

11. Termination

Either party may terminate these Terms at any time. You may do so by deleting your account. We may do so immediately if you breach these Terms materially. On termination, your right to access the Service ceases; no refund is payable for previously purchased framework access where termination is due to your breach. Sections 2, 8, 9, and 12 survive termination.

12. Governing Law

These Terms are governed by the laws of England and Wales. Any dispute shall be subject to the exclusive jurisdiction of the courts of England and Wales, except that we reserve the right to seek injunctive or other equitable relief in any jurisdiction.

13. Contact

For questions about these Terms, email [email protected] or write to us at Third Floor, 3 Hill Street, Edinburgh EH2 3JP.